last executing test programs: 3.033958262s ago: executing program 3 (id=1999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) poll(&(0x7f0000000040), 0x1f, 0x3) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001000030400000000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c00010070000000018000000c000100000000000800000008000500", @ANYRES32=r7, @ANYBLOB="ac746c6fd8d173be0f0ee6ed4374121ca6939baa6bb2da08baaab766ee2d53496521cf26aac13e361482132563bc78eba5691b8a6ea45e6db407eb6018ae51cf4b61d9489a00b585cc5d0878ef749c6634ecbf394f28d6b4890e5ff2020f53f9536fdcb608c0df3f16cf872ae0c5c009e0d24ea659549647a598e5f9bd3ba1433ceb4fca0ed632bc837b07baff011e41a95a12a7f5075e052c838d0bf1b3ecad63920ac09abcac3bdda812a96c542a304ac198b35e41625140353e4eb0f22aae1400"], 0x6c}}, 0x0) bind$can_raw(r1, &(0x7f00000000c0), 0x10) 1.244198548s ago: executing program 3 (id=2019): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 1.084779941s ago: executing program 2 (id=2021): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 908.744346ms ago: executing program 3 (id=2025): r0 = syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 891.820997ms ago: executing program 3 (id=2026): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000025c0), 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2, 0x0, 0x1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x4008804) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001"], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="070002000000fddbdf25050000001800018014000200"], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) 876.202058ms ago: executing program 1 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) 828.524632ms ago: executing program 0 (id=2028): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000400000000003febecd1811", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 828.244042ms ago: executing program 1 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000200000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5435, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) accept4(r4, &(0x7f0000000700)=@caif, &(0x7f0000000080)=0x80, 0x80800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef978617503a6707bb5cb8ffbb640d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a74e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f048ef6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c92209283829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb20000"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x80) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r7, r7, 0x0, 0x800000009) 822.343083ms ago: executing program 2 (id=2031): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffa, 0x0) readahead(0xffffffffffffffff, 0x6, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r7, &(0x7f0000000080)='./mnt\x00', r7, &(0x7f0000000100)='./mnt\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="74726164078007b718ba0cc78a0b017eec71fd9c3596973695a9d71d2aa0a347c49bcb426015ac3cf641585a709440eaae15eb3f6cbba608931b4afbde3ea547ae49b00686bfd31f6fddb87e9c192313f46fc4755c1bf137765ccabbdf64a186318a8072b0d1c26ebc8de8a294ddf683ca6afffc52b256f436534af7b03faf3c18ddc30b71aa44924c02809dc154aeb5c777a0f7d9b8a5ccb31e3f1031f92344d1461d79281ba0cd34f41dff5b0c0468b13fdc1652948e444d3aecb2b11c57004bb7b5856d765c64c609460cffe5b1f574df50c71f5d2b1bbaeae557a6753b413d19821614e6a5b50c9cd7f990da0c32754937648c4b070468743e9b4744f87aa2c51be931fe3b384c9f9047747a9e89bcaa4477fe6920d890a99035895fda345d0be30e3a48e077108db3e234ef4f3181334f017cb437e61ecfa9cb9257b62b909779be8c609a45373de0df6e3de3d978c71631dd77069381b1ecf41c2d939192ead12cf6b30360d7f8599daaa89b59c1781c9b7ec047abea92709f5403cc8c3ce8b70b68d98230c294e24a62a368c1b6d2d044168881bcdad2ac7c808e933ad037a9777c8a4780bb03a1cf7503604584db917cfe7d8c3f4f59860b12da6fb070badbc312363888344872403e979499a6c881ebcef29c57f0233e0c3d9173", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k', @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRES16=r5]) 787.859176ms ago: executing program 2 (id=2032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000200000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5435, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) accept4(r4, &(0x7f0000000700)=@caif, &(0x7f0000000080)=0x80, 0x80800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r6, r6, 0x0, 0x800000009) 740.140379ms ago: executing program 0 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 739.799989ms ago: executing program 0 (id=2034): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090322bd700005dcdf250100000018000180140002007665746830000000000000000000000020000280"], 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x24040804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x77}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x44}}, 0x400d0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310700000000000000003800000008000100"], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r10, 0x2007ffc) sendfile(r10, r10, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0xa, 0x0) 643.413817ms ago: executing program 1 (id=2036): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x0, &(0x7f0000000500)}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00') 606.0246ms ago: executing program 2 (id=2038): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x7}, 0x9c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000, &(0x7f0000006680)) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x4048884) 533.346466ms ago: executing program 2 (id=2040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0500000008800000000000000075"], 0x15) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xf36f}}, './file0\x00'}) accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039042cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09980600a000931bae8e1af0dc9748d7c90b6000128008000100677200000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaede, 0x2, 0x2, 0x8b6}, &(0x7f0000000500)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r12, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001000789ca73797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES8=0x0, @ANYRESOCT=r13, @ANYRESDEC=r2, @ANYRES64=r10, @ANYRES64=r5, @ANYRESDEC=r9, @ANYRES32], 0x78}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r16, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 526.873617ms ago: executing program 1 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 473.724041ms ago: executing program 4 (id=2042): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffa, 0x0) readahead(0xffffffffffffffff, 0x6, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r7, &(0x7f0000000080)='./mnt\x00', r7, &(0x7f0000000100)='./mnt\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k', @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRES16=r5]) 473.356281ms ago: executing program 4 (id=2043): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000400000000003febecd1811", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 435.568884ms ago: executing program 4 (id=2044): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 385.781418ms ago: executing program 1 (id=2045): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff000000009500680000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=@newchain={0x6e0, 0x64, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xd, 0xfff3}, {0x3, 0x1}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x7a}}, @TCA_RATE={0x6, 0x5, {0xbb, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0x654, 0x2, [@TCA_BASIC_ACT={0x650, 0x3, [@m_csum={0x144, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x10000000, 0x942, 0x9}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x2, 0x75, 0x10000}, 0x7}}]}, {0xde, 0x6, "c431f5108ed6200f29ce8945f10ad85438094861ae2bd6a453737e8f390841ebcaa32d82720ddc9669b78dd813f1b771cf6606ffd1ff64f563a7292dc1b4d1d80f1805d0307aba89350f8087983e99e3db2d3ca4344c9ef48df24dec99388022ad1501b71602c98c9c103b1eab7b67e04a9a736202da7788e1f48d815861143e31fbdf7b4912d6d6bebf1794533ea68f0ca4f3b985763deb3121893e94545dc947aa76e51287aa9adbb04855d87ec1737b41d4994bd08bd8c9468b47aa0100b6207db50b3b9eb4af3790f39d3ea98fd88d9d102fd1938cdbeeb1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1a0, 0x1d, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2224dd43, 0x3, 0x3, 0x100, 0x6}, @dev={0xac, 0x14, 0x14, 0xa}, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xe9a, 0x2, 0x3, 0x80000000}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xd7b, 0x3, 0x5a}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x114, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x5}, 0x3}}]}, {0xc9, 0x6, "5abca4d48aeb735ea1332c37109c1ef25fba1725d85d86fefbabcb1b27eb6c5e65cbebe36b1dc6ed884588bc50498d3a602c620228ed0004dddb332ce5474d173dfbf86ba3f21a88c3b438f5d05f493a5a5b0d51a72f48638e416b8a9411fef977210e620fbe36143a6c3d23eb2905df4301c08e660a121a9d20c4d22d870c37e8a1db63f82dd7a48b5e18849a376ec71fc7975db1915728609fcb3eef55da7b039989fc71649935bdd9acc7a9f130de7bb5c3c015ebba1d9b7856c3bda2e707303506350e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x130, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xbac, 0x0, 0x2, 0x8, 0x9}, 0x3}}]}, {0xe2, 0x6, "b32f39cf305dadd0310652054c27f2079eff57aacefef57fe640f228de871dabfe624c9caff87c0a968a3a1063652f31cc71ee80346cf87ae384e9d3af3101c1da0c1469819c1d99f85a2429bc66232cc6c470a6cb3f92e13d83629205dcfa07209195d32142a104783468f3d4c6b8e33b1dba0069575b8f5237cfe9a6c0c285a9efb84af550e965359fc47abfb74e3bd45e231bffdf0de5ab49725b4f16094113deb9acafbc3dfaa408059b99432de001b89948080e161f0644762d36ce5a25753d3e44bd626b5979a15f8664ae46144870c266a0ebde0a6d6c555f049c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x124, 0x8, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x3, 0xfffffffc, 0x81}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3c3af50e, 0x6, 0xe, 0x3}, 0x4, r7}}]}, {0xb6, 0x6, "568aaf1b1afec63573338d6d71b471e629c2961dad59afc4ff503e7b99e26e3f8983d5ab9be79f8fbe0c7ec7d2aeeb145ec1da580861ef9202b292ce80ff4d2490f6f023e23aa8cb3e890707fa3e6e5ce0fcd02aba846b4345503a3dd646dc06f9cc91de9bd8a66f1f0b8c1c5c3256fd30f39198f7aa4e882c9b8664763fd14232e9e1f1a6f59ba7bbea61dc9e07e9f2f743cf5705acd52fc37e14c02b50e59a317b44a0c1bb7af3758e3d2960423885764f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x7}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}]}}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 275.995197ms ago: executing program 1 (id=2046): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x80) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000000740)="cc", 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000880)=0x30) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7fffeffd) openat(r3, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000001700)={0x12ec, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x1124, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xf1, 0x2, "24200944adc78e59c879c1716a604030079c7e528af906354aa7cbaf2723624bd754e11b3207cd8258a065aff51757950f2d8a4bdd2bc00f51d3c4dbd87d1bb189ff4123dee67cdae21e1a0fa4895bc0f9f3153dac154c2af639f4b55b97b178d42671a427e0d7f2092193d185ef63fc5d482f0a0903b11399ad5f6aabf413d01b93cb9e3cfe212a810fba42d45205fbd295d741bb16366452eda88ea5202236cf132c99459b8773abe5421c47a3fac3ee86a54183e04a4eaa4321634a3a53b01aceae34008fd88676c2fbf17e9149d1a2ba06e59717df285238f404fbff0785c96c6810873ae6ead37d654205"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "2f9bb178e6c0ddda4adf2b8d0e3e6e1bc93b8d64df39d0f6450d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ac, 0x7f, [@random_vendor={0xdd, 0x97, "4419db0d044af9c9c40724946e80c97715bc94ee8ecd9201cf11aae05eb35628cfb41e7351e6477a92b8272a2302b89f0b725c36dbc6a403ba1cf49498fe20d9837c75e4997d4d33988961aa92d14dd42fd23b91a6d14f53f47fb18b6927f0b76facc465bb8a7e78e69c208f2abee4889f1e73c82f3befe7b07f3b4dafbf64ea4c6f96706bbce5fed7dfee8f4e3eb970f5482c746d6d8b"}, @random_vendor={0xdd, 0xc9, "1ebede008446a6bfe7d58e23ab7575d334c83b92787a9d467ec3ec9262978593e0f37a5d01267d4c828d52948ad6716ac54efe555b5fb9d5f35976f57ab2af0630028fa4bd2fffa3d1acca378976f8076da3ca9e436d5a98d7ba3757b8c451f76cf8c82be1810b267f9a0c2d411ca51f26f672a1370f0892fa7c1a866ed875b0207ba2c04d88b6e1ddd07f5699527ed4e6a886dfc1d84841ff4529b3359eb3c26bd7ea9111678433cda13c07d40a579b471e910456242b47250bbce0980aed6a7cdd999fd02cd038eb"}, @random={0x0, 0x6, "6995e8ff0843"}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x30, 0x2}}, @preq={0x82, 0x25, {{0x1}, 0x81, 0x9, 0x1, @broadcast, 0xab, @void, 0x71, 0xd, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x5}]}}]}]}, 0x12ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 275.282257ms ago: executing program 2 (id=2047): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x4000}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 273.217827ms ago: executing program 4 (id=2048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000200000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5435, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) accept4(r4, &(0x7f0000000700)=@caif, &(0x7f0000000080)=0x80, 0x80800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="150a00000000000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x80) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r7, r7, 0x0, 0x800000009) 272.448087ms ago: executing program 0 (id=2049): r0 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169ac2, 0x40) sendfile(r1, r1, 0x0, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0xfffffffc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x689, &(0x7f00000013c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0xee01, r5, 0x800) r6 = syz_io_uring_setup(0xbc2, &(0x7f0000000680)={0x0, 0xe0d2, 0x400, 0x0, 0x224}, &(0x7f0000000640)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r6, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) 132.429909ms ago: executing program 0 (id=2050): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x0, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) 102.210261ms ago: executing program 3 (id=2051): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x0, &(0x7f0000000500)}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00') 101.586211ms ago: executing program 4 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) 70.618894ms ago: executing program 3 (id=2053): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000000}], 0x1, 0x0) 212.06µs ago: executing program 0 (id=2054): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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"/283, @ANYRESHEX=r2, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r8}, 0x20) shmdt(0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xfffffffffffffe72}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x3}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x14}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x96}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 0s ago: executing program 4 (id=2055): r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x8, 0x7, 0xb, 0xfe, 0xb, 0x9, 0x8, 0x9, 0x4, [0x23b, 0x83, 0x0, 0x3, 0x529, 0x7, 0x4d, 0xb9ac]}}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) flock(r5, 0x2) dup3(r5, r4, 0x0) r6 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x0, 0x20e, 0x0, r4}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) close_range(r2, r3, 0x0) utimensat(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0xffffffffffffffff}}, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 86.064822][ T3369] hid-generic 0003:0800:0000.0007: unknown main item tag 0x0 [ 86.072229][ T3369] hid-generic 0003:0800:0000.0007: unknown main item tag 0x0 [ 86.081613][ T3369] hid-generic 0003:0800:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 86.111185][ T6847] fido_id[6847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.183566][ T6842] lo speed is unknown, defaulting to 1000 [ 86.246545][ T6862] loop3: detected capacity change from 0 to 512 [ 86.289035][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 86.361424][ T6867] FAULT_INJECTION: forcing a failure. [ 86.361424][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 86.374080][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.2.1341 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 86.374110][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.374124][ T6867] Call Trace: [ 86.374132][ T6867] [ 86.374141][ T6867] __dump_stack+0x1d/0x30 [ 86.374163][ T6867] dump_stack_lvl+0xe8/0x140 [ 86.374243][ T6867] dump_stack+0x15/0x1b [ 86.374258][ T6867] should_fail_ex+0x265/0x280 [ 86.374328][ T6867] should_failslab+0x8c/0xb0 [ 86.374432][ T6867] kmem_cache_alloc_noprof+0x50/0x310 [ 86.374511][ T6867] ? skb_clone+0x151/0x1f0 [ 86.374543][ T6867] skb_clone+0x151/0x1f0 [ 86.374640][ T6867] nfnetlink_rcv+0x305/0x1690 [ 86.374687][ T6867] ? nlmon_xmit+0x4f/0x60 [ 86.374709][ T6867] ? consume_skb+0x49/0x150 [ 86.374799][ T6867] ? nlmon_xmit+0x4f/0x60 [ 86.374845][ T6867] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 86.374875][ T6867] ? __dev_queue_xmit+0x1200/0x2000 [ 86.374901][ T6867] ? __dev_queue_xmit+0x182/0x2000 [ 86.374964][ T6867] ? ref_tracker_free+0x37d/0x3e0 [ 86.375006][ T6867] netlink_unicast+0x5c0/0x690 [ 86.375028][ T6867] netlink_sendmsg+0x58b/0x6b0 [ 86.375129][ T6867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.375155][ T6867] __sock_sendmsg+0x145/0x180 [ 86.375328][ T6867] ____sys_sendmsg+0x31e/0x4e0 [ 86.375400][ T6867] ___sys_sendmsg+0x17b/0x1d0 [ 86.375514][ T6867] __x64_sys_sendmsg+0xd4/0x160 [ 86.375546][ T6867] x64_sys_call+0x191e/0x2ff0 [ 86.375567][ T6867] do_syscall_64+0xd2/0x200 [ 86.375676][ T6867] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.375700][ T6867] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.375731][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.375808][ T6867] RIP: 0033:0x7f38e1f7eb69 [ 86.375821][ T6867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.375840][ T6867] RSP: 002b:00007f38e05e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.375860][ T6867] RAX: ffffffffffffffda RBX: 00007f38e21a5fa0 RCX: 00007f38e1f7eb69 [ 86.375872][ T6867] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 86.375885][ T6867] RBP: 00007f38e05e7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.375910][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.375995][ T6867] R13: 0000000000000000 R14: 00007f38e21a5fa0 R15: 00007ffeb21153d8 [ 86.376014][ T6867] [ 86.638985][ T6864] loop0: detected capacity change from 0 to 512 [ 86.660868][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 86.660924][ T29] audit: type=1326 audit(3508522440.311:61167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.690574][ T29] audit: type=1326 audit(3508522440.311:61168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.714042][ T29] audit: type=1326 audit(3508522440.311:61169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.737580][ T29] audit: type=1326 audit(3508522440.311:61170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.761065][ T29] audit: type=1326 audit(3508522440.311:61171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.784560][ T29] audit: type=1326 audit(3508522440.311:61172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.808076][ T29] audit: type=1326 audit(3508522440.311:61173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.831537][ T29] audit: type=1326 audit(3508522440.311:61174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.855026][ T29] audit: type=1326 audit(3508522440.311:61175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 86.878491][ T29] audit: type=1326 audit(3508522440.311:61176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020195eb69 code=0x7ffc0000 [ 87.010886][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'. [ 87.040398][ T6872] loop2: detected capacity change from 0 to 2048 [ 87.087465][ T6875] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 87.120458][ T6877] loop1: detected capacity change from 0 to 512 [ 87.149347][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1346'. [ 87.159574][ T6864] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.170746][ T5703] loop2: p1 < > p4 [ 87.214162][ T5703] loop2: p4 size 8388608 extends beyond EOD, truncated [ 87.243425][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 87.262281][ T6879] loop4: detected capacity change from 0 to 512 [ 87.311364][ T6879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.340666][ T6864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.360616][ T6879] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.390240][ T6862] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 87.398454][ T6862] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 87.408177][ T6862] EXT4-fs (loop3): 1 truncate cleaned up [ 87.422822][ T6864] EXT4-fs (loop0): 1 truncate cleaned up [ 87.447003][ T6879] EXT4-fs (loop4): 1 truncate cleaned up [ 87.945877][ T6872] loop2: p1 < > p4 [ 87.952347][ T6872] loop2: p4 size 8388608 extends beyond EOD, truncated [ 87.996795][ T2990] loop2: p1 < > p4 [ 88.006512][ T2990] loop2: p4 size 8388608 extends beyond EOD, truncated [ 88.014183][ T6900] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 88.057153][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6905 comm=syz.2.1351 [ 88.082805][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.093863][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.115961][ T6910] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 88.123707][ T6910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1351'. [ 88.129915][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.133657][ T6910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1351'. [ 88.144808][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.167111][ T6900] bond2: (slave veth3): Enslaving as an active interface with a down link [ 88.180748][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.191502][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.208138][ T6912] bond2: entered promiscuous mode [ 88.213186][ T6912] bond2: entered allmulticast mode [ 88.218723][ T6912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.310923][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 88.330418][ T6923] loop0: detected capacity change from 0 to 512 [ 88.337362][ T6923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.374070][ T6923] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.396663][ T6923] EXT4-fs (loop0): 1 truncate cleaned up [ 88.438866][ T6922] loop3: detected capacity change from 0 to 2048 [ 88.490415][ T5703] loop3: p1 < > p4 [ 88.491495][ T6919] ALSA: seq fatal error: cannot create timer (-19) [ 88.494762][ T5703] loop3: p4 size 8388608 extends beyond EOD, truncated [ 88.516490][ T6922] loop3: p1 < > p4 [ 88.526166][ T6922] loop3: p4 size 8388608 extends beyond EOD, truncated [ 88.644667][ T6948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6948 comm=syz.2.1371 [ 88.700556][ T6948] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 88.708315][ T6948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1371'. [ 88.718125][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'. [ 88.851341][ T6970] FAULT_INJECTION: forcing a failure. [ 88.851341][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 88.864054][ T6970] CPU: 1 UID: 0 PID: 6970 Comm: syz.1.1382 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 88.864093][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.864107][ T6970] Call Trace: [ 88.864113][ T6970] [ 88.864121][ T6970] __dump_stack+0x1d/0x30 [ 88.864149][ T6970] dump_stack_lvl+0xe8/0x140 [ 88.864169][ T6970] dump_stack+0x15/0x1b [ 88.864187][ T6970] should_fail_ex+0x265/0x280 [ 88.864294][ T6970] ? rtnl_newlink+0x5c/0x12d0 [ 88.864344][ T6970] should_failslab+0x8c/0xb0 [ 88.864374][ T6970] __kmalloc_cache_noprof+0x4c/0x320 [ 88.864432][ T6970] rtnl_newlink+0x5c/0x12d0 [ 88.864513][ T6970] ? xas_load+0x413/0x430 [ 88.864565][ T6970] ? xas_load+0x413/0x430 [ 88.864595][ T6970] ? __memcg_slab_free_hook+0x135/0x230 [ 88.864707][ T6970] ? __rcu_read_unlock+0x4f/0x70 [ 88.864730][ T6970] ? avc_has_perm_noaudit+0x1b1/0x200 [ 88.864755][ T6970] ? cred_has_capability+0x210/0x280 [ 88.864851][ T6970] ? selinux_capable+0x31/0x40 [ 88.864873][ T6970] ? security_capable+0x83/0x90 [ 88.864941][ T6970] ? ns_capable+0x7d/0xb0 [ 88.864959][ T6970] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.864990][ T6970] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 88.865050][ T6970] netlink_rcv_skb+0x120/0x220 [ 88.865074][ T6970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.865140][ T6970] rtnetlink_rcv+0x1c/0x30 [ 88.865223][ T6970] netlink_unicast+0x5c0/0x690 [ 88.865245][ T6970] netlink_sendmsg+0x58b/0x6b0 [ 88.865268][ T6970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.865308][ T6970] __sock_sendmsg+0x145/0x180 [ 88.865340][ T6970] ____sys_sendmsg+0x31e/0x4e0 [ 88.865366][ T6970] ___sys_sendmsg+0x17b/0x1d0 [ 88.865400][ T6970] __x64_sys_sendmsg+0xd4/0x160 [ 88.865427][ T6970] x64_sys_call+0x191e/0x2ff0 [ 88.865449][ T6970] do_syscall_64+0xd2/0x200 [ 88.865518][ T6970] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.865573][ T6970] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.865674][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.865694][ T6970] RIP: 0033:0x7f020195eb69 [ 88.865736][ T6970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.865755][ T6970] RSP: 002b:00007f01fffbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.865776][ T6970] RAX: ffffffffffffffda RBX: 00007f0201b85fa0 RCX: 00007f020195eb69 [ 88.865789][ T6970] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.865803][ T6970] RBP: 00007f01fffbf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.865817][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.865817][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 88.865831][ T6970] R13: 0000000000000000 R14: 00007f0201b85fa0 R15: 00007ffe40dfd638 [ 88.865849][ T6970] [ 88.955027][ T6975] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.021367][ T6982] loop3: detected capacity change from 0 to 512 [ 89.048377][ T6975] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 89.173144][ T6980] loop1: detected capacity change from 0 to 512 [ 89.196564][ T6980] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1385: iget: bad extended attribute block 1 [ 89.210904][ T6980] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1385: couldn't read orphan inode 15 (err -117) [ 89.233454][ T6972] lo speed is unknown, defaulting to 1000 [ 89.424793][ T6989] lo speed is unknown, defaulting to 1000 [ 89.448709][ T6989] FAULT_INJECTION: forcing a failure. [ 89.448709][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.461818][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.4.1387 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 89.461852][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.461864][ T6989] Call Trace: [ 89.461870][ T6989] [ 89.461877][ T6989] __dump_stack+0x1d/0x30 [ 89.461896][ T6989] dump_stack_lvl+0xe8/0x140 [ 89.461914][ T6989] dump_stack+0x15/0x1b [ 89.461931][ T6989] should_fail_ex+0x265/0x280 [ 89.461997][ T6989] should_fail+0xb/0x20 [ 89.462020][ T6989] should_fail_usercopy+0x1a/0x20 [ 89.462118][ T6989] strncpy_from_user+0x25/0x230 [ 89.462142][ T6989] ? kmem_cache_alloc_noprof+0x186/0x310 [ 89.462259][ T6989] ? getname_flags+0x80/0x3b0 [ 89.462289][ T6989] getname_flags+0xae/0x3b0 [ 89.462358][ T6989] __se_sys_newstat+0x4b/0x280 [ 89.462394][ T6989] ? putname+0xda/0x100 [ 89.462441][ T6989] ? ksys_write+0x15f/0x1a0 [ 89.462471][ T6989] __x64_sys_newstat+0x31/0x40 [ 89.462497][ T6989] x64_sys_call+0x73e/0x2ff0 [ 89.462520][ T6989] do_syscall_64+0xd2/0x200 [ 89.462571][ T6989] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.462596][ T6989] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.462628][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.462651][ T6989] RIP: 0033:0x7f43781deb69 [ 89.462666][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.462749][ T6989] RSP: 002b:00007f4376826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 89.462767][ T6989] RAX: ffffffffffffffda RBX: 00007f4378406080 RCX: 00007f43781deb69 [ 89.462779][ T6989] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000200000000cc0 [ 89.462792][ T6989] RBP: 00007f4376826090 R08: 0000000000000000 R09: 0000000000000000 [ 89.462822][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.462836][ T6989] R13: 0000000000000000 R14: 00007f4378406080 R15: 00007ffeb19f55c8 [ 89.462856][ T6989] [ 89.749057][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 89.763904][ T7001] loop2: detected capacity change from 0 to 512 [ 89.895493][ T7001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.951389][ T7001] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.977583][ T7001] EXT4-fs (loop2): 1 truncate cleaned up [ 90.074483][ T7022] netlink: '+}[@': attribute type 3 has an invalid length. [ 90.176188][ T7032] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 90.184053][ T7032] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1403'. [ 90.284358][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.291819][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.299339][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.306751][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.314159][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.321561][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.329353][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.336949][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.344366][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.351740][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.359213][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.366679][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.374136][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.381516][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.388949][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.396343][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.403844][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.411228][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.418623][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.426110][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.433510][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.440917][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.448338][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.455888][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.463337][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.466739][ T7051] loop2: detected capacity change from 0 to 512 [ 90.470717][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.470740][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.491749][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.499171][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.506572][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.513976][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.521351][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.528748][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.536142][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.543601][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.550975][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.558396][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.565786][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.573185][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.580586][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.588075][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.589247][ T7032] loop4: detected capacity change from 0 to 8192 [ 90.595583][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.609319][ T3388] hid-generic 0003:0800:0000.0008: unknown main item tag 0x0 [ 90.621505][ T3388] hid-generic 0003:0800:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 90.624898][ T7051] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.687238][ T5997] loop4: p1 p2 p4 [ 90.693836][ T5997] loop4: p1 size 65536 extends beyond EOD, truncated [ 90.714808][ T5997] loop4: p2 start 861536256 is beyond EOD, truncated [ 90.721544][ T5997] loop4: p4 size 65536 extends beyond EOD, truncated [ 90.768844][ T7032] loop4: p1 p2 p4 [ 90.773261][ T7032] loop4: p1 size 65536 extends beyond EOD, truncated [ 90.782268][ T7051] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1412: iget: bad i_size value: 2533274857506816 [ 90.787351][ T7032] loop4: p2 start 861536256 is beyond EOD, truncated [ 90.801445][ T7032] loop4: p4 size 65536 extends beyond EOD, truncated [ 90.818133][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 90.845639][ T7075] loop1: detected capacity change from 0 to 512 [ 90.866407][ T7075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.897570][ T7075] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 90.939950][ T7075] EXT4-fs (loop1): 1 truncate cleaned up [ 90.987635][ T7085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1423'. [ 90.994978][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 91.000194][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 91.049377][ T7085] loop0: detected capacity change from 0 to 512 [ 91.070786][ T7085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.095934][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 91.100609][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 91.169784][ T7110] loop4: detected capacity change from 0 to 512 [ 91.177505][ T7111] SELinux: Context system_u:object is not valid (left unmapped). [ 91.200881][ T7085] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.254665][ T7085] EXT4-fs (loop0): 1 truncate cleaned up [ 91.279234][ T7120] FAULT_INJECTION: forcing a failure. [ 91.279234][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 91.291991][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.3.1435 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 91.292088][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.292100][ T7120] Call Trace: [ 91.292108][ T7120] [ 91.292115][ T7120] __dump_stack+0x1d/0x30 [ 91.292136][ T7120] dump_stack_lvl+0xe8/0x140 [ 91.292153][ T7120] dump_stack+0x15/0x1b [ 91.292168][ T7120] should_fail_ex+0x265/0x280 [ 91.292197][ T7120] should_failslab+0x8c/0xb0 [ 91.292302][ T7120] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.292363][ T7120] ? __alloc_skb+0x101/0x320 [ 91.292386][ T7120] __alloc_skb+0x101/0x320 [ 91.292407][ T7120] netlink_alloc_large_skb+0xba/0xf0 [ 91.292504][ T7120] netlink_sendmsg+0x3cf/0x6b0 [ 91.292530][ T7120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.292566][ T7120] __sock_sendmsg+0x145/0x180 [ 91.292630][ T7120] ____sys_sendmsg+0x31e/0x4e0 [ 91.292720][ T7120] ___sys_sendmsg+0x17b/0x1d0 [ 91.292804][ T7120] __x64_sys_sendmsg+0xd4/0x160 [ 91.292832][ T7120] x64_sys_call+0x191e/0x2ff0 [ 91.292855][ T7120] do_syscall_64+0xd2/0x200 [ 91.292886][ T7120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.293052][ T7120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.293082][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.293103][ T7120] RIP: 0033:0x7f8c89dbeb69 [ 91.293130][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.293146][ T7120] RSP: 002b:00007f8c8841f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.293163][ T7120] RAX: ffffffffffffffda RBX: 00007f8c89fe5fa0 RCX: 00007f8c89dbeb69 [ 91.293176][ T7120] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 91.293189][ T7120] RBP: 00007f8c8841f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.293202][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.293214][ T7120] R13: 0000000000000000 R14: 00007f8c89fe5fa0 R15: 00007ffdea9c1c08 [ 91.293242][ T7120] [ 91.571759][ T7132] loop0: detected capacity change from 0 to 1024 [ 91.593269][ T7133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.623871][ T7132] netlink: '+}[@': attribute type 4 has an invalid length. [ 91.655992][ T7133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.681775][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 91.681789][ T29] audit: type=1400 audit(3508522445.329:61540): avc: denied { read open } for pid=7138 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.718910][ T29] audit: type=1400 audit(3508522445.359:61541): avc: denied { getattr } for pid=7138 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.760142][ T7133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.815049][ T29] audit: type=1400 audit(3508522445.459:61542): avc: denied { add_name } for pid=7136 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.839677][ T29] audit: type=1400 audit(3508522445.459:61543): avc: denied { create } for pid=7136 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.862337][ T29] audit: type=1400 audit(3508522445.459:61544): avc: denied { write } for pid=7136 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.888808][ T29] audit: type=1400 audit(3508522445.459:61545): avc: denied { append } for pid=7136 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.913249][ T29] audit: type=1400 audit(3508522445.489:61546): avc: denied { remove_name } for pid=7149 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.936885][ T29] audit: type=1400 audit(3508522445.489:61547): avc: denied { unlink } for pid=7149 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.980384][ T7133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.002161][ T29] audit: type=1326 audit(3508522445.649:61548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 92.040507][ T29] audit: type=1326 audit(3508522445.678:61549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 92.079580][ T378] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.098429][ T7171] loop1: detected capacity change from 0 to 512 [ 92.105556][ T7172] loop4: detected capacity change from 0 to 2048 [ 92.126368][ T377] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.138106][ T7176] loop2: detected capacity change from 0 to 512 [ 92.147029][ T377] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175248][ T5997] loop4: p1 < > p4 [ 92.180046][ T5997] loop4: p4 size 8388608 extends beyond EOD, truncated [ 92.194121][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216535][ T7172] loop4: p1 < > p4 [ 92.221223][ T7172] loop4: p4 size 8388608 extends beyond EOD, truncated [ 92.258441][ T7189] loop2: detected capacity change from 0 to 2048 [ 92.291925][ T5719] loop2: p1 < > p4 [ 92.301784][ T5719] loop2: p4 size 8388608 extends beyond EOD, truncated [ 92.363663][ T7189] loop2: p1 < > p4 [ 92.387111][ T7189] loop2: p4 size 8388608 extends beyond EOD, truncated [ 92.423265][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.430895][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.438351][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.445861][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.453262][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.460678][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.463063][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7202 comm=syz.3.1456 [ 92.468193][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.486295][ T7202] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 92.488321][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.503342][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.510741][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.518141][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.525514][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.532944][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.540356][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.547764][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.555145][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.562563][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.570028][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.577442][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.584860][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.592338][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.592988][ T7207] loop4: detected capacity change from 0 to 2048 [ 92.599806][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.613445][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.620833][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.628388][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.635759][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.643176][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.650583][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.658052][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.665425][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.672881][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.680368][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.687762][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.695129][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.702521][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.709979][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.717360][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.724772][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.732172][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.739576][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.746961][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.754356][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.761748][ T36] hid-generic 0003:0800:0000.0009: unknown main item tag 0x0 [ 92.772551][ T36] hid-generic 0003:0800:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 92.796243][ T7209] fido_id[7209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.839163][ T5719] loop4: p1 < > p4 [ 92.852845][ T5719] loop4: p4 size 8388608 extends beyond EOD, truncated [ 92.873030][ T7220] loop2: detected capacity change from 0 to 512 [ 92.900947][ T7207] loop4: p1 < > p4 [ 92.906131][ T7207] loop4: p4 size 8388608 extends beyond EOD, truncated [ 92.964681][ T2990] loop4: p1 < > p4 [ 93.019009][ T2990] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.101210][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.117662][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.152762][ T7237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7237 comm=syz.3.1469 [ 93.191407][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.206010][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.240084][ T7237] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 93.247853][ T7237] __nla_validate_parse: 2 callbacks suppressed [ 93.247866][ T7237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1469'. [ 93.278740][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.301384][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.468515][ T7264] loop4: detected capacity change from 0 to 2048 [ 93.514530][ T5703] loop4: p1 < > p4 [ 93.540155][ T5703] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.561417][ T7264] loop4: p1 < > p4 [ 93.567039][ T7264] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.567834][ T7274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7274 comm=syz.2.1482 [ 93.598353][ T2990] loop4: p1 < > p4 [ 93.603716][ T2990] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.628756][ T7274] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 93.636589][ T7274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1482'. [ 93.696308][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.707419][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.752337][ T5703] udevd[5703]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.771676][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.839267][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 93.912060][ T7301] loop0: detected capacity change from 0 to 512 [ 93.928837][ T7301] EXT4-fs: Ignoring removed bh option [ 93.955723][ T7301] EXT4-fs: Mount option(s) incompatible with ext3 [ 94.041935][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 94.069238][ T7313] loop2: detected capacity change from 0 to 512 [ 94.084566][ T7313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.098345][ T7313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 94.123356][ T7313] EXT4-fs (loop2): 1 truncate cleaned up [ 94.383317][ T7333] loop2: detected capacity change from 0 to 512 [ 94.464783][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1507'. [ 94.516501][ T7346] tap0: tun_chr_ioctl cmd 1074025675 [ 94.521917][ T7346] tap0: persist enabled [ 94.535224][ T7342] loop1: detected capacity change from 0 to 512 [ 94.575184][ T7342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.602095][ T7342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 94.633435][ T7342] EXT4-fs (loop1): 1 truncate cleaned up [ 94.724995][ T7359] loop4: detected capacity change from 0 to 2048 [ 94.792031][ T5719] loop4: p1 < > p4 [ 94.796437][ T5719] loop4: p4 size 8388608 extends beyond EOD, truncated [ 94.824821][ T7359] loop4: p1 < > p4 [ 94.832275][ T7359] loop4: p4 size 8388608 extends beyond EOD, truncated [ 95.122007][ T7387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7387 comm=syz.0.1526 [ 95.205983][ T7387] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 95.213794][ T7387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1526'. [ 95.232306][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1531'. [ 95.248914][ T7398] loop3: detected capacity change from 0 to 512 [ 95.257937][ T7398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.285241][ T7402] loop4: detected capacity change from 0 to 512 [ 95.296509][ T7398] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.313758][ T7398] EXT4-fs (loop3): 1 truncate cleaned up [ 95.357467][ T7409] netlink: '+}[@': attribute type 3 has an invalid length. [ 95.400145][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.409534][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.613969][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1546'. [ 95.631293][ T7442] loop2: detected capacity change from 0 to 512 [ 95.635337][ T7415] bond3: entered promiscuous mode [ 95.642599][ T7415] bond3: entered allmulticast mode [ 95.648478][ T7442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.665732][ T7442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.677446][ T7448] netlink: '+}[@': attribute type 3 has an invalid length. [ 95.680558][ T7415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.701708][ T7415] bond3 (unregistering): Released all slaves [ 95.707893][ T7442] EXT4-fs (loop2): 1 truncate cleaned up [ 96.113943][ T7477] netlink: '+}[@': attribute type 3 has an invalid length. [ 96.188805][ T7479] loop1: detected capacity change from 0 to 512 [ 96.284017][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.291440][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.298911][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.306306][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.313831][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.321200][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.328672][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.336080][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.343472][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.350861][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.358241][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.365672][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.373077][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.380457][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.387892][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.395292][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.402666][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.410125][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.417659][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.425136][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.432583][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.440050][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.447440][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.454929][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.462360][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.469805][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.477199][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.484673][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.492062][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.499451][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.506824][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.514272][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.521641][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.529047][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.536424][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.543808][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.551189][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.558584][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.565958][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.573316][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.580711][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.588197][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.595736][ T10] hid-generic 0003:0800:0000.000A: unknown main item tag 0x0 [ 96.773804][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 96.773820][ T29] audit: type=1326 audit(3508522450.321:61891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 96.803567][ T29] audit: type=1326 audit(3508522450.321:61892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 96.827081][ T29] audit: type=1326 audit(3508522450.321:61893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 96.850561][ T29] audit: type=1326 audit(3508522450.321:61894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 96.874061][ T29] audit: type=1326 audit(3508522450.321:61895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 97.269653][ T7492] loop2: detected capacity change from 0 to 512 [ 97.278149][ T7479] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 97.286182][ T7479] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 97.295814][ T3309] EXT4-fs unmount: 57 callbacks suppressed [ 97.295826][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.312545][ T7479] EXT4-fs (loop1): 1 truncate cleaned up [ 97.319025][ T7479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.546124][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.603650][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.622948][ T10] hid-generic 0003:0800:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 97.657968][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.771882][ T29] audit: type=1326 audit(3508522451.409:61896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c89dbeb69 code=0x7ffc0000 [ 97.795553][ T29] audit: type=1326 audit(3508522451.409:61897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c89dbeb69 code=0x7ffc0000 [ 97.872935][ T29] audit: type=1326 audit(3508522451.409:61898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8c89dbeb69 code=0x7ffc0000 [ 97.896562][ T29] audit: type=1326 audit(3508522451.409:61899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c89dbeb69 code=0x7ffc0000 [ 97.920067][ T29] audit: type=1326 audit(3508522451.409:61900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c89dbeb69 code=0x7ffc0000 [ 98.039469][ T7525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7525 comm=syz.2.1569 [ 98.118341][ T7525] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 98.126137][ T7525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1569'. [ 98.262436][ T7547] loop3: detected capacity change from 0 to 512 [ 98.299514][ T7547] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.307621][ T7547] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 98.317955][ T7547] EXT4-fs (loop3): 1 truncate cleaned up [ 98.324330][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.707714][ T7560] veth0_vlan: entered allmulticast mode [ 98.768057][ T7556] loop2: detected capacity change from 0 to 2048 [ 98.813662][ T7564] loop1: detected capacity change from 0 to 512 [ 98.843350][ T7564] EXT4-fs: Ignoring removed i_version option [ 98.882158][ T7564] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 98.931531][ T7556] loop2: p1 < > p4 [ 98.969898][ T7556] loop2: p4 size 8388608 extends beyond EOD, truncated [ 99.156342][ T2990] loop2: p1 < > p4 [ 99.173404][ T2990] loop2: p4 size 8388608 extends beyond EOD, truncated [ 99.184004][ T7559] veth0_vlan: left allmulticast mode [ 99.209650][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.217058][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.224484][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.231904][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.239335][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.246699][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.254170][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.261567][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.268994][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.276361][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.283817][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.291281][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.298716][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.306153][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.313687][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.321068][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.328460][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.335828][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.343287][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.350693][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.358124][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.365613][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.372983][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.380356][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.387718][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.395113][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.402500][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.409881][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.417301][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.424685][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.432157][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.439533][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.446893][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.454292][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.461681][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.469066][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.476505][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.483895][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.491334][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.498822][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.506223][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.513613][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.521138][ T10] hid-generic 0003:0800:0000.000B: unknown main item tag 0x0 [ 99.591715][ T2990] loop2: p1 < > p4 [ 99.605212][ T7569] loop4: detected capacity change from 0 to 512 [ 99.618379][ T7569] EXT4-fs: Ignoring removed bh option [ 99.624794][ T2990] loop2: p4 size 8388608 extends beyond EOD, truncated [ 99.633037][ T7569] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.715353][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.730110][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.745274][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.755045][ T10] hid-generic 0003:0800:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 99.770478][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.775700][ T5703] udevd[5703]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.842677][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.842721][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.955442][ T7601] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.039142][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 100.054232][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.068898][ T7601] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 100.082828][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.162306][ T7619] FAULT_INJECTION: forcing a failure. [ 100.162306][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 100.175092][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.2.1610 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 100.175198][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.175211][ T7619] Call Trace: [ 100.175216][ T7619] [ 100.175224][ T7619] __dump_stack+0x1d/0x30 [ 100.175244][ T7619] dump_stack_lvl+0xe8/0x140 [ 100.175262][ T7619] dump_stack+0x15/0x1b [ 100.175280][ T7619] should_fail_ex+0x265/0x280 [ 100.175352][ T7619] should_failslab+0x8c/0xb0 [ 100.175376][ T7619] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 100.175484][ T7619] ? sidtab_sid2str_get+0xa0/0x130 [ 100.175516][ T7619] kmemdup_noprof+0x2b/0x70 [ 100.175541][ T7619] sidtab_sid2str_get+0xa0/0x130 [ 100.175609][ T7619] security_sid_to_context_core+0x1eb/0x2e0 [ 100.175641][ T7619] security_sid_to_context+0x27/0x40 [ 100.175721][ T7619] selinux_lsmprop_to_secctx+0x67/0xf0 [ 100.175772][ T7619] security_lsmprop_to_secctx+0x43/0x80 [ 100.175847][ T7619] audit_log_task_context+0x77/0x190 [ 100.175883][ T7619] audit_log_task+0xf4/0x250 [ 100.175928][ T7619] audit_seccomp+0x61/0x100 [ 100.175997][ T7619] ? __seccomp_filter+0x68c/0x10d0 [ 100.176021][ T7619] __seccomp_filter+0x69d/0x10d0 [ 100.176054][ T7619] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.176138][ T7619] ? vfs_write+0x75e/0x8e0 [ 100.176164][ T7619] __secure_computing+0x82/0x150 [ 100.176282][ T7619] syscall_trace_enter+0xcf/0x1e0 [ 100.176309][ T7619] do_syscall_64+0xac/0x200 [ 100.176348][ T7619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.176372][ T7619] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.176400][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.176456][ T7619] RIP: 0033:0x7f38e1f7eb69 [ 100.176472][ T7619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.176536][ T7619] RSP: 002b:00007f38e05e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 100.176553][ T7619] RAX: ffffffffffffffda RBX: 00007f38e21a5fa0 RCX: 00007f38e1f7eb69 [ 100.176626][ T7619] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 100.176713][ T7619] RBP: 00007f38e05e7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.176724][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.176734][ T7619] R13: 0000000000000000 R14: 00007f38e21a5fa0 R15: 00007ffeb21153d8 [ 100.176749][ T7619] [ 100.462109][ T7629] syz.0.1616 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.496068][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 100.520546][ T7631] loop4: detected capacity change from 0 to 512 [ 100.527394][ T7631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.551613][ T7631] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.566847][ T7631] EXT4-fs (loop4): 1 truncate cleaned up [ 100.573486][ T7631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.611992][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.652108][ T7650] FAULT_INJECTION: forcing a failure. [ 100.652108][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 100.664842][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.4.1624 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 100.664873][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.664954][ T7650] Call Trace: [ 100.664960][ T7650] [ 100.664967][ T7650] __dump_stack+0x1d/0x30 [ 100.664988][ T7650] dump_stack_lvl+0xe8/0x140 [ 100.665008][ T7650] dump_stack+0x15/0x1b [ 100.665024][ T7650] should_fail_ex+0x265/0x280 [ 100.665113][ T7650] should_failslab+0x8c/0xb0 [ 100.665239][ T7650] __kmalloc_cache_node_noprof+0x54/0x320 [ 100.665272][ T7650] ? __get_vm_area_node+0x106/0x1d0 [ 100.665308][ T7650] __get_vm_area_node+0x106/0x1d0 [ 100.665365][ T7650] __vmalloc_node_range_noprof+0x273/0xe00 [ 100.665396][ T7650] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.665444][ T7650] ? avc_has_perm_noaudit+0x1b1/0x200 [ 100.665464][ T7650] ? cred_has_capability+0x210/0x280 [ 100.665493][ T7650] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.665559][ T7650] __vmalloc_noprof+0x83/0xc0 [ 100.665579][ T7650] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.665610][ T7650] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.665640][ T7650] ? bpf_prog_alloc+0x2a/0x150 [ 100.665714][ T7650] bpf_prog_alloc+0x3c/0x150 [ 100.665811][ T7650] bpf_prog_load+0x514/0x1070 [ 100.665890][ T7650] ? security_bpf+0x2b/0x90 [ 100.665921][ T7650] __sys_bpf+0x462/0x7b0 [ 100.665952][ T7650] __x64_sys_bpf+0x41/0x50 [ 100.666046][ T7650] x64_sys_call+0x2aea/0x2ff0 [ 100.666095][ T7650] do_syscall_64+0xd2/0x200 [ 100.666127][ T7650] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.666218][ T7650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.666319][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.666368][ T7650] RIP: 0033:0x7f43781deb69 [ 100.666383][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.666403][ T7650] RSP: 002b:00007f4376847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.666422][ T7650] RAX: ffffffffffffffda RBX: 00007f4378405fa0 RCX: 00007f43781deb69 [ 100.666435][ T7650] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 100.666447][ T7650] RBP: 00007f4376847090 R08: 0000000000000000 R09: 0000000000000000 [ 100.666460][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.666491][ T7650] R13: 0000000000000000 R14: 00007f4378405fa0 R15: 00007ffeb19f55c8 [ 100.666507][ T7650] [ 100.666514][ T7650] syz.4.1624: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 100.895411][ T7664] delete_channel: no stack [ 100.896263][ T7650] ,cpuset=/,mems_allowed=0 [ 100.930104][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.4.1624 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 100.930137][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.930151][ T7650] Call Trace: [ 100.930157][ T7650] [ 100.930165][ T7650] __dump_stack+0x1d/0x30 [ 100.930223][ T7650] dump_stack_lvl+0xe8/0x140 [ 100.930245][ T7650] dump_stack+0x15/0x1b [ 100.930264][ T7650] warn_alloc+0x12b/0x1a0 [ 100.930289][ T7650] __vmalloc_node_range_noprof+0x297/0xe00 [ 100.930335][ T7650] ? avc_has_perm_noaudit+0x1b1/0x200 [ 100.930360][ T7650] ? cred_has_capability+0x210/0x280 [ 100.930390][ T7650] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.930421][ T7650] __vmalloc_noprof+0x83/0xc0 [ 100.930457][ T7650] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.930488][ T7650] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 100.930517][ T7650] ? bpf_prog_alloc+0x2a/0x150 [ 100.930541][ T7650] bpf_prog_alloc+0x3c/0x150 [ 100.930636][ T7650] bpf_prog_load+0x514/0x1070 [ 100.930747][ T7650] ? security_bpf+0x2b/0x90 [ 100.930811][ T7650] __sys_bpf+0x462/0x7b0 [ 100.930899][ T7650] __x64_sys_bpf+0x41/0x50 [ 100.930987][ T7650] x64_sys_call+0x2aea/0x2ff0 [ 100.931029][ T7650] do_syscall_64+0xd2/0x200 [ 100.931132][ T7650] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.931157][ T7650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.931217][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.931239][ T7650] RIP: 0033:0x7f43781deb69 [ 100.931255][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.931344][ T7650] RSP: 002b:00007f4376847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.931365][ T7650] RAX: ffffffffffffffda RBX: 00007f4378405fa0 RCX: 00007f43781deb69 [ 100.931377][ T7650] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 100.931389][ T7650] RBP: 00007f4376847090 R08: 0000000000000000 R09: 0000000000000000 [ 100.931401][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.931412][ T7650] R13: 0000000000000000 R14: 00007f4378405fa0 R15: 00007ffeb19f55c8 [ 100.931428][ T7650] [ 100.931536][ T7650] Mem-Info: [ 101.148117][ T7650] active_anon:10570 inactive_anon:0 isolated_anon:0 [ 101.148117][ T7650] active_file:18928 inactive_file:2413 isolated_file:0 [ 101.148117][ T7650] unevictable:0 dirty:268 writeback:0 [ 101.148117][ T7650] slab_reclaimable:3258 slab_unreclaimable:17320 [ 101.148117][ T7650] mapped:31056 shmem:3025 pagetables:1816 [ 101.148117][ T7650] sec_pagetables:0 bounce:0 [ 101.148117][ T7650] kernel_misc_reclaimable:0 [ 101.148117][ T7650] free:1777952 free_pcp:48114 free_cma:0 [ 101.193215][ T7650] Node 0 active_anon:42280kB inactive_anon:0kB active_file:75712kB inactive_file:9652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124224kB dirty:1072kB writeback:0kB shmem:12100kB writeback_tmp:0kB kernel_stack:3424kB pagetables:7264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.222104][ T7650] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.250632][ T7650] lowmem_reserve[]: 0 2883 7862 7862 [ 101.255943][ T7650] Node 0 DMA32 free:2949348kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952980kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 101.286211][ T7650] lowmem_reserve[]: 0 0 4978 4978 [ 101.291255][ T7650] Node 0 Normal free:4146832kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42280kB inactive_anon:0kB active_file:75712kB inactive_file:9652kB unevictable:0kB writepending:1072kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:188748kB local_pcp:133696kB free_cma:0kB [ 101.323350][ T7650] lowmem_reserve[]: 0 0 0 0 [ 101.327982][ T7650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.340554][ T7650] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949348kB [ 101.356628][ T7650] Node 0 Normal: 1038*4kB (ME) 177*8kB (UM) 155*16kB (UME) 17*32kB (UME) 37*64kB (UME) 11*128kB (ME) 74*256kB (ME) 26*512kB (UM) 6*1024kB (M) 20*2048kB (UME) 990*4096kB (UM) = 4146768kB [ 101.375252][ T7650] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 101.384552][ T7650] 24311 total pagecache pages [ 101.389202][ T7650] 0 pages in swap cache [ 101.393357][ T7650] Free swap = 124996kB [ 101.397547][ T7650] Total swap = 124996kB [ 101.401710][ T7650] 2097051 pages RAM [ 101.405507][ T7650] 0 pages HighMem/MovableOnly [ 101.410188][ T7650] 80406 pages reserved [ 101.445380][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1634'. [ 101.558548][ T7694] loop4: detected capacity change from 0 to 512 [ 101.583894][ T7694] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.626862][ T7694] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.654793][ T7694] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1640: corrupted inode contents [ 101.701328][ T7694] EXT4-fs (loop4): Remounting filesystem read-only [ 101.710634][ T7694] EXT4-fs (loop4): 1 truncate cleaned up [ 101.716474][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.727027][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.772342][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.782603][ T31] __quota_error: 394 callbacks suppressed [ 101.782614][ T31] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 101.798820][ T31] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.811055][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.846576][ T7694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.875692][ T29] audit: type=1326 audit(3508522455.504:62290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43781dd4d0 code=0x7ffc0000 [ 101.956056][ T29] audit: type=1326 audit(3508522455.504:62291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43781de76b code=0x7ffc0000 [ 101.979523][ T29] audit: type=1326 audit(3508522455.504:62292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43781dd7ca code=0x7ffc0000 [ 102.002982][ T29] audit: type=1326 audit(3508522455.504:62293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 102.026509][ T29] audit: type=1326 audit(3508522455.504:62294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 102.050185][ T29] audit: type=1326 audit(3508522455.544:62295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 102.073680][ T29] audit: type=1326 audit(3508522455.544:62296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 102.097375][ T29] audit: type=1326 audit(3508522455.544:62297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 102.189250][ T7713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7713 comm=syz.3.1647 [ 102.213327][ T7713] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 102.221114][ T7713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1647'. [ 102.256040][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 102.400548][ T7730] block device autoloading is deprecated and will be removed. [ 102.425429][ T7734] FAULT_INJECTION: forcing a failure. [ 102.425429][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.438540][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.4.1650 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 102.438633][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.438646][ T7734] Call Trace: [ 102.438653][ T7734] [ 102.438661][ T7734] __dump_stack+0x1d/0x30 [ 102.438684][ T7734] dump_stack_lvl+0xe8/0x140 [ 102.438705][ T7734] dump_stack+0x15/0x1b [ 102.438720][ T7734] should_fail_ex+0x265/0x280 [ 102.438866][ T7734] should_fail+0xb/0x20 [ 102.438894][ T7734] should_fail_usercopy+0x1a/0x20 [ 102.438922][ T7734] _copy_from_user+0x1c/0xb0 [ 102.439019][ T7734] ___sys_sendmsg+0xc1/0x1d0 [ 102.439061][ T7734] __x64_sys_sendmsg+0xd4/0x160 [ 102.439108][ T7734] x64_sys_call+0x191e/0x2ff0 [ 102.439197][ T7734] do_syscall_64+0xd2/0x200 [ 102.439289][ T7734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.439312][ T7734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.439408][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.439500][ T7734] RIP: 0033:0x7f43781deb69 [ 102.439518][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.439538][ T7734] RSP: 002b:00007f4376805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.439588][ T7734] RAX: ffffffffffffffda RBX: 00007f4378406160 RCX: 00007f43781deb69 [ 102.439600][ T7734] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 102.439612][ T7734] RBP: 00007f4376805090 R08: 0000000000000000 R09: 0000000000000000 [ 102.439623][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.439634][ T7734] R13: 0000000000000000 R14: 00007f4378406160 R15: 00007ffeb19f55c8 [ 102.439653][ T7734] [ 103.151129][ T7756] FAULT_INJECTION: forcing a failure. [ 103.151129][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 103.163808][ T7756] CPU: 1 UID: 0 PID: 7756 Comm: syz.3.1663 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 103.163837][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.163849][ T7756] Call Trace: [ 103.163854][ T7756] [ 103.163860][ T7756] __dump_stack+0x1d/0x30 [ 103.163936][ T7756] dump_stack_lvl+0xe8/0x140 [ 103.163956][ T7756] dump_stack+0x15/0x1b [ 103.163974][ T7756] should_fail_ex+0x265/0x280 [ 103.164005][ T7756] should_failslab+0x8c/0xb0 [ 103.164035][ T7756] __kmalloc_node_noprof+0xa9/0x410 [ 103.164139][ T7756] ? qdisc_alloc+0x65/0x440 [ 103.164164][ T7756] qdisc_alloc+0x65/0x440 [ 103.164250][ T7756] ? nla_strcmp+0xc3/0xe0 [ 103.164279][ T7756] qdisc_create+0xf5/0x9e0 [ 103.164309][ T7756] tc_modify_qdisc+0xf2e/0x1420 [ 103.164343][ T7756] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 103.164404][ T7756] rtnetlink_rcv_msg+0x657/0x6d0 [ 103.164497][ T7756] netlink_rcv_skb+0x120/0x220 [ 103.164584][ T7756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.164620][ T7756] rtnetlink_rcv+0x1c/0x30 [ 103.164646][ T7756] netlink_unicast+0x5c0/0x690 [ 103.164666][ T7756] netlink_sendmsg+0x58b/0x6b0 [ 103.164733][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.164760][ T7756] __sock_sendmsg+0x145/0x180 [ 103.164792][ T7756] ____sys_sendmsg+0x31e/0x4e0 [ 103.164879][ T7756] ___sys_sendmsg+0x17b/0x1d0 [ 103.164919][ T7756] __x64_sys_sendmsg+0xd4/0x160 [ 103.164947][ T7756] x64_sys_call+0x191e/0x2ff0 [ 103.164970][ T7756] do_syscall_64+0xd2/0x200 [ 103.165130][ T7756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.165156][ T7756] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.165185][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.165265][ T7756] RIP: 0033:0x7f8c89dbeb69 [ 103.165279][ T7756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.165355][ T7756] RSP: 002b:00007f8c8841f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.165376][ T7756] RAX: ffffffffffffffda RBX: 00007f8c89fe5fa0 RCX: 00007f8c89dbeb69 [ 103.165390][ T7756] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 103.165404][ T7756] RBP: 00007f8c8841f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.165458][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.165472][ T7756] R13: 0000000000000000 R14: 00007f8c89fe5fa0 R15: 00007ffdea9c1c08 [ 103.165492][ T7756] [ 103.416672][ T7750] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 103.475471][ T7768] loop2: detected capacity change from 0 to 2048 [ 103.535194][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 103.549783][ T5719] loop2: p1 < > p4 [ 103.566264][ T5719] loop2: p4 size 8388608 extends beyond EOD, truncated [ 103.577047][ T7781] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 103.583563][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.591044][ T7781] vhci_hcd vhci_hcd.0: Device attached [ 103.600757][ T7768] loop2: p1 < > p4 [ 103.606401][ T7768] loop2: p4 size 8388608 extends beyond EOD, truncated [ 103.689313][ T7792] loop3: detected capacity change from 0 to 512 [ 103.714954][ T7785] vhci_hcd: connection closed [ 103.722260][ T7792] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1677: iget: bad extended attribute block 1 [ 103.725643][ T378] vhci_hcd: stop threads [ 103.743881][ T378] vhci_hcd: release socket [ 103.748408][ T378] vhci_hcd: disconnect device [ 103.751760][ T7792] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1677: couldn't read orphan inode 15 (err -117) [ 103.765734][ T7792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.777870][ T3388] vhci_hcd: vhci_device speed not set [ 103.814045][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 103.868814][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.953446][ T7824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7824 comm=syz.2.1689 [ 104.054613][ T7828] loop4: detected capacity change from 0 to 512 [ 104.124665][ T7824] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 104.132458][ T7824] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1689'. [ 104.178431][ T7828] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 104.186555][ T7828] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 104.196180][ T7828] EXT4-fs (loop4): 1 truncate cleaned up [ 104.202524][ T7828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.407150][ T7844] loop2: detected capacity change from 0 to 512 [ 104.488843][ T7844] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1696: iget: bad extended attribute block 1 [ 104.523330][ T7849] loop1: detected capacity change from 0 to 512 [ 104.539354][ T7844] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1696: couldn't read orphan inode 15 (err -117) [ 104.555838][ T7849] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.618090][ T7849] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.638124][ T7844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.654628][ T7849] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.1697: corrupted inode contents [ 104.667012][ T7849] EXT4-fs (loop1): Remounting filesystem read-only [ 104.674986][ T7849] EXT4-fs (loop1): 1 truncate cleaned up [ 104.680727][ T7837] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 104.691374][ T7837] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 104.704246][ T7837] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 104.716367][ T7849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.775334][ T7849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.850925][ T7861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1700'. [ 104.880833][ T7861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.895521][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.916283][ T7861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.945491][ T7864] SELinux: policydb version 555861952 does not match my version range 15-35 [ 104.967683][ T7864] SELinux: failed to load policy [ 104.979313][ T7861] bond0 (unregistering): Released all slaves [ 105.160653][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'. [ 105.175134][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1706'. [ 105.186546][ T7873] loop3: detected capacity change from 0 to 512 [ 105.205196][ T7873] /dev/loop3: Can't open blockdev [ 105.459743][ T7884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7884 comm=syz.0.1711 [ 105.490294][ T7884] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 105.498107][ T7884] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1711'. [ 105.930525][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.961946][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'. [ 105.975949][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1723'. [ 105.990798][ T7910] loop2: detected capacity change from 0 to 512 [ 106.024838][ T7914] tipc: Started in network mode [ 106.029732][ T7914] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 106.036914][ T7914] tipc: Enabled bearer , priority 10 [ 106.094581][ T7910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.215652][ T7910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.347533][ T7910] EXT4-fs (loop2): 1 truncate cleaned up [ 106.430609][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.682586][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.767719][ T7951] loop3: detected capacity change from 0 to 512 [ 106.831885][ T7951] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 106.839947][ T7951] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 106.859355][ T7951] EXT4-fs (loop3): 1 truncate cleaned up [ 106.865606][ T7951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.989347][ T7955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7955 comm=syz.0.1735 [ 107.138630][ T7955] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 107.146468][ T7955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1735'. [ 107.286472][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 107.286485][ T29] audit: type=1326 audit(3508522460.920:62579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.408520][ T7966] loop1: detected capacity change from 0 to 512 [ 107.559951][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.593259][ T29] audit: type=1326 audit(3508522460.950:62580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.616802][ T29] audit: type=1326 audit(3508522460.950:62581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.640278][ T29] audit: type=1326 audit(3508522460.950:62582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.662625][ T3409] tipc: Node number set to 10005162 [ 107.663820][ T29] audit: type=1326 audit(3508522460.950:62583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.692462][ T29] audit: type=1326 audit(3508522460.950:62584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.715971][ T29] audit: type=1326 audit(3508522460.950:62585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.739495][ T29] audit: type=1326 audit(3508522460.950:62586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.763047][ T29] audit: type=1326 audit(3508522460.950:62587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.786536][ T29] audit: type=1326 audit(3508522460.950:62588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 107.857670][ T7966] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.912406][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 107.942006][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 107.976024][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1746'. [ 108.008377][ T7984] loop2: detected capacity change from 0 to 512 [ 108.041963][ T7984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.145257][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.161654][ T7984] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.204317][ T7984] EXT4-fs (loop2): 1 truncate cleaned up [ 108.217250][ T7984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.341102][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.385741][ T7996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7996 comm=syz.4.1749 [ 108.429329][ T7996] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 108.437148][ T7996] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1749'. [ 108.485321][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.565263][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.603395][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.656423][ T8026] loop3: detected capacity change from 0 to 512 [ 108.680091][ T8026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.723114][ T8033] netlink: '+}[@': attribute type 3 has an invalid length. [ 108.772339][ T8040] loop1: detected capacity change from 0 to 512 [ 108.819199][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.845898][ T8011] bond1: entered promiscuous mode [ 108.851019][ T8011] bond1: entered allmulticast mode [ 108.884620][ T8011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.913759][ T8011] bond1 (unregistering): Released all slaves [ 109.114941][ C1] hrtimer: interrupt took 48278 ns [ 109.565621][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.588044][ T8125] loop4: detected capacity change from 0 to 512 [ 109.669236][ T8125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.721756][ T8125] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.777714][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.806995][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.970367][ T8142] loop1: detected capacity change from 0 to 512 [ 109.988462][ T8142] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1785: iget: bad extended attribute block 1 [ 110.021342][ T8142] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1785: couldn't read orphan inode 15 (err -117) [ 110.045745][ T8142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.053841][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.065168][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.072621][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.080024][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.087411][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.094790][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.102276][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.109727][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.117177][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.124554][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.131946][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.139405][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.146821][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.154217][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.161614][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.169021][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.176397][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.183795][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.191184][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.198615][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.205984][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.213413][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.220853][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.228249][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.235634][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.243026][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.250420][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.257859][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.265302][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.272760][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.280165][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.287590][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.295011][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.302404][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.309815][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.317204][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.324578][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.331979][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.339404][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.346785][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.354182][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.361586][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.369061][ T3388] hid-generic 0003:0800:0000.000C: unknown main item tag 0x0 [ 110.378375][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.383803][ T3388] hid-generic 0003:0800:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 110.410530][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.455445][ T8174] loop3: detected capacity change from 0 to 2048 [ 110.481456][ T8177] __nla_validate_parse: 1 callbacks suppressed [ 110.481468][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1794'. [ 110.494830][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 110.512241][ T8177] loop2: detected capacity change from 0 to 512 [ 110.513763][ T5703] loop3: p1 < > p4 [ 110.536594][ T5703] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.551526][ T8174] loop3: p1 < > p4 [ 110.553318][ T8177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.556071][ T8174] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.568349][ T8177] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 110.589163][ T2990] loop3: p1 < > p4 [ 110.593656][ T2990] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.602330][ T8177] EXT4-fs (loop2): 1 truncate cleaned up [ 110.612439][ T8177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.629610][ T8188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8188 comm=syz.0.1799 [ 110.679806][ T8188] netlink: 'syz.0.1799': attribute type 1 has an invalid length. [ 110.687774][ T8188] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1799'. [ 110.719510][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.724102][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.734233][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.740765][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1799'. [ 110.768798][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.776349][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.783795][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.791318][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.798713][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.806234][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.813658][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.821142][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.828576][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.836005][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.843426][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.850900][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.858421][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.865791][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.873202][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.880782][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.884415][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.888188][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.903830][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.905473][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.922575][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.930114][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.937551][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.944924][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.952635][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.957904][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.960036][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.977096][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 110.977708][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.984631][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.001658][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.009065][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.016490][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.023895][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.031288][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.038682][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.046066][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.053581][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.061010][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.068431][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.075944][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.083419][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.090933][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.098338][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.105865][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.113352][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.120773][ T36] hid-generic 0003:0800:0000.000D: unknown main item tag 0x0 [ 111.137792][ T36] hid-generic 0003:0800:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 111.173794][ T8221] fido_id[8221]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.208855][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1813'. [ 111.238246][ T8230] loop3: detected capacity change from 0 to 2048 [ 111.296385][ T5719] loop3: p1 < > p4 [ 111.302620][ T5719] loop3: p4 size 8388608 extends beyond EOD, truncated [ 111.327782][ T8238] loop1: detected capacity change from 0 to 512 [ 111.355911][ T8230] loop3: p1 < > p4 [ 111.361917][ T8230] loop3: p4 size 8388608 extends beyond EOD, truncated [ 111.369530][ T8238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.394972][ T8241] loop4: detected capacity change from 0 to 512 [ 111.443548][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 111.454050][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.457652][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.487913][ T8241] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.627172][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.654365][ T8264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8264 comm=syz.4.1820 [ 111.673625][ T8264] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 111.681476][ T8264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1820'. [ 111.700517][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 111.745660][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.753123][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.760634][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.768019][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.775397][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.782794][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.790208][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.797615][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.805020][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.812479][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.819911][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.827285][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.834736][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.842221][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.849679][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.857050][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.864459][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.871999][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.879441][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.886819][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.894222][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.901676][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.909134][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.916515][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.923953][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.931404][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.938794][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.946229][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.953655][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.961042][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.968430][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.975867][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.983278][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.990671][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 111.998046][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.005478][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.012872][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.020270][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.027703][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.035202][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.042609][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.050013][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.057451][ T3388] hid-generic 0003:0800:0000.000E: unknown main item tag 0x0 [ 112.068247][ T8275] netlink: 'syz.0.1825': attribute type 4 has an invalid length. [ 112.117792][ T3388] hid-generic 0003:0800:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 112.164610][ T8281] fido_id[8281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.212927][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.619222][ T8308] loop1: detected capacity change from 0 to 512 [ 112.632404][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1834'. [ 112.676211][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1834'. [ 112.677501][ T8308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.698732][ T8308] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.740887][ T8316] loop2: detected capacity change from 0 to 512 [ 112.781403][ T8316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.809545][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.850077][ T8316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.875175][ T8316] EXT4-fs (loop2): 1 truncate cleaned up [ 112.881325][ T8316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.982241][ T8347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8347 comm=syz.1.1840 [ 113.025252][ T8347] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 113.033064][ T8347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1840'. [ 113.054359][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.087525][ T8354] loop2: detected capacity change from 0 to 1024 [ 113.113877][ T8360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8360 comm=syz.1.1844 [ 113.131965][ T8360] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 113.142349][ T8354] netlink: '+}[@': attribute type 4 has an invalid length. [ 113.292522][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 113.292564][ T29] audit: type=1326 audit(3508522466.916:62822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.338202][ T29] audit: type=1326 audit(3508522466.946:62823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43781dd4d0 code=0x7ffc0000 [ 113.361842][ T29] audit: type=1326 audit(3508522466.946:62824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.385390][ T29] audit: type=1326 audit(3508522466.946:62825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.408927][ T29] audit: type=1326 audit(3508522466.946:62826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.432471][ T29] audit: type=1326 audit(3508522466.946:62827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.456006][ T29] audit: type=1326 audit(3508522466.946:62828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.479485][ T29] audit: type=1326 audit(3508522466.946:62829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.502949][ T29] audit: type=1326 audit(3508522466.946:62830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.526449][ T29] audit: type=1326 audit(3508522466.946:62831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43781deb69 code=0x7ffc0000 [ 113.622513][ T8408] loop4: detected capacity change from 0 to 512 [ 113.635740][ T8402] loop3: detected capacity change from 0 to 512 [ 113.658682][ T8402] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1860: iget: bad extended attribute block 1 [ 113.672791][ T8408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.685643][ T8402] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1860: couldn't read orphan inode 15 (err -117) [ 113.690193][ T8408] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.708785][ T8402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.738018][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.758632][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.835572][ T8435] loop1: detected capacity change from 0 to 512 [ 113.868135][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.068023][ T8472] loop4: detected capacity change from 0 to 512 [ 114.111592][ T8472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.150040][ T8472] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.194091][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.206095][ T8490] loop2: detected capacity change from 0 to 512 [ 114.215426][ T8490] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1888: iget: bad extended attribute block 1 [ 114.228321][ T8490] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1888: couldn't read orphan inode 15 (err -117) [ 114.251725][ T8490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.303058][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.393268][ T8499] loop2: detected capacity change from 0 to 512 [ 114.412600][ T8499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.425671][ T8499] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.465876][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.741496][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.786372][ T8540] loop2: detected capacity change from 0 to 512 [ 114.812168][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.836723][ T8540] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.864465][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.895564][ T8550] loop3: detected capacity change from 0 to 512 [ 114.933514][ T8550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.953049][ T8550] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.027547][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.187568][ T8596] loop3: detected capacity change from 0 to 512 [ 115.196380][ T8595] loop4: detected capacity change from 0 to 512 [ 115.201960][ T8596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.259558][ T8595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.273579][ T8595] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.299460][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.309439][ T8596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.329998][ T8596] EXT4-fs (loop3): 1 truncate cleaned up [ 115.348716][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.395233][ T8611] loop2: detected capacity change from 0 to 512 [ 115.429132][ T8611] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.635494][ T8631] __nla_validate_parse: 5 callbacks suppressed [ 115.635508][ T8631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 115.654641][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 115.852996][ T8652] loop4: detected capacity change from 0 to 512 [ 115.875107][ T8652] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.988480][ T8669] loop4: detected capacity change from 0 to 512 [ 116.018060][ T8669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.041632][ T8669] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 116.342613][ T8720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8720 comm=syz.0.1963 [ 116.357849][ T8720] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 116.363380][ T8719] loop3: detected capacity change from 0 to 2048 [ 116.365678][ T8720] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1963'. [ 116.450903][ T5719] loop3: p1 < > p4 [ 116.455312][ T5719] loop3: p4 size 8388608 extends beyond EOD, truncated [ 116.463958][ T8719] loop3: p1 < > p4 [ 116.468400][ T8719] loop3: p4 size 8388608 extends beyond EOD, truncated [ 116.503956][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 116.515026][ T5719] udevd[5719]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 116.532933][ T8728] loop3: detected capacity change from 0 to 512 [ 116.551869][ T8728] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.122038][ T8766] loop4: detected capacity change from 0 to 512 [ 117.196248][ T8766] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.309656][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'. [ 117.318958][ T8774] loop2: detected capacity change from 0 to 1024 [ 117.340110][ T8774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.363416][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'. [ 117.384071][ T8781] loop4: detected capacity change from 0 to 512 [ 117.390838][ T8774] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1982: inode #2304: comm syz.2.1982: iget: illegal inode # [ 117.416927][ T8774] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1982: Bad quota inode: 2304, type: 2 [ 117.430633][ T8781] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.477011][ T8781] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 117.491924][ T8774] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 117.498292][ T8781] EXT4-fs (loop4): 1 truncate cleaned up [ 117.516405][ T8774] EXT4-fs (loop2): mount failed [ 117.612054][ T8809] FAULT_INJECTION: forcing a failure. [ 117.612054][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 117.624863][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.4.1998 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 117.624892][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.624904][ T8809] Call Trace: [ 117.624910][ T8809] [ 117.624917][ T8809] __dump_stack+0x1d/0x30 [ 117.625021][ T8809] dump_stack_lvl+0xe8/0x140 [ 117.625042][ T8809] dump_stack+0x15/0x1b [ 117.625135][ T8809] should_fail_ex+0x265/0x280 [ 117.625162][ T8809] should_failslab+0x8c/0xb0 [ 117.625190][ T8809] kmem_cache_alloc_node_noprof+0x57/0x320 [ 117.625251][ T8809] ? __alloc_skb+0x101/0x320 [ 117.625275][ T8809] __alloc_skb+0x101/0x320 [ 117.625352][ T8809] netlink_alloc_large_skb+0xba/0xf0 [ 117.625375][ T8809] netlink_sendmsg+0x3cf/0x6b0 [ 117.625402][ T8809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.625436][ T8809] __sock_sendmsg+0x145/0x180 [ 117.625469][ T8809] ____sys_sendmsg+0x31e/0x4e0 [ 117.625589][ T8809] ___sys_sendmsg+0x17b/0x1d0 [ 117.625623][ T8809] __x64_sys_sendmsg+0xd4/0x160 [ 117.625718][ T8809] x64_sys_call+0x191e/0x2ff0 [ 117.625805][ T8809] do_syscall_64+0xd2/0x200 [ 117.625835][ T8809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.625890][ T8809] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.625920][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.626023][ T8809] RIP: 0033:0x7f43781deb69 [ 117.626040][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.626060][ T8809] RSP: 002b:00007f4376847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.626081][ T8809] RAX: ffffffffffffffda RBX: 00007f4378405fa0 RCX: 00007f43781deb69 [ 117.626121][ T8809] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 117.626132][ T8809] RBP: 00007f4376847090 R08: 0000000000000000 R09: 0000000000000000 [ 117.626144][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.626156][ T8809] R13: 0000000000000000 R14: 00007f4378405fa0 R15: 00007ffeb19f55c8 [ 117.626175][ T8809] [ 117.951217][ T8815] loop3: detected capacity change from 0 to 512 [ 118.161709][ T8815] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 118.169861][ T8815] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 118.180059][ T8815] EXT4-fs (loop3): 1 truncate cleaned up [ 118.572611][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 118.641480][ T8829] loop1: detected capacity change from 0 to 512 [ 118.678170][ T8829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.724016][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.745803][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2010'. [ 118.766620][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2010'. [ 118.777718][ T8829] EXT4-fs (loop1): 1 truncate cleaned up [ 118.816377][ T8847] loop4: detected capacity change from 0 to 512 [ 118.844033][ T8847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.908573][ T8847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.928819][ T8847] EXT4-fs (loop4): 1 truncate cleaned up [ 118.963807][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 118.963820][ T29] audit: type=1326 audit(3508522472.584:62888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 119.047842][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.055550][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.063050][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.070454][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.077872][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.085272][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.092751][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.100214][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.107591][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.115203][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.122683][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.130051][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.137440][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.144855][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.152274][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.159636][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.167021][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.174418][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.181799][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.189176][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.196572][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.203959][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.211390][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.218751][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.226158][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.233610][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.240971][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.248393][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.255911][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.263299][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.270735][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.278117][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.285535][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.292914][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.300275][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.307683][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.315086][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.322475][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.329886][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.337267][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.344724][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.352168][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.359534][ T3388] hid-generic 0003:0800:0000.000F: unknown main item tag 0x0 [ 119.369081][ T29] audit: type=1326 audit(3508522472.614:62889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 119.392641][ T29] audit: type=1326 audit(3508522472.614:62890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ba59eb69 code=0x7ffc0000 [ 119.393102][ T3388] hid-generic 0003:0800:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 119.416315][ T29] audit: type=1326 audit(3508522472.654:62891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.448621][ T29] audit: type=1326 audit(3508522472.654:62892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.472228][ T29] audit: type=1326 audit(3508522472.664:62893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38e1f7d4d0 code=0x7ffc0000 [ 119.495876][ T29] audit: type=1326 audit(3508522472.664:62894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.521005][ T29] audit: type=1326 audit(3508522472.664:62895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.538128][ T8865] fido_id[8865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.544494][ T29] audit: type=1326 audit(3508522472.664:62896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.544521][ T29] audit: type=1326 audit(3508522472.664:62897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f38e1f7eb69 code=0x7ffc0000 [ 119.584463][ T8871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8871 comm=syz.0.2020 [ 119.625009][ T8871] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 119.632821][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2020'. [ 119.654136][ T8863] loop1: detected capacity change from 0 to 512 [ 119.678859][ T8881] program syz.4.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.691783][ T8881] loop4: detected capacity change from 0 to 256 [ 119.703953][ T8863] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.752407][ T8881] msdos: Unknown parameter 'no˛dots' [ 119.767567][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.791632][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.827034][ T8899] loop1: detected capacity change from 0 to 512 [ 119.870097][ T8899] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.897756][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'. [ 119.945702][ T8907] loop2: detected capacity change from 0 to 512 [ 119.970415][ T8907] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.215245][ T8971] loop4: detected capacity change from 0 to 512 [ 120.229632][ T8971] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2044: iget: bad extended attribute block 1 [ 120.265045][ T8971] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2044: couldn't read orphan inode 15 (err -117) [ 120.370057][ T8980] loop1: detected capacity change from 0 to 512 [ 120.409198][ T8984] loop4: detected capacity change from 0 to 512 [ 120.424158][ T8984] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.599821][ T9006] 9pnet_fd: Insufficient options for proto=fd [ 120.622336][ T8980] ================================================================== [ 120.630423][ T8980] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 120.638679][ T8980] [ 120.641000][ T8980] write to 0xffff888119cea008 of 4 bytes by task 8988 on cpu 1: [ 120.648624][ T8980] writeback_single_inode+0x14a/0x3e0 [ 120.654004][ T8980] sync_inode_metadata+0x5b/0x90 [ 120.658946][ T8980] generic_buffers_fsync_noflush+0xd9/0x120 [ 120.664846][ T8980] ext4_sync_file+0x1ab/0x690 [ 120.669522][ T8980] vfs_fsync_range+0x10a/0x130 [ 120.674281][ T8980] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.679834][ T8980] ext4_file_write_iter+0xdbf/0xf00 [ 120.685043][ T8980] iter_file_splice_write+0x5f2/0x970 [ 120.690422][ T8980] direct_splice_actor+0x156/0x2a0 [ 120.695544][ T8980] splice_direct_to_actor+0x312/0x680 [ 120.700923][ T8980] do_splice_direct+0xda/0x150 [ 120.705715][ T8980] do_sendfile+0x380/0x650 [ 120.710135][ T8980] __x64_sys_sendfile64+0x105/0x150 [ 120.715339][ T8980] x64_sys_call+0x2bb0/0x2ff0 [ 120.720018][ T8980] do_syscall_64+0xd2/0x200 [ 120.724522][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.730406][ T8980] [ 120.732716][ T8980] read to 0xffff888119cea008 of 4 bytes by task 8980 on cpu 0: [ 120.740243][ T8980] __mark_inode_dirty+0x18e/0x760 [ 120.745278][ T8980] touch_atime+0x229/0x340 [ 120.749733][ T8980] filemap_splice_read+0x629/0x6b0 [ 120.754837][ T8980] ext4_file_splice_read+0x8f/0xb0 [ 120.759949][ T8980] splice_direct_to_actor+0x26c/0x680 [ 120.765329][ T8980] do_splice_direct+0xda/0x150 [ 120.770105][ T8980] do_sendfile+0x380/0x650 [ 120.774529][ T8980] __x64_sys_sendfile64+0x105/0x150 [ 120.779728][ T8980] x64_sys_call+0x2bb0/0x2ff0 [ 120.784403][ T8980] do_syscall_64+0xd2/0x200 [ 120.788919][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.794814][ T8980] [ 120.797127][ T8980] value changed: 0x00000028 -> 0x00000002 [ 120.802835][ T8980] [ 120.805147][ T8980] Reported by Kernel Concurrency Sanitizer on: [ 120.811284][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.1.2046 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 120.823427][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.833476][ T8980] ================================================================== [ 120.860921][ T9007] __nla_validate_parse: 3 callbacks suppressed [ 120.860943][ T9007] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2054'.