last executing test programs: 1m12.657086526s ago: executing program 4 (id=468): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m12.620586116s ago: executing program 4 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, 0x0, 0x900, 0x70bd2b, 0x83a, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x901900) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x10001}) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES8], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb86dd65d3ba5600705fc0fe8000000000000000000040000000000002000000000000000000000000000133000000000000002c0300050850ff35d5000000000000000000ffff0a010100ff020000000000000000000000000001fe8000000000896b00000000000000aa000000000000000000000000000000014e234e2404119078008875280c005411926273ce1e1124dfc701a739d9bad9f96323a5e1a88a18bcfe96da42396ed8bbd5ffaa3092301d3ea5f56ab78db7f2b86c7d315003870b4e3931c9eeaff9cc4561f8e96121125b9e9fea8a9e9b24aee6585c36f3206a576ddea3aa19bf3be98f"], 0x0) 1m11.925299059s ago: executing program 4 (id=484): process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0) 1m11.893800839s ago: executing program 4 (id=486): unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x0, 0x60b, &(0x7f0000001b40)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x280) socket$nl_netfilter(0x10, 0x3, 0xc) 1m11.261640973s ago: executing program 4 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd6bddd368a2e32e}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000084) preadv2(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000480)=""/51, 0x33}, {&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/11, 0xb}], 0x8, 0x1, 0xfff, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc044) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = socket$inet(0x2, 0x4, 0xffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0x50000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), r5) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b00)={0x314, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2ac, 0x8, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xf9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "093a244d2421dc2cf2e75d289a2b99ab085828378cf00d8c93a924838726ec84"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9b7e87671c7c9e71ccf728ad18a129125089e0a28c75310221d07c9fcfb7cb1d"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de74573e52e16e5d0f107c06aa3df1a6f5197487f00fba971ba8402feef7f7e3"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x314}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004894}, 0xc000) getdents64(r5, &(0x7f0000000fc0)=""/26, 0x1a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x24}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040091}, 0x4000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xc0, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x604}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39e2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x760}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000001300)="90fb2ee77fba7e8f1279d1f4e9571ffa7f45ea5b11dc7fa51a2e7945d6eb220bf5ea0907694917e7b89878049a83f3ca562b0fc45011c4c3d9da1b5f104db6a3b8f0e658444e9a4f8dfd44a4aa86f68ae7c02d65b2a3e6393a35ab351ee844809c950069b50772c224abb89de024a6d9ad0934a1c58928ae1e", 0x79) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4010) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001480)={0x0, 0x7fff}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001500)={r9, @in6={{0xa, 0x4e23, 0x92, @local, 0x7ff}}, [0x0, 0x14cb, 0xe, 0x9, 0x7fff, 0x1, 0x8, 0x0, 0x98f0, 0x7, 0xc25d, 0x7, 0x6, 0x0, 0x3d18a05d]}, &(0x7f0000001600)=0x100) getsockname$packet(r5, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', r10, r5, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r7, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7fffffff, 0x55}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) signalfd(r3, &(0x7f0000001880)={[0x100000001]}, 0x8) fchmodat(r5, &(0x7f00000018c0)='./file0\x00', 0x21) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xec, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "92b2f23dc4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "be1c18e7df37080eba2f3cfa8c"}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "043c97a195c02b31c3500a29fc"}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "4dbce179fd9ed62e4fe4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a34de973b0"}, @NL80211_KEY_SEQ={0x12, 0x4, "5214313e5555b74daa81a3d94e5a"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x92}, 0x4000000) 1m11.055542444s ago: executing program 4 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) gettid() sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008005) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x1406, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x81) r4 = socket(0x10, 0x803, 0x0) listen(r4, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 1m11.054685994s ago: executing program 32 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) gettid() sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008005) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x1406, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x81) r4 = socket(0x10, 0x803, 0x0) listen(r4, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 3.747643831s ago: executing program 1 (id=1454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00d+'], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 3.731322921s ago: executing program 1 (id=1455): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00'}, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000d80)="54850412cef23f888d9c5b12a53b252d21f7734310a350bfef68694304f655b53c47f117233f67df6ded994790aa1d396011dab38e43e6fb7e3762adb33b404cb48fd3c969068a73d36b4603319a2d26ce80454b6793b73811049c3ff5adc3d00b13e715ca6516b1f333cedc14e57632f51df2b922ebffe21c1a18433cca0000b2f32ce4f9e76c9e0a4e69b3eb10da434f8646a2120182a4bca33b460000000000e0ff005788398be60ed8fe5176ed137f5ef4ef3e7af15523b8e933fddf0a58134bfbda5887b2def3431676e2854bce4ec6902a753a7ea42524b854ba4cb8770c3697801b20694a4dfc57c255f88648be", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="60900000000000002c001280090001007866726d000000001c00028008000100020000000800010000000000080002000300000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000980)={&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="140000000000000000000000070b000007037a0000000000"], 0x18}, 0x880) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00e8ffff2002ea87"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000d00)={[], [{@dont_measure}, {@measure}, {@fowner_gt}, {@smackfshat}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '\xff\xff'}}]}, 0x6, 0x50d, &(0x7f00000006c0)="$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") r9 = socket$inet6(0xa, 0x1, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x88401, 0x15a) write$P9_RAUTH(r10, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 3.457039462s ago: executing program 5 (id=1462): keyctl$revoke(0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ffb01b3f9004000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x0, 0x0) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, [0x1ff, 0x6, 0x3f8000000000, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x0, 0x5, 0x9, 0x4, 0x5, 0x3, 0x9, 0x1, 0xc]}, &(0x7f0000000140)=0x100) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYBLOB="00600e33c568d2c20d"], 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r9, 0x5b2b, 0x3}, &(0x7f00000001c0)=0x8) 3.394190253s ago: executing program 1 (id=1463): keyctl$revoke(0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ffb01b3f9004000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x0, 0x0) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, [0x1ff, 0x6, 0x3f8000000000, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x0, 0x5, 0x9, 0x4, 0x5, 0x3, 0x9, 0x1, 0xc]}, &(0x7f0000000140)=0x100) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYBLOB="00600e33c568d2c20d"], 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r9, 0x5b2b, 0x3}, &(0x7f00000001c0)=0x8) 2.668173656s ago: executing program 5 (id=1471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="97003c", 0x3}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@deltaction={0x13c, 0x31, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40004) 2.607315197s ago: executing program 0 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 2.483573237s ago: executing program 2 (id=1475): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_rdma(0x10, 0x3, 0x14) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6800, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@debug={'debug', 0x3d, 0x2d6}}, {@timeout={'timeout', 0x3d, 0xfffffffffffeffff}}, {@timeout={'timeout', 0x3d, 0x4}}, {@common=@access_any}, {@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0xde00000000000000}}, {@timeout={'timeout', 0x3d, 0xa3}}, {@common=@access_user}, {@common=@access_uid={'access', 0x3d, r1}}], [{@appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) 2.460141727s ago: executing program 0 (id=1476): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.398431928s ago: executing program 0 (id=1477): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) 2.308000508s ago: executing program 0 (id=1479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) 2.287530919s ago: executing program 1 (id=1480): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x775, &(0x7f0000001cc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 2.210795309s ago: executing program 2 (id=1482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000007c0)=0x8) 2.210573589s ago: executing program 2 (id=1483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$inet6(r4, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 2.058323999s ago: executing program 5 (id=1484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f00000010c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r4, 0x0, 0x0, 0x1, 0x0) r8 = getpid() capset(&(0x7f0000000080)={0x19980330, r8}, &(0x7f00000000c0)={0x9, 0x2, 0xcb7, 0x8d8, 0x0, 0x6}) 1.687393992s ago: executing program 2 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x0, 0x673c9d03, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x0, 0x9, 0x5}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000010000000096985cbff88e292898debf82019930223abe424c39d4d6de3f0694de86070e2c7203837d296bd00000000000000000007f32c8bbc818b945e2fdecd46246582b10b1ae63dc3dcdf61173cecc", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000500"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) lseek(r7, 0x10001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000400)={r8, 0x1, r3, 0xffa, 0x80000}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/221, 0x125, 0x1, 0x0, 0xe3}, &(0x7f00000005c0)=0x40) listen(0xffffffffffffffff, 0x4) ioctl$TCSBRKP(r7, 0x5425, 0x7) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001840)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "94adcc8fe7a60f"}) mkdir(&(0x7f0000000340)='./file0\x00', 0x40) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000280)={{r9, 0x2, 0x5, 0x6, 0x4, 0xb, 0x7, 0x4, 0x53, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.398358553s ago: executing program 0 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 1.324950693s ago: executing program 3 (id=1487): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.263122084s ago: executing program 3 (id=1488): request_key(&(0x7f0000000500)='asymmetric\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='-\x00', 0x0) (fail_nth: 9) 1.245390734s ago: executing program 1 (id=1489): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00'}, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000d80)="54850412cef23f888d9c5b12a53b252d21f7734310a350bfef68694304f655b53c47f117233f67df6ded994790aa1d396011dab38e43e6fb7e3762adb33b404cb48fd3c969068a73d36b4603319a2d26ce80454b6793b73811049c3ff5adc3d00b13e715ca6516b1f333cedc14e57632f51df2b922ebffe21c1a18433cca0000b2f32ce4f9e76c9e0a4e69b3eb10da434f8646a2120182a4bca33b460000000000e0ff005788398be60ed8fe5176ed137f5ef4ef3e7af15523b8e933fddf0a58134bfbda5887b2def3431676e2854bce4ec6902a753a7ea42524b854ba4cb8770c3697801b20694a4dfc57c255f88648be", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="60900000000000002c001280090001007866726d000000001c00028008000100020000000800010000000000080002000300000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000980)={&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="140000000000000000000000070b000007037a0000000000"], 0x18}, 0x880) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00e8ffff2002ea87"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000d00)={[], [{@dont_measure}, {@measure}, {@fowner_gt}, {@smackfshat}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '\xff\xff'}}]}, 0x6, 0x50d, &(0x7f00000006c0)="$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") r9 = socket$inet6(0xa, 0x1, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x88401, 0x15a) write$P9_RAUTH(r10, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 962.011835ms ago: executing program 0 (id=1490): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x220, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x200, 0x11d, 0x0, 0x1, [{0x4}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x2, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x12, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x5, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f0000000380)='./file2\x00', 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x23}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r8}, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0x5a}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x4, 0x4}, {0xff}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$SIOCGSTAMP(r10, 0x8906, 0x0) recvmsg$inet_nvme(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 961.310185ms ago: executing program 5 (id=1491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000280)) (async) geteuid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xfffffffffffffd40) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) close_range(r1, r1, 0x2) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r4 = signalfd4(r2, &(0x7f0000002100)={[0x2000104000001]}, 0x8, 0x0) (async) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r7) (async) ppoll(&(0x7f0000002140)=[{r3, 0x405}, {r2, 0xc020}, {r3, 0x4000}, {r4, 0x5542}, {r3, 0x280}], 0x5, &(0x7f00000021c0)={r5, r6+10000000}, &(0x7f0000002200)={[0xdc2e]}, 0x8) (async) io_uring_setup(0x22a3, &(0x7f0000000240)={0x0, 0xa542, 0x2, 0xfffffffd, 0x21d}) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080045000078000000000011907800000000000000000000000000649078100000000400000000000000fdcdae25a7a296a92a8a5290e48ebcb0eeae0000000000000000e400000000008035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f00"/134], 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r8, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 893.992975ms ago: executing program 3 (id=1492): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x6}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r2, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r0}) (fail_nth: 1) 893.623896ms ago: executing program 5 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800020000000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xff, 0xffffff00, 0xff000000], 'batadv0\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x6, 0x1, 0x50}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7, 0x200, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x400008, 0x0, 0x2, 'syz1\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r8) 575.645658ms ago: executing program 3 (id=1494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000192b77b7", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ffffff000000000000000000"], 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sysinfo(&(0x7f0000000a40)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) name_to_handle_at(r0, &(0x7f0000000380)='\x00', 0x0, 0x0, 0x1200) 551.937388ms ago: executing program 3 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000980)=""/217, 0xd9) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0xd, 0x2, 0x0, 'queue1\x00', 0x81}) tkill(r1, 0x7) 530.364078ms ago: executing program 5 (id=1496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) 267.397579ms ago: executing program 2 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r2, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (fail_nth: 4) 196.509299ms ago: executing program 1 (id=1498): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 337.89µs ago: executing program 2 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000001c", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 0s ago: executing program 3 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) kernel console output (not intermixed with test programs): tag 0x0 [ 95.202150][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.209692][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.217125][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.224535][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.232001][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.239405][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.246986][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.255015][ T3374] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.417286][ T7946] netlink: 'syz.2.1059': attribute type 9 has an invalid length. [ 95.426740][ T29] audit: type=1326 audit(1733421883.830:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.484593][ T29] audit: type=1326 audit(1733421883.830:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.508141][ T29] audit: type=1326 audit(1733421883.830:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.531606][ T29] audit: type=1326 audit(1733421883.830:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.555061][ T29] audit: type=1326 audit(1733421883.830:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.578658][ T29] audit: type=1326 audit(1733421883.830:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.602112][ T29] audit: type=1326 audit(1733421883.830:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 95.719407][ T7939] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.740696][ T7939] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 95.753046][ T7939] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.753046][ T7939] [ 95.762760][ T7939] EXT4-fs (loop5): Total free blocks count 0 [ 95.768746][ T7939] EXT4-fs (loop5): Free/Dirty block details [ 95.774719][ T7939] EXT4-fs (loop5): free_blocks=2415919104 [ 95.780540][ T7939] EXT4-fs (loop5): dirty_blocks=8224 [ 95.785945][ T7939] EXT4-fs (loop5): Block reservation details [ 95.791995][ T7939] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 95.819465][ T3677] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 95.832101][ T3677] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.832101][ T3677] [ 96.370233][ T7964] loop2: detected capacity change from 0 to 2048 [ 96.808115][ T7971] loop2: detected capacity change from 0 to 512 [ 96.829650][ T7971] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.853534][ T7971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.891114][ T7971] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1067: corrupted in-inode xattr: e_value out of bounds [ 96.935769][ T7971] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1067: couldn't read orphan inode 15 (err -117) [ 96.981497][ T7978] FAULT_INJECTION: forcing a failure. [ 96.981497][ T7978] name failslab, interval 1, probability 0, space 0, times 0 [ 96.994209][ T7978] CPU: 0 UID: 0 PID: 7978 Comm: syz.5.1070 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 97.004943][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.015054][ T7978] Call Trace: [ 97.018393][ T7978] [ 97.021342][ T7978] dump_stack_lvl+0xf2/0x150 [ 97.025999][ T7978] dump_stack+0x15/0x1a [ 97.030325][ T7978] should_fail_ex+0x223/0x230 [ 97.035113][ T7978] should_failslab+0x8f/0xb0 [ 97.039751][ T7978] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 97.046163][ T7978] ? sidtab_sid2str_get+0xb8/0x140 [ 97.051317][ T7978] kmemdup_noprof+0x2a/0x60 [ 97.055964][ T7978] sidtab_sid2str_get+0xb8/0x140 [ 97.060945][ T7978] security_sid_to_context_core+0x1eb/0x2f0 [ 97.066894][ T7978] security_sid_to_context+0x27/0x30 [ 97.072254][ T7978] selinux_lsmprop_to_secctx+0x2c/0x40 [ 97.077790][ T7978] security_lsmprop_to_secctx+0x4a/0x90 [ 97.083374][ T7978] audit_log_task_context+0x93/0x1c0 [ 97.088718][ T7978] audit_log_task+0xf9/0x1c0 [ 97.093387][ T7978] audit_seccomp+0x68/0x130 [ 97.097909][ T7978] __seccomp_filter+0x6fa/0x1180 [ 97.102922][ T7978] ? __se_sys_fsconfig+0x8f0/0x980 [ 97.108103][ T7978] ? __se_sys_fsconfig+0x8f0/0x980 [ 97.113279][ T7978] ? kfree+0x247/0x2f0 [ 97.117458][ T7978] __secure_computing+0x9f/0x1c0 [ 97.122507][ T7978] syscall_trace_enter+0xd1/0x1f0 [ 97.127606][ T7978] ? fpregs_assert_state_consistent+0x83/0xa0 [ 97.133756][ T7978] do_syscall_64+0xaa/0x1c0 [ 97.138282][ T7978] ? clear_bhb_loop+0x55/0xb0 [ 97.143030][ T7978] ? clear_bhb_loop+0x55/0xb0 [ 97.147719][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.153678][ T7978] RIP: 0033:0x7fe3a9afe92c [ 97.158198][ T7978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.177836][ T7978] RSP: 002b:00007fe3a8177050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.186289][ T7978] RAX: ffffffffffffffda RBX: 00007fe3a9cc5fa0 RCX: 00007fe3a9afe92c [ 97.194264][ T7978] RDX: 000000000000000f RSI: 00007fe3a81770b0 RDI: 0000000000000008 [ 97.202254][ T7978] RBP: 00007fe3a81770a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.210306][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.218290][ T7978] R13: 0000000000000000 R14: 00007fe3a9cc5fa0 R15: 00007ffcd73f0778 [ 97.226270][ T7978] [ 97.243140][ T7983] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1073'. [ 97.255292][ T7971] EXT4-fs mount: 34 callbacks suppressed [ 97.255307][ T7971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.271528][ T7985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7985 comm=syz.3.1071 [ 97.316007][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.712341][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1079'. [ 98.163622][ T8020] lo speed is unknown, defaulting to 1000 [ 98.185565][ T8024] loop3: detected capacity change from 0 to 1024 [ 98.196982][ T8024] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.261923][ T8024] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.299282][ T8024] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 98.330758][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.500272][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.605771][ T8039] @: renamed from vlan0 (while UP) [ 98.736889][ T8046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8046 comm=syz.2.1091 [ 98.761571][ T8047] 9pnet_fd: Insufficient options for proto=fd [ 98.802238][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 98.827569][ T8052] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 99.108844][ T8068] netlink: 'syz.0.1095': attribute type 9 has an invalid length. [ 99.151111][ T8068] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 99.239849][ T8076] loop1: detected capacity change from 0 to 512 [ 99.261138][ T8076] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.268268][ T8076] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.297163][ T8085] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 99.298542][ T8076] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1097: corrupted in-inode xattr: e_value out of bounds [ 99.343025][ T8076] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1097: couldn't read orphan inode 15 (err -117) [ 99.359691][ T8076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.382023][ T8093] loop5: detected capacity change from 0 to 2048 [ 99.404424][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.445663][ T8100] loop1: detected capacity change from 0 to 736 [ 99.580869][ T8114] Symlink component flag not implemented [ 99.593689][ T8122] loop2: detected capacity change from 0 to 256 [ 99.593789][ T8114] Symlink component flag not implemented (122) [ 99.604468][ T8122] FAT-fs (loop2): bogus number of FAT sectors [ 99.612309][ T8122] FAT-fs (loop2): Can't find a valid FAT filesystem [ 99.615359][ T8124] loop3: detected capacity change from 0 to 128 [ 99.629819][ T8124] EXT4-fs: Ignoring removed nobh option [ 99.642301][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 99.642315][ T29] audit: type=1326 audit(1733421888.040:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe078d66ee7 code=0x7ffc0000 [ 99.671882][ T29] audit: type=1326 audit(1733421888.040:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe078d0c129 code=0x7ffc0000 [ 99.695221][ T29] audit: type=1326 audit(1733421888.040:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 99.719125][ T29] audit: type=1326 audit(1733421888.080:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe078d66ee7 code=0x7ffc0000 [ 99.742523][ T29] audit: type=1326 audit(1733421888.080:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe078d0c129 code=0x7ffc0000 [ 99.765960][ T29] audit: type=1326 audit(1733421888.080:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 99.769222][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.789428][ T29] audit: type=1326 audit(1733421888.080:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe078d66ee7 code=0x7ffc0000 [ 99.796833][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.820079][ T29] audit: type=1326 audit(1733421888.080:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe078d0c129 code=0x7ffc0000 [ 99.827448][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.850736][ T29] audit: type=1326 audit(1733421888.080:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 99.864656][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.881511][ T29] audit: type=1326 audit(1733421888.100:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe078d66ee7 code=0x7ffc0000 [ 99.888884][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.919641][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.927054][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.934569][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.942006][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.949508][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.956999][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.964426][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.971884][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 99.979319][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.019909][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.027361][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.034890][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.042343][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.049755][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.057187][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.064621][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.072023][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.079430][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.086869][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.094395][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.101848][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.109244][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.116673][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.124116][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.131693][ T3375] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 100.150141][ T3375] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.232035][ T8161] loop5: detected capacity change from 0 to 512 [ 100.249737][ T8161] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.258009][ T8161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.380876][ T8161] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1110: corrupted in-inode xattr: e_value out of bounds [ 100.441968][ T8168] program syz.0.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.546867][ T8161] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1110: couldn't read orphan inode 15 (err -117) [ 100.560636][ T8168] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.580811][ T8176] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 100.596940][ T8161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.703059][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.728877][ T8194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8194 comm=syz.1.1116 [ 100.736926][ T8196] loop5: detected capacity change from 0 to 128 [ 100.814066][ T8196] EXT4-fs: Ignoring removed nobh option [ 100.829460][ T8199] loop2: detected capacity change from 0 to 8192 [ 100.882178][ T8196] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.900031][ T8199] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.905546][ T8207] netlink: 'syz.3.1119': attribute type 9 has an invalid length. [ 100.937627][ T8196] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.962734][ T8207] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 101.085539][ T5289] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.097886][ T8199] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 101.106812][ T8199] FAT-fs (loop2): Filesystem has been set read-only [ 101.173634][ T8199] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 101.203882][ T8199] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 101.235721][ T8211] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 101.777632][ T8295] loop3: detected capacity change from 0 to 512 [ 101.790906][ T8295] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.815921][ T3307] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 102.448478][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.456069][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.463528][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.473512][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.481023][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.488507][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.495972][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.503429][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.510936][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.518342][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.525764][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.533244][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.540774][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.548167][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.558107][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.565601][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.573163][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.580644][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.588050][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.595536][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.602985][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.610412][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.617801][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.625223][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.632722][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.640138][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.647554][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.654971][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.662456][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.669924][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 102.677907][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.832146][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.839618][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.847165][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.879904][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.887363][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.894797][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.902240][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.909637][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.917052][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.924546][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.931968][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.937519][ T8331] loop2: detected capacity change from 0 to 8192 [ 102.939395][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.953225][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.957326][ T8331] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.960684][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 102.992617][ T8334] loop5: detected capacity change from 0 to 512 [ 102.999178][ T8334] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.008559][ T8329] infiniband syz2: set down [ 103.013169][ T8329] infiniband syz2: added ipvlan0 [ 103.020776][ T8334] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.033377][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.040817][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.048228][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.055661][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.063071][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.070494][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.077969][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.085476][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.086590][ T8331] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 103.092892][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.092968][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.101687][ T8331] FAT-fs (loop2): Filesystem has been set read-only [ 103.123328][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.129690][ T8331] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 103.130726][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.146906][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.154473][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.154936][ T8331] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 103.161879][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.161909][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 103.187919][ T8334] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1140: corrupted in-inode xattr: e_value out of bounds [ 103.188316][ T8329] RDS/IB: syz2: added [ 103.206385][ T8329] smc: adding ib device syz2 with port count 1 [ 103.213237][ T8329] smc: ib device syz2 port 1 has pnetid [ 103.215490][ T8335] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 103.230393][ T9] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.240110][ T8334] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1140: couldn't read orphan inode 15 (err -117) [ 103.261902][ T8334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.344407][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.407377][ T8347] 9pnet_fd: Insufficient options for proto=fd [ 103.445769][ T8348] netlink: 'syz.5.1142': attribute type 39 has an invalid length. [ 103.836672][ T3307] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 103.925995][ T8362] tmpfs: Unknown parameter 'mp' [ 104.064878][ T8367] FAULT_INJECTION: forcing a failure. [ 104.064878][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.078070][ T8367] CPU: 0 UID: 0 PID: 8367 Comm: syz.2.1151 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 104.088777][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.098858][ T8367] Call Trace: [ 104.099705][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.102183][ T8367] [ 104.102194][ T8367] dump_stack_lvl+0xf2/0x150 [ 104.109592][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.109616][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.110634][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.112567][ T8367] dump_stack+0x15/0x1a [ 104.117153][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.124486][ T8367] should_fail_ex+0x223/0x230 [ 104.124519][ T8367] should_fail+0xb/0x10 [ 104.132081][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.139306][ T8367] should_fail_usercopy+0x1a/0x20 [ 104.143620][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.150792][ T8367] _copy_from_user+0x1e/0xb0 [ 104.150832][ T8367] copy_msghdr_from_user+0x54/0x2a0 [ 104.150869][ T8367] ? __fget_files+0x17c/0x1c0 [ 104.155603][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.159731][ T8367] __sys_sendmsg+0x13e/0x230 [ 104.167114][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.172115][ T8367] __x64_sys_sendmsg+0x46/0x50 [ 104.179476][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.179501][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.179523][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.184095][ T8367] x64_sys_call+0x2734/0x2dc0 [ 104.184191][ T8367] do_syscall_64+0xc9/0x1c0 [ 104.184218][ T8367] ? clear_bhb_loop+0x55/0xb0 [ 104.184240][ T8367] ? clear_bhb_loop+0x55/0xb0 [ 104.189460][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.194101][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.201524][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.206067][ T8367] RIP: 0033:0x7f70976bff19 [ 104.284326][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.303963][ T8367] RSP: 002b:00007f7095d37058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.312409][ T8367] RAX: ffffffffffffffda RBX: 00007f7097885fa0 RCX: 00007f70976bff19 [ 104.320455][ T8367] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 104.322751][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.328428][ T8367] RBP: 00007f7095d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.335952][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.343761][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.351175][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.359081][ T8367] R13: 0000000000000000 R14: 00007f7097885fa0 R15: 00007ffe40fa3138 [ 104.366462][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.374418][ T8367] [ 104.385103][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.392624][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.400114][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.407593][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.415076][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.422528][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.430050][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.437507][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.444955][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.452390][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.459787][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.467223][ T3377] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.534429][ T8378] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 104.537859][ T8379] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 104.550884][ T3377] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 104.743292][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8383 comm=syz.5.1157 [ 104.789612][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.797121][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.804618][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.829942][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.837433][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.844942][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.852461][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.859938][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.867379][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.874811][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.882337][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.889747][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.897182][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.904611][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.944281][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.951754][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.959296][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.966730][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.974142][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.981589][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.989052][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 104.996460][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.003888][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.011452][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.018859][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.026352][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.033773][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.041220][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.048717][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.056134][ T3377] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.067599][ T3377] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.146124][ T8415] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1159'. [ 105.366516][ T8429] loop2: detected capacity change from 0 to 128 [ 105.383678][ T8429] EXT4-fs: Ignoring removed nobh option [ 105.422388][ T8429] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.464959][ T8429] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.877492][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.932524][ T8448] loop5: detected capacity change from 0 to 512 [ 106.047525][ T8450] loop2: detected capacity change from 0 to 512 [ 106.062077][ T8448] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.069197][ T8450] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.071605][ T8448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.080149][ T8450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.114507][ T8450] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1168: corrupted in-inode xattr: e_value out of bounds [ 106.165001][ T8450] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1168: couldn't read orphan inode 15 (err -117) [ 106.177036][ T8448] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1167: corrupted in-inode xattr: e_value out of bounds [ 106.193071][ T8450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.228504][ T8448] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1167: couldn't read orphan inode 15 (err -117) [ 106.242092][ T8448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.290605][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.332526][ T8458] Cannot find del_set index 0 as target [ 106.339333][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 106.378205][ T8460] program syz.2.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.403979][ T8460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.429728][ T8463] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 106.440335][ T8463] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 106.475748][ T8458] bond1 (unregistering): Released all slaves [ 106.489633][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.505160][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 106.505172][ T29] audit: type=1326 audit(1733421894.910:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.561651][ T8463] SET target dimension over the limit! [ 106.673297][ T29] audit: type=1326 audit(1733421894.960:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.696835][ T29] audit: type=1326 audit(1733421894.960:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.720342][ T29] audit: type=1326 audit(1733421894.960:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.743793][ T29] audit: type=1326 audit(1733421894.960:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.767232][ T29] audit: type=1326 audit(1733421894.960:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.790717][ T29] audit: type=1326 audit(1733421894.960:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.791268][ T8472] loop3: detected capacity change from 0 to 8192 [ 106.814143][ T29] audit: type=1326 audit(1733421894.960:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.843924][ T29] audit: type=1326 audit(1733421894.960:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.867486][ T29] audit: type=1326 audit(1733421894.960:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 106.905258][ T8480] loop5: detected capacity change from 0 to 256 [ 106.918537][ T8480] FAT-fs (loop5): bogus number of FAT sectors [ 106.924776][ T8480] FAT-fs (loop5): Can't find a valid FAT filesystem [ 107.007239][ T8489] 9pnet_fd: Insufficient options for proto=fd [ 107.395632][ T8568] loop5: detected capacity change from 0 to 512 [ 107.399168][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 107.407545][ T8568] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.421233][ T8568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.442902][ T8570] loop2: detected capacity change from 0 to 512 [ 107.449659][ T8570] EXT4-fs: Ignoring removed bh option [ 107.457522][ T8568] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1182: corrupted in-inode xattr: e_value out of bounds [ 107.467158][ T8574] loop1: detected capacity change from 0 to 512 [ 107.472939][ T8568] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1182: couldn't read orphan inode 15 (err -117) [ 107.478815][ T8574] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.501428][ T8574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.505229][ T8568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.513721][ T8570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.536843][ T8574] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1184: corrupted in-inode xattr: e_value out of bounds [ 107.551744][ T8570] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.581562][ T8574] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1184: couldn't read orphan inode 15 (err -117) [ 107.605691][ T8570] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1183: corrupted xattr block 32: bad e_name length [ 107.625342][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.645754][ T8574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.680100][ T8570] EXT4-fs (loop2): Remounting filesystem read-only [ 107.686801][ T8570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 107.696013][ T8570] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 107.707406][ T8584] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1185'. [ 107.757950][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.800310][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.938745][ T8600] loop1: detected capacity change from 0 to 128 [ 107.967417][ T8600] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.031522][ T8600] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.072682][ T8610] loop2: detected capacity change from 0 to 512 [ 108.085880][ T8610] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.122440][ T8610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.161772][ T8610] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1196: corrupted in-inode xattr: e_value out of bounds [ 108.326310][ T8610] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1196: couldn't read orphan inode 15 (err -117) [ 108.331127][ T8621] loop5: detected capacity change from 0 to 512 [ 108.345892][ T8621] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.346068][ T8622] netlink: 'syz.0.1199': attribute type 39 has an invalid length. [ 108.352682][ T8621] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.372233][ T8621] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1198: corrupted in-inode xattr: e_value out of bounds [ 108.386570][ T8621] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1198: couldn't read orphan inode 15 (err -117) [ 108.403651][ T8610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.416271][ T8621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.458369][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.469717][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.497236][ T8625] loop5: detected capacity change from 0 to 256 [ 108.517236][ T8627] netlink: 'syz.2.1200': attribute type 9 has an invalid length. [ 108.533786][ T8625] FAT-fs (loop5): bogus number of FAT sectors [ 108.539971][ T8625] FAT-fs (loop5): Can't find a valid FAT filesystem [ 108.791737][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.799189][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.806611][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.815773][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.818812][ T8648] loop5: detected capacity change from 0 to 512 [ 108.823205][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.836859][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.837964][ T8648] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.844270][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.852602][ T8648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.858234][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.875587][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.883033][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.890467][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.897878][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.905334][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.912755][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.920346][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.927743][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.928783][ T8648] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1210: corrupted in-inode xattr: e_value out of bounds [ 108.935149][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.935178][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.951123][ T8648] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1210: couldn't read orphan inode 15 (err -117) [ 108.956534][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.965090][ T8648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.975802][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 108.975826][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.010362][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.017770][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.025420][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.032873][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.040408][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.047808][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.055257][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.062814][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.070246][ T3377] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 109.078495][ T3377] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 109.079401][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.099976][ T8658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1212'. [ 109.133018][ T8660] loop3: detected capacity change from 0 to 256 [ 109.138334][ T8662] loop1: detected capacity change from 0 to 128 [ 109.152898][ T8662] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.161565][ T8660] FAT-fs (loop3): bogus number of FAT sectors [ 109.171150][ T8660] FAT-fs (loop3): Can't find a valid FAT filesystem [ 109.174965][ T8666] program syz.0.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.187247][ T8662] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.196904][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1213'. [ 109.231291][ T8666] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.266194][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.306382][ T8672] loop1: detected capacity change from 0 to 128 [ 109.330607][ T8672] EXT4-fs: Ignoring removed nobh option [ 109.356790][ T8672] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.379094][ T8672] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.408619][ T8681] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1219'. [ 109.526570][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.550107][ T8702] loop2: detected capacity change from 0 to 512 [ 109.568293][ T8707] netlink: 'syz.3.1225': attribute type 39 has an invalid length. [ 109.574698][ T8702] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.617242][ T8702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.633816][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.641267][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.648741][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.656471][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.663898][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.671437][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.678863][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.686440][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.693879][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.701425][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.708832][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.712463][ T8702] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1223: corrupted in-inode xattr: e_value out of bounds [ 109.716288][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.732161][ T8702] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1223: couldn't read orphan inode 15 (err -117) [ 109.737510][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.756871][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.764324][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.771840][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.779262][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.779807][ T8702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.786671][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.786700][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.786728][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.820941][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.828396][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.835819][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.843235][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.850661][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.858051][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.865578][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.872997][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.880410][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.887809][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 109.895732][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 109.918111][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.962730][ T8728] loop1: detected capacity change from 0 to 128 [ 109.987257][ T8728] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.050049][ T8728] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.184243][ T8783] loop3: detected capacity change from 0 to 256 [ 110.195627][ T8782] netem: change failed [ 110.210303][ T8781] Cannot find del_set index 0 as target [ 110.216671][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 110.219081][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 110.236261][ T8783] FAT-fs (loop3): bogus number of FAT sectors [ 110.242420][ T8783] FAT-fs (loop3): Can't find a valid FAT filesystem [ 110.254001][ T8781] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 110.264421][ T8781] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 110.297588][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.406149][ T8781] bond1 (unregistering): Released all slaves [ 110.423355][ T8790] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1233'. [ 110.459346][ T8788] loop2: detected capacity change from 0 to 512 [ 110.477398][ T8788] ext4: Unknown parameter 'dont_measure' [ 110.511660][ T8781] SET target dimension over the limit! [ 110.619787][ T8794] loop3: detected capacity change from 0 to 128 [ 110.636486][ T8794] EXT4-fs: Ignoring removed nobh option [ 110.694519][ T8799] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 110.752644][ T8803] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.761557][ T8803] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.770316][ T8803] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.779032][ T8803] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.799570][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.807036][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.814496][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.832780][ T8803] vxlan0: entered promiscuous mode [ 110.837965][ T8803] vxlan0: entered allmulticast mode [ 110.853327][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.860815][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.868232][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.875683][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.883108][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.890545][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.898027][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.905487][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.912953][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.920399][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.927842][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.935384][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.942926][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.950405][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.957855][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.965294][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.972720][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.980246][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.987653][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 110.995120][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.002677][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.010225][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.017652][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.025151][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.032603][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.040110][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.047506][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 111.055919][ T3374] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 111.112729][ T8824] program syz.3.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.143215][ T8824] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.190992][ T8832] loop1: detected capacity change from 0 to 128 [ 111.222034][ T8832] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.260019][ T8832] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.355150][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.459817][ T8872] loop2: detected capacity change from 0 to 512 [ 111.469592][ T8866] SET target dimension over the limit! [ 111.474213][ T8872] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.486037][ T8872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.521329][ T8872] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1246: corrupted in-inode xattr: e_value out of bounds [ 111.569354][ T8872] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1246: couldn't read orphan inode 15 (err -117) [ 111.641455][ T8872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.668674][ T8897] loop5: detected capacity change from 0 to 512 [ 111.675539][ T8897] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.690115][ T8897] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.705827][ T8897] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1249: corrupted in-inode xattr: e_value out of bounds [ 111.745608][ T8897] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1249: couldn't read orphan inode 15 (err -117) [ 111.766000][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.806394][ T8897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.902274][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.030835][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.038387][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.045862][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.131306][ T8987] loop3: detected capacity change from 0 to 128 [ 112.139802][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.147299][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.154847][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.162290][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.169725][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.177265][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.184723][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.192296][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.199728][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.207182][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.214709][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.234741][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.242333][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.249835][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.257307][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.264764][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.272227][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.279625][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.287143][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.294696][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.302180][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.309622][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.317076][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.324528][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.331263][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 112.331278][ T29] audit: type=1400 audit(1733421900.730:7316): avc: denied { create } for pid=8991 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.332064][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.338200][ T29] audit: type=1400 audit(1733421900.730:7317): avc: denied { connect } for pid=8991 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.357615][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.391955][ T1030] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 112.415000][ T1030] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.446311][ T9003] SET target dimension over the limit! [ 112.499224][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1261'. [ 112.504979][ T9009] netlink: 'syz.0.1260': attribute type 9 has an invalid length. [ 112.540306][ T29] audit: type=1400 audit(1733421900.930:7318): avc: denied { write } for pid=9006 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.572436][ T29] audit: type=1326 audit(1733421900.980:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.596055][ T29] audit: type=1326 audit(1733421900.980:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.619764][ T29] audit: type=1326 audit(1733421900.980:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.643367][ T29] audit: type=1326 audit(1733421900.980:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.666890][ T29] audit: type=1326 audit(1733421900.980:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.690333][ T29] audit: type=1326 audit(1733421900.980:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.713904][ T29] audit: type=1326 audit(1733421900.980:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe078d6ff19 code=0x7ffc0000 [ 112.720834][ T9020] program syz.1.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.747032][ T9020] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.751265][ T9017] netlink: 'syz.5.1264': attribute type 39 has an invalid length. [ 112.806250][ T9025] 9pnet_fd: Insufficient options for proto=fd [ 113.047035][ T9066] FAULT_INJECTION: forcing a failure. [ 113.047035][ T9066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.060179][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.3.1268 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 113.070914][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.080985][ T9066] Call Trace: [ 113.084277][ T9066] [ 113.087222][ T9066] dump_stack_lvl+0xf2/0x150 [ 113.091945][ T9066] dump_stack+0x15/0x1a [ 113.096247][ T9066] should_fail_ex+0x223/0x230 [ 113.101099][ T9066] should_fail+0xb/0x10 [ 113.105292][ T9066] should_fail_usercopy+0x1a/0x20 [ 113.110370][ T9066] _copy_to_user+0x20/0xa0 [ 113.114884][ T9066] simple_read_from_buffer+0xa0/0x110 [ 113.120376][ T9066] proc_fail_nth_read+0xf9/0x140 [ 113.125355][ T9066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.131018][ T9066] vfs_read+0x1a2/0x700 [ 113.135203][ T9066] ? __rcu_read_unlock+0x4e/0x70 [ 113.140189][ T9066] ? __fget_files+0x17c/0x1c0 [ 113.144911][ T9066] ksys_read+0xe8/0x1b0 [ 113.149107][ T9066] __x64_sys_read+0x42/0x50 [ 113.153684][ T9066] x64_sys_call+0x2874/0x2dc0 [ 113.158434][ T9066] do_syscall_64+0xc9/0x1c0 [ 113.162960][ T9066] ? clear_bhb_loop+0x55/0xb0 [ 113.167688][ T9066] ? clear_bhb_loop+0x55/0xb0 [ 113.172405][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.178326][ T9066] RIP: 0033:0x7f7c5af7e92c [ 113.182749][ T9066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.202376][ T9066] RSP: 002b:00007f7c595f7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.210931][ T9066] RAX: ffffffffffffffda RBX: 00007f7c5b145fa0 RCX: 00007f7c5af7e92c [ 113.218995][ T9066] RDX: 000000000000000f RSI: 00007f7c595f70b0 RDI: 0000000000000006 [ 113.227006][ T9066] RBP: 00007f7c595f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.235021][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.243010][ T9066] R13: 0000000000000000 R14: 00007f7c5b145fa0 R15: 00007ffe7dedca18 [ 113.251184][ T9066] [ 113.305160][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.312644][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.320192][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.329905][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.337409][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.344849][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.352293][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.359806][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.367286][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.374766][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.382321][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.389721][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.397147][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.404572][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.427794][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.435326][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.442826][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.450264][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.457655][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.465109][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.472702][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.480393][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.487803][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.495333][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.502763][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.510196][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.517606][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.524468][ T9112] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1271'. [ 113.525017][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.541550][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.549070][ T3377] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 113.604746][ T3377] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.747662][ T9161] sit0: entered allmulticast mode [ 113.778826][ T9168] loop1: detected capacity change from 0 to 512 [ 113.824821][ T9173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9173 comm=syz.0.1279 [ 113.825048][ T9164] lo speed is unknown, defaulting to 1000 [ 113.858943][ T9161] loop3: detected capacity change from 0 to 1024 [ 113.865855][ T9161] EXT4-fs: Ignoring removed nobh option [ 113.871530][ T9161] EXT4-fs: Ignoring removed nobh option [ 113.914178][ T9161] sit0: entered promiscuous mode [ 113.922638][ T9168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.963730][ T9168] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.051450][ T9187] program syz.2.1283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.070181][ T9187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.079078][ T9188] bond1: entered promiscuous mode [ 114.084230][ T9188] bond1: entered allmulticast mode [ 114.090778][ T9188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.109633][ T9188] bond1 (unregistering): Released all slaves [ 114.201548][ T9198] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1285'. [ 114.664935][ T9244] netlink: 'syz.0.1294': attribute type 39 has an invalid length. [ 114.688114][ T9247] dvmrp1: entered allmulticast mode [ 115.172183][ T9328] loop2: detected capacity change from 0 to 2048 [ 115.253077][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.309308][ T9334] loop5: detected capacity change from 0 to 1024 [ 115.588826][ T9334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.654312][ T9329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.723258][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.739356][ T9336] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.808559][ T9336] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 115.821000][ T9336] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.821000][ T9336] [ 115.830687][ T9336] EXT4-fs (loop2): Total free blocks count 0 [ 115.836724][ T9336] EXT4-fs (loop2): Free/Dirty block details [ 115.842670][ T9336] EXT4-fs (loop2): free_blocks=2415919104 [ 115.848424][ T9336] EXT4-fs (loop2): dirty_blocks=8224 [ 115.853749][ T9336] EXT4-fs (loop2): Block reservation details [ 115.853879][ T9361] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 115.859883][ T9336] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 115.889667][ T9359] FAULT_INJECTION: forcing a failure. [ 115.889667][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 115.902383][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.5.1306 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 115.913157][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.923302][ T9359] Call Trace: [ 115.926592][ T9359] [ 115.929540][ T9359] dump_stack_lvl+0xf2/0x150 [ 115.934194][ T9359] dump_stack+0x15/0x1a [ 115.938380][ T9359] should_fail_ex+0x223/0x230 [ 115.943125][ T9359] should_failslab+0x8f/0xb0 [ 115.947735][ T9359] __kmalloc_node_noprof+0xad/0x410 [ 115.953002][ T9359] ? __kvmalloc_node_noprof+0x72/0x170 [ 115.958492][ T9359] __kvmalloc_node_noprof+0x72/0x170 [ 115.963802][ T9359] nf_hook_entries_grow+0x1bd/0x470 [ 115.969079][ T9359] __nf_register_net_hook+0x16b/0x480 [ 115.974505][ T9359] nf_register_net_hook+0x88/0x130 [ 115.979698][ T9359] nf_register_net_hooks+0x41/0x140 [ 115.984918][ T9359] nf_ct_netns_do_get+0x185/0x370 [ 115.989965][ T9359] nf_ct_netns_get+0x83/0xb0 [ 115.994628][ T9359] connmark_tg_check+0x35/0xa0 [ 115.999399][ T9359] xt_check_target+0x266/0x480 [ 116.004191][ T9359] ? xt_find_match+0x1c1/0x1e0 [ 116.009022][ T9359] ? strnlen+0x28/0x50 [ 116.013098][ T9359] ? strcmp+0x21/0x50 [ 116.017185][ T9359] ? xt_find_target+0x1bd/0x1e0 [ 116.022091][ T9359] translate_table+0xcde/0x1040 [ 116.026976][ T9359] do_ip6t_set_ctl+0x7cc/0x8c0 [ 116.031756][ T9359] ? kstrtouint+0x77/0xc0 [ 116.036094][ T9359] ? __rcu_read_unlock+0x4e/0x70 [ 116.041054][ T9359] nf_setsockopt+0x195/0x1b0 [ 116.045755][ T9359] ipv6_setsockopt+0x10f/0x130 [ 116.050550][ T9359] udpv6_setsockopt+0x95/0xb0 [ 116.055239][ T9359] sock_common_setsockopt+0x64/0x80 [ 116.060528][ T9359] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 116.066438][ T9359] __sys_setsockopt+0x187/0x200 [ 116.071303][ T9359] __x64_sys_setsockopt+0x66/0x80 [ 116.076413][ T9359] x64_sys_call+0x282e/0x2dc0 [ 116.081101][ T9359] do_syscall_64+0xc9/0x1c0 [ 116.085627][ T9359] ? clear_bhb_loop+0x55/0xb0 [ 116.090310][ T9359] ? clear_bhb_loop+0x55/0xb0 [ 116.095065][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.100978][ T9359] RIP: 0033:0x7fe3a9afff19 [ 116.105395][ T9359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.125135][ T9359] RSP: 002b:00007fe3a8177058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.133558][ T9359] RAX: ffffffffffffffda RBX: 00007fe3a9cc5fa0 RCX: 00007fe3a9afff19 [ 116.141589][ T9359] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 116.149629][ T9359] RBP: 00007fe3a81770a0 R08: 0000000000000370 R09: 0000000000000000 [ 116.157670][ T9359] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.165688][ T9359] R13: 0000000000000000 R14: 00007fe3a9cc5fa0 R15: 00007ffcd73f0778 [ 116.173676][ T9359] [ 116.211754][ T4292] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 116.223473][ T9359] cannot load conntrack support for proto=10 [ 116.356643][ T9362] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1308'. [ 116.409274][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.479148][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1310'. [ 116.524769][ T9382] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1312'. [ 116.607728][ T9394] loop2: detected capacity change from 0 to 1024 [ 116.628398][ T9398] loop1: detected capacity change from 0 to 512 [ 116.661948][ T9394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.691423][ T9398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.744640][ T9394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.762739][ T9398] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.845509][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.003576][ T9424] netlink: 'syz.2.1321': attribute type 9 has an invalid length. [ 117.335862][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 117.336000][ T29] audit: type=1326 audit(1733421905.740:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70976b6ee7 code=0x7ffc0000 [ 117.412904][ T29] audit: type=1326 audit(1733421905.770:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f709765c129 code=0x7ffc0000 [ 117.436424][ T29] audit: type=1326 audit(1733421905.770:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70976b6ee7 code=0x7ffc0000 [ 117.459832][ T29] audit: type=1326 audit(1733421905.770:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f709765c129 code=0x7ffc0000 [ 117.483239][ T29] audit: type=1326 audit(1733421905.770:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 117.506801][ T29] audit: type=1326 audit(1733421905.780:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70976b6ee7 code=0x7ffc0000 [ 117.530184][ T29] audit: type=1326 audit(1733421905.780:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f709765c129 code=0x7ffc0000 [ 117.553595][ T29] audit: type=1326 audit(1733421905.780:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f70976bff19 code=0x7ffc0000 [ 117.577118][ T29] audit: type=1326 audit(1733421905.790:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70976b6ee7 code=0x7ffc0000 [ 117.600534][ T29] audit: type=1326 audit(1733421905.790:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f709765c129 code=0x7ffc0000 [ 117.830011][ T9461] capability: warning: `syz.3.1334' uses 32-bit capabilities (legacy support in use) [ 117.954856][ T9469] syz.3.1335[9469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.010037][ T9474] program syz.5.1338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.055939][ T9474] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.127638][ T9472] loop2: detected capacity change from 0 to 512 [ 118.154993][ T9472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.204169][ T9472] EXT4-fs (loop2): 1 truncate cleaned up [ 118.247634][ T9472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.402127][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.508851][ T9505] netlink: 'syz.1.1345': attribute type 9 has an invalid length. [ 118.542069][ T9505] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 118.565475][ T9507] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1343'. [ 118.998061][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.005600][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.013044][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.058237][ T9580] loop0: detected capacity change from 0 to 512 [ 119.064711][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.072190][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.079589][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.087086][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.094579][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.102005][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.109405][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.110190][ T9580] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.116884][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.130792][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.138187][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.145605][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.154287][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.161735][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.161760][ T9580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.163473][ T9580] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1347: corrupted in-inode xattr: e_value out of bounds [ 119.169221][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.199114][ T9580] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1347: couldn't read orphan inode 15 (err -117) [ 119.200338][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.200362][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.214441][ T9580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.219565][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.246517][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.253965][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.261428][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.268810][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.276274][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.283679][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.291172][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.298560][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.306011][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.313418][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 119.336558][ T9465] syz.3.1335 (9465) used greatest stack depth: 7272 bytes left [ 119.354227][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.370616][ T3375] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.418905][ T9590] netlink: 'syz.0.1349': attribute type 3 has an invalid length. [ 119.466038][ T9596] loop1: detected capacity change from 0 to 512 [ 119.485200][ T9597] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1348'. [ 119.493614][ T9596] journal_path: Lookup failure for './file1' [ 119.500281][ T9596] EXT4-fs: error: could not find journal device path [ 119.683133][ T9610] netlink: 'syz.5.1356': attribute type 39 has an invalid length. [ 119.777972][ T9619] loop5: detected capacity change from 0 to 512 [ 119.805319][ T9619] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.821111][ T9619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.848142][ T9619] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1359: corrupted in-inode xattr: e_value out of bounds [ 119.883345][ T9619] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1359: couldn't read orphan inode 15 (err -117) [ 119.913107][ T9619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.964674][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.213726][ T9628] netlink: 'syz.2.1361': attribute type 9 has an invalid length. [ 120.382055][ T9637] Cannot find del_set index 0 as target [ 120.389447][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 120.406035][ T9640] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 120.411877][ T9637] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 120.424161][ T9637] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 120.469482][ T9643] bond1 (unregistering): Released all slaves [ 120.523139][ T9637] loop3: detected capacity change from 0 to 512 [ 120.539727][ T9637] ext4: Unknown parameter 'dont_measure' [ 120.579649][ T9637] SET target dimension over the limit! [ 120.615943][ T9658] loop0: detected capacity change from 0 to 128 [ 120.627036][ T9658] EXT4-fs: Ignoring removed nobh option [ 120.643979][ T9658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.667369][ T9658] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.735004][ T9673] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1369'. [ 120.738467][ T9676] loop3: detected capacity change from 0 to 512 [ 120.786092][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.912496][ T9687] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1371'. [ 121.139479][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1374'. [ 121.940420][ T9704] macsec0: entered promiscuous mode [ 121.945540][ T9705] FAULT_INJECTION: forcing a failure. [ 121.945540][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.958789][ T9705] CPU: 1 UID: 0 PID: 9705 Comm: syz.2.1378 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 121.969574][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.979636][ T9705] Call Trace: [ 121.982919][ T9705] [ 121.985853][ T9705] dump_stack_lvl+0xf2/0x150 [ 121.990478][ T9705] dump_stack+0x15/0x1a [ 121.994673][ T9705] should_fail_ex+0x223/0x230 [ 121.999379][ T9705] should_fail+0xb/0x10 [ 122.003614][ T9705] should_fail_usercopy+0x1a/0x20 [ 122.008740][ T9705] _copy_from_user+0x1e/0xb0 [ 122.013412][ T9705] do_fcntl+0x551/0xe10 [ 122.017637][ T9705] __se_sys_fcntl+0xbd/0x1b0 [ 122.022240][ T9705] __x64_sys_fcntl+0x43/0x50 [ 122.026926][ T9705] x64_sys_call+0x2129/0x2dc0 [ 122.031609][ T9705] do_syscall_64+0xc9/0x1c0 [ 122.036122][ T9705] ? clear_bhb_loop+0x55/0xb0 [ 122.040802][ T9705] ? clear_bhb_loop+0x55/0xb0 [ 122.045554][ T9705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.051471][ T9705] RIP: 0033:0x7f70976bff19 [ 122.055956][ T9705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.075606][ T9705] RSP: 002b:00007f7095d37058 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 122.084026][ T9705] RAX: ffffffffffffffda RBX: 00007f7097885fa0 RCX: 00007f70976bff19 [ 122.092071][ T9705] RDX: 0000000020000380 RSI: 0000000000000026 RDI: 0000000000000003 [ 122.100059][ T9705] RBP: 00007f7095d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.108032][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.116020][ T9705] R13: 0000000000000000 R14: 00007f7097885fa0 R15: 00007ffe40fa3138 [ 122.124021][ T9705] [ 122.161839][ T9704] veth1_macvtap: left promiscuous mode [ 122.171876][ T9704] macsec0 (unregistering): left promiscuous mode [ 122.316066][ T9716] loop5: detected capacity change from 0 to 512 [ 122.324275][ T9717] netlink: 'syz.3.1384': attribute type 9 has an invalid length. [ 122.336148][ T9716] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.349262][ T9717] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 122.369790][ T9716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.386502][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 122.386520][ T29] audit: type=1326 audit(1733421910.790:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.398276][ T9719] loop1: detected capacity change from 0 to 2048 [ 122.416234][ T29] audit: type=1326 audit(1733421910.790:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.445974][ T29] audit: type=1326 audit(1733421910.790:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.469433][ T29] audit: type=1326 audit(1733421910.790:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.492942][ T29] audit: type=1326 audit(1733421910.790:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.516461][ T29] audit: type=1326 audit(1733421910.790:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.539982][ T29] audit: type=1326 audit(1733421910.790:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.563483][ T29] audit: type=1326 audit(1733421910.790:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.586922][ T29] audit: type=1326 audit(1733421910.790:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5af7ff19 code=0x7ffc0000 [ 122.602784][ T9728] loop0: detected capacity change from 0 to 128 [ 122.613775][ T29] audit: type=1326 audit(1733421910.860:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c5af76ee7 code=0x7ffc0000 [ 122.640612][ T9716] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1383: corrupted in-inode xattr: e_value out of bounds [ 122.656448][ T9716] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1383: couldn't read orphan inode 15 (err -117) [ 122.656910][ T9719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.670789][ T9716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.697463][ T9728] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.797789][ T9737] netlink: 'syz.0.1389': attribute type 9 has an invalid length. [ 122.886675][ T9733] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.908184][ T9733] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 122.920604][ T9733] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.920604][ T9733] [ 122.930277][ T9733] EXT4-fs (loop1): Total free blocks count 0 [ 122.936323][ T9733] EXT4-fs (loop1): Free/Dirty block details [ 122.942277][ T9733] EXT4-fs (loop1): free_blocks=2415919104 [ 122.948015][ T9733] EXT4-fs (loop1): dirty_blocks=8224 [ 122.953351][ T9733] EXT4-fs (loop1): Block reservation details [ 122.959341][ T9733] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 122.988022][ T4279] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 123.264517][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.272065][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.279531][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.324132][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.331791][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.339283][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.346932][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.348867][ T9757] netlink: 'syz.2.1395': attribute type 39 has an invalid length. [ 123.354352][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.369726][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.377173][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.384798][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.392238][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.399803][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.407342][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.415975][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.423464][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.431053][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.438712][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.446233][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.453706][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.461175][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.468781][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.476275][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.483676][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.491178][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.498580][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.506020][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.513444][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.520885][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.528377][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 123.536335][ T3377] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 123.575048][ T9764] loop1: detected capacity change from 0 to 512 [ 123.582707][ T9764] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.589706][ T9764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.611362][ T9764] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1398: corrupted in-inode xattr: e_value out of bounds [ 123.632044][ T9764] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1398: couldn't read orphan inode 15 (err -117) [ 123.684530][ T9772] loop0: detected capacity change from 0 to 256 [ 123.710749][ T9772] FAT-fs (loop0): bogus number of FAT sectors [ 123.716865][ T9772] FAT-fs (loop0): Can't find a valid FAT filesystem [ 123.799037][ T9787] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 123.891613][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.899122][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.906582][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.916972][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.924460][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.932083][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.939735][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.946622][ T9804] loop3: detected capacity change from 0 to 512 [ 123.947159][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.960991][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.961359][ T9804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.968434][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.982486][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.989918][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 123.997350][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.004789][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.038070][ T9809] loop3: detected capacity change from 0 to 512 [ 124.051956][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.052196][ T9809] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.059364][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.059393][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.080759][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.088211][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.095631][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.103055][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.110501][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.117954][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.125417][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.132976][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.140526][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.147924][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.155356][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.162866][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.170300][ T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 124.179050][ T35] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 124.252405][ T9822] loop3: detected capacity change from 0 to 128 [ 124.291507][ T9822] EXT4-fs: Ignoring removed nobh option [ 124.365874][ T9840] netlink: 'syz.1.1414': attribute type 39 has an invalid length. [ 124.419772][ T9854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.430252][ T9854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.438096][ T9856] loop5: detected capacity change from 0 to 164 [ 124.453956][ T9852] bridge0: entered allmulticast mode [ 124.477301][ T9852] pim6reg: entered allmulticast mode [ 124.496143][ T9854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.506574][ T9854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.520148][ T9862] Cannot find del_set index 0 as target [ 124.526800][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1420'. [ 124.548576][ T9864] loop5: detected capacity change from 0 to 512 [ 124.555145][ T9864] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.564773][ T9864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.578355][ T9864] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1421: corrupted in-inode xattr: e_value out of bounds [ 124.590034][ T9868] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 124.596053][ T9864] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1421: couldn't read orphan inode 15 (err -117) [ 124.606792][ T9869] loop0: detected capacity change from 0 to 512 [ 124.614899][ T9868] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 124.659592][ T9854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.670116][ T9854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.703324][ T9877] loop3: detected capacity change from 0 to 512 [ 124.713991][ T9862] bond1 (unregistering): Released all slaves [ 124.727644][ T9877] ext4: Unknown parameter 'dont_measure' [ 124.739269][ T9879] netlink: 'syz.5.1424': attribute type 21 has an invalid length. [ 124.751559][ T9879] netlink: 'syz.5.1424': attribute type 6 has an invalid length. [ 124.759482][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1424'. [ 124.792931][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1424'. [ 124.816335][ T9854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.826683][ T9854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.838337][ T9887] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 124.912133][ T9889] loop3: detected capacity change from 0 to 2048 [ 125.003845][ T9854] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 125.012318][ T9854] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.084209][ T9854] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 125.092710][ T9854] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.104680][ T9854] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 125.113095][ T9854] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.124764][ T9854] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 125.133197][ T9854] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.293977][ T9909] netlink: 'syz.2.1432': attribute type 39 has an invalid length. [ 125.318538][ T9914] netlink: 'syz.1.1433': attribute type 2 has an invalid length. [ 125.326426][ T9914] netlink: 'syz.1.1433': attribute type 8 has an invalid length. [ 125.334224][ T9914] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1433'. [ 125.351364][ T9916] loop5: detected capacity change from 0 to 128 [ 125.385535][ T9921] loop2: detected capacity change from 0 to 512 [ 125.394995][ T9916] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.435820][ T9914] netlink: 'syz.1.1433': attribute type 39 has an invalid length. [ 125.435962][ T9921] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.454860][ T9921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.480632][ T9921] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1435: corrupted in-inode xattr: e_value out of bounds [ 125.502758][ T9921] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1435: couldn't read orphan inode 15 (err -117) [ 125.545446][ T9924] SELinux: security_context_str_to_sid ( q7SHLBq@) failed with errno=-22 [ 125.627864][ T9930] syz.2.1438[9930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.628182][ T9930] syz.2.1438[9930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.632318][ T9934] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 125.650042][ T9930] syz.2.1438[9930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.707023][ T9931] Cannot find del_set index 0 as target [ 125.737185][ T9932] loop3: detected capacity change from 0 to 8192 [ 125.747592][ T9939] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 125.762175][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 125.818656][ T9931] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 125.856247][ T9931] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 125.884622][ T9943] bond1 (unregistering): Released all slaves [ 125.932834][ T9946] netlink: 'syz.5.1444': attribute type 9 has an invalid length. [ 125.946136][ T9931] loop0: detected capacity change from 0 to 512 [ 125.962002][ T9931] ext4: Unknown parameter 'dont_measure' [ 125.980034][ T9946] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 126.063231][ T9950] netlink: 'syz.0.1445': attribute type 39 has an invalid length. [ 126.128108][ T9955] loop0: detected capacity change from 0 to 128 [ 126.140804][ T9955] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.186145][ T9958] loop2: detected capacity change from 0 to 512 [ 126.194799][ T9958] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.202954][ T9958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.219536][ T9958] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1448: corrupted in-inode xattr: e_value out of bounds [ 126.234134][ T9958] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1448: couldn't read orphan inode 15 (err -117) [ 126.281021][ T9963] loop2: detected capacity change from 0 to 2048 [ 126.282195][ T9960] loop0: detected capacity change from 0 to 2048 [ 126.294511][ T9960] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.504479][ T9969] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.504575][ T9969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 126.504603][ T9969] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.504603][ T9969] [ 126.504618][ T9969] EXT4-fs (loop2): Total free blocks count 0 [ 126.504631][ T9969] EXT4-fs (loop2): Free/Dirty block details [ 126.504645][ T9969] EXT4-fs (loop2): free_blocks=2415919104 [ 126.504660][ T9969] EXT4-fs (loop2): dirty_blocks=8224 [ 126.504735][ T9969] EXT4-fs (loop2): Block reservation details [ 126.504749][ T9969] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 126.541974][ T6355] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 126.542043][ T6355] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.542043][ T6355] [ 126.677798][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.733171][ T9977] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 126.738168][ T9988] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 126.750177][ T9977] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 126.803837][ T9991] loop2: detected capacity change from 0 to 128 [ 126.812832][ T9994] loop0: detected capacity change from 0 to 512 [ 126.819413][ T9994] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.827741][ T9989] bond1 (unregistering): Released all slaves [ 126.848015][ T9994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.853813][ T9977] loop1: detected capacity change from 0 to 512 [ 126.864600][ T9997] netlink: 'syz.5.1462': attribute type 9 has an invalid length. [ 126.871577][ T9991] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.876510][ T9997] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 126.920834][ T9994] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1460: corrupted in-inode xattr: e_value out of bounds [ 126.926997][ T9977] ext4: Unknown parameter 'dont_measure' [ 126.944263][ T9977] SET target dimension over the limit! [ 126.961203][ T9994] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1460: couldn't read orphan inode 15 (err -117) [ 126.993050][T10002] netlink: 'syz.1.1463': attribute type 9 has an invalid length. [ 127.006329][T10002] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 127.069836][T10005] syz.0.1465[10005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.070040][T10005] syz.0.1465[10005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.074334][T10011] loop2: detected capacity change from 0 to 1024 [ 127.121242][T10011] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.130371][T10011] EXT4-fs (loop2): 1 truncate cleaned up [ 127.236917][T10017] FAULT_INJECTION: forcing a failure. [ 127.236917][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.250224][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.3.1468 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 127.261086][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.271171][T10017] Call Trace: [ 127.274466][T10017] [ 127.277423][T10017] dump_stack_lvl+0xf2/0x150 [ 127.282101][T10017] dump_stack+0x15/0x1a [ 127.286388][T10017] should_fail_ex+0x223/0x230 [ 127.291191][T10017] should_fail+0xb/0x10 [ 127.295367][T10017] should_fail_usercopy+0x1a/0x20 [ 127.300477][T10017] _copy_to_user+0x20/0xa0 [ 127.304929][T10017] simple_read_from_buffer+0xa0/0x110 [ 127.310389][T10017] proc_fail_nth_read+0xf9/0x140 [ 127.315371][T10017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.320943][T10017] vfs_read+0x1a2/0x700 [ 127.325180][T10017] ? __rcu_read_unlock+0x4e/0x70 [ 127.330146][T10017] ? __fget_files+0x17c/0x1c0 [ 127.334959][T10017] ksys_read+0xe8/0x1b0 [ 127.339173][T10017] __x64_sys_read+0x42/0x50 [ 127.343701][T10017] x64_sys_call+0x2874/0x2dc0 [ 127.348482][T10017] do_syscall_64+0xc9/0x1c0 [ 127.353027][T10017] ? clear_bhb_loop+0x55/0xb0 [ 127.357723][T10017] ? clear_bhb_loop+0x55/0xb0 [ 127.362421][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.368354][T10017] RIP: 0033:0x7f7c5af7e92c [ 127.372793][T10017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.392525][T10017] RSP: 002b:00007f7c595f7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.400956][T10017] RAX: ffffffffffffffda RBX: 00007f7c5b145fa0 RCX: 00007f7c5af7e92c [ 127.408985][T10017] RDX: 000000000000000f RSI: 00007f7c595f70b0 RDI: 0000000000000005 [ 127.416987][T10017] RBP: 00007f7c595f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.424989][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.433000][T10017] R13: 0000000000000000 R14: 00007f7c5b145fa0 R15: 00007ffe7dedca18 [ 127.441069][T10017] [ 127.444342][ T29] kauditd_printk_skb: 1032 callbacks suppressed [ 127.444355][ T29] audit: type=1326 audit(1733421915.780:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.5.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3a9af6ee7 code=0x7ffc0000 [ 127.474087][ T29] audit: type=1326 audit(1733421915.780:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.5.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3a9a9c129 code=0x7ffc0000 [ 127.497667][ T29] audit: type=1326 audit(1733421915.780:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.5.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe3a9afff19 code=0x7ffc0000 [ 127.521227][ T29] audit: type=1326 audit(1733421915.780:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8c1226ee7 code=0x7ffc0000 [ 127.544748][ T29] audit: type=1326 audit(1733421915.780:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8c11cc129 code=0x7ffc0000 [ 127.568179][ T29] audit: type=1326 audit(1733421915.780:9568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 127.591786][ T29] audit: type=1326 audit(1733421915.780:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8c1226ee7 code=0x7ffc0000 [ 127.615370][ T29] audit: type=1326 audit(1733421915.780:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8c11cc129 code=0x7ffc0000 [ 127.638927][ T29] audit: type=1326 audit(1733421915.780:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb8c122ff19 code=0x7ffc0000 [ 127.662559][ T29] audit: type=1326 audit(1733421915.790:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.5.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3a9af6ee7 code=0x7ffc0000 [ 127.736678][T10030] No source specified [ 127.776168][T10033] loop0: detected capacity change from 0 to 128 [ 127.788294][T10035] Cannot find del_set index 0 as target [ 127.795127][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 127.806050][T10033] EXT4-fs mount: 25 callbacks suppressed [ 127.806064][T10033] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.832391][T10033] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.840036][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.869655][T10035] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 127.884135][T10035] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 127.907925][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.931130][T10038] bond1 (unregistering): Released all slaves [ 127.978023][T10035] loop3: detected capacity change from 0 to 512 [ 127.990273][T10035] ext4: Unknown parameter 'dont_measure' [ 128.018565][T10035] SET target dimension over the limit! [ 128.117962][T10051] loop1: detected capacity change from 0 to 2048 [ 128.149638][T10054] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 128.161107][T10051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.432598][T10060] loop2: detected capacity change from 0 to 1024 [ 128.446109][T10060] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.456316][T10066] loop5: detected capacity change from 0 to 1024 [ 128.457081][T10060] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.486590][T10066] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.527684][T10066] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 128.537889][T10060] JBD2: no valid journal superblock found [ 128.543794][T10060] EXT4-fs (loop2): Could not load journal inode [ 128.550322][T10066] EXT4-fs (loop5): orphan cleanup on readonly fs [ 128.575331][T10066] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 128.612179][T10066] EXT4-fs (loop5): Remounting filesystem read-only [ 128.621121][T10066] EXT4-fs (loop5): 1 orphan inode deleted [ 128.633093][T10066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.658064][T10066] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 128.666877][T10066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.782895][T10070] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1485'. [ 128.827295][T10062] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.852623][T10062] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 128.865258][T10062] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.865258][T10062] [ 128.874946][T10062] EXT4-fs (loop1): Total free blocks count 0 [ 128.881063][T10062] EXT4-fs (loop1): Free/Dirty block details [ 128.886994][T10062] EXT4-fs (loop1): free_blocks=2415919104 [ 128.892783][T10062] EXT4-fs (loop1): dirty_blocks=8224 [ 128.898102][T10062] EXT4-fs (loop1): Block reservation details [ 128.904206][T10062] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 128.986959][T10074] loop0: detected capacity change from 0 to 128 [ 129.124650][T10074] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.137199][T10080] FAULT_INJECTION: forcing a failure. [ 129.137199][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 129.144036][ T4105] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 129.149942][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.3.1488 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 129.164468][T10074] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.173101][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.173119][T10080] Call Trace: [ 129.173128][T10080] [ 129.173137][T10080] dump_stack_lvl+0xf2/0x150 [ 129.225883][T10080] dump_stack+0x15/0x1a [ 129.230076][T10080] should_fail_ex+0x223/0x230 [ 129.234946][T10080] ? assoc_array_insert+0x85/0x1960 [ 129.241057][T10080] should_failslab+0x8f/0xb0 [ 129.245689][T10080] __kmalloc_cache_noprof+0x4e/0x320 [ 129.251023][T10080] assoc_array_insert+0x85/0x1960 [ 129.256136][T10080] ? __pfx_key_default_cmp+0x10/0x10 [ 129.261441][T10080] ? __pfx_keyring_search_iterator+0x10/0x10 [ 129.267573][T10080] __key_link_begin+0x9a/0x150 [ 129.272414][T10080] request_key_and_link+0x4fa/0xcf0 [ 129.277645][T10080] ? __pfx_key_default_cmp+0x10/0x10 [ 129.282958][T10080] ? __pfx_keyring_search_iterator+0x10/0x10 [ 129.289058][T10080] __se_sys_request_key+0x1d7/0x290 [ 129.294310][T10080] ? fput+0x1c4/0x200 [ 129.298309][T10080] __x64_sys_request_key+0x55/0x70 [ 129.303576][T10080] x64_sys_call+0x296e/0x2dc0 [ 129.308298][T10080] do_syscall_64+0xc9/0x1c0 [ 129.312852][T10080] ? clear_bhb_loop+0x55/0xb0 [ 129.317544][T10080] ? clear_bhb_loop+0x55/0xb0 [ 129.322260][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.328255][T10080] RIP: 0033:0x7f7c5af7ff19 [ 129.332674][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.352313][T10080] RSP: 002b:00007f7c595f7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 129.360817][T10080] RAX: ffffffffffffffda RBX: 00007f7c5b145fa0 RCX: 00007f7c5af7ff19 [ 129.368865][T10080] RDX: 0000000020000580 RSI: 0000000020000540 RDI: 0000000020000500 [ 129.376847][T10080] RBP: 00007f7c595f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.384913][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.392889][T10080] R13: 0000000000000001 R14: 00007f7c5b145fa0 R15: 00007ffe7dedca18 [ 129.400969][T10080] [ 129.461616][T10088] loop3: detected capacity change from 0 to 512 [ 129.480302][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.501886][T10089] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.509432][T10088] FAULT_INJECTION: forcing a failure. [ 129.509432][T10088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.522685][T10088] CPU: 0 UID: 0 PID: 10088 Comm: syz.3.1492 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 129.533493][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.543596][T10088] Call Trace: [ 129.546884][T10088] [ 129.549859][T10088] dump_stack_lvl+0xf2/0x150 [ 129.554486][T10088] dump_stack+0x15/0x1a [ 129.558742][T10088] should_fail_ex+0x223/0x230 [ 129.563444][T10088] should_fail+0xb/0x10 [ 129.567685][T10088] should_fail_usercopy+0x1a/0x20 [ 129.572759][T10088] _copy_to_user+0x20/0xa0 [ 129.577284][T10088] simple_read_from_buffer+0xa0/0x110 [ 129.582694][T10088] proc_fail_nth_read+0xf9/0x140 [ 129.587690][T10088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.593309][T10088] vfs_read+0x1a2/0x700 [ 129.597492][T10088] ? __rcu_read_unlock+0x4e/0x70 [ 129.602534][T10088] ? __fget_files+0x17c/0x1c0 [ 129.607316][T10088] ksys_read+0xe8/0x1b0 [ 129.611502][T10088] __x64_sys_read+0x42/0x50 [ 129.616025][T10088] x64_sys_call+0x2874/0x2dc0 [ 129.620829][T10088] do_syscall_64+0xc9/0x1c0 [ 129.625336][T10088] ? clear_bhb_loop+0x55/0xb0 [ 129.630035][T10088] ? clear_bhb_loop+0x55/0xb0 [ 129.634711][T10088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.640664][T10088] RIP: 0033:0x7f7c5af7e92c [ 129.645158][T10088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.664771][T10088] RSP: 002b:00007f7c595f7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.673228][T10088] RAX: ffffffffffffffda RBX: 00007f7c5b145fa0 RCX: 00007f7c5af7e92c [ 129.681215][T10088] RDX: 000000000000000f RSI: 00007f7c595f70b0 RDI: 0000000000000007 [ 129.689239][T10088] RBP: 00007f7c595f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.697237][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.705269][T10088] R13: 0000000000000000 R14: 00007f7c5b145fa0 R15: 00007ffe7dedca18 [ 129.713262][T10088] [ 129.775094][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 129.832092][T10091] loop0: detected capacity change from 0 to 8192 [ 129.843132][T10099] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 129.863690][T10099] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 129.903046][T10095] bond1 (unregistering): Released all slaves [ 129.930488][T10091] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.945662][T10099] loop1: detected capacity change from 0 to 512 [ 129.954104][T10099] ext4: Unknown parameter 'dont_measure' [ 130.071050][T10095] SET target dimension over the limit! [ 130.108315][T10106] FAULT_INJECTION: forcing a failure. [ 130.108315][T10106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.121475][T10106] CPU: 0 UID: 0 PID: 10106 Comm: syz.2.1497 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 130.132291][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.142387][T10106] Call Trace: [ 130.145679][T10106] [ 130.148641][T10106] dump_stack_lvl+0xf2/0x150 [ 130.153322][T10106] dump_stack+0x15/0x1a [ 130.157529][T10106] should_fail_ex+0x223/0x230 [ 130.162303][T10106] should_fail+0xb/0x10 [ 130.166550][T10106] should_fail_usercopy+0x1a/0x20 [ 130.171601][T10106] _copy_from_user+0x1e/0xb0 [ 130.176234][T10106] ____sys_sendmsg+0x1a4/0x410 [ 130.181025][T10106] __sys_sendmsg+0x19d/0x230 [ 130.185710][T10106] __x64_sys_sendmsg+0x46/0x50 [ 130.190603][T10106] x64_sys_call+0x2734/0x2dc0 [ 130.195376][T10106] do_syscall_64+0xc9/0x1c0 [ 130.199918][T10106] ? clear_bhb_loop+0x55/0xb0 [ 130.204616][T10106] ? clear_bhb_loop+0x55/0xb0 [ 130.209323][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.215266][T10106] RIP: 0033:0x7f70976bff19 [ 130.219772][T10106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.224539][T10091] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.239629][T10106] RSP: 002b:00007f7095d37058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.239662][T10106] RAX: ffffffffffffffda RBX: 00007f7097885fa0 RCX: 00007f70976bff19 [ 130.248481][T10091] FAT-fs (loop0): Filesystem has been set read-only [ 130.256848][T10106] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 130.256865][T10106] RBP: 00007f7095d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.256880][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.256894][T10106] R13: 0000000000000000 R14: 00007f7097885fa0 R15: 00007ffe40fa3138 [ 130.256914][T10106] [ 130.319928][ C1] ================================================================== [ 130.328058][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 130.335320][ C1] [ 130.337662][ C1] read-write to 0xffff88810006d0b8 of 8 bytes by interrupt on cpu 0: [ 130.344453][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'. [ 130.345810][ C1] wq_worker_tick+0x63/0x240 [ 130.359356][ C1] sched_tick+0xd7/0x140 [ 130.363636][ C1] update_process_times+0x161/0x190 [ 130.368865][ C1] tick_nohz_handler+0x250/0x2d0 [ 130.373838][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 130.379107][ C1] hrtimer_interrupt+0x235/0x4a0 [ 130.384089][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 130.390021][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 130.395681][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.401704][ C1] memset_orig+0x25/0xb0 [ 130.405982][ C1] _get_random_bytes+0x45/0x190 [ 130.410837][ C1] get_random_bytes+0x1d/0x30 [ 130.415539][ C1] nsim_dev_trap_report_work+0x245/0x620 [ 130.421265][ C1] process_scheduled_works+0x483/0x9a0 [ 130.426761][ C1] worker_thread+0x51d/0x6f0 [ 130.431372][ C1] kthread+0x1d1/0x210 [ 130.435460][ C1] ret_from_fork+0x4b/0x60 [ 130.439893][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.444673][ C1] [ 130.447000][ C1] read-write to 0xffff88810006d0b8 of 8 bytes by interrupt on cpu 1: [ 130.455073][ C1] wq_worker_tick+0x63/0x240 [ 130.459706][ C1] sched_tick+0xd7/0x140 [ 130.463970][ C1] update_process_times+0x161/0x190 [ 130.469189][ C1] tick_nohz_handler+0x250/0x2d0 [ 130.474151][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 130.479407][ C1] hrtimer_interrupt+0x235/0x4a0 [ 130.484363][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 130.490285][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 130.495935][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.501956][ C1] crng_make_state+0x1c6/0x3e0 [ 130.504969][T10101] syz.5.1496 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 130.506733][ C1] _get_random_bytes+0x88/0x190 [ 130.519651][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.5.1496 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 130.524452][ C1] get_random_bytes+0x1d/0x30 [ 130.535185][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.539845][ C1] nsim_dev_trap_report_work+0x46b/0x620 [ 130.549884][T10101] Call Trace: [ 130.549894][T10101] [ 130.555493][ C1] process_scheduled_works+0x483/0x9a0 [ 130.558766][T10101] dump_stack_lvl+0xf2/0x150 [ 130.561720][ C1] worker_thread+0x51d/0x6f0 [ 130.567161][T10101] dump_stack+0x15/0x1a [ 130.571730][ C1] kthread+0x1d1/0x210 [ 130.576302][T10101] dump_header+0x83/0x2d0 [ 130.580447][ C1] ret_from_fork+0x4b/0x60 [ 130.584496][T10101] oom_kill_process+0x341/0x4c0 [ 130.588803][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.593207][T10101] out_of_memory+0x9af/0xbe0 [ 130.598050][ C1] [ 130.598057][ C1] value changed: 0x0000000000113e10 -> 0x0000000000116520 [ 130.598069][ C1] [ 130.598072][ C1] Reported by Kernel Concurrency Sanitizer on: [ 130.598079][ C1] CPU: 1 UID: 0 PID: 4257 Comm: kworker/u8:41 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 130.598103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.598117][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 130.602884][T10101] ? css_next_descendant_pre+0x11c/0x140 [ 130.607455][ C1] [ 130.609825][T10101] mem_cgroup_out_of_memory+0x13e/0x190 [ 130.616850][ C1] ================================================================== [ 130.619181][T10101] try_charge_memcg+0x508/0x7f0 [ 130.634143][T10114] loop3: detected capacity change from 0 to 128 [ 130.636232][T10101] obj_cgroup_charge_pages+0xbd/0x1a0 [ 130.647191][T10091] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.653015][T10101] __memcg_kmem_charge_page+0x9d/0x170 [ 130.653049][T10101] __alloc_pages_noprof+0x1bc/0x340 [ 130.660421][T10091] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.660998][T10101] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 130.725166][T10101] alloc_pages_noprof+0xe1/0x100 [ 130.730126][T10101] io_pages_map+0x298/0x510 [ 130.734642][T10101] io_allocate_scq_urings+0x10a/0x2f0 [ 130.740135][T10101] io_uring_create+0x42c/0x6d0 [ 130.744935][T10101] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 130.750455][T10101] __x64_sys_io_uring_setup+0x31/0x40 [ 130.755914][T10101] x64_sys_call+0x270c/0x2dc0 [ 130.760659][T10101] do_syscall_64+0xc9/0x1c0 [ 130.765168][T10101] ? clear_bhb_loop+0x55/0xb0 [ 130.769875][T10101] ? clear_bhb_loop+0x55/0xb0 [ 130.774558][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.780509][T10101] RIP: 0033:0x7fe3a9afff19 [ 130.784929][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.804588][T10101] RSP: 002b:00007fe3a8176fe8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 130.813077][T10101] RAX: ffffffffffffffda RBX: 00007fe3a9cc5fa0 RCX: 00007fe3a9afff19 [ 130.821055][T10101] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000003665 [ 130.829030][T10101] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000000000000 [ 130.837001][T10101] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 130.845107][T10101] R13: 0000000000000000 R14: 0000000000003665 R15: 0000000000000000 [ 130.853160][T10101] [ 130.856514][T10101] memory: usage 267948kB, limit 307200kB, failcnt 78 [ 130.857131][T10108] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.863212][T10101] memory+swap: usage 267948kB, limit 9007199254740988kB, failcnt 0 [ 130.863230][T10101] kmem: usage 267696kB, limit 9007199254740988kB, failcnt 0 [ 130.863244][T10101] Memory cgroup stats for /syz5: [ 130.869820][T10101] cache 0 [ 130.876411][T10120] loop2: detected capacity change from 0 to 256 [ 130.880029][T10101] rss 122880 [ 130.904781][T10101] shmem 0 [ 130.907770][T10101] mapped_file 0 [ 130.911405][T10101] dirty 0 [ 130.914374][T10101] writeback 0 [ 130.917748][T10101] workingset_refault_anon 0 SYZFAIL: failed to send rpc fd=3 want=1736 sent=0 n=-1 (errno 32: Broken pipe) [ 130.922375][T10101] workingset_refault_file 0 [ 130.926890][T10101] swap 0 [ 130.929750][T10101] swapcached 204800 [ 130.933692][T10101] pgpgin 51950 [ 130.937430][T10101] pgpgout 51898 [ 130.940994][T10101] pgfault 47935 [ 130.944529][T10101] pgmajfault 2 [ 130.948045][T10101] inactive_anon 212992 [ 130.952335][T10101] active_anon 0 [ 130.955820][T10101] inactive_file 0 [ 130.959462][T10101] active_file 0 [ 130.963010][T10101] unevictable 0 [ 130.966474][T10101] hierarchical_memory_limit 314572800 [ 130.972025][T10101] hierarchical_memsw_limit 9223372036854771712 [ 130.978194][T10101] total_cache 0 [ 130.981690][T10101] total_rss 122880 [ 130.985423][T10101] total_shmem 0 [ 130.988887][T10101] total_mapped_file 0 [ 130.992974][T10101] total_dirty 0 [ 130.996504][T10101] total_writeback 0 [ 131.000400][T10101] total_workingset_refault_anon 0 [ 131.005439][T10101] total_workingset_refault_file 0 [ 131.010580][T10101] total_swap 0 [ 131.013960][T10101] total_swapcached 204800 [ 131.018352][T10101] total_pgpgin 51950 [ 131.022276][T10101] total_pgpgout 51898 [ 131.026268][T10101] total_pgfault 47935 [ 131.030325][T10101] total_pgmajfault 2 [ 131.034285][T10101] total_inactive_anon 212992 [ 131.038967][T10101] total_active_anon 0 [ 131.042993][T10101] total_inactive_file 0 [ 131.047185][T10101] total_active_file 0 [ 131.051194][T10101] total_unevictable 0 [ 131.055178][T10101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1496,pid=10100,uid=0 [ 131.069888][T10101] Memory cgroup out of memory: Killed process 10100 (syz.5.1496) total-vm:93280kB, anon-rss:748kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 131.194377][ T6341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.242048][T10108] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 131.322383][ T6341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.392779][ T6341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.443254][ T6341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.514017][ T6341] bridge_slave_1: left allmulticast mode [ 131.519897][ T6341] bridge_slave_1: left promiscuous mode [ 131.525647][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.534811][ T6341] bridge_slave_0: left allmulticast mode [ 131.540537][ T6341] bridge_slave_0: left promiscuous mode [ 131.546211][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.555549][ T6341] bond_slave_0: left promiscuous mode [ 131.561018][ T6341] bond_slave_1: left promiscuous mode [ 131.610740][ T6341] bridge0 (unregistering): left allmulticast mode [ 131.666915][ T6341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.676695][ T6341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.686317][ T6341] bond0 (unregistering): Released all slaves [ 131.721748][ T6341] IPVS: stopping backup sync thread 6041 ... [ 131.743665][ T6341] hsr_slave_0: left promiscuous mode [ 131.749354][ T6341] hsr_slave_1: left promiscuous mode [ 131.755198][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.762715][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.771159][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.778559][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.787462][ T6341] veth1_macvtap: left promiscuous mode [ 131.792983][ T6341] veth0_macvtap: left promiscuous mode [ 131.798493][ T6341] veth1_vlan: left promiscuous mode [ 131.803740][ T6341] veth0_vlan: left promiscuous mode [ 131.838062][ T6341] pim6reg (unregistering): left allmulticast mode [ 131.850801][ T4277] smc: removing ib device syz2 [ 131.874100][ T6341] team0 (unregistering): Port device team_slave_1 removed [ 131.883361][ T6341] team0 (unregistering): Port device team_slave_0 removed [ 132.144535][ T6341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.192788][ T6341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.242169][ T6341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.312200][ T6341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.375146][ T6341] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.385069][ T6341] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.421253][ T6341] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.431192][ T6341] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.491220][ T6341] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.501112][ T6341] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.571371][ T6341] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.581319][ T6341] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.648584][ T6341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.682789][ T6341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.722900][ T6341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.772816][ T6341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.847515][ T6341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.857912][ T6341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.892139][ T6341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.902564][ T6341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.932907][ T6341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.943303][ T6341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.972280][ T6341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.982596][ T6341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.046295][ T6341] bridge_slave_1: left allmulticast mode [ 133.052103][ T6341] bridge_slave_1: left promiscuous mode [ 133.057721][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.065320][ T6341] bridge_slave_0: left allmulticast mode [ 133.070997][ T6341] bridge_slave_0: left promiscuous mode [ 133.076658][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.085251][ T6341] bond0: left allmulticast mode [ 133.090172][ T6341] bond_slave_0: left allmulticast mode [ 133.095691][ T6341] bond_slave_1: left allmulticast mode [ 133.101248][ T6341] bond0: left promiscuous mode [ 133.106025][ T6341] bond_slave_0: left promiscuous mode [ 133.111492][ T6341] bond_slave_1: left promiscuous mode [ 133.117017][ T6341] bridge0: port 3(bond0) entered disabled state [ 133.124087][ T6341] bridge_slave_1: left allmulticast mode [ 133.129747][ T6341] bridge_slave_1: left promiscuous mode [ 133.135463][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.143229][ T6341] bridge_slave_0: left allmulticast mode [ 133.148863][ T6341] bridge_slave_0: left promiscuous mode [ 133.154576][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.162703][ T6341] erspan0: left allmulticast mode [ 133.167805][ T6341] erspan0: left promiscuous mode [ 133.172907][ T6341] bridge0: port 3(erspan0) entered disabled state [ 133.180027][ T6341] bridge_slave_1: left allmulticast mode [ 133.185671][ T6341] bridge_slave_1: left promiscuous mode [ 133.191352][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.198938][ T6341] bridge_slave_0: left allmulticast mode [ 133.204660][ T6341] bridge_slave_0: left promiscuous mode [ 133.210340][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.218394][ T6341] bridge_slave_1: left allmulticast mode [ 133.224184][ T6341] bridge_slave_1: left promiscuous mode [ 133.229897][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.237630][ T6341] bridge_slave_0: left allmulticast mode [ 133.243316][ T6341] bridge_slave_0: left promiscuous mode [ 133.248919][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.260616][ T6341] bond_slave_0: left promiscuous mode [ 133.266113][ T6341] bond_slave_1: left promiscuous mode [ 133.271638][ T6341] bond_slave_0: left promiscuous mode [ 133.277043][ T6341] bond_slave_1: left promiscuous mode [ 133.282545][ T6341] bond_slave_0: left promiscuous mode [ 133.287996][ T6341] bond_slave_1: left promiscuous mode [ 133.473716][ T6341] dvmrp1 (unregistering): left allmulticast mode [ 133.721495][ T6341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.731355][ T6341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.741042][ T6341] bond0 (unregistering): Released all slaves [ 133.749244][ T6341] bond1 (unregistering): Released all slaves [ 133.758009][ T6341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.767972][ T6341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.777574][ T6341] bond0 (unregistering): Released all slaves [ 133.796411][ T6341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.806155][ T6341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.815780][ T6341] bond0 (unregistering): Released all slaves [ 133.834926][ T6341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.844476][ T6341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.853828][ T6341] bond0 (unregistering): Released all slaves [ 133.896484][ T6341] IPVS: stopping backup sync thread 6241 ... [ 133.902607][ T6341] IPVS: stopping backup sync thread 6135 ... [ 133.908658][ T6341] IPVS: stopping backup sync thread 6095 ... [ 133.972676][ T6341] hsr_slave_0: left promiscuous mode [ 133.978505][ T6341] hsr_slave_1: left promiscuous mode [ 133.984397][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.991842][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.999275][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.006706][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.015647][ T6341] hsr_slave_0: left promiscuous mode [ 134.021364][ T6341] hsr_slave_1: left promiscuous mode [ 134.026952][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.034359][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.041958][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.049349][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.058449][ T6341] hsr_slave_0: left promiscuous mode [ 134.064178][ T6341] hsr_slave_1: left promiscuous mode [ 134.069786][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.077197][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.084745][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.092168][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.101183][ T6341] hsr_slave_0: left promiscuous mode [ 134.106826][ T6341] hsr_slave_1: left promiscuous mode [ 134.112610][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.120053][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.127479][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.134892][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.147159][ T6341] veth0_macvtap: left promiscuous mode [ 134.152737][ T6341] veth1_vlan: left promiscuous mode [ 134.158028][ T6341] veth0_vlan: left promiscuous mode [ 134.163868][ T6341] veth1_macvtap: left promiscuous mode [ 134.169340][ T6341] veth0_macvtap: left promiscuous mode [ 134.174910][ T6341] veth1_vlan: left promiscuous mode [ 134.180213][ T6341] veth0_vlan: left promiscuous mode [ 134.185695][ T6341] veth1_macvtap: left promiscuous mode [ 134.191205][ T6341] veth0_macvtap: left promiscuous mode [ 134.196761][ T6341] veth1_vlan: left promiscuous mode [ 134.202169][ T6341] veth0_vlan: left promiscuous mode [ 134.207713][ T6341] veth1_macvtap: left promiscuous mode [ 134.213237][ T6341] veth0_macvtap: left promiscuous mode [ 134.218744][ T6341] veth1_vlan: left promiscuous mode [ 134.224033][ T6341] veth0_vlan: left promiscuous mode [ 134.362610][ T6341] team0 (unregistering): Port device team_slave_1 removed [ 134.372039][ T6341] team0 (unregistering): Port device team_slave_0 removed [ 134.421778][ T6341] team0 (unregistering): Port device team_slave_1 removed [ 134.431052][ T6341] team0 (unregistering): Port device team_slave_0 removed [ 134.483325][ T6341] team0 (unregistering): Port device team_slave_1 removed [ 134.492866][ T6341] team0 (unregistering): Port device team_slave_0 removed [ 134.514126][ T6341] team0 (unregistering): Port device batadv0 removed [ 134.549346][ T6341] team0 (unregistering): Port device team_slave_1 removed [ 134.558951][ T6341] team0 (unregistering): Port device team_slave_0 removed