last executing test programs: 6.004210549s ago: executing program 0 (id=2815): ioperm(0x0, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) sendto$inet(r1, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) syz_read_part_table(0x637, &(0x7f0000001500)="$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") sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 5.0184692s ago: executing program 0 (id=2824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000130000000000000000000a721c2c031b7190c1620b924353a642ea326db7a824332b178fa56cd75aa49a125f36635a01e0466ceb119260799c2b7c0e9cc2daf5b86d6f06b9c455599aee5f080039e80a0b324bf4e2fff57d63df2fca"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_open_procfs(0x0, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}], 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.95296634s ago: executing program 0 (id=2860): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x18, 0x110}}], 0x38}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xffff, 0x1003, 0x2480, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x4}, 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) keyctl$set_reqkey_keyring(0xe, 0x7) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) listen(r3, 0x0) shutdown(r3, 0x0) 1.882031236s ago: executing program 1 (id=2861): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.858021498s ago: executing program 1 (id=2862): socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.071276752s ago: executing program 0 (id=2864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aa87aafdaaaac4bc9cac968686dd6000000000240600fe8000000000000000000000000000aafe8000000000000000000000010000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c2000090780000fe04f989fe0af989d463e2c4e2da0000"], 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b39346d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x891c, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r11}, 0x8) 980.42729ms ago: executing program 1 (id=2867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000004ca500000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_open_dev$usbfs(0x0, 0x0, 0x2081) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x8683) syz_io_uring_setup(0x39f3, &(0x7f00000003c0)={0x0, 0x1eda, 0x800, 0x4, 0x75}, &(0x7f00000007c0)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x16}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "018000"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="34e1035e1e13d774fc99e90d6016cacd2e60854b3ec001440497862726914ae5742cda06ca02e6c65e0348b4a40d53c7eaac58ef6f14519d3effdb414e45aa9b17018c1a432513f3308f8b76a399bd931e657239d5840a7727f0f2c551d3f8a16a2fbc929c6fa2618ea2f26bf8bec043923041e7f7acddc9213b64218b84b6cf15b3a0d5081c5278926d3e283873cd5053f4366da81f99876fe0e84e22b18707599731992a0e7cae7509", @ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, r4}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000806450000000002000000000000000005000100060000000500100000000000"], 0x24}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r10, &(0x7f00000004c0)="00ff020002004788aa96a13bb1000013000088ca1a000000000072e523ee75333c6fb5ebeb3bcd99bac97f6f36fa5a11def37cc1c393b8cb93e688564111410218717e43098aaaef1803fce87e12af9e279634ec145716e52555c2fdb1d0d6d97e84b5293fa4b4087e375001b8ac23d7b49acc9b6fa28b6a1e9ac685a23c65269d7eb0c59e997ad4af614e3d68c61cee1be70dae760de2b921ae396033655d11c307aed79a358e2660e4c97abaaf8c5d2149c39f9cfce5c5e30caa23f5492ad882f70dbd00c471da6a565058694477fbfa1b454d230aa3aafcffb44fd01578e315c5231106aeb7c77b7561434cf04ea559", 0xf1, 0x40, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) io_getevents(0x0, 0x0, 0x2e, &(0x7f0000000400), &(0x7f0000000300)={0x0, 0x989680}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r13, 0x5403, &(0x7f0000000940)={0x2d71e, 0x0, 0x0, 0x7ffe, 0x0, "00ff7f0a0a008000"}) syz_open_dev$tty20(0xc, 0x4, 0x0) 918.334745ms ago: executing program 3 (id=2871): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x1d8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000bc0)}, {&(0x7f0000003500)="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", 0x4a6}], 0x2}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x3, 0x9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000002900)=[{{&(0x7f0000000900)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a140309000000000000000008000100000000000800030001"], 0x20}}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x34}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x60400) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) 716.964921ms ago: executing program 1 (id=2872): socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r3, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0) dup3(r2, r1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000540)=0x7fb) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0xfffffffffffffec5) r8 = syz_io_uring_setup(0x0, &(0x7f0000000500), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1485, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/2, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000380)={@remote, @link_local, @val, {@mpls_mc={0x8848, {[], @ipv4=@igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}}}}}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 646.406877ms ago: executing program 2 (id=2873): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x268, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x220, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x204, 0x6, [@m_connmark={0x170, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x95, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312cd1c151c51eed4c8c8bce1d810f14cea570fce0fb771c34fd"}, {0xc}, {0xc}}}, @m_vlan={0x90, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x268}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 584.849932ms ago: executing program 2 (id=2874): r0 = creat(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@nodelalloc}, {@acl}, {@noinit_itable}], [{@uid_gt={'uid>', r1}}]}, 0xfc, 0x572, &(0x7f0000000cc0)="$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") ioprio_set$pid(0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x7, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x68, 0x0, 0x11, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@ssrr={0x89, 0x7, 0xbd, [@dev={0xac, 0x14, 0x14, 0xb}]}, @ra={0x94, 0x4}, @generic={0x94, 0x3, '\\'}]}}}}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000009c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000001c0)=""/43, 0xb}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 577.310863ms ago: executing program 4 (id=2875): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x601) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='qdisc_create\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 529.257127ms ago: executing program 3 (id=2876): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x892f}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0xffff}}]}}]}, 0x94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 496.11589ms ago: executing program 3 (id=2877): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 495.15195ms ago: executing program 4 (id=2878): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x400000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x7f}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a96700000b0601020000000000abec000300000a18000780090013211750fe2a37230073797a310000000008b388c7cecfe505001a00000000004c0007800c00028008000140ac1e010105000300040000000c00070000000000000014aa0a001100aaaaaaaaaabb000006009e82a3c659b9e631f40ec0fd6ddd05404e200000080016404bd373fd0a001100aaaaaaaaaabb0000050001000700"], 0x8c}, 0x1, 0x0, 0x0, 0x20020814}, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x10013) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xc8, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7a8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xa74b}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff7fff}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000002040)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f00000018c0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x200}, 0xe, 0x0, 0x7, 0x1, 0x26, 'syz1\x00', "d41611c2093d664da1f33d58b17de4a422bde281e18358f319a56bf68f4c97a5", "e95a2d361a907d6d4fc434b48492a82fd53fd7c101fbe7597755f838d20abe91", [{0x7, 0xd6e, {0x1, 0x7}}, {0x5, 0x2, {0x0, 0x3}}, {0xff00, 0x9, {0x3, 0x400}}, {0x7fff, 0x0, {0x2, 0xfffffffa}}, {0xfffe, 0x8, {0x1, 0x40}}, {0x4, 0x0, {0x3, 0x6}}, {0x6, 0x7, {0x1, 0xdb34}}, {0xf000, 0x3809, {0x0, 0x2}}, {0x3, 0x3ff, {0x2, 0x7}}, {0xd, 0x2, {0x2, 0x2}}, {0xdf, 0x8001, {0x2, 0x6}}, {0x9, 0x1, {0x2, 0xcc}}, {0xbe, 0x2, {0x2, 0x800}}, {0x5, 0x6, {0x2, 0x3}}, {0x5, 0x2, {0x2, 0x6}}, {0x7, 0x2c9, {0x3, 0x800010}}, {0x46, 0x9, {0x2, 0x7}}, {0xe3d, 0x6, {0x1, 0x6}}, {0x4, 0x4, {0x0, 0x3}}, {0x6, 0x3, {0x0, 0x9}}, {0x3, 0x3, {0x0, 0x7}}, {0x7, 0x4, {0x0, 0x6}}, {0x4, 0x3, {0x3, 0x401}}, {0x81, 0x8e, {0x3}}, {0x7, 0x7, {0x2, 0x8}}, {0x4000, 0x4, {0x0, 0x7ff}}, {0xa, 0x5, {0x1}}, {0x7f, 0x7, {0x1}}, {0x4, 0x80, {0x0, 0x8}}, {0x4, 0x6, {0x2, 0x545}}, {0x8, 0x6, {0x3, 0x8}}, {0x400, 0x1ff, {0x2}}, {0x5, 0xe, {0x2}}, {0x0, 0x7, {0x1, 0x1}}, {0x3127, 0x100, {0x0, 0xa463}}, {0x8, 0x1, {0x1, 0x8}}, {0x9, 0xf, {0x1, 0x3}}, {0x8, 0x0, {0x0, 0x7fff}}, {0x5, 0x0, {0x3, 0x6}}, {0x7a, 0x2, {0x0, 0x100}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x5d, 0xa, 0xa5, 0x5, 0x0, 'syz0\x00', "6d60b48a53e808eeb4a5adf636d6126a1f78146d7ef8de0a411ac79daf1cb01f", "9b730f687d7190b60145011e3152ac8e4882b5ea2f6e9001616be037e2e6fe43", [{0x2000, 0xc, {0x2, 0x1}}, {0x1, 0x1, {0x0, 0xfa}}, {0x30b, 0x0, {0x0, 0xfffffffd}}, {0x4118, 0x8, {0x0, 0x5}}, {0x5, 0x9, {0x3, 0xff}}, {0x1, 0x0, {0x1, 0x4}}, {0x872, 0x6, {0x1, 0x6}}, {0x4, 0x1ff, {0x2, 0xffffffff}}, {0x8, 0x4, {0x2, 0x8}}, {0x0, 0x722, {0x1, 0x6}}, {0xf, 0x10, {0x3, 0x8d5}}, {0x14f, 0x3, {0x0, 0x6}}, {0x0, 0x5, {0x0, 0xfffffffe}}, {0xffff, 0x3, {0x2, 0x6}}, {0x6, 0x0, {0x2}}, {0x0, 0x0, {0x2, 0xffffffff}}, {0xfff}, {0x3, 0x0, {0x2}}, {0x1, 0x0, {0x0, 0x1}}, {0x100, 0xa, {0x3, 0x9}}, {0xf, 0xfff4, {0x1, 0xfff}}, {0x40, 0xa5d6, {0x3, 0xfffffaca}}, {0x0, 0xc, {0x3, 0x100}}, {0x7f, 0x5e, {0x2, 0x2}}, {0x0, 0x5, {0x1, 0x86}}, {0x9, 0x7, {0x2, 0x8b9}}, {0x8, 0x46, {0x2, 0x7ea}}, {0x6, 0x9, {0x3, 0x9}}, {0x4, 0x8000, {0x2, 0x10000}}, {0x80, 0x400, {0x2, 0x7}}, {0x1, 0x3, {0x3, 0x10}}, {0x0, 0x5, {0x1, 0x3}}, {0x4, 0x7, {0x0, 0xbf97}}, {0x50, 0x0, {0x1, 0x4}}, {0x5, 0x9a, {0x2, 0x1ff}}, {0x40, 0x3, {0x2, 0x7}}, {0x7, 0x8001, {0x0, 0x3}}, {0x0, 0xc9f, {0x2, 0xe66}}, {0x0, 0x1ff, {0x3, 0x5}}, {0x0, 0x7, {0x0, 0xa20e}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x7, 0x2, 0x8, 0xfffa, 0x19, 'syz1\x00', "de54c2dbb4db5ddab1ff1becb04b23ba38a520b2ec865cc429b59d6aaff05601", "9594d8abe6f011c2259c83ce16d5b762677b835f4bcc17d4f4ed5b9c50a0a5ed", [{0x9, 0x9, {0x1, 0x10}}, {0x0, 0x7, {0x2, 0x400}}, {0x7, 0x9, {0x0, 0x5}}, {0x1, 0x4, {0x3, 0x4}}, {0x10, 0x6, {0x1, 0x7fffffff}}, {0xbdd, 0xb}, {0x6, 0x37, {0x1, 0x3}}, {0x4, 0x7, {0x0, 0x2}}, {0x2, 0x7ff, {0x0, 0xb4}}, {0x7, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x3, 0x401}}, {0x10, 0x6, {0x0, 0x24}}, {0x5c77, 0x5, {0x2}}, {0x0, 0xc356, {0x1, 0x2}}, {0x611, 0x2, {0x0, 0x6}}, {0xea4a, 0x7}, {0xc, 0xf001, {0x3, 0x8}}, {0x0, 0x800, {0x0, 0x200}}, {0x10, 0xd172, {0x0, 0x14b}}, {0x0, 0x1ff, {0x2, 0x5}}, {0x7, 0x7fff, {0x1, 0x8000}}, {0x101, 0xaeb7, {0x1, 0x3}}, {0x1, 0x4}, {0x1ff8, 0x7, {0x0, 0x9}}, {0x71, 0x7f, {0x1, 0x7fff}}, {0x6, 0x8001, {0x0, 0x80000001}}, {0x8, 0x0, {0x1, 0xf}}, {0xd, 0x400, {0x0, 0x9}}, {0x5, 0x5, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0x6}}, {0x0, 0x8000, {0x0, 0x9}}, {0x0, 0x5, {0x0, 0x70000000}}, {0x3, 0x9, {0x1}}, {0x0, 0x3, {0x2, 0xffffffff}}, {0x2, 0x9, {0x2, 0x2}}, {0x65, 0x800, {0x3, 0x4}}, {0x4, 0x5, {0x3, 0xfffffff8}}, {0x40, 0x2, {0x0, 0xf6}}, {0x7db8, 0x4, {0x3, 0x9}}, {0x81, 0x2, {0x1, 0x8001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000002080)={0x3, 'virt_wifi0\x00', {0x148}, 0x5df}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000020c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002100)) fcntl$getownex(r5, 0x10, &(0x7f0000002200)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xd7, 0x30}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in=@multicast2, 0x0, 0x77, 0x4e21, 0x7f, 0xa, 0x80, 0x0, 0x2c, r3}, {0x1, 0x81, 0x5, 0x77, 0x8001, 0xa, 0x5, 0x6}, {0x8ea, 0x6, 0x0, 0x2}, 0x8, 0x6e6bbb, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0xff}, 0xc, @in=@loopback, 0x3505, 0x2, 0x0, 0x10, 0x7fffffff, 0x7, 0xffffffff}}, 0xe8) 432.964795ms ago: executing program 3 (id=2879): socketpair(0x6, 0x1, 0x54, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) unshare(0x26020480) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) futex_waitv(&(0x7f0000001740)=[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x86}, {0x0, 0x0}, {0x8, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000000880), 0x2}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x800, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0, 0x82}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x36, 0x0, 0x0, 0x0) 431.346714ms ago: executing program 2 (id=2880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=ANY=[@ANYBLOB="00100000100001000000000000000000e000000200000000000000000000000000000000000000ffffffffffffff800000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001f00030000000c001500000000000400000008001d0000000000cd0e0100736861323536"], 0x1000}}, 0x0) 414.098586ms ago: executing program 1 (id=2881): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x67f6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0}, 0x90) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 356.792321ms ago: executing program 2 (id=2882): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xfffffffb, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x23}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0}, 0x90) ioperm(0x0, 0x3, 0x2) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 355.990451ms ago: executing program 4 (id=2883): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x44}}, 0x0) 355.188441ms ago: executing program 2 (id=2884): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r1, 0x0, 0x548) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x1ff, 0x3, 0x1a, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mprotect(&(0x7f000075f000/0x1000)=nil, 0x1000, 0x1000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001dc0)={0xffbfffff020, 0x8}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x4, "df3f04000000000000001a00"}) r5 = syz_open_pts(r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = dup3(r5, r4, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) 354.710281ms ago: executing program 3 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a74c4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee19210490639d0f4893d7d2c79c2d5cec4ebf2e04aeb1e36e370645e52e1328e70f011a950f8ae1dfa42b14ea99ffe35186534534630ad8a4881ff625e1b389cedc085acdba51308f2c4ab4b781e3756adbe6d012874666b157d1f077614a1e7c90180694efeb4094dc87f969af3e0a4ecdae32a091fd3ca0b86d732d130b983602ff21887eb1692e622d880a8378b129731c379bdcc7db13d2ab8b189ff83ca71d967fd7e1c46def217e7a9d0ac26bb6f65bbe904e3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x9}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x88}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex>Dd', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_BULK(r3, 0xc0185502, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r5, &(0x7f0000000180)='./mnt\x00', r5, &(0x7f0000000380)='./mnt\x00', 0x61) sendto$rxrpc(r5, &(0x7f0000000000), 0x0, 0x20000040, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0xb, 0xfe9, &(0x7f0000001e00)=""/4073}, 0x90) 258.265829ms ago: executing program 1 (id=2886): socket(0xa, 0x3, 0x3a) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4008a, &(0x7f00000001c0)={[{@dioread_nolock}, {@usrjquota, 0x22}, {@nogrpid}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@nodelalloc}, {@usrjquota}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") (async, rerun: 32) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) (rerun: 32) 145.673548ms ago: executing program 0 (id=2887): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x892f}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0xffff}}]}}]}, 0x94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 143.804968ms ago: executing program 0 (id=2888): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000a401038015000200070000005600050070e68f25ce0c924f2a8195afe1c770786adf6f083f0b66dfdbd403cacc428f32d42ea86e754b241d6785cc2edb9c0a270ec963a7a5f5cbc9e316cf560e6d83fb35aae47917175ae1ca22311a3eb4236403a6000004000100d40005001ddc22bea333cbca2de3c71f47a57bbbeec0b6ca1b412ff7f21ccf8b0afacf865b658e3841dc5fa1a2b4396dba58656ae0705ecc674e531fdcaa486d041b51771487420b154826c1dea20802e17f73edb41a275bcdc48fbfaffcab68ce1a6d05fcb5b2cc0d88b3607c9d562208c2af6a962396f238c2aceac9406d2a80889b1f2935be4b149ec3bb65adf0bad7aee90737087c40498241dbe3b07929ec2c33a262e98d4114152c50be2d2e8c736d3961ad843af71107ddcd9c6d7b1b5a8a97f27374d0d7a244ae1bf8b5c24f0a4af29816000400e74ec8efdbd43a13c66fff7b90fd52fafc7a000050000380200001800800010052a90000070002002a290000060002003a000000040003002c0001800a000200757365725f75000004000300080001000700000008000200252c2900080001000000000020000180140002006c6f000000000000000000000000000008000100", @ANYRES32=r5], 0x1d8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000bc0)}, {&(0x7f0000003500)="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", 0x4a6}], 0x2}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x3, 0x9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000002900)=[{{&(0x7f0000000900)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a140309000000000000000008000100000000000800030001"], 0x20}}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x34}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x60400) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) 143.446388ms ago: executing program 4 (id=2889): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x601) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='qdisc_create\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 112.819721ms ago: executing program 3 (id=2890): r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004", @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000009c0), 0x1, 0x517, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000500)=0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="020000e600"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000c0010000000400002000000000d789163336ec8b26357a140671ff4e7bb5964c17320d5a2fa00f06004a2cec9403a1699ef8a16601f2537bd9f5bce28c0673697d6c4d3be989ba644b61a730bd"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 60.214945ms ago: executing program 4 (id=2891): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0xfdff}]}, 0x108) 9.045939ms ago: executing program 4 (id=2892): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ffffffff060001000200000008000600a7"], 0x38}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x3}, 0x0) 0s ago: executing program 2 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x8000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): t4: Unknown parameter 'uid>00000000000000000000' [ 170.446421][ T2959] loop4: p1 < > p3 [ 170.456039][ T2959] loop4: p3 size 134217728 extends beyond EOD, truncated [ 170.460715][ T8741] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 170.470562][ T8741] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 170.478013][ T8741] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 170.485559][ T8741] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 170.494997][T11878] netlink: 'syz.1.2482': attribute type 10 has an invalid length. [ 170.503959][T11813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.509219][ T8741] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.526700][T11813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.553576][T11880] ebt_among: dst integrity fail: 101 [ 170.628474][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.666510][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.682078][T11890] loop3: detected capacity change from 0 to 512 [ 170.711990][T11890] journal_path: Lookup failure for './file0' [ 170.718041][T11890] EXT4-fs: error: could not find journal device path [ 170.732640][T11893] loop1: detected capacity change from 0 to 512 [ 170.782969][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.790101][ T8741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.835928][T11813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.846344][T11813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.909580][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.916697][ T8741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.966939][T11893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.979818][T11893] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.043747][T11813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.095309][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 171.104962][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 171.127485][T11904] vhci_hcd: invalid port number 32 [ 171.174888][T11813] veth0_vlan: entered promiscuous mode [ 171.183868][T11813] veth1_vlan: entered promiscuous mode [ 171.200744][T11813] veth0_macvtap: entered promiscuous mode [ 171.208488][T11813] veth1_macvtap: entered promiscuous mode [ 171.219961][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.230401][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.240298][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.250787][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.260684][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.271116][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.280950][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.291379][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.301306][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.311723][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.321530][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.332172][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.342019][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.352439][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.364525][T11813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.376728][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.387206][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.397092][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.407672][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.417625][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.428042][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.437937][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.448372][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.458203][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.468742][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.478554][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.489096][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.511848][ T8670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 171.512025][T11813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.536714][T11813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.545555][T11813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.554267][T11813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.559880][ T8741] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 171.562951][T11813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.570874][ T8741] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 171.586552][ T8741] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 171.593955][ T8741] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 171.609073][ T8741] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.676393][T11928] loop2: detected capacity change from 0 to 512 [ 171.705590][T11928] __quota_error: 15 callbacks suppressed [ 171.705605][T11928] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 171.721392][T11928] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.731576][T11928] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2462: Failed to acquire dquot type 1 [ 171.747249][T11937] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.756930][T11928] EXT4-fs (loop2): 1 truncate cleaned up [ 171.762939][T11928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.763014][T11928] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.796685][T11813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.145181][ T29] audit: type=1326 audit(1722654393.617:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.168708][ T29] audit: type=1326 audit(1722654393.617:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.183033][T11947] loop4: detected capacity change from 0 to 2048 [ 172.192265][ T29] audit: type=1326 audit(1722654393.617:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.222239][ T29] audit: type=1326 audit(1722654393.617:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.245762][ T29] audit: type=1326 audit(1722654393.617:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.269224][ T29] audit: type=1326 audit(1722654393.617:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.292744][ T29] audit: type=1326 audit(1722654393.617:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.316374][ T29] audit: type=1326 audit(1722654393.617:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40050979f9 code=0x7ffc0000 [ 172.355063][T11950] loop2: detected capacity change from 0 to 1024 [ 172.361713][T11950] ext4: Unknown parameter 'uid>00000000000000000000' [ 172.370773][ T8754] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 172.378288][ T8754] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 172.384667][T11947] loop4: p1 < > p3 [ 172.385844][ T8754] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 172.397088][ T8754] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 172.400210][T11947] loop4: p3 size 134217728 extends beyond EOD, truncated [ 172.411808][ T8754] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.430953][ T2959] loop4: p1 < > p3 [ 172.436045][ T2959] loop4: p3 size 134217728 extends beyond EOD, truncated [ 172.518273][T11955] loop2: detected capacity change from 0 to 1024 [ 172.538331][T11955] ext4: Unknown parameter 'uid>00000000000000000000' [ 172.541283][T11956] netlink: 'syz.1.2499': attribute type 10 has an invalid length. [ 172.555770][T11958] loop3: detected capacity change from 0 to 512 [ 172.581226][ T8741] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 172.588681][ T8741] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 172.596095][ T8741] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 172.603527][ T8741] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 172.613149][ T8741] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.639995][T11958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.659416][T11958] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.707275][T11973] FAULT_INJECTION: forcing a failure. [ 172.707275][T11973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.720440][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.4.2508 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 172.731203][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 172.741258][T11973] Call Trace: [ 172.744527][T11973] [ 172.747484][T11973] dump_stack_lvl+0xf2/0x150 [ 172.752075][T11973] dump_stack+0x15/0x20 [ 172.756332][T11973] should_fail_ex+0x229/0x230 [ 172.761053][T11973] should_fail+0xb/0x10 [ 172.765264][T11973] should_fail_usercopy+0x1a/0x20 [ 172.770286][T11973] _copy_to_user+0x1e/0xa0 [ 172.774696][T11973] simple_read_from_buffer+0xa0/0x110 [ 172.780136][T11973] proc_fail_nth_read+0xfc/0x140 [ 172.785109][T11973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.790685][T11973] vfs_read+0x1a2/0x6e0 [ 172.794856][T11973] ? __rcu_read_unlock+0x4e/0x70 [ 172.799784][T11973] ? __fget_files+0x1da/0x210 [ 172.804576][T11973] ksys_read+0xeb/0x1b0 [ 172.808754][T11973] __x64_sys_read+0x42/0x50 [ 172.813280][T11973] x64_sys_call+0x27d3/0x2d60 [ 172.817949][T11973] do_syscall_64+0xc9/0x1c0 [ 172.822591][T11973] ? clear_bhb_loop+0x55/0xb0 [ 172.827335][T11973] ? clear_bhb_loop+0x55/0xb0 [ 172.832010][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.837894][T11973] RIP: 0033:0x7feeb6ca643c [ 172.842295][T11973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 172.861950][T11973] RSP: 002b:00007feeb5927040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.870384][T11973] RAX: ffffffffffffffda RBX: 00007feeb6e35f80 RCX: 00007feeb6ca643c [ 172.878385][T11973] RDX: 000000000000000f RSI: 00007feeb59270b0 RDI: 0000000000000006 [ 172.886408][T11973] RBP: 00007feeb59270a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.894365][T11973] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 172.902323][T11973] R13: 000000000000004d R14: 00007feeb6e35f80 R15: 00007ffdadb94e08 [ 172.910332][T11973] [ 172.958275][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.988153][T11985] loop3: detected capacity change from 0 to 1024 [ 172.995112][T11985] ext4: Unknown parameter 'uid>00000000000000000000' [ 173.009913][ T8741] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 173.017483][ T8741] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 173.024886][ T8741] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 173.026845][T11988] loop4: detected capacity change from 0 to 256 [ 173.032253][ T8741] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 173.048060][ T8741] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.129886][T11998] netlink: 'syz.3.2516': attribute type 10 has an invalid length. [ 173.143491][T11998] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 173.152628][T11998] team0: Failed to send options change via netlink (err -105) [ 173.160238][T11998] team0: Port device netdevsim1 added [ 173.237332][T12007] loop4: detected capacity change from 0 to 256 [ 173.315405][T12009] loop3: detected capacity change from 0 to 512 [ 173.388305][T12009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 173.400831][T12009] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.538584][T12013] loop1: detected capacity change from 0 to 4096 [ 173.554105][T12013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.606307][ T8670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.663566][T12020] loop1: detected capacity change from 0 to 512 [ 173.672459][T12020] EXT4-fs: Ignoring removed nobh option [ 173.680561][T12020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.704889][T12020] EXT4-fs (loop1): 1 truncate cleaned up [ 173.718047][T12020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.734301][ T3337] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 173.741885][ T3337] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 173.749403][ T3337] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 173.756810][ T3337] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 173.766433][ T3337] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.793459][T12020] loop1: detected capacity change from 512 to 0 [ 173.808747][T12035] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 173.822363][T12035] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 173.822403][ T8670] bio_check_eod: 2 callbacks suppressed [ 173.822414][ T8670] syz-executor: attempt to access beyond end of device [ 173.822414][ T8670] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 173.831439][T12035] team0: Failed to send options change via netlink (err -105) [ 173.858168][T12035] team0: Port device netdevsim1 added [ 173.864095][ T8670] syz-executor: attempt to access beyond end of device [ 173.864095][ T8670] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 173.882395][ T8670] syz-executor: attempt to access beyond end of device [ 173.882395][ T8670] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 173.896313][ T8670] syz-executor: attempt to access beyond end of device [ 173.896313][ T8670] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 173.910009][ T8670] syz-executor: attempt to access beyond end of device [ 173.910009][ T8670] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 173.923983][ T8670] syz-executor: attempt to access beyond end of device [ 173.923983][ T8670] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 173.941679][T12041] loop2: detected capacity change from 0 to 1024 [ 173.945495][T12044] loop4: detected capacity change from 0 to 1024 [ 173.948466][T12041] ext4: Unknown parameter 'uid>00000000000000000000' [ 173.961143][ T8670] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 173.974344][ T8670] syz-executor: attempt to access beyond end of device [ 173.974344][ T8670] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 173.987811][ T8670] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 173.991507][ T3337] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 174.001941][ T8670] EXT4-fs (loop1): I/O error while writing superblock [ 174.003503][ T3337] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 174.003536][ T3337] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 174.010273][ T8670] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 174.010301][ T8670] syz-executor: attempt to access beyond end of device [ 174.010301][ T8670] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 174.010321][ T8670] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 174.017681][ T3337] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 174.018598][ T3337] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.039529][T12044] ext4: Unknown parameter 'uid>00000000000000000000' [ 174.050003][ T8670] EXT4-fs (loop1): I/O error while writing superblock [ 174.085808][ T8670] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 174.103515][ T3341] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 174.109308][ T8670] syz-executor: attempt to access beyond end of device [ 174.109308][ T8670] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 174.110922][ T3341] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 174.124272][ T8670] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 174.125514][ T8670] EXT4-fs (loop1): I/O error while writing superblock [ 174.131778][ T3341] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 174.154198][ T3341] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 174.161652][ T3272] kworker/u8:5: attempt to access beyond end of device [ 174.161652][ T3272] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 174.176470][ T3341] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.187395][ T3272] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #18: block 9: comm kworker/u8:5: unable to read itable block [ 174.188504][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.202924][ T3272] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 174.242267][T12059] loop3: detected capacity change from 0 to 256 [ 174.251006][ T3272] EXT4-fs (loop1): I/O error while writing superblock [ 174.264523][ T3272] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 174.292942][ T3272] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 174.302767][T12063] loop4: detected capacity change from 0 to 256 [ 174.316884][ T3272] EXT4-fs (loop1): I/O error while writing superblock [ 174.324504][ T8670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.344097][ T8670] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 174.352486][ T8670] EXT4-fs (loop1): I/O error while writing superblock [ 174.362662][T12068] netlink: 'syz.3.2539': attribute type 10 has an invalid length. [ 174.389472][T12072] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2541'. [ 174.410643][T12074] netlink: 'syz.3.2544': attribute type 10 has an invalid length. [ 174.472891][T12082] loop3: detected capacity change from 0 to 1024 [ 174.486586][T12082] ext4: Unknown parameter 'uid>00000000000000000000' [ 174.514465][ T3341] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 174.518032][T12088] FAULT_INJECTION: forcing a failure. [ 174.518032][T12088] name failslab, interval 1, probability 0, space 0, times 0 [ 174.521914][ T3341] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 174.534567][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.2.2552 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 174.541903][ T3341] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 174.552610][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.552622][T12088] Call Trace: [ 174.552628][T12088] [ 174.552636][T12088] dump_stack_lvl+0xf2/0x150 [ 174.552693][T12088] dump_stack+0x15/0x20 [ 174.560125][ T3341] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 174.570048][T12088] should_fail_ex+0x229/0x230 [ 174.597023][T12088] ? alloc_vmap_area+0x1e1/0x1830 [ 174.602138][T12088] should_failslab+0x8f/0xb0 [ 174.606744][T12088] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 174.612599][T12088] alloc_vmap_area+0x1e1/0x1830 [ 174.617448][T12088] ? __rcu_read_unlock+0x4e/0x70 [ 174.622377][T12088] ? should_fail_ex+0xd7/0x230 [ 174.627139][T12088] __get_vm_area_node+0x15e/0x1b0 [ 174.632297][T12088] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 174.638105][T12088] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 174.643668][T12088] ? __rcu_read_unlock+0x4e/0x70 [ 174.648746][T12088] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 174.654287][T12088] __vmalloc_noprof+0x5e/0x70 [ 174.659013][T12088] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 174.664555][T12088] bpf_prog_alloc_no_stats+0x49/0x290 [ 174.669925][T12088] ? bpf_prog_alloc+0x28/0x150 [ 174.674683][T12088] bpf_prog_alloc+0x3a/0x150 [ 174.679269][T12088] bpf_prog_load+0x4d1/0x1060 [ 174.683950][T12088] __sys_bpf+0x463/0x7a0 [ 174.688285][T12088] __x64_sys_bpf+0x43/0x50 [ 174.692749][T12088] x64_sys_call+0x2625/0x2d60 [ 174.697469][T12088] do_syscall_64+0xc9/0x1c0 [ 174.701970][T12088] ? clear_bhb_loop+0x55/0xb0 [ 174.706655][T12088] ? clear_bhb_loop+0x55/0xb0 [ 174.711325][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.717291][T12088] RIP: 0033:0x7fa4bc2f79f9 [ 174.721743][T12088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.741403][T12088] RSP: 002b:00007fa4baf77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.749877][T12088] RAX: ffffffffffffffda RBX: 00007fa4bc485f80 RCX: 00007fa4bc2f79f9 [ 174.757837][T12088] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 174.765796][T12088] RBP: 00007fa4baf770a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.773787][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.781745][T12088] R13: 000000000000000b R14: 00007fa4bc485f80 R15: 00007ffea27c1d98 [ 174.789713][T12088] [ 174.793001][T12088] syz.2.2552: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 174.799688][ T3341] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.809295][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.2.2552 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 174.829572][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.839624][T12088] Call Trace: [ 174.842895][T12088] [ 174.845891][T12088] dump_stack_lvl+0xf2/0x150 [ 174.850488][T12088] dump_stack+0x15/0x20 [ 174.854646][T12088] warn_alloc+0x145/0x1b0 [ 174.859042][T12088] ? kfree+0xd5/0x290 [ 174.863015][T12088] __vmalloc_node_range_noprof+0x310/0xef0 [ 174.868870][T12088] ? __rcu_read_unlock+0x4e/0x70 [ 174.873810][T12088] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 174.879421][T12088] __vmalloc_noprof+0x5e/0x70 [ 174.884096][T12088] ? bpf_prog_alloc_no_stats+0x49/0x290 [ 174.889637][T12088] bpf_prog_alloc_no_stats+0x49/0x290 [ 174.895053][T12088] ? bpf_prog_alloc+0x28/0x150 [ 174.899880][T12088] bpf_prog_alloc+0x3a/0x150 [ 174.904465][T12088] bpf_prog_load+0x4d1/0x1060 [ 174.909143][T12088] __sys_bpf+0x463/0x7a0 [ 174.913385][T12088] __x64_sys_bpf+0x43/0x50 [ 174.917838][T12088] x64_sys_call+0x2625/0x2d60 [ 174.922515][T12088] do_syscall_64+0xc9/0x1c0 [ 174.927076][T12088] ? clear_bhb_loop+0x55/0xb0 [ 174.931800][T12088] ? clear_bhb_loop+0x55/0xb0 [ 174.936471][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.942515][T12088] RIP: 0033:0x7fa4bc2f79f9 [ 174.947000][T12088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.966668][T12088] RSP: 002b:00007fa4baf77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.975067][T12088] RAX: ffffffffffffffda RBX: 00007fa4bc485f80 RCX: 00007fa4bc2f79f9 [ 174.983047][T12088] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 174.991064][T12088] RBP: 00007fa4baf770a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.999040][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.007000][T12088] R13: 000000000000000b R14: 00007fa4bc485f80 R15: 00007ffea27c1d98 [ 175.014962][T12088] [ 175.018025][T12088] Mem-Info: [ 175.021125][T12088] active_anon:7924 inactive_anon:1 isolated_anon:0 [ 175.021125][T12088] active_file:4781 inactive_file:14287 isolated_file:0 [ 175.021125][T12088] unevictable:0 dirty:448 writeback:0 [ 175.021125][T12088] slab_reclaimable:2820 slab_unreclaimable:20649 [ 175.021125][T12088] mapped:21389 shmem:2377 pagetables:749 [ 175.021125][T12088] sec_pagetables:0 bounce:0 [ 175.021125][T12088] kernel_misc_reclaimable:0 [ 175.021125][T12088] free:1879610 free_pcp:7676 free_cma:0 [ 175.066217][T12088] Node 0 active_anon:31696kB inactive_anon:4kB active_file:19124kB inactive_file:57148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85556kB dirty:1792kB writeback:0kB shmem:9508kB writeback_tmp:0kB kernel_stack:4064kB pagetables:2996kB sec_pagetables:0kB all_unreclaimable? no [ 175.094177][T12088] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.120996][T12088] lowmem_reserve[]: 0 2866 7844 0 [ 175.126128][T12088] Node 0 DMA32 free:2950416kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 175.154697][T12088] lowmem_reserve[]: 0 0 4978 0 [ 175.159538][T12088] Node 0 Normal free:4552664kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:31348kB inactive_anon:4kB active_file:19124kB inactive_file:57148kB unevictable:0kB writepending:1792kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:27404kB local_pcp:15572kB free_cma:0kB [ 175.189933][T12088] lowmem_reserve[]: 0 0 0 0 [ 175.194496][T12088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.207220][T12088] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950416kB [ 175.223306][T12088] Node 0 Normal: 576*4kB (UME) 699*8kB (UME) 162*16kB (UM) 247*32kB (UM) 109*64kB (UME) 64*128kB (UM) 27*256kB (ME) 109*512kB (UM) 90*1024kB (UM) 39*2048kB (UM) 1046*4096kB (UM) = 4552728kB [ 175.242140][T12088] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 175.251480][T12088] 21386 total pagecache pages [ 175.256202][T12088] 1 pages in swap cache [ 175.260348][T12088] Free swap = 124676kB [ 175.264577][T12088] Total swap = 124996kB [ 175.268729][T12088] 2097051 pages RAM [ 175.272525][T12088] 0 pages HighMem/MovableOnly [ 175.277224][T12088] 80172 pages reserved [ 175.338289][T12107] loop4: detected capacity change from 0 to 512 [ 175.419023][T12084] chnl_net:caif_netlink_parms(): no params data found [ 175.428613][T12110] loop2: detected capacity change from 0 to 256 [ 175.457456][T12107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 175.470260][T12107] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.529230][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.536435][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.546863][T12084] bridge_slave_0: entered allmulticast mode [ 175.556393][T12084] bridge_slave_0: entered promiscuous mode [ 175.567478][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.574593][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.581940][T12084] bridge_slave_1: entered allmulticast mode [ 175.596851][T12084] bridge_slave_1: entered promiscuous mode [ 175.615190][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.628730][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.629079][ T7634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 175.658606][T12084] team0: Port device team_slave_0 added [ 175.668311][T12119] netlink: 'syz.0.2557': attribute type 10 has an invalid length. [ 175.677095][T12084] team0: Port device team_slave_1 added [ 175.708171][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'. [ 175.718529][T12084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.725689][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.751693][T12084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.769262][T12128] netlink: 'syz.3.2559': attribute type 10 has an invalid length. [ 175.791234][T12124] loop2: detected capacity change from 0 to 512 [ 175.797340][T12084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.804648][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.830672][T12084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.858582][T12134] loop3: detected capacity change from 0 to 1024 [ 175.871495][T12134] ext4: Unknown parameter 'uid>00000000000000000000' [ 175.889156][T12084] hsr_slave_0: entered promiscuous mode [ 175.893766][ T8754] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 175.902115][ T8754] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 175.906947][T12136] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.909531][ T8754] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 175.922502][T12136] sg_write: data in/out 1937072651/120 bytes for SCSI command 0x0-- guessing data in; [ 175.922502][T12136] program syz.0.2562 not setting count and/or reply_len properly [ 175.924155][ T8754] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 175.948175][T12139] loop4: detected capacity change from 0 to 512 [ 175.957003][T12084] hsr_slave_1: entered promiscuous mode [ 175.958590][ T8754] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.975389][T12084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.976002][T12139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 175.985611][T12143] loop2: detected capacity change from 0 to 1024 [ 175.995422][T12139] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.003470][T12084] Cannot create hsr debugfs directory [ 176.014143][T12143] ext4: Unknown parameter 'uid>00000000000000000000' [ 176.041052][ T3341] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 176.048646][ T3341] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 176.056187][ T3341] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 176.063589][ T3341] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 176.077567][ T3341] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.080971][T12150] FAULT_INJECTION: forcing a failure. [ 176.080971][T12150] name failslab, interval 1, probability 0, space 0, times 0 [ 176.099801][T12150] CPU: 1 UID: 0 PID: 12150 Comm: syz.3.2565 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 176.110704][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 176.120760][T12150] Call Trace: [ 176.124038][T12150] [ 176.127016][T12150] dump_stack_lvl+0xf2/0x150 [ 176.131614][T12150] dump_stack+0x15/0x20 [ 176.135794][T12150] should_fail_ex+0x229/0x230 [ 176.140474][T12150] ? __alloc_skb+0x10b/0x310 [ 176.145052][T12150] should_failslab+0x8f/0xb0 [ 176.149673][T12150] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 176.155474][T12150] __alloc_skb+0x10b/0x310 [ 176.159879][T12150] netlink_alloc_large_skb+0xad/0xe0 [ 176.165295][T12150] netlink_sendmsg+0x3b4/0x6e0 [ 176.170052][T12150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.175446][T12150] __sock_sendmsg+0x140/0x180 [ 176.180147][T12150] ____sys_sendmsg+0x312/0x410 [ 176.184905][T12150] __sys_sendmmsg+0x269/0x500 [ 176.189601][T12150] __x64_sys_sendmmsg+0x57/0x70 [ 176.194528][T12150] x64_sys_call+0xa49/0x2d60 [ 176.199123][T12150] do_syscall_64+0xc9/0x1c0 [ 176.203629][T12150] ? clear_bhb_loop+0x55/0xb0 [ 176.208384][T12150] ? clear_bhb_loop+0x55/0xb0 [ 176.213124][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.219067][T12150] RIP: 0033:0x7fc0241279f9 [ 176.223476][T12150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.243085][T12150] RSP: 002b:00007fc022da7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.251524][T12150] RAX: ffffffffffffffda RBX: 00007fc0242b5f80 RCX: 00007fc0241279f9 [ 176.259486][T12150] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 176.267450][T12150] RBP: 00007fc022da70a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.275408][T12150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.283434][T12150] R13: 000000000000000b R14: 00007fc0242b5f80 R15: 00007ffeda2941c8 [ 176.291404][T12150] [ 176.425356][T12084] team0: Port device netdevsim1 removed [ 176.551994][T12084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.565248][T12084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.575200][T12084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.587774][T12084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.656032][T12084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.674452][ T7634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 176.695264][T12084] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.728164][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.735407][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.757870][T12160] netlink: 'syz.4.2568': attribute type 10 has an invalid length. [ 176.791603][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.795999][T12162] loop4: detected capacity change from 0 to 1024 [ 176.798683][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.812550][T12162] ext4: Unknown parameter 'uid>00000000000000000000' [ 176.824369][T12084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.836470][ T8741] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 176.844111][ T8741] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 176.851598][ T8741] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 176.858993][ T8741] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 176.888103][T12084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.895199][ T8741] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.905717][T12169] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 176.940592][T12173] loop3: detected capacity change from 0 to 256 [ 177.064930][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 177.064943][ T29] audit: type=1400 audit(1722654398.557:2162): avc: denied { bind } for pid=12178 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.133393][ T29] audit: type=1326 audit(1722654398.597:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.156929][ T29] audit: type=1326 audit(1722654398.597:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.180622][ T29] audit: type=1326 audit(1722654398.597:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.204241][ T29] audit: type=1326 audit(1722654398.597:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.227846][ T29] audit: type=1326 audit(1722654398.597:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.251161][ T29] audit: type=1326 audit(1722654398.597:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.274701][ T29] audit: type=1326 audit(1722654398.597:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.298256][ T29] audit: type=1326 audit(1722654398.597:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.321792][ T29] audit: type=1326 audit(1722654398.597:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f3c79f9 code=0x7ffc0000 [ 177.351728][T12193] loop2: detected capacity change from 0 to 512 [ 177.385566][T12189] loop3: detected capacity change from 0 to 4096 [ 177.403241][T12193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 177.416328][T12193] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.424906][T12189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.456869][T12202] netlink: 'syz.0.2581': attribute type 10 has an invalid length. [ 177.466599][T12084] veth0_vlan: entered promiscuous mode [ 177.479587][T12084] veth1_vlan: entered promiscuous mode [ 177.504833][T12084] veth0_macvtap: entered promiscuous mode [ 177.512403][T12084] veth1_macvtap: entered promiscuous mode [ 177.518493][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.522511][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.538116][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.547987][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.558429][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.568709][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.579334][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.589179][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.599630][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.609460][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.619898][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.629759][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.640180][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.650224][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.660656][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.670476][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.680946][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.710892][T12084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.720147][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.730658][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.740502][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.751003][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.760888][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.771431][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.781290][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.791754][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.801597][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.812069][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.821893][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.832332][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.842137][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.852553][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.896485][T11813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 177.909436][T12084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.933228][T12084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.942019][T12084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.950827][T12084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.959570][T12084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.980392][T12213] loop3: detected capacity change from 0 to 256 [ 178.026360][ T3341] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 178.033822][ T3341] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 178.041222][T12215] netlink: 'syz.2.2584': attribute type 10 has an invalid length. [ 178.041232][ T3341] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 178.056538][ T3341] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 178.064550][ T3341] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.212251][T12224] loop3: detected capacity change from 0 to 512 [ 178.245490][T12224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.283486][T12224] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.311444][T12224] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4117: comm syz.3.2588: Allocating blocks 18-19 which overlap fs metadata [ 178.383291][T12256] loop4: detected capacity change from 0 to 2048 [ 178.391364][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.416102][T12256] loop4: p1 < > p3 [ 178.420834][T12256] loop4: p3 size 134217728 extends beyond EOD, truncated [ 178.425397][T12261] netlink: 'syz.3.2597': attribute type 10 has an invalid length. [ 178.439949][ T2959] loop4: p1 < > p3 [ 178.450973][ T2959] loop4: p3 size 134217728 extends beyond EOD, truncated [ 178.584642][ T3341] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 178.592062][ T3341] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 178.599476][ T3341] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 178.606970][ T3341] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 178.636391][ T3341] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.637752][T12272] loop3: detected capacity change from 0 to 2048 [ 178.716146][T12279] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.958949][T12295] netlink: 'syz.2.2610': attribute type 10 has an invalid length. [ 179.002577][T12301] loop2: detected capacity change from 0 to 256 [ 179.106145][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2614'. [ 179.170527][T12319] loop1: detected capacity change from 0 to 1024 [ 179.201590][T12319] ext4: Unknown parameter 'uid>00000000000000000000' [ 179.212054][ T8741] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 179.219550][ T8741] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 179.226959][ T8741] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 179.234370][ T8741] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 179.242965][ T8741] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.276123][T12322] loop2: detected capacity change from 0 to 2048 [ 179.318994][T12322] loop2: p1 < > p3 [ 179.323481][T12322] loop2: p3 size 134217728 extends beyond EOD, truncated [ 179.386178][T12343] loop4: detected capacity change from 0 to 1024 [ 179.400980][T12343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.401385][T12346] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 179.426849][T12346] team0: Failed to send options change via netlink (err -105) [ 179.434373][T12346] team0: Port device netdevsim1 added [ 179.472464][T12348] loop3: detected capacity change from 0 to 256 [ 179.502225][T12343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.530667][T12352] FAULT_INJECTION: forcing a failure. [ 179.530667][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 179.543402][T12352] CPU: 0 UID: 0 PID: 12352 Comm: syz.3.2627 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 179.554207][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 179.564252][T12352] Call Trace: [ 179.567590][T12352] [ 179.570511][T12352] dump_stack_lvl+0xf2/0x150 [ 179.575181][T12352] dump_stack+0x15/0x20 [ 179.579409][T12352] should_fail_ex+0x229/0x230 [ 179.584101][T12352] ? security_inode_alloc+0x32/0xd0 [ 179.589289][T12352] should_failslab+0x8f/0xb0 [ 179.593971][T12352] kmem_cache_alloc_noprof+0x4c/0x290 [ 179.599338][T12352] security_inode_alloc+0x32/0xd0 [ 179.604355][T12352] inode_init_always+0x439/0x480 [ 179.609295][T12352] ? __pfx_sock_alloc_inode+0x10/0x10 [ 179.614668][T12352] alloc_inode+0x7d/0x160 [ 179.619033][T12352] new_inode_pseudo+0x15/0x20 [ 179.623763][T12352] __sock_create+0x12b/0x4f0 [ 179.628375][T12352] sock_create_kern+0x38/0x50 [ 179.633048][T12352] udp_sock_create4+0x67/0x2a0 [ 179.637838][T12352] rxrpc_lookup_local+0x835/0xca0 [ 179.642892][T12352] rxrpc_sendmsg+0x344/0x520 [ 179.647503][T12352] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 179.652776][T12352] __sock_sendmsg+0x140/0x180 [ 179.657478][T12352] ____sys_sendmsg+0x312/0x410 [ 179.662295][T12352] __sys_sendmsg+0x1e9/0x280 [ 179.666901][T12352] __x64_sys_sendmsg+0x46/0x50 [ 179.671697][T12352] x64_sys_call+0x2689/0x2d60 [ 179.676386][T12352] do_syscall_64+0xc9/0x1c0 [ 179.680958][T12352] ? clear_bhb_loop+0x55/0xb0 [ 179.685690][T12352] ? clear_bhb_loop+0x55/0xb0 [ 179.690361][T12352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.696286][T12352] RIP: 0033:0x7fc0241279f9 [ 179.700693][T12352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.720363][T12352] RSP: 002b:00007fc022da7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.728766][T12352] RAX: ffffffffffffffda RBX: 00007fc0242b5f80 RCX: 00007fc0241279f9 [ 179.736796][T12352] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 179.744777][T12352] RBP: 00007fc022da70a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.752736][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.760765][T12352] R13: 000000000000000b R14: 00007fc0242b5f80 R15: 00007ffeda2941c8 [ 179.768772][T12352] [ 179.772273][T12352] socket: no more sockets [ 179.906564][T12358] loop3: detected capacity change from 0 to 512 [ 179.985427][T12358] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.139178][ T8754] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 180.146609][ T8754] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 180.154150][ T8754] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 180.161582][ T8754] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 180.185880][ T8754] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.226591][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2633'. [ 180.312045][T12381] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.337003][T12375] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2636'. [ 180.361881][T12384] netlink: 'syz.2.2640': attribute type 10 has an invalid length. [ 180.407242][T12392] loop2: detected capacity change from 0 to 256 [ 180.512350][T12404] FAULT_INJECTION: forcing a failure. [ 180.512350][T12404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.525689][T12404] CPU: 1 UID: 0 PID: 12404 Comm: syz.1.2647 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 180.536541][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.537762][T12402] loop2: detected capacity change from 0 to 2048 [ 180.546584][T12404] Call Trace: [ 180.546595][T12404] [ 180.546604][T12404] dump_stack_lvl+0xf2/0x150 [ 180.546637][T12404] dump_stack+0x15/0x20 [ 180.546660][T12404] should_fail_ex+0x229/0x230 [ 180.572583][T12404] should_fail+0xb/0x10 [ 180.576745][T12404] should_fail_usercopy+0x1a/0x20 [ 180.581806][T12404] _copy_from_user+0x1e/0xd0 [ 180.586411][T12404] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 180.591601][T12404] map_update_elem+0x3f7/0x4d0 [ 180.596365][T12404] __sys_bpf+0x713/0x7a0 [ 180.600603][T12404] __x64_sys_bpf+0x43/0x50 [ 180.605013][T12404] x64_sys_call+0x2625/0x2d60 [ 180.609742][T12404] do_syscall_64+0xc9/0x1c0 [ 180.614316][T12404] ? clear_bhb_loop+0x55/0xb0 [ 180.618987][T12404] ? clear_bhb_loop+0x55/0xb0 [ 180.623689][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.629631][T12404] RIP: 0033:0x7fc0f13979f9 [ 180.634095][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.653727][T12404] RSP: 002b:00007fc0f0017048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.662128][T12404] RAX: ffffffffffffffda RBX: 00007fc0f1525f80 RCX: 00007fc0f13979f9 [ 180.670088][T12404] RDX: 0000000000000020 RSI: 0000000020000200 RDI: 0000000000000002 [ 180.678089][T12404] RBP: 00007fc0f00170a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.686053][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.694011][T12404] R13: 000000000000000b R14: 00007fc0f1525f80 R15: 00007ffcac65f1f8 [ 180.701972][T12404] [ 180.734328][T12402] loop2: p1 < > p3 [ 180.740730][T12402] loop2: p3 size 134217728 extends beyond EOD, truncated [ 180.742496][T12411] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 180.752416][T12412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=12412 comm=syz.3.2651 [ 180.795645][T12416] loop1: detected capacity change from 0 to 256 [ 180.889378][T12426] loop1: detected capacity change from 0 to 1024 [ 180.914012][T12426] ext4: Unknown parameter 'uid>00000000000000000000' [ 180.957586][ T8754] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 180.965211][ T8754] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 180.972703][ T8754] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 180.980180][ T8754] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 180.988045][ T8754] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.070181][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 181.070305][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 181.088099][ T8754] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 181.097151][ T8754] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 181.099489][T12436] loop2: detected capacity change from 0 to 1024 [ 181.104571][ T8754] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 181.118321][ T8754] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 181.126211][ T8754] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.172246][T12442] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.204231][T12447] netlink: 'syz.0.2664': attribute type 10 has an invalid length. [ 181.244031][T12451] loop1: detected capacity change from 0 to 512 [ 181.305372][T12451] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.552844][T12457] netlink: 928 bytes leftover after parsing attributes in process `syz.2.2667'. [ 181.561973][T12457] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2667'. [ 181.589025][T12463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.593619][ T3329] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 181.601283][T12463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.604786][ T3329] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 181.619996][ T3329] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 181.627603][ T3329] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 181.635397][ T3329] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.707455][ T8754] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 181.714888][ T8754] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 181.722264][ T8754] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 181.729723][ T8754] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 181.738480][ T8754] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.776856][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'. [ 181.786346][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'. [ 181.817786][T12476] loop3: detected capacity change from 0 to 1024 [ 181.826711][T12476] EXT4-fs: Ignoring removed bh option [ 181.832306][T12476] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 181.848868][T12478] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.973029][T12489] netlink: 'syz.3.2675': attribute type 3 has an invalid length. [ 181.990791][T12492] FAULT_INJECTION: forcing a failure. [ 181.990791][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 182.003580][T12492] CPU: 1 UID: 0 PID: 12492 Comm: syz.1.2680 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 182.014336][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 182.024391][T12492] Call Trace: [ 182.027661][T12492] [ 182.030655][T12492] dump_stack_lvl+0xf2/0x150 [ 182.035248][T12492] dump_stack+0x15/0x20 [ 182.039433][T12492] should_fail_ex+0x229/0x230 [ 182.044299][T12492] ? getname_flags+0x81/0x3b0 [ 182.049038][T12492] should_failslab+0x8f/0xb0 [ 182.053719][T12492] kmem_cache_alloc_noprof+0x4c/0x290 [ 182.059105][T12492] getname_flags+0x81/0x3b0 [ 182.063690][T12492] user_path_at+0x26/0x110 [ 182.068113][T12492] __se_sys_mount+0x248/0x2d0 [ 182.072799][T12492] __x64_sys_mount+0x67/0x80 [ 182.077444][T12492] x64_sys_call+0x203e/0x2d60 [ 182.082149][T12492] do_syscall_64+0xc9/0x1c0 [ 182.086693][T12492] ? clear_bhb_loop+0x55/0xb0 [ 182.091374][T12492] ? clear_bhb_loop+0x55/0xb0 [ 182.096100][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.102123][T12492] RIP: 0033:0x7fc0f13979f9 [ 182.106527][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.126245][T12492] RSP: 002b:00007fc0f0017048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.134658][T12492] RAX: ffffffffffffffda RBX: 00007fc0f1525f80 RCX: 00007fc0f13979f9 [ 182.142648][T12492] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 0000000000000000 [ 182.150632][T12492] RBP: 00007fc0f00170a0 R08: 00000000200000c0 R09: 0000000000000000 [ 182.158601][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.166575][T12492] R13: 000000000000000b R14: 00007fc0f1525f80 R15: 00007ffcac65f1f8 [ 182.174553][T12492] [ 182.252763][T12503] loop2: detected capacity change from 0 to 256 [ 182.253865][T12500] loop1: detected capacity change from 0 to 1024 [ 182.301527][T12500] ext4: Unknown parameter 'uid>00000000000000000000' [ 182.326793][ T3329] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 182.334253][ T3329] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 182.341956][ T3329] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 182.349418][ T3329] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 182.354328][T12509] loop4: detected capacity change from 0 to 1024 [ 182.370195][ T3329] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.375891][T12509] ext4: Unknown parameter 'uid>00000000000000000000' [ 182.431407][ T8741] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 182.439159][ T8741] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 182.446629][ T8741] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 182.454093][ T8741] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 182.471851][ T8741] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.503187][T12518] netlink: 'syz.0.2691': attribute type 10 has an invalid length. [ 182.555598][T12529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2692'. [ 182.638274][T12541] loop1: detected capacity change from 0 to 256 [ 182.647870][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 182.647885][ T29] audit: type=1326 audit(1722654404.137:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.677840][ T29] audit: type=1326 audit(1722654404.137:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.701658][ T29] audit: type=1326 audit(1722654404.137:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.725443][ T29] audit: type=1326 audit(1722654404.137:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.748995][ T29] audit: type=1326 audit(1722654404.137:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.772557][ T29] audit: type=1326 audit(1722654404.137:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.796244][ T29] audit: type=1326 audit(1722654404.137:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.819941][ T29] audit: type=1326 audit(1722654404.137:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.843411][ T29] audit: type=1326 audit(1722654404.137:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.867175][ T29] audit: type=1326 audit(1722654404.137:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7fc00000 [ 182.996101][T12558] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 182.997412][ T8741] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 183.011420][ T8741] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 183.019060][ T8741] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 183.026703][ T8741] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 183.039817][ T8741] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.069083][T12564] loop2: detected capacity change from 0 to 128 [ 183.103749][T12569] FAULT_INJECTION: forcing a failure. [ 183.103749][T12569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.116850][T12569] CPU: 1 UID: 0 PID: 12569 Comm: syz.1.2710 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 183.120561][T12572] loop3: detected capacity change from 0 to 1024 [ 183.127659][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.127673][T12569] Call Trace: [ 183.127680][T12569] [ 183.127687][T12569] dump_stack_lvl+0xf2/0x150 [ 183.127718][T12569] dump_stack+0x15/0x20 [ 183.127742][T12569] should_fail_ex+0x229/0x230 [ 183.163804][T12569] should_fail+0xb/0x10 [ 183.167959][T12569] should_fail_usercopy+0x1a/0x20 [ 183.173102][T12569] copy_page_from_iter_atomic+0x22a/0xda0 [ 183.178817][T12569] ? shmem_write_begin+0xa0/0x1c0 [ 183.183902][T12569] ? shmem_write_begin+0x10c/0x1c0 [ 183.189011][T12569] generic_perform_write+0x323/0x580 [ 183.194376][T12569] shmem_file_write_iter+0xc8/0xf0 [ 183.199524][T12569] vfs_write+0x78f/0x900 [ 183.203769][T12569] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 183.209656][T12569] ksys_write+0xeb/0x1b0 [ 183.213960][T12569] __x64_sys_write+0x42/0x50 [ 183.218594][T12569] x64_sys_call+0x27dd/0x2d60 [ 183.223262][T12569] do_syscall_64+0xc9/0x1c0 [ 183.227827][T12569] ? clear_bhb_loop+0x55/0xb0 [ 183.232544][T12569] ? clear_bhb_loop+0x55/0xb0 [ 183.237214][T12569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.243097][T12569] RIP: 0033:0x7fc0f13964df [ 183.247496][T12569] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 183.267092][T12569] RSP: 002b:00007fc0f0016e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.275561][T12569] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fc0f13964df [ 183.283519][T12569] RDX: 0000000000080000 RSI: 00007fc0e7bf7000 RDI: 0000000000000004 [ 183.291507][T12569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000638 [ 183.299463][T12569] R10: 00000000000003d8 R11: 0000000000000293 R12: 0000000000000004 [ 183.307420][T12569] R13: 00007fc0f0016f00 R14: 00007fc0f0016ec0 R15: 00007fc0e7bf7000 [ 183.315442][T12569] [ 183.321919][T12569] loop1: detected capacity change from 0 to 1024 [ 183.344515][T12569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.353821][T12569] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.376331][T12569] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 183.413733][T12569] EXT4-fs (loop1): mount failed [ 183.415738][T12583] loop4: detected capacity change from 0 to 1024 [ 183.421064][T12579] loop2: detected capacity change from 0 to 512 [ 183.430404][T12583] ext4: Unknown parameter 'uid>00000000000000000000' [ 183.443678][T12579] EXT4-fs: Ignoring removed oldalloc option [ 183.460743][T12579] EXT4-fs (loop2): bad geometry: first data block 16777219 is beyond end of filesystem (256) [ 183.473828][ T8758] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 183.481366][ T8758] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 183.488827][ T8758] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 183.496302][ T8758] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 183.526623][T12590] loop1: detected capacity change from 0 to 256 [ 183.533219][ T8758] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.640936][T12599] netlink: 'syz.2.2721': attribute type 10 has an invalid length. [ 183.697169][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2725'. [ 183.698959][T12605] loop1: detected capacity change from 0 to 1024 [ 183.718676][T12612] Cannot find add_set index 0 as target [ 183.723048][T12605] ext4: Unknown parameter 'uid>00000000000000000000' [ 183.784691][T12619] loop4: detected capacity change from 0 to 1024 [ 183.793985][T12619] ext4: Unknown parameter 'uid>00000000000000000000' [ 183.821942][ T8754] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 183.829463][ T8754] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 183.836946][ T8754] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 183.844338][ T8754] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 183.848057][T12616] loop3: detected capacity change from 0 to 256 [ 183.852849][ T8754] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.862536][ T3329] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 183.875194][ T3329] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 183.882583][ T3329] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 183.890060][ T3329] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 183.903229][T12616] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.951945][T12627] loop4: detected capacity change from 0 to 1024 [ 183.965156][T12627] EXT4-fs: Ignoring removed orlov option [ 183.970964][T12627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.126129][ T3329] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.132869][T12634] FAULT_INJECTION: forcing a failure. [ 184.132869][T12634] name failslab, interval 1, probability 0, space 0, times 0 [ 184.148459][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.4.2732 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 184.159273][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.169398][T12634] Call Trace: [ 184.172716][T12634] [ 184.175641][T12634] dump_stack_lvl+0xf2/0x150 [ 184.180309][T12634] dump_stack+0x15/0x20 [ 184.184501][T12634] should_fail_ex+0x229/0x230 [ 184.189272][T12634] ? __alloc_skb+0x10b/0x310 [ 184.193865][T12634] should_failslab+0x8f/0xb0 [ 184.198478][T12634] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 184.204268][T12634] __alloc_skb+0x10b/0x310 [ 184.208734][T12634] netlink_alloc_large_skb+0xad/0xe0 [ 184.214011][T12634] netlink_sendmsg+0x3b4/0x6e0 [ 184.218849][T12634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.224185][T12634] __sock_sendmsg+0x140/0x180 [ 184.228958][T12634] ____sys_sendmsg+0x312/0x410 [ 184.233712][T12634] __sys_sendmmsg+0x269/0x500 [ 184.238394][T12634] __x64_sys_sendmmsg+0x57/0x70 [ 184.243275][T12634] x64_sys_call+0xa49/0x2d60 [ 184.247874][T12634] do_syscall_64+0xc9/0x1c0 [ 184.252385][T12634] ? clear_bhb_loop+0x55/0xb0 [ 184.257125][T12634] ? clear_bhb_loop+0x55/0xb0 [ 184.261841][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.267726][T12634] RIP: 0033:0x7feeb6ca79f9 [ 184.272152][T12634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.291753][T12634] RSP: 002b:00007feeb5927048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.300212][T12634] RAX: ffffffffffffffda RBX: 00007feeb6e35f80 RCX: 00007feeb6ca79f9 [ 184.308170][T12634] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 184.316127][T12634] RBP: 00007feeb59270a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.324199][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.332163][T12634] R13: 000000000000004d R14: 00007feeb6e35f80 R15: 00007ffdadb94e08 [ 184.340284][T12634] [ 184.388324][T12643] netlink: 'syz.1.2736': attribute type 4 has an invalid length. [ 184.404534][T12645] netlink: 'syz.4.2737': attribute type 10 has an invalid length. [ 184.407809][T12643] loop1: detected capacity change from 0 to 1024 [ 184.432545][T12649] netlink: 'syz.3.2738': attribute type 4 has an invalid length. [ 184.449089][T12643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.474032][T12643] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.476011][T12651] netlink: 'syz.4.2740': attribute type 2 has an invalid length. [ 184.484961][T12643] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 184.496678][T12643] EXT4-fs (loop1): invalid journal inode [ 184.539605][T12654] loop3: detected capacity change from 0 to 1024 [ 184.550756][T12643] EXT4-fs (loop1): can't get journal size [ 184.566992][T12654] ext4: Unknown parameter 'uid>00000000000000000000' [ 184.574003][T12643] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.2736: blocks 3-3 from inode overlap system zone [ 184.608934][T12660] loop4: detected capacity change from 0 to 256 [ 184.609856][T12643] EXT4-fs (loop1): failed to initialize system zone (-117) [ 184.620713][T12661] FAULT_INJECTION: forcing a failure. [ 184.620713][T12661] name failslab, interval 1, probability 0, space 0, times 0 [ 184.622418][T12643] EXT4-fs (loop1): mount failed [ 184.635036][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.2.2743 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 184.650875][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.660927][T12661] Call Trace: [ 184.664193][T12661] [ 184.667111][T12661] dump_stack_lvl+0xf2/0x150 [ 184.671760][T12661] dump_stack+0x15/0x20 [ 184.675908][T12661] should_fail_ex+0x229/0x230 [ 184.680584][T12661] ? skb_clone+0x154/0x1f0 [ 184.684990][T12661] should_failslab+0x8f/0xb0 [ 184.689574][T12661] kmem_cache_alloc_noprof+0x4c/0x290 [ 184.694939][T12661] skb_clone+0x154/0x1f0 [ 184.699172][T12661] __netlink_deliver_tap+0x2bd/0x4c0 [ 184.704450][T12661] netlink_unicast+0x641/0x670 [ 184.709279][T12661] netlink_sendmsg+0x5cc/0x6e0 [ 184.714034][T12661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.719311][T12661] __sock_sendmsg+0x140/0x180 [ 184.724017][T12661] ____sys_sendmsg+0x312/0x410 [ 184.728852][T12661] __sys_sendmmsg+0x269/0x500 [ 184.733541][T12661] __x64_sys_sendmmsg+0x57/0x70 [ 184.738409][T12661] x64_sys_call+0xa49/0x2d60 [ 184.743054][T12661] do_syscall_64+0xc9/0x1c0 [ 184.747572][T12661] ? clear_bhb_loop+0x55/0xb0 [ 184.752334][T12661] ? clear_bhb_loop+0x55/0xb0 [ 184.757002][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.762885][T12661] RIP: 0033:0x7fa4bc2f79f9 [ 184.767348][T12661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.786944][T12661] RSP: 002b:00007fa4baf77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.795459][T12661] RAX: ffffffffffffffda RBX: 00007fa4bc485f80 RCX: 00007fa4bc2f79f9 [ 184.803417][T12661] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 184.811434][T12661] RBP: 00007fa4baf770a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.819771][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.827735][T12661] R13: 000000000000000b R14: 00007fa4bc485f80 R15: 00007ffea27c1d98 [ 184.835784][T12661] [ 184.908078][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 184.933891][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 184.940271][T12671] loop2: detected capacity change from 0 to 512 [ 184.955271][T12677] openvswitch: netlink: Port 285220524 exceeds max allowable 65535 [ 184.966008][T12671] EXT4-fs: Ignoring removed bh option [ 184.972388][T12677] Cannot find add_set index 0 as target [ 184.982935][T12671] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.2747: invalid block [ 185.000569][T12671] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2747: couldn't read orphan inode 15 (err -117) [ 185.020196][T12683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.030361][T12684] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 185.053076][T12692] loop4: detected capacity change from 0 to 1024 [ 185.060082][T12692] ext4: Unknown parameter 'uid>00000000000000000000' [ 185.063408][T12671] loop2: detected capacity change from 512 to 0 [ 185.068398][ T3341] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 185.080471][ T3341] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 185.087902][ T3341] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 185.095607][ T3341] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 185.108878][T12671] bio_check_eod: 12 callbacks suppressed [ 185.108891][T12671] syz.2.2747: attempt to access beyond end of device [ 185.108891][T12671] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 185.109402][ T3341] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.137858][T12671] syz.2.2747: attempt to access beyond end of device [ 185.137858][T12671] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 185.154071][T12671] syz.2.2747: attempt to access beyond end of device [ 185.154071][T12671] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 185.168672][T12671] syz.2.2747: attempt to access beyond end of device [ 185.168672][T12671] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 185.182426][T12671] syz.2.2747: attempt to access beyond end of device [ 185.182426][T12671] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 185.196246][T12671] syz.2.2747: attempt to access beyond end of device [ 185.196246][T12671] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 185.200447][T12701] loop4: detected capacity change from 0 to 128 [ 185.216183][T12671] syz.2.2747: attempt to access beyond end of device [ 185.216183][T12671] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 185.230114][T12671] syz.2.2747: attempt to access beyond end of device [ 185.230114][T12671] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 185.247362][T12671] syz.2.2747: attempt to access beyond end of device [ 185.247362][T12671] loop2: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 185.260794][T12671] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.2.2747: unable to read itable block [ 185.276230][T12702] syz.2.2747: attempt to access beyond end of device [ 185.276230][T12702] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 185.283493][T12671] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 185.290250][T12702] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.2.2747: unable to read itable block [ 185.308033][T12671] EXT4-fs (loop2): I/O error while writing superblock [ 185.313747][T12702] EXT4-fs (loop2): previous I/O error to superblock detected [ 185.327417][T12702] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 185.342855][T12702] EXT4-fs (loop2): I/O error while writing superblock [ 185.356591][T12710] loop3: detected capacity change from 0 to 256 [ 185.467078][T12719] __nla_validate_parse: 3 callbacks suppressed [ 185.467146][T12719] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.2765'. [ 185.562500][T12730] loop3: detected capacity change from 0 to 512 [ 185.587323][T12730] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.591642][T12732] loop4: detected capacity change from 0 to 1024 [ 185.606683][T12732] ext4: Unknown parameter 'uid>00000000000000000000' [ 185.616479][ T3341] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 185.623919][ T3341] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 185.631456][ T3341] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 185.638860][ T3341] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 185.646697][ T3341] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.684928][T12741] batadv_slave_1: entered promiscuous mode [ 185.718942][T12741] IPv6: Can't replace route, no match found [ 185.725389][T12740] batadv_slave_1: left promiscuous mode [ 185.752779][T12749] validate_nla: 2 callbacks suppressed [ 185.752795][T12749] netlink: 'syz.4.2774': attribute type 10 has an invalid length. [ 185.782619][T11813] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 185.794382][T12756] FAULT_INJECTION: forcing a failure. [ 185.794382][T12756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.800395][T11813] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 185.809697][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.4.2777 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 185.825599][T11813] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 185.833142][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 185.833155][T12756] Call Trace: [ 185.833164][T12756] [ 185.842121][T11813] EXT4-fs (loop2): I/O error while writing superblock [ 185.851528][T12756] dump_stack_lvl+0xf2/0x150 [ 185.851563][T12756] dump_stack+0x15/0x20 [ 185.854875][T11813] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 185.857735][T12756] should_fail_ex+0x229/0x230 [ 185.886628][T12756] should_fail_alloc_page+0xfd/0x110 [ 185.891917][T12756] __alloc_pages_noprof+0x109/0x360 [ 185.897200][T12756] ___kmalloc_large_node+0x7a/0x120 [ 185.902461][T12756] __kmalloc_large_node_noprof+0x17/0xa0 [ 185.908085][T12756] ? __se_sys_futex_waitv+0x10b/0x360 [ 185.913451][T12756] __kmalloc_noprof+0x236/0x370 [ 185.918291][T12756] __se_sys_futex_waitv+0x10b/0x360 [ 185.923604][T12756] ? ksys_write+0x178/0x1b0 [ 185.928116][T12756] __x64_sys_futex_waitv+0x67/0x80 [ 185.933245][T12756] x64_sys_call+0x2981/0x2d60 [ 185.937958][T12756] do_syscall_64+0xc9/0x1c0 [ 185.942464][T12756] ? clear_bhb_loop+0x55/0xb0 [ 185.947286][T12756] ? clear_bhb_loop+0x55/0xb0 [ 185.951957][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.957845][T12756] RIP: 0033:0x7feeb6ca79f9 [ 185.962248][T12756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.981856][T12756] RSP: 002b:00007feeb5927048 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 185.990337][T12756] RAX: ffffffffffffffda RBX: 00007feeb6e35f80 RCX: 00007feeb6ca79f9 [ 185.998303][T12756] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 0000000020001740 [ 186.006262][T12756] RBP: 00007feeb59270a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.014221][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.022235][T12756] R13: 000000000000004d R14: 00007feeb6e35f80 R15: 00007ffdadb94e08 [ 186.030198][T12756] [ 186.035818][T12679] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm ext4lazyinit: Error while async write back metadata [ 186.049003][T11813] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 186.060707][T11813] EXT4-fs (loop2): I/O error while writing superblock [ 186.067560][T11813] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 186.069871][T12757] FAULT_INJECTION: forcing a failure. [ 186.069871][T12757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.080840][T12679] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 186.092030][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.3.2779 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 186.100237][T11813] EXT4-fs (loop2): previous I/O error to superblock detected [ 186.110939][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 186.118468][T11813] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 186.128310][T12757] Call Trace: [ 186.128320][T12757] [ 186.128328][T12757] dump_stack_lvl+0xf2/0x150 [ 186.147402][T12757] dump_stack+0x15/0x20 [ 186.151638][T12757] should_fail_ex+0x229/0x230 [ 186.156346][T12757] should_fail+0xb/0x10 [ 186.160556][T12757] should_fail_usercopy+0x1a/0x20 [ 186.165581][T12757] _copy_to_user+0x1e/0xa0 [ 186.169991][T12757] simple_read_from_buffer+0xa0/0x110 [ 186.175355][T12757] proc_fail_nth_read+0xfc/0x140 [ 186.180362][T12757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.186044][T12757] vfs_read+0x1a2/0x6e0 [ 186.190196][T12757] ? __rcu_read_unlock+0x4e/0x70 [ 186.195122][T12757] ? __fget_files+0x1da/0x210 [ 186.199794][T12757] ksys_read+0xeb/0x1b0 [ 186.203951][T12757] __x64_sys_read+0x42/0x50 [ 186.208505][T12757] x64_sys_call+0x27d3/0x2d60 [ 186.213231][T12757] do_syscall_64+0xc9/0x1c0 [ 186.217742][T12757] ? clear_bhb_loop+0x55/0xb0 [ 186.222450][T12757] ? clear_bhb_loop+0x55/0xb0 [ 186.227123][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.233041][T12757] RIP: 0033:0x7fc02412643c [ 186.237444][T12757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 186.257049][T12757] RSP: 002b:00007fc022da7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.265453][T12757] RAX: ffffffffffffffda RBX: 00007fc0242b5f80 RCX: 00007fc02412643c [ 186.273456][T12757] RDX: 000000000000000f RSI: 00007fc022da70b0 RDI: 0000000000000009 [ 186.281424][T12757] RBP: 00007fc022da70a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.289445][T12757] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 186.297405][T12757] R13: 000000000000000b R14: 00007fc0242b5f80 R15: 00007ffeda2941c8 [ 186.305463][T12757] [ 186.309181][T12679] EXT4-fs (loop2): I/O error while writing superblock [ 186.339186][T11120] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:10: unable to read itable block [ 186.363806][T11120] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 186.372573][T11120] EXT4-fs (loop2): I/O error while writing superblock [ 186.376336][T12764] loop4: detected capacity change from 0 to 2048 [ 186.386834][T11813] EXT4-fs unmount: 13 callbacks suppressed [ 186.386847][T11813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.422872][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2784'. [ 186.453916][T11813] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 186.467856][T12774] loop1: detected capacity change from 0 to 512 [ 186.494305][T12764] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2781: bad orphan inode 8192 [ 186.507952][T11813] EXT4-fs (loop2): I/O error while writing superblock [ 186.517427][T12774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 186.530643][T12774] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.554044][T12764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.581418][T12764] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2781: corrupted in-inode xattr: e_name out of bounds [ 186.690315][T12784] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.776083][ T7634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.826348][T12791] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 186.878338][T12795] loop4: detected capacity change from 0 to 512 [ 186.886492][T12795] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 2048 [ 186.947593][ T3337] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 186.955129][ T3337] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 186.962530][ T3337] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 186.969971][ T3337] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 186.999391][ T3337] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.093943][T12815] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2797'. [ 187.199509][T12803] chnl_net:caif_netlink_parms(): no params data found [ 187.218225][T12084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 187.252609][T12821] netlink: 'syz.0.2799': attribute type 10 has an invalid length. [ 187.322369][T12833] loop3: detected capacity change from 0 to 512 [ 187.341080][T12835] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.357328][T12803] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.364432][T12803] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.379022][T12833] EXT4-fs: Ignoring removed nobh option [ 187.402681][T12803] bridge_slave_0: entered allmulticast mode [ 187.410580][T12833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.422082][T12803] bridge_slave_0: entered promiscuous mode [ 187.440596][T12803] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.447702][T12803] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.459143][T12833] EXT4-fs (loop3): 1 truncate cleaned up [ 187.465517][T12833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.479160][T12842] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 187.496698][T12803] bridge_slave_1: entered allmulticast mode [ 187.503947][T12803] bridge_slave_1: entered promiscuous mode [ 187.510707][T12822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.539725][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.567520][T12803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.577565][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 187.585127][T12803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.618250][T12803] team0: Port device team_slave_0 added [ 187.637463][T12803] team0: Port device team_slave_1 added [ 187.686872][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.699305][T12803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.702428][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.706270][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.730548][T12858] loop3: detected capacity change from 0 to 1024 [ 187.739893][T12803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.757000][T12858] ext4: Unknown parameter 'uid>00000000000000000000' [ 187.758306][T12803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.770690][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.770847][T12855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.796568][T12803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.810533][ T3341] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 187.823467][ T3341] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 187.830851][ T3341] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 187.838362][ T3341] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 187.846146][T12855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.862523][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 187.862537][ T29] audit: type=1326 audit(1722654409.347:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 187.887897][ T3341] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.895437][ T29] audit: type=1326 audit(1722654409.347:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 187.925297][ T29] audit: type=1326 audit(1722654409.347:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 187.948823][ T29] audit: type=1326 audit(1722654409.347:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 187.972297][ T29] audit: type=1326 audit(1722654409.347:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 187.995797][ T29] audit: type=1326 audit(1722654409.347:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 188.019275][ T29] audit: type=1326 audit(1722654409.347:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 188.042769][ T29] audit: type=1326 audit(1722654409.347:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 188.066997][ T29] audit: type=1326 audit(1722654409.457:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 188.080966][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.090503][ T29] audit: type=1326 audit(1722654409.457:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f13979f9 code=0x7ffc0000 [ 188.099808][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.144702][T12803] hsr_slave_0: entered promiscuous mode [ 188.150970][T12803] hsr_slave_1: entered promiscuous mode [ 188.157221][T12803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.165461][T12803] Cannot create hsr debugfs directory [ 188.171274][T12863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2810'. [ 188.274485][T12803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.289050][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'. [ 188.332882][T12803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.381949][T12871] loop1: detected capacity change from 0 to 512 [ 188.388452][T12871] EXT4-fs: Ignoring removed nobh option [ 188.394482][T12871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.408751][T12871] EXT4-fs (loop1): 1 truncate cleaned up [ 188.409071][T12803] team0: Port device netdevsim1 removed [ 188.415452][T12871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.424776][T12803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.511656][T12878] loop4: detected capacity change from 0 to 512 [ 188.608580][T12871] loop1: detected capacity change from 512 to 0 [ 188.616200][T12878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 188.628693][T12878] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.712716][T12084] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 188.741684][T12803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.783163][T12084] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 188.810850][T12084] EXT4-fs (loop1): I/O error while writing superblock [ 188.817671][T12084] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 188.826461][T12084] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 188.834800][T12084] EXT4-fs (loop1): I/O error while writing superblock [ 188.841557][T12084] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 188.854545][T12084] EXT4-fs (loop1): I/O error while writing superblock [ 188.867105][T11124] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #18: block 9: comm kworker/u8:13: unable to read itable block [ 188.899588][T12803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.905222][T11124] EXT4-fs (loop1): I/O error while writing superblock [ 188.913198][T11124] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:13: unable to read itable block [ 188.927869][T11124] EXT4-fs (loop1): I/O error while writing superblock [ 188.930072][T12803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.942259][T12084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.952888][T12084] EXT4-fs (loop1): I/O error while writing superblock [ 188.956193][T12803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.968620][T12803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.969136][T12886] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.028141][T12803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.042406][T12803] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.052263][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.059408][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.072450][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.079518][ T8758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.110024][T12803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.158902][T12803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.190612][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.224626][T12897] loop3: detected capacity change from 0 to 512 [ 189.248816][ T7634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 189.263293][T12897] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2821: bad orphan inode 15 [ 189.276541][T12897] ext4_test_bit(bit=14, block=5) = 0 [ 189.283305][T12897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.301701][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.328523][T12803] veth0_vlan: entered promiscuous mode [ 189.337297][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.368221][T12803] veth1_vlan: entered promiscuous mode [ 189.393095][T12803] veth0_macvtap: entered promiscuous mode [ 189.403815][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 189.416025][T12803] veth1_macvtap: entered promiscuous mode [ 189.429520][ T11] team0: Port device netdevsim1 removed [ 189.445354][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2825'. [ 189.448633][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.479890][T12922] netlink: 'syz.4.2827': attribute type 10 has an invalid length. [ 189.500596][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.511061][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.520885][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.531326][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.541182][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.551638][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.561831][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.572351][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.582344][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.592866][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.602730][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.613206][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.623125][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.633562][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.643470][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.653944][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.663758][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.674196][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.687239][T12803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.701369][T12939] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.714889][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.732155][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.742706][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.752549][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.763015][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.772827][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.783273][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.793097][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.803517][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.813315][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.823784][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.833662][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.844095][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.853922][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.864438][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.874310][T12803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.884793][T12803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.896762][T12803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.914865][T12803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.923643][T12803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.932386][T12803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.941250][T12803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.992549][ T11] bridge_slave_1: left allmulticast mode [ 189.998422][ T11] bridge_slave_1: left promiscuous mode [ 190.004056][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.013076][ T11] bridge_slave_0: left allmulticast mode [ 190.018853][ T11] bridge_slave_0: left promiscuous mode [ 190.024593][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.125729][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.136254][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.146352][ T11] bond0 (unregistering): Released all slaves [ 190.219158][ T11] hsr_slave_0: left promiscuous mode [ 190.225237][ T11] hsr_slave_1: left promiscuous mode [ 190.231236][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.238717][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.246281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.253698][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.263192][ T11] veth1_macvtap: left promiscuous mode [ 190.268875][ T11] veth0_macvtap: left promiscuous mode [ 190.274592][ T11] veth1_vlan: left promiscuous mode [ 190.279796][ T11] veth0_vlan: left promiscuous mode [ 190.360390][ T11] team0 (unregistering): Port device team_slave_1 removed [ 190.373417][ T11] team0 (unregistering): Port device team_slave_0 removed [ 190.423575][T12900] chnl_net:caif_netlink_parms(): no params data found [ 190.440897][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 190.449889][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2832'. [ 190.502709][T12968] loop3: detected capacity change from 0 to 2048 [ 190.520354][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.520980][T12968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.527475][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.527909][T12900] bridge_slave_0: entered allmulticast mode [ 190.554124][T12900] bridge_slave_0: entered promiscuous mode [ 190.564244][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.571387][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.578761][T12900] bridge_slave_1: entered allmulticast mode [ 190.579168][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.585588][T12900] bridge_slave_1: entered promiscuous mode [ 190.624537][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.635261][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.660637][T12900] team0: Port device team_slave_0 added [ 190.668896][T12900] team0: Port device team_slave_1 added [ 190.684717][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.691687][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.717585][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.722726][T12976] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.728983][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.744515][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.770595][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.811421][T12978] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.821627][T12900] hsr_slave_0: entered promiscuous mode [ 190.827713][T12900] hsr_slave_1: entered promiscuous mode [ 190.834157][T12900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.841710][T12900] Cannot create hsr debugfs directory [ 191.090240][T12900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.108187][T12900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.125490][T12995] __nla_validate_parse: 1 callbacks suppressed [ 191.125505][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2844'. [ 191.143438][T12900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.155669][T12900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.174220][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.181282][T12900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.188524][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.195704][T12900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.236423][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.248100][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.256255][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.278515][T12900] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.292285][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.299375][ T8758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.311750][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.318874][ T8741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.350759][T12900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.403048][T12900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.471882][T12900] veth0_vlan: entered promiscuous mode [ 191.482272][T12900] veth1_vlan: entered promiscuous mode [ 191.503702][T12900] veth0_macvtap: entered promiscuous mode [ 191.511870][T12900] veth1_macvtap: entered promiscuous mode [ 191.523998][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.534627][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.544457][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.555025][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.565004][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.575657][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.585546][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.595990][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.603199][T13015] loop3: detected capacity change from 0 to 2048 [ 191.605807][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.622532][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.632350][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.642853][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.652744][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.663165][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.673082][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.683519][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.693490][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.703992][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.716184][T12900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.724862][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.731956][T13015] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2847: bad orphan inode 8192 [ 191.735374][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.735390][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.735405][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.735418][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.768543][T13015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.775680][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.775705][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.775718][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.828406][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.838884][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.839169][T13015] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2847: corrupted in-inode xattr: e_name out of bounds [ 191.848717][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.848735][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.848749][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.893475][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.903360][T12900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.913791][T12900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.925396][T12900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.932834][T13017] netlink: 'syz.4.2848': attribute type 10 has an invalid length. [ 191.952307][T12900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.961131][T12900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.962535][T13021] loop4: detected capacity change from 0 to 256 [ 191.970025][T12900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.984941][T12900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.019563][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.100637][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 192.110314][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 192.118284][T13038] FAULT_INJECTION: forcing a failure. [ 192.118284][T13038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.132399][T13038] CPU: 1 UID: 0 PID: 13038 Comm: syz.3.2855 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 192.143332][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 192.153391][T13038] Call Trace: [ 192.156668][T13038] [ 192.159584][T13038] dump_stack_lvl+0xf2/0x150 [ 192.164164][T13038] dump_stack+0x15/0x20 [ 192.168331][T13038] should_fail_ex+0x229/0x230 [ 192.173017][T13038] should_fail+0xb/0x10 [ 192.177184][T13038] should_fail_usercopy+0x1a/0x20 [ 192.182190][T13038] strncpy_from_user+0x25/0x270 [ 192.187123][T13038] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 192.192787][T13038] getname_flags+0xb0/0x3b0 [ 192.197313][T13038] user_path_at+0x26/0x110 [ 192.201721][T13038] __se_sys_mount+0x248/0x2d0 [ 192.206453][T13038] __x64_sys_mount+0x67/0x80 [ 192.211036][T13038] x64_sys_call+0x203e/0x2d60 [ 192.215707][T13038] do_syscall_64+0xc9/0x1c0 [ 192.220275][T13038] ? clear_bhb_loop+0x55/0xb0 [ 192.224954][T13038] ? clear_bhb_loop+0x55/0xb0 [ 192.229619][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.235524][T13038] RIP: 0033:0x7fc0241279f9 [ 192.239925][T13038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.259543][T13038] RSP: 002b:00007fc022da7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.267941][T13038] RAX: ffffffffffffffda RBX: 00007fc0242b5f80 RCX: 00007fc0241279f9 [ 192.275898][T13038] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 0000000000000000 [ 192.283858][T13038] RBP: 00007fc022da70a0 R08: 00000000200000c0 R09: 0000000000000000 [ 192.291814][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.299770][T13038] R13: 000000000000000b R14: 00007fc0242b5f80 R15: 00007ffeda2941c8 [ 192.307739][T13038] [ 192.369338][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 192.432847][T13034] loop2: detected capacity change from 0 to 512 [ 192.450731][T13034] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 192.711681][T13065] loop1: detected capacity change from 0 to 512 [ 193.244718][T13065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 193.257342][T13065] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.391466][T13071] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.481549][T12900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 193.481636][T13077] netlink: 'syz.3.2866': attribute type 4 has an invalid length. [ 193.520574][T13084] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 193.552007][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 193.552021][ T29] audit: type=1326 audit(1722654415.036:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.553867][ T29] audit: type=1326 audit(1722654415.036:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.584443][T13089] loop3: detected capacity change from 0 to 4096 [ 193.605756][ T29] audit: type=1326 audit(1722654415.036:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc024126390 code=0x7ffc0000 [ 193.635680][ T29] audit: type=1326 audit(1722654415.036:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.654127][ T29] audit: type=1326 audit(1722654415.046:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.682544][ T29] audit: type=1326 audit(1722654415.046:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.706041][ T29] audit: type=1326 audit(1722654415.046:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.729747][ T29] audit: type=1326 audit(1722654415.046:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.729775][ T29] audit: type=1326 audit(1722654415.046:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.729864][ T29] audit: type=1326 audit(1722654415.046:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.3.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0241279f9 code=0x7ffc0000 [ 193.777901][T13089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.885622][T13089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.897968][T13109] loop4: detected capacity change from 0 to 256 [ 193.918473][T13111] loop2: detected capacity change from 0 to 1024 [ 193.935671][T13111] ext4: Unknown parameter 'uid>00000000000000000000' [ 193.947159][ T3337] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 193.954604][ T3337] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 193.962011][ T3337] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 193.969569][ T3337] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 193.984569][ T3337] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.998708][T13117] netlink: 'syz.4.2878': attribute type 1 has an invalid length. [ 194.006557][T13117] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2878'. [ 194.019599][T13121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2880'. [ 194.090944][T13129] netlink: 'syz.4.2883': attribute type 1 has an invalid length. [ 194.107830][T13133] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.122778][T13131] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 194.134053][T13131] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 194.143211][T13131] team0: Failed to send options change via netlink (err -105) [ 194.150787][T13131] team0: Port device netdevsim1 added [ 194.158387][ T8758] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 194.178301][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 194.202482][T13140] loop1: detected capacity change from 0 to 512 [ 194.221899][T13140] /dev/loop1: Can't open blockdev [ 194.227450][T13135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.237606][T13135] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 194.279673][T13139] loop1: detected capacity change from 0 to 512 [ 194.315775][T13147] loop4: detected capacity change from 0 to 256 [ 194.355864][T13139] loop1: detected capacity change from 0 to 512 [ 194.359314][T13149] loop3: detected capacity change from 0 to 512 [ 194.394022][T13149] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.408733][T13139] loop1: detected capacity change from 0 to 512 [ 194.409806][T13149] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 194.443868][T13149] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.2890: inode #15: comm syz.3.2890: iget: illegal inode # [ 194.463440][T13149] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2890: couldn't read orphan inode 15 (err -117) [ 194.487802][T13149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.508865][T13139] loop1: detected capacity change from 0 to 512 [ 194.516167][T13160] tmpfs: Bad value for 'mpol' [ 194.522023][T13139] ================================================================== [ 194.530112][T13139] BUG: KCSAN: data-race in fsnotify / fsnotify_put_mark [ 194.532891][T13160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2894'. [ 194.537040][T13139] [ 194.537048][T13139] write to 0xffff8881001d2890 of 4 bytes by task 3612 on cpu 1: [ 194.537063][T13139] fsnotify_put_mark+0x2d8/0x5d0 [ 194.560832][T13139] __se_sys_inotify_rm_watch+0x105/0x180 [ 194.566457][T13139] __x64_sys_inotify_rm_watch+0x31/0x40 [ 194.572000][T13139] x64_sys_call+0x1ae0/0x2d60 [ 194.576660][T13139] do_syscall_64+0xc9/0x1c0 [ 194.581151][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.587039][T13139] [ 194.589347][T13139] read to 0xffff8881001d2890 of 4 bytes by task 13139 on cpu 0: [ 194.596959][T13139] fsnotify+0x36c/0x11a0 [ 194.601188][T13139] __fsnotify_parent+0x285/0x380 [ 194.606108][T13139] __fput+0x5ca/0x6f0 [ 194.610077][T13139] __fput_sync+0x44/0x60 [ 194.614310][T13139] __se_sys_close+0x101/0x1b0 [ 194.618980][T13139] __x64_sys_close+0x1f/0x30 [ 194.623561][T13139] x64_sys_call+0x25cb/0x2d60 [ 194.628228][T13139] do_syscall_64+0xc9/0x1c0 [ 194.632723][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.638607][T13139] [ 194.640916][T13139] value changed: 0x00002008 -> 0x00000000 [ 194.646612][T13139] [ 194.648916][T13139] Reported by Kernel Concurrency Sanitizer on: [ 194.655043][T13139] CPU: 0 UID: 0 PID: 13139 Comm: syz.1.2886 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 194.665789][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.675829][T13139] ================================================================== [ 194.694066][T13139] loop1: detected capacity change from 0 to 512 [ 194.705868][T13139] loop1: detected capacity change from 0 to 512 [ 194.719722][T13139] loop1: detected capacity change from 0 to 512 [ 194.737524][T13139] loop1: detected capacity change from 0 to 512 [ 194.744865][T13165] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2890: bg 0: block 19: invalid block bitmap [ 194.764512][T13139] loop1: detected capacity change from 0 to 512 [ 194.780399][T13139] loop1: detected capacity change from 0 to 512 [ 194.794560][T13139] loop1: detected capacity change from 0 to 512 [ 194.810076][T13139] loop1: detected capacity change from 0 to 512 [ 194.824584][T13139] loop1: detected capacity change from 0 to 512 [ 194.840607][T13139] loop1: detected capacity change from 0 to 512 [ 194.854697][T13139] loop1: detected capacity change from 0 to 512 [ 194.865723][T13139] loop1: detected capacity change from 0 to 512 [ 194.876524][T13139] loop1: detected capacity change from 0 to 512 [ 194.889434][T13139] loop1: detected capacity change from 0 to 512 [ 195.192445][T11503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.