last executing test programs: 1m36.450063194s ago: executing program 3 (id=767): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_bp={0x0, 0x2}, 0x10a0a1, 0x5dda, 0x3, 0x5, 0x4, 0x4000008, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x3, 0x44, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r2, 0x0, 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x7b8, 0x0, 0x2b8, 0xb0000010, 0x450, 0x5c8f0200, 0x6e8, 0x3a8, 0x3a8, 0x6e8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'wlan1\x00', 'veth0_to_team\x00', {}, {}, 0x87, 0x0, 0x2}, 0x0, 0x430, 0x450, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x8, 0xffdffffa, 0x5, 0x2, 0xb0, 0x68}}}, @common=@unspec=@bpf0={{0x230}, {0x2, [{0x6, 0x7, 0x10, 0x574b}, {0xc29e, 0xf2, 0x3, 0x7fff}, {0x42, 0xfd, 0x5, 0x5}, {0x4, 0x0, 0x8, 0xd9}, {0x9873, 0x5, 0x6, 0x6}, {0xa98c, 0x1, 0x9, 0x9}, {0x4, 0xd, 0x1, 0x6}, {0xf001, 0x0, 0x7f, 0x3}, {0xf, 0x5, 0x2, 0x6a5f}, {0xa, 0x2, 0x3, 0x6}, {0x93, 0x2, 0x10, 0xff}, {0x4, 0x4a, 0x0, 0x5}, {0xd69, 0xd, 0x0, 0x2}, {0x4e, 0x1, 0x9, 0xd02e}, {0x0, 0x3, 0x8, 0xd13}, {0xe7, 0xf0, 0xd, 0x4}, {0x9a, 0x8, 0x5}, {0x0, 0xff, 0x59, 0x5}, {0x6000, 0x40, 0x0, 0x81}, {0x5, 0xa, 0x8, 0xfffffffa}, {0x76, 0x14, 0x2, 0x6}, {0x5, 0x2, 0x8, 0x4}, {0x200, 0x9, 0x7, 0x6}, {0x4, 0x8, 0xf, 0x6}, {0x76, 0x6, 0x1, 0x3ff}, {0xb7, 0x3b, 0x3, 0x1}, {0x40, 0x8e, 0x5, 0x83}, {0x5, 0x8, 0xef}, {0x7, 0x2, 0x4, 0x3}, {0x1, 0x4}, {0x5, 0x3, 0xf2, 0xa}, {0x2, 0x8, 0x0, 0xfffff001}, {0x7fff, 0x0, 0x1, 0x7}, {0x8, 0x1c, 0x7, 0x2}, {0xffff, 0xfb, 0x4}, {0x4, 0x9, 0x5, 0x7fffffff}, {0x2, 0x7, 0x81, 0x7ff}, {0x800, 0xa, 0x7, 0xe}, {0x80, 0x1, 0x9, 0x3}, {0x9, 0xe9, 0x6, 0x5}, {0x9, 0x2, 0x68, 0x9}, {0x8005, 0x9, 0xc0, 0x1}, {0x87e1, 0x8, 0x8, 0x2}, {0x200, 0x5, 0xc}, {0xffff, 0x8, 0x6, 0x329b88fe}, {0x8, 0xb, 0x75, 0x2}, {0xff, 0x5, 0xa, 0x8}, {0x3, 0x8, 0x6, 0x7}, {0x3, 0x43, 0x0, 0x8}, {0x4, 0x5, 0x6, 0x3e4}, {0x9, 0xc, 0x2, 0xffffffff}, {0x9, 0xd7, 0x8f, 0x6}, {0x7f, 0xf, 0xff, 0x6}, {0x9a50, 0x4, 0xd7, 0x1}, {0x7, 0x1, 0x6, 0x1}, {0xfc00, 0x5, 0x22, 0xfff}, {0x4, 0x6, 0x8, 0x9}, {0x5, 0x2, 0x1, 0x3}, {0x5, 0x7, 0x3, 0x7f}, {0x9, 0x0, 0x8}, {0x3, 0x0, 0xd, 0xad3}, {0xedcb, 0x9, 0x2, 0x6}, {0x8001, 0x1, 0x7f, 0x2}, {0x6, 0xbd, 0x80, 0x8}], {0xe00000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0xba7b, 0x59, 0x20, 0x6f1f6a1, 0x6, 0x2, 0x7, 0x10, 0x48, 0x40}, {0x7}}}, @common=@frag={{0x30}, {[0x3, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x818) unshare(0x2a020400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 1m36.161852093s ago: executing program 3 (id=775): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000028001200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r6, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='wake_reaper\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000c80)={{0x80, 0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x6, 0x0, 0x4000, 0x0, 0xbf, 0x4}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m35.937893712s ago: executing program 3 (id=778): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) io_setup(0xff, &(0x7f0000000240)=0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x81, 0x4, 0x3, 0x1000000}]}) epoll_create1(0x0) io_submit(r2, 0x0, 0x0) 1m35.838992192s ago: executing program 3 (id=782): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r1, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x2, &(0x7f0000000280)={0x0, 0x28, 0x4, @thr={&(0x7f00000003c0), &(0x7f0000000540)="1d958d49bac805d782d29446216a55967305caaf56135f3a6b37d3e50199f3c6aded43d2fd6fa3e7aba75bbe6084f0514866bc4438b441b06f0d536e46f793ea9ad42343c01ae2af016eb4f4db9a09c34c7d37afb37bcb1522e156cd5bae2c0ff45c9a62baa5d127de940372445a"}}, &(0x7f0000000600)=0x0) clock_gettime(0x0, 0x0) r6 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) timer_settime(r5, 0x0, &(0x7f0000000680), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") 1m34.964005508s ago: executing program 3 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1000000) 1m34.699201127s ago: executing program 3 (id=808): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000004c0)=""/189, 0xbd, 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x6b91, 0x1, 0x7fff, 0x2fe}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000940)={&(0x7f0000000300)={0x2, 0x2, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000640)="9dbe", 0x2}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9135}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xc) syz_emit_ethernet(0x88, &(0x7f0000000e00)={@remote, @random="c89b305845c6", @val={@val={0x88a8, 0x1, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x5, 0x6, "1aee48", 0x4a, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4, "9a1a0f", 0x4, "4daf13"}, "054900010062546fb13e02f8e2d70688640000ce525b5c53aced90c11c899687e995f0b6ca08b9d8aa2cd2f18a987ef88d3d4b621e0eec8d8af5"}}}}}}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x1) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r3, 0x6e2, 0x0, 0xb, 0x0, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001c80)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006873720014000280080001002b44fe8c6e7b72855de0afdea3b79185210bcc444f86c8d221d9", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m34.667174887s ago: executing program 32 (id=808): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000004c0)=""/189, 0xbd, 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x6b91, 0x1, 0x7fff, 0x2fe}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000940)={&(0x7f0000000300)={0x2, 0x2, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000640)="9dbe", 0x2}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9135}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xc) syz_emit_ethernet(0x88, &(0x7f0000000e00)={@remote, @random="c89b305845c6", @val={@val={0x88a8, 0x1, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x5, 0x6, "1aee48", 0x4a, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4, "9a1a0f", 0x4, "4daf13"}, "054900010062546fb13e02f8e2d70688640000ce525b5c53aced90c11c899687e995f0b6ca08b9d8aa2cd2f18a987ef88d3d4b621e0eec8d8af5"}}}}}}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x1) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r3, 0x6e2, 0x0, 0xb, 0x0, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001c80)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006873720014000280080001002b44fe8c6e7b72855de0afdea3b79185210bcc444f86c8d221d9", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.906869139s ago: executing program 0 (id=1914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.012655626s ago: executing program 0 (id=1935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a0000000400000006000000800000004200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002cffeff1aa4f012a20fd87160c35c8587189934a455ff6d2ce620cd58c6f19ed0d051e22b74e2b5f0c54e95531d3621e57b689cc7613db9e9220c2d140f21ad59586801e6fcd50cecca11159298c5375738950db19ec732a22f507c8f1ae095a097821070c394c876a70877eb78d904aa15a77dd95a671d1a11324cd2913424237fab2e55b3268dc6c208afda484ad7c63e2331975c0051b63f540dceb37e07060b716ecf3685104f82325d23bda928ec214c99e92350e9c1790c9f54e717e09739dc5aa7ec96519432c84d0b27287c303bd1c"], 0x48) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000500)={[{@dioread_lock}, {@grpquota}, {@noload}, {@abort}, {@user_xattr}, {@data_writeback}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") unshare(0x6020400) r6 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) 3.168164862s ago: executing program 0 (id=1944): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x8, 0x0, 0x3, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x100c, 0x0, 0x4, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 3.098834132s ago: executing program 0 (id=1945): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.54614889s ago: executing program 4 (id=1953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6020400) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) 2.297544079s ago: executing program 0 (id=1956): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) 2.280949459s ago: executing program 0 (id=1957): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004cc0), 0x0, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r9, @ANYRESDEC, @ANYRESHEX=r9], 0x1, 0x522, &(0x7f0000000a80)="$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") setresuid(0x0, r9, 0xee00) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000001cc0)={'ip_vti0\x00', 0x0, 0x798, 0x700, 0x3, 0x1, {{0x36, 0x4, 0x1, 0x5, 0xd8, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, {[@timestamp={0x44, 0xc, 0xfd, 0x0, 0x4, [0x3, 0x81]}, @generic={0x7, 0xe, "e57a04edc6f3f9cfde0ebb75"}, @timestamp_addr={0x44, 0x3c, 0x76, 0x1, 0x6, [{@rand_addr=0x64010101, 0xd}, {@broadcast, 0x7}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@private=0xa010100, 0x3}, {@loopback, 0x6}]}, @ssrr={0x89, 0x7, 0xbe, [@broadcast]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x7, "509d0a076d"}, {0x0, 0xd, "0e9c0b40ed6b96a363f60e"}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x33, 0xfffffffffffffffc, [{0x6, 0xb, "62f15a55a5f369deb5"}, {0x2, 0xe, "dd8a018595ee63e1b2dd4167"}, {0x1, 0x12, "de4cead94f169294a930cbe9e6cc70bf"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0xf4, 0x0, 0x3, [0x2, 0x36cc1ae0, 0x10, 0x9362]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000001e40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000001dc0)=@delqdisc={0x48, 0x25, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x1}, {0x4, 0xf}, {0x3, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008045}, 0x800) r11 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 1.721547627s ago: executing program 5 (id=1959): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000600000080000000420000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002cffeff1aa4f012a20fd87160c35c8587189934a455ff6d2ce620cd58c6f19ed0d051e22b74e2b5f0c54e95531d3621e57b689cc7613db9e9220c2d140f21ad59586801e6fcd50cecca11159298c5375738950db19ec732a22f507c8f1ae095a097821070c394c876a70877eb78d904aa15a77dd95a671d1a11324cd2913424237fab2e55b3268dc6c208afda484ad7c63e2331975c0051b63f540dceb37e07060b716ecf3685104f82325d23bda928ec214c99e92350e9c1790c9f54e717e09739dc5aa7ec96519432c84d0b27287c303bd1c"], 0x48) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x6020400) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) 1.696465187s ago: executing program 4 (id=1960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.655727197s ago: executing program 4 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ptrace$cont(0x18, 0xffffffffffffffff, 0x0, 0x1ff) readv(0xffffffffffffffff, &(0x7f0000002980)=[{0x0}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 1.609917476s ago: executing program 4 (id=1965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002cffeff1aa4f012a20fd87160c35c8587189934a455ff6d2ce620cd58c6f19ed0d051e22b74e2b5f0c54e95531d3621e57b689cc7613db9e9220c2d140f21ad59586801e6fcd50cecca11159298c5375738950db19ec732a22f507c8f1ae095a097821070c394c876a70877eb78d904aa15a77dd95a671d1a11324cd2913424237fab2e55b3268dc6c208afda484ad7c63e2331975c0051b63f540dceb37e07060b716ecf3685104f82325d23bda928ec214c99e92350e9c1790c9f54e717e09739dc5aa7ec96519432c84d0b27287c303bd1c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000500)={[{@dioread_lock}, {@grpquota}, {@noload}, {@abort}, {@user_xattr}, {@data_writeback}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") unshare(0x6020400) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.502584006s ago: executing program 1 (id=1970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setns(0xffffffffffffffff, 0x14020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) io_setup(0xffff, &(0x7f0000001080)) 1.395628186s ago: executing program 1 (id=1971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6020400) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) 866.311314ms ago: executing program 5 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ptrace$cont(0x18, 0xffffffffffffffff, 0x0, 0x1ff) readv(0xffffffffffffffff, &(0x7f0000002980)=[{0x0}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 849.068254ms ago: executing program 5 (id=1977): r0 = io_uring_setup(0x5b77, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000, 0x137}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 830.416384ms ago: executing program 5 (id=1978): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000240)='overlay\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) bind$pptp(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='wake_reaper\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$kcm(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000c80)={{0x80, 0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x6, 0x0, 0x4000, 0x0, 0xbf, 0x4}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x1, [0x4, 0x3, 0x6, 0x2, 0xfffd, 0x80, 0x6, 0xf96e, 0x8, 0x8000, 0xb, 0x8, 0xb, 0x4, 0x78, 0xff], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 797.518573ms ago: executing program 5 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044051}, 0x400c094) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="d92068e296dc9f7b451fd646", 0xc, 0x8000, &(0x7f00000001c0)={0x11, 0x8, r1, 0x1, 0x2, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4) r6 = getpid() syz_pidfd_open(r6, 0x0) tkill(r6, 0x1b) 748.827913ms ago: executing program 4 (id=1980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x8, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000880)='g', 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 640.433452ms ago: executing program 5 (id=1981): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) signalfd(r4, &(0x7f0000000000)={[0x7fff]}, 0x8) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 630.400693ms ago: executing program 4 (id=1982): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000500)={[{@dioread_lock}, {@grpquota}, {@noload}, {@abort}, {@user_xattr}, {@data_writeback}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") unshare(0x6020400) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) 591.717702ms ago: executing program 1 (id=1983): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000fc00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000240)='overlay\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r7, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='wake_reaper\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) socket$kcm(0x10, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000c80)={{0x80, 0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x6, 0x0, 0x4000, 0x0, 0xbf, 0x4}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x1, [0x4, 0x3, 0x6, 0x2, 0xfffd, 0x80, 0x6, 0xf96e, 0x8, 0x8000, 0xb, 0x8, 0xb, 0x4, 0x78, 0xff], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0xc) 558.848132ms ago: executing program 1 (id=1984): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x8, 0x0, 0x3, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x100c, 0x0, 0x4, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 528.108882ms ago: executing program 1 (id=1985): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r0], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 527.511332ms ago: executing program 1 (id=1986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000600000080000000420000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002cffeff1aa4f012a20fd87160c35c8587189934a455ff6d2ce620cd58c6f19ed0d051e22b74e2b5f0c54e95531d3621e57b689cc7613db9e9220c2d140f21ad59586801e6fcd50cecca11159298c5375738950db19ec732a22f507c8f1ae095a097821070c394c876a70877eb78d904aa15a77dd95a671d1a11324cd2913424237fab2e55b3268dc6c208afda484ad7c63e2331975c0051b63f540dceb37e07060b716ecf3685104f82325d23bda928ec214c99e92350e9c1790c9f54e717e09739dc5aa7ec96519432c84d0b27287c303bd1c"], 0x48) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x15}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8490}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getcwd(&(0x7f0000000240)=""/87, 0x57) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) prctl$PR_SET_NAME(0xf, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x6020400) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) 282.721201ms ago: executing program 2 (id=1997): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 87.853031ms ago: executing program 2 (id=1998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ptrace$cont(0x18, 0xffffffffffffffff, 0x0, 0x1ff) readv(0xffffffffffffffff, &(0x7f0000002980)=[{0x0}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 59.233231ms ago: executing program 2 (id=1999): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 40.98608ms ago: executing program 2 (id=2000): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000240)='overlay\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) bind$pptp(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='wake_reaper\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$kcm(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000c80)={{0x80, 0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x6, 0x0, 0x4000, 0x0, 0xbf, 0x4}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x1, [0x4, 0x3, 0x6, 0x2, 0xfffd, 0x80, 0x6, 0xf96e, 0x8, 0x8000, 0xb, 0x8, 0xb, 0x4, 0x78, 0xff], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 15.97783ms ago: executing program 2 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 0s ago: executing program 2 (id=2002): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) creat(&(0x7f0000000040)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): 065552][ T8993] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 167.065564][ T8993] RBP: 00007f2b736a6090 R08: 00000000000004b8 R09: 0000000000000000 [ 167.065578][ T8993] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 167.065591][ T8993] R13: 0000000000000000 R14: 00007f2b75276080 R15: 00007ffe8347d3a8 [ 167.065644][ T8993] [ 167.347340][ T8996] xt_hashlimit: max too large, truncated to 1048576 [ 167.348615][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1633'. [ 167.358591][ T8996] No such timeout policy "syz1" [ 167.378531][ T9005] 9pnet: Could not find request transport: f [ 167.507374][ T9028] loop2: detected capacity change from 0 to 512 [ 167.520250][ T9024] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 167.526200][ T9030] FAULT_INJECTION: forcing a failure. [ 167.526200][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 167.538891][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: syz.4.1640 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 167.538946][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.538961][ T9030] Call Trace: [ 167.538968][ T9030] [ 167.538975][ T9030] dump_stack_lvl+0xf2/0x150 [ 167.539007][ T9030] dump_stack+0x15/0x1a [ 167.539029][ T9030] should_fail_ex+0x24a/0x260 [ 167.539063][ T9030] ? nf_tables_newtable+0x3a1/0xee0 [ 167.539145][ T9030] should_failslab+0x8f/0xb0 [ 167.539175][ T9030] __kmalloc_cache_noprof+0x4e/0x320 [ 167.539216][ T9030] nf_tables_newtable+0x3a1/0xee0 [ 167.539286][ T9030] nfnetlink_rcv+0xb3e/0x15d0 [ 167.539315][ T9030] ? kmem_cache_free+0xdc/0x2d0 [ 167.539376][ T9030] netlink_unicast+0x599/0x670 [ 167.539436][ T9030] netlink_sendmsg+0x5cc/0x6e0 [ 167.539461][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.539491][ T9030] __sock_sendmsg+0x140/0x180 [ 167.539586][ T9030] ____sys_sendmsg+0x312/0x410 [ 167.539627][ T9030] __sys_sendmsg+0x19d/0x230 [ 167.539723][ T9030] __x64_sys_sendmsg+0x46/0x50 [ 167.539754][ T9030] x64_sys_call+0x2734/0x2dc0 [ 167.539784][ T9030] do_syscall_64+0xc9/0x1c0 [ 167.539816][ T9030] ? clear_bhb_loop+0x55/0xb0 [ 167.539895][ T9030] ? clear_bhb_loop+0x55/0xb0 [ 167.539957][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.539986][ T9030] RIP: 0033:0x7f2b7505cda9 [ 167.539999][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.540095][ T9030] RSP: 002b:00007f2b736c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.540160][ T9030] RAX: ffffffffffffffda RBX: 00007f2b75275fa0 RCX: 00007f2b7505cda9 [ 167.540216][ T9030] RDX: 0000000000000040 RSI: 0000000020000200 RDI: 0000000000000003 [ 167.540229][ T9030] RBP: 00007f2b736c7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.540243][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.540310][ T9030] R13: 0000000000000000 R14: 00007f2b75275fa0 R15: 00007ffe8347d3a8 [ 167.540325][ T9030] [ 167.808795][ T9038] loop5: detected capacity change from 0 to 512 [ 167.829389][ T9028] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.837327][ T9037] loop1: detected capacity change from 0 to 1024 [ 167.854265][ T9028] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 167.857001][ T9037] EXT4-fs: Ignoring removed bh option [ 167.896859][ T9028] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 167.904696][ T9028] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.1639: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 167.924674][ T9028] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1639: couldn't read orphan inode 13 (err -117) [ 167.936724][ T9037] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 167.947691][ T9038] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1632: bg 0: block 248: padding at end of block bitmap is not set [ 167.968501][ T9051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9051 comm=syz.0.1645 [ 167.980543][ T9028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.990312][ T9038] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1632: Failed to acquire dquot type 1 [ 168.028213][ T9038] EXT4-fs (loop5): 1 truncate cleaned up [ 168.034610][ T9038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.047873][ T9038] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.113377][ T9060] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 168.115542][ T9067] loop4: detected capacity change from 0 to 512 [ 168.129590][ T9060] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 168.143022][ T9067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.150995][ T9067] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 168.160048][ T9066] loop0: detected capacity change from 0 to 1024 [ 168.165890][ T9067] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 168.179746][ T9067] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.1651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 168.196997][ T9066] EXT4-fs: Ignoring removed bh option [ 168.199257][ T9067] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1651: couldn't read orphan inode 13 (err -117) [ 168.221383][ T9067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.225134][ T9066] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 168.243191][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.258254][ T55] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 168.281334][ T9072] FAULT_INJECTION: forcing a failure. [ 168.281334][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 168.294015][ T9072] CPU: 0 UID: 0 PID: 9072 Comm: syz.5.1652 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 168.294038][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.294052][ T9072] Call Trace: [ 168.294070][ T9072] [ 168.294078][ T9072] dump_stack_lvl+0xf2/0x150 [ 168.294145][ T9072] dump_stack+0x15/0x1a [ 168.294172][ T9072] should_fail_ex+0x24a/0x260 [ 168.294247][ T9072] should_failslab+0x8f/0xb0 [ 168.294278][ T9072] __kmalloc_node_noprof+0xad/0x410 [ 168.294333][ T9072] ? qdisc_alloc+0x65/0x450 [ 168.294357][ T9072] qdisc_alloc+0x65/0x450 [ 168.294382][ T9072] qdisc_create+0xe5/0xae0 [ 168.294454][ T9072] ? __nla_parse+0x40/0x60 [ 168.294479][ T9072] tc_modify_qdisc+0x668/0x1100 [ 168.294578][ T9072] ? ns_capable+0x7d/0xb0 [ 168.294602][ T9072] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 168.294632][ T9072] rtnetlink_rcv_msg+0x6aa/0x710 [ 168.294675][ T9072] ? ref_tracker_free+0x3a5/0x410 [ 168.294709][ T9072] ? __dev_queue_xmit+0x186/0x2090 [ 168.294748][ T9072] netlink_rcv_skb+0x12c/0x230 [ 168.294769][ T9072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.294826][ T9072] rtnetlink_rcv+0x1c/0x30 [ 168.294863][ T9072] netlink_unicast+0x599/0x670 [ 168.294927][ T9072] netlink_sendmsg+0x5cc/0x6e0 [ 168.294952][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.294973][ T9072] __sock_sendmsg+0x140/0x180 [ 168.294997][ T9072] ____sys_sendmsg+0x312/0x410 [ 168.295113][ T9072] __sys_sendmsg+0x19d/0x230 [ 168.295158][ T9072] __x64_sys_sendmsg+0x46/0x50 [ 168.295191][ T9072] x64_sys_call+0x2734/0x2dc0 [ 168.295255][ T9072] do_syscall_64+0xc9/0x1c0 [ 168.295310][ T9072] ? clear_bhb_loop+0x55/0xb0 [ 168.295337][ T9072] ? clear_bhb_loop+0x55/0xb0 [ 168.295364][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.295389][ T9072] RIP: 0033:0x7fcfebc8cda9 [ 168.295405][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.295422][ T9072] RSP: 002b:00007fcfea2f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.295440][ T9072] RAX: ffffffffffffffda RBX: 00007fcfebea5fa0 RCX: 00007fcfebc8cda9 [ 168.295452][ T9072] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000008 [ 168.295464][ T9072] RBP: 00007fcfea2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.295476][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.295526][ T9072] R13: 0000000000000000 R14: 00007fcfebea5fa0 R15: 00007ffd9e537048 [ 168.295543][ T9072] [ 168.563018][ T9078] loop5: detected capacity change from 0 to 512 [ 168.578910][ T9073] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 168.581074][ T9078] EXT4-fs (loop5): orphan cleanup on readonly fs [ 168.589369][ T9073] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 168.594596][ T9078] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 168.613074][ T9078] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.628384][ T9078] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1653: attempt to clear invalid blocks 2 len 1 [ 168.641689][ T9078] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1653: invalid indirect mapped block 1819239214 (level 0) [ 168.658743][ T9078] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1653: invalid indirect mapped block 1819239214 (level 1) [ 168.673636][ T9078] EXT4-fs (loop5): 1 truncate cleaned up [ 168.680756][ T9078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.680827][ T9083] loop1: detected capacity change from 0 to 1024 [ 168.697851][ T9078] FAULT_INJECTION: forcing a failure. [ 168.697851][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.712657][ T9078] CPU: 0 UID: 0 PID: 9078 Comm: syz.5.1653 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 168.712716][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.712731][ T9078] Call Trace: [ 168.712739][ T9078] [ 168.712748][ T9078] dump_stack_lvl+0xf2/0x150 [ 168.712778][ T9078] dump_stack+0x15/0x1a [ 168.712799][ T9078] should_fail_ex+0x24a/0x260 [ 168.712831][ T9078] should_fail+0xb/0x10 [ 168.712929][ T9078] should_fail_usercopy+0x1a/0x20 [ 168.712964][ T9078] _copy_from_user+0x1c/0xa0 [ 168.712986][ T9078] __se_sys_mount+0x115/0x2d0 [ 168.713017][ T9078] ? do_mkdirat+0x27f/0x2c0 [ 168.713116][ T9078] __x64_sys_mount+0x67/0x80 [ 168.713147][ T9078] x64_sys_call+0x2c84/0x2dc0 [ 168.713181][ T9078] do_syscall_64+0xc9/0x1c0 [ 168.713225][ T9078] ? clear_bhb_loop+0x55/0xb0 [ 168.713261][ T9078] ? clear_bhb_loop+0x55/0xb0 [ 168.713416][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.713442][ T9078] RIP: 0033:0x7fcfebc8e54a [ 168.713457][ T9078] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.713542][ T9078] RSP: 002b:00007fcfea2f0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.713561][ T9078] RAX: ffffffffffffffda RBX: 00007fcfea2f0ef0 RCX: 00007fcfebc8e54a [ 168.713575][ T9078] RDX: 0000000020000f40 RSI: 0000000020000f00 RDI: 0000000000000000 [ 168.713590][ T9078] RBP: 0000000020000f40 R08: 00007fcfea2f0ef0 R09: 0000000001a4a438 [ 168.713605][ T9078] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000000020000f00 [ 168.713653][ T9078] R13: 00007fcfea2f0eb0 R14: 0000000000000000 R15: 00000000200008c0 [ 168.713676][ T9078] [ 168.721728][ T9078] EXT4-fs: Ignoring removed orlov option [ 168.736033][ T9083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.900729][ T9078] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 168.910730][ T9078] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.1653: Abort forced by user [ 168.921337][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.921478][ T9078] EXT4-fs (loop5): Remounting filesystem read-only [ 168.936854][ T9078] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 168.966367][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.130415][ T9105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9105 comm=syz.5.1663 [ 169.143077][ T9105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9105 comm=syz.5.1663 [ 169.157877][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x4 [ 169.165640][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x2 [ 169.174480][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.182169][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.189869][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.197583][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.205325][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.213155][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.220843][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.228556][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.236267][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.243928][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.251619][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.252410][ T9110] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.259396][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.259425][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.259509][ T2963] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x0 [ 169.647996][ T2963] hid-generic 0000:3000000:0000.0094: hidraw0: HID v0.00 Device [sy] on syz0 [ 169.682572][ T9116] FAULT_INJECTION: forcing a failure. [ 169.682572][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.695697][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz.5.1665 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 169.695722][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.695734][ T9116] Call Trace: [ 169.695790][ T9116] [ 169.695799][ T9116] dump_stack_lvl+0xf2/0x150 [ 169.695833][ T9116] dump_stack+0x15/0x1a [ 169.695921][ T9116] should_fail_ex+0x24a/0x260 [ 169.695953][ T9116] should_fail+0xb/0x10 [ 169.695986][ T9116] should_fail_usercopy+0x1a/0x20 [ 169.696020][ T9116] _copy_from_user+0x1c/0xa0 [ 169.696120][ T9116] usbdev_ioctl+0x18bf/0x3e00 [ 169.696166][ T9116] ? do_vfs_ioctl+0x96e/0x1530 [ 169.696188][ T9116] ? selinux_file_ioctl+0x2f7/0x380 [ 169.696209][ T9116] ? __fget_files+0x17c/0x1c0 [ 169.696237][ T9116] ? __pfx_usbdev_ioctl+0x10/0x10 [ 169.696313][ T9116] __se_sys_ioctl+0xc9/0x140 [ 169.696331][ T9116] __x64_sys_ioctl+0x43/0x50 [ 169.696348][ T9116] x64_sys_call+0x1690/0x2dc0 [ 169.696371][ T9116] do_syscall_64+0xc9/0x1c0 [ 169.696396][ T9116] ? clear_bhb_loop+0x55/0xb0 [ 169.696428][ T9116] ? clear_bhb_loop+0x55/0xb0 [ 169.696451][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.696529][ T9116] RIP: 0033:0x7fcfebc8cda9 [ 169.696541][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.696625][ T9116] RSP: 002b:00007fcfea2f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.696707][ T9116] RAX: ffffffffffffffda RBX: 00007fcfebea5fa0 RCX: 00007fcfebc8cda9 [ 169.696790][ T9116] RDX: 0000000020000000 RSI: 00000000802c550a RDI: 0000000000000005 [ 169.696801][ T9116] RBP: 00007fcfea2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 169.696811][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.696821][ T9116] R13: 0000000000000000 R14: 00007fcfebea5fa0 R15: 00007ffd9e537048 [ 169.696837][ T9116] [ 169.698923][ T29] kauditd_printk_skb: 2196 callbacks suppressed [ 169.698950][ T29] audit: type=1400 audit(1738227815.513:85758): avc: denied { module_load } for pid=9115 comm="syz.5.1665" path="/sys/kernel/fscaps" dev="sysfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 169.962587][ T9125] loop5: detected capacity change from 0 to 1024 [ 169.970908][ T9125] EXT4-fs: Ignoring removed orlov option [ 169.981290][ T9125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.034363][ T9130] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.041886][ T9130] vhci_hcd: invalid port number 23 [ 170.073756][ T29] audit: type=1326 audit(1738227815.883:85759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.080086][ T9136] loop0: detected capacity change from 0 to 1024 [ 170.097318][ T29] audit: type=1326 audit(1738227815.883:85760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.097586][ T29] audit: type=1326 audit(1738227815.883:85761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.108900][ T9136] EXT4-fs: Ignoring removed bh option [ 170.127271][ T29] audit: type=1326 audit(1738227815.883:85762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.179793][ T29] audit: type=1326 audit(1738227815.883:85763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.203321][ T29] audit: type=1326 audit(1738227815.883:85764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.226830][ T29] audit: type=1326 audit(1738227815.883:85765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.250403][ T29] audit: type=1326 audit(1738227815.883:85766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.273928][ T29] audit: type=1326 audit(1738227815.883:85767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 170.297865][ T9136] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 170.331820][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.361538][ T9140] loop1: detected capacity change from 0 to 1024 [ 170.364506][ T9142] loop5: detected capacity change from 0 to 1024 [ 170.368609][ T9140] EXT4-fs: Ignoring removed bh option [ 170.390009][ T9142] EXT4-fs: Ignoring removed bh option [ 170.395968][ T9140] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 170.415019][ T9142] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 170.513102][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.540348][ T9149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9149 comm=syz.2.1673 [ 170.552858][ T9149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9149 comm=syz.2.1673 [ 170.567155][ T9149] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 170.650484][ T9158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9158 comm=syz.2.1677 [ 170.663063][ T9158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9158 comm=syz.2.1677 [ 170.676725][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x4 [ 170.684416][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x2 [ 170.692120][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.699894][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.707592][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.715447][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.723080][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.730784][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.738486][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.746604][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.752788][ T9160] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 170.754247][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.767915][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.775627][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.783292][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.790967][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.798637][ T35] hid-generic 0000:3000000:0000.0095: unknown main item tag 0x0 [ 170.806874][ T35] hid-generic 0000:3000000:0000.0095: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.934080][ T9168] loop0: detected capacity change from 0 to 128 [ 170.965605][ T9168] +}[@: attempt to access beyond end of device [ 170.965605][ T9168] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 170.982460][ T9168] +}[@: attempt to access beyond end of device [ 170.982460][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 170.995221][ T9168] +}[@: attempt to access beyond end of device [ 170.995221][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.008000][ T9168] +}[@: attempt to access beyond end of device [ 171.008000][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.020751][ T9168] +}[@: attempt to access beyond end of device [ 171.020751][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.033734][ T9168] +}[@: attempt to access beyond end of device [ 171.033734][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.046819][ T9168] +}[@: attempt to access beyond end of device [ 171.046819][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.059663][ T9168] +}[@: attempt to access beyond end of device [ 171.059663][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.072508][ T9168] +}[@: attempt to access beyond end of device [ 171.072508][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.085218][ T9168] +}[@: attempt to access beyond end of device [ 171.085218][ T9168] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.119298][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.828036][ T9188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9188 comm=syz.0.1688 [ 171.840724][ T9188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9188 comm=syz.0.1688 [ 171.855909][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x4 [ 171.863579][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x2 [ 171.872726][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.880456][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.881624][ T9193] loop2: detected capacity change from 0 to 1024 [ 171.888161][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.895337][ T9193] EXT4-fs: Ignoring removed bh option [ 171.902230][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.915305][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.923142][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.930876][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.938734][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.946416][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.951014][ T9194] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 171.954062][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.963361][ T9193] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 171.967886][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.983268][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.983292][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 171.998729][ T35] hid-generic 0000:3000000:0000.0096: unknown main item tag 0x0 [ 172.010352][ T35] hid-generic 0000:3000000:0000.0096: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.066265][ T9202] loop4: detected capacity change from 0 to 512 [ 172.085240][ T9202] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.093752][ T9202] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 172.112078][ T9202] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.119314][ T9202] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.1694: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.130072][ T9206] loop1: detected capacity change from 0 to 1024 [ 172.144876][ T9202] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1694: couldn't read orphan inode 13 (err -117) [ 172.158379][ T9206] EXT4-fs: Ignoring removed bh option [ 172.165512][ T9206] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 172.185093][ T9202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.193358][ T9211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9211 comm=syz.5.1697 [ 172.210095][ T9211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9211 comm=syz.5.1697 [ 172.224541][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x4 [ 172.232304][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x2 [ 172.241163][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.248911][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.256721][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.264389][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.272085][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.279853][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.287543][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.292446][ T9215] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.295220][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.295246][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.316548][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.324279][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.332030][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.339701][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.347392][ T35] hid-generic 0000:3000000:0000.0097: unknown main item tag 0x0 [ 172.355510][ T35] hid-generic 0000:3000000:0000.0097: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.366231][ T9216] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 172.376875][ T9216] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 172.401362][ T9218] vlan2: entered promiscuous mode [ 172.406873][ T9218] $Hÿ: (slave vlan2): Opening slave failed [ 172.686038][ T9224] loop0: detected capacity change from 0 to 1024 [ 172.692539][ T9224] EXT4-fs: Ignoring removed orlov option [ 172.701332][ T9224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.837024][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.859541][ T9233] vlan2: entered promiscuous mode [ 172.864978][ T9233] $Hÿ: (slave vlan2): Opening slave failed [ 172.984305][ T9243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9243 comm=syz.1.1708 [ 172.984336][ T9243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9243 comm=syz.1.1708 [ 172.985669][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x4 [ 173.017046][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x2 [ 173.017224][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.032461][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040266][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040296][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040322][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040346][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040407][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040433][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040459][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040549][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040576][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040601][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.040627][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.074849][ T9247] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 173.078940][ T2963] hid-generic 0000:3000000:0000.0098: unknown main item tag 0x0 [ 173.139210][ T2963] hid-generic 0000:3000000:0000.0098: hidraw0: HID v0.00 Device [sy] on syz0 [ 173.177426][ T9249] loop1: detected capacity change from 0 to 1024 [ 173.184400][ T9249] EXT4-fs: Ignoring removed bh option [ 173.195026][ T9249] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 173.549473][ T9262] loop5: detected capacity change from 0 to 1024 [ 173.556526][ T9262] EXT4-fs: Ignoring removed bh option [ 173.565876][ T9262] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 173.593868][ T9265] loop2: detected capacity change from 0 to 1024 [ 173.601102][ T9265] EXT4-fs: Ignoring removed orlov option [ 173.610541][ T9265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.746038][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.781922][ T9273] serio: Serial port ptm3 [ 173.784750][ T9271] loop2: detected capacity change from 0 to 1024 [ 173.793340][ T9271] EXT4-fs: Ignoring removed bh option [ 173.805507][ T9271] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 173.856948][ T9277] FAULT_INJECTION: forcing a failure. [ 173.856948][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 173.869721][ T9277] CPU: 1 UID: 0 PID: 9277 Comm: syz.0.1717 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 173.869754][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 173.869769][ T9277] Call Trace: [ 173.869776][ T9277] [ 173.869785][ T9277] dump_stack_lvl+0xf2/0x150 [ 173.869819][ T9277] dump_stack+0x15/0x1a [ 173.869912][ T9277] should_fail_ex+0x24a/0x260 [ 173.869955][ T9277] should_failslab+0x8f/0xb0 [ 173.869985][ T9277] kmem_cache_alloc_noprof+0x52/0x320 [ 173.870019][ T9277] ? skb_clone+0x154/0x1f0 [ 173.870070][ T9277] skb_clone+0x154/0x1f0 [ 173.870109][ T9277] __netlink_deliver_tap+0x2bd/0x4f0 [ 173.870141][ T9277] netlink_unicast+0x64a/0x670 [ 173.870256][ T9277] netlink_sendmsg+0x5cc/0x6e0 [ 173.870287][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.870314][ T9277] __sock_sendmsg+0x140/0x180 [ 173.870344][ T9277] ____sys_sendmsg+0x312/0x410 [ 173.870394][ T9277] __sys_sendmsg+0x19d/0x230 [ 173.870493][ T9277] __x64_sys_sendmsg+0x46/0x50 [ 173.870543][ T9277] x64_sys_call+0x2734/0x2dc0 [ 173.870570][ T9277] do_syscall_64+0xc9/0x1c0 [ 173.870604][ T9277] ? clear_bhb_loop+0x55/0xb0 [ 173.870696][ T9277] ? clear_bhb_loop+0x55/0xb0 [ 173.870731][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.870763][ T9277] RIP: 0033:0x7fe24e2dcda9 [ 173.870802][ T9277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.870823][ T9277] RSP: 002b:00007fe24c947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.870846][ T9277] RAX: ffffffffffffffda RBX: 00007fe24e4f5fa0 RCX: 00007fe24e2dcda9 [ 173.870861][ T9277] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 173.870876][ T9277] RBP: 00007fe24c947090 R08: 0000000000000000 R09: 0000000000000000 [ 173.870933][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.870945][ T9277] R13: 0000000000000000 R14: 00007fe24e4f5fa0 R15: 00007ffd01a35fb8 [ 173.870962][ T9277] [ 173.871105][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 174.078279][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 174.087373][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 174.402891][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x4 [ 174.410668][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x2 [ 174.418392][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.426061][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.433732][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.441457][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.449204][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.456882][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.464559][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.472259][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.477367][ T9286] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.479926][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.493531][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.501225][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.508913][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.516603][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.524259][ T2963] hid-generic 0000:3000000:0000.0099: unknown main item tag 0x0 [ 174.532382][ T2963] hid-generic 0000:3000000:0000.0099: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.584476][ T9290] vlan2: entered promiscuous mode [ 174.590002][ T9290] $Hÿ: (slave vlan2): Opening slave failed [ 174.676430][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x4 [ 174.684135][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x2 [ 174.692113][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.699860][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.707712][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.708171][ T29] kauditd_printk_skb: 2353 callbacks suppressed [ 174.708186][ T29] audit: type=1326 audit(1738227820.523:88121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 174.715396][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.721708][ T29] audit: type=1326 audit(1738227820.523:88122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 174.745083][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.752710][ T29] audit: type=1326 audit(1738227820.523:88123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 174.776126][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.776156][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.822681][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.829425][ T9297] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.830449][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.844061][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.847680][ T29] audit: type=1326 audit(1738227820.593:88124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 174.851727][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.875124][ T29] audit: type=1326 audit(1738227820.593:88125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 174.882768][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.906126][ T29] audit: type=1326 audit(1738227820.593:88126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 174.913710][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.937159][ T29] audit: type=1326 audit(1738227820.623:88127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 174.944838][ T35] hid-generic 0000:3000000:0000.009A: unknown main item tag 0x0 [ 174.968112][ T29] audit: type=1326 audit(1738227820.623:88128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 174.977410][ T35] hid-generic 0000:3000000:0000.009A: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.999101][ T29] audit: type=1326 audit(1738227820.623:88129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 174.999206][ T29] audit: type=1326 audit(1738227820.623:88130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 175.092348][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.125330][ T9300] loop1: detected capacity change from 0 to 2048 [ 175.142449][ T9306] loop2: detected capacity change from 0 to 1024 [ 175.149911][ T9306] EXT4-fs: Ignoring removed bh option [ 175.151550][ T9308] loop4: detected capacity change from 0 to 1024 [ 175.162100][ T9308] EXT4-fs: Ignoring removed orlov option [ 175.174620][ T9300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.175932][ T9306] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 175.188244][ T9308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.208443][ T9300] EXT4-fs (loop1): shut down requested (2) [ 175.241826][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.282882][ T9318] loop1: detected capacity change from 0 to 1024 [ 175.298936][ T9318] EXT4-fs: Ignoring removed bh option [ 175.315529][ T9318] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 175.340225][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.370325][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x4 [ 175.378318][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x2 [ 175.386522][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.394220][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.401936][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.409597][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.417320][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.425012][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.432674][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.440369][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.445388][ T9326] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 175.448027][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.448050][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.448071][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.448093][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.484749][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.492445][ T35] hid-generic 0000:3000000:0000.009B: unknown main item tag 0x0 [ 175.500576][ T35] hid-generic 0000:3000000:0000.009B: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.563918][ T9330] loop4: detected capacity change from 0 to 1024 [ 175.571006][ T9330] EXT4-fs: Ignoring removed bh option [ 175.585133][ T9330] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 176.164033][ T9344] loop2: detected capacity change from 0 to 512 [ 176.172188][ T9344] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.179273][ T9344] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 176.194545][ T9344] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 176.201538][ T9344] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.1737: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.219781][ T9344] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1737: couldn't read orphan inode 13 (err -117) [ 176.232391][ T9344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.311448][ T9346] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 176.321391][ T9346] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 176.411910][ T9348] selinux_netlink_send: 6 callbacks suppressed [ 176.411926][ T9348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9348 comm=syz.4.1738 [ 176.430658][ T9348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9348 comm=syz.4.1738 [ 176.444460][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x4 [ 176.452188][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x2 [ 176.460250][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.468108][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.475789][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.483516][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.491183][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.498858][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.506529][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.514258][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.522031][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.527200][ T9350] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 176.529760][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.543438][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.551141][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.558802][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.566503][ T8] hid-generic 0000:3000000:0000.009C: unknown main item tag 0x0 [ 176.574552][ T8] hid-generic 0000:3000000:0000.009C: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.604558][ T9352] loop4: detected capacity change from 0 to 512 [ 176.612559][ T9352] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.619470][ T9352] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 176.634615][ T9352] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 176.641465][ T9352] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.1739: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.659967][ T9352] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1739: couldn't read orphan inode 13 (err -117) [ 176.672284][ T9352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.739779][ T9354] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 176.749518][ T9354] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 176.837656][ T9356] loop5: detected capacity change from 0 to 1024 [ 176.844319][ T9356] EXT4-fs: Ignoring removed orlov option [ 176.853736][ T9356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.893262][ T9359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9359 comm=syz.0.1741 [ 176.905889][ T9359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9359 comm=syz.0.1741 [ 176.920551][ T9359] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 176.998149][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.021864][ T9367] vlan2: entered promiscuous mode [ 177.027513][ T9367] $Hÿ: (slave vlan2): Opening slave failed [ 177.075261][ T9368] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.082793][ T9368] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 177.739812][ T9373] loop0: detected capacity change from 0 to 1024 [ 177.746836][ T9373] EXT4-fs: Ignoring removed bh option [ 177.765124][ T9373] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 177.853246][ T9377] loop1: detected capacity change from 0 to 1024 [ 177.860261][ T9377] EXT4-fs: Ignoring removed bh option [ 177.875099][ T9377] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 177.985626][ T9383] loop5: detected capacity change from 0 to 1024 [ 177.992891][ T9383] EXT4-fs: Ignoring removed bh option [ 178.005048][ T9383] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 178.605468][ T9389] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.612958][ T9389] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.678145][ T9393] loop0: detected capacity change from 0 to 1024 [ 178.687815][ T9393] EXT4-fs: Ignoring removed bh option [ 178.706071][ T9393] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 178.834368][ T9399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9399 comm=syz.5.1754 [ 178.846937][ T9399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9399 comm=syz.5.1754 [ 178.860862][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x4 [ 178.868631][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x2 [ 178.876366][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.884022][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.891725][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.899506][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.907214][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.914898][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.922586][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.930379][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.935232][ T9401] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 178.938137][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.951726][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.959546][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.967250][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.974925][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.982580][ T35] hid-generic 0000:3000000:0000.009D: unknown main item tag 0x0 [ 178.990702][ T35] hid-generic 0000:3000000:0000.009D: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.170041][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.285119][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1762'. [ 179.298226][ T9419] loop5: detected capacity change from 0 to 128 [ 179.305334][ T9419] FAT-fs (loop5): Directory bread(block 3236) failed [ 179.312122][ T9419] FAT-fs (loop5): Directory bread(block 3237) failed [ 179.318939][ T9419] FAT-fs (loop5): Directory bread(block 3238) failed [ 179.326071][ T9419] FAT-fs (loop5): Directory bread(block 3239) failed [ 179.332808][ T9419] FAT-fs (loop5): Directory bread(block 3240) failed [ 179.339654][ T9419] FAT-fs (loop5): Directory bread(block 3241) failed [ 179.346504][ T9419] FAT-fs (loop5): Directory bread(block 3242) failed [ 179.353203][ T9419] FAT-fs (loop5): Directory bread(block 3243) failed [ 179.386153][ T9421] dummy0: entered promiscuous mode [ 179.391497][ T9421] macsec1: entered promiscuous mode [ 179.396808][ T9421] macsec1: entered allmulticast mode [ 179.402129][ T9421] dummy0: entered allmulticast mode [ 179.409447][ T9421] dummy0: left allmulticast mode [ 179.414509][ T9421] dummy0: left promiscuous mode [ 179.525013][ T9426] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9426 comm=syz.0.1764 [ 179.537624][ T9426] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9426 comm=syz.0.1764 [ 179.565073][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x4 [ 179.572830][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x2 [ 179.582384][ T9431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9431 comm=syz.5.1766 [ 179.586486][ T9429] loop1: detected capacity change from 0 to 1024 [ 179.594898][ T9431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9431 comm=syz.5.1766 [ 179.602030][ T9429] EXT4-fs: Ignoring removed bh option [ 179.622761][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x4 [ 179.626395][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.630468][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x2 [ 179.638122][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.646634][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.653458][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.660969][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.661026][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.668819][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.676636][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.684249][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.691930][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.699579][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.707205][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.714888][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.722452][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.730049][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.737753][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.745413][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.753046][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.760619][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.768242][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.775872][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.783570][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.791191][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.798816][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.806452][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.814056][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.821687][ T35] hid-generic 0000:3000000:0000.009E: unknown main item tag 0x0 [ 179.829307][ T8] hid-generic 0000:3000000:0000.009F: unknown main item tag 0x0 [ 179.837593][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.847989][ T29] kauditd_printk_skb: 2585 callbacks suppressed [ 179.848005][ T29] audit: type=1326 audit(1738227825.653:90716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd43e13d67 code=0x7ffc0000 [ 179.891282][ T29] audit: type=1326 audit(1738227825.653:90717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd43db8fa9 code=0x7ffc0000 [ 179.914801][ T29] audit: type=1326 audit(1738227825.653:90718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcd43e1cda9 code=0x7ffc0000 [ 179.922832][ T9433] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 179.946176][ T9429] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 179.949503][ T29] audit: type=1326 audit(1738227825.683:90719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd43e13d67 code=0x7ffc0000 [ 179.956314][ T9434] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 179.977490][ T29] audit: type=1326 audit(1738227825.683:90720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd43db8fa9 code=0x7ffc0000 [ 180.006931][ T29] audit: type=1326 audit(1738227825.683:90721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcd43e1cda9 code=0x7ffc0000 [ 180.030473][ T29] audit: type=1326 audit(1738227825.703:90722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd43e13d67 code=0x7ffc0000 [ 180.053897][ T29] audit: type=1326 audit(1738227825.703:90723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd43db8fa9 code=0x7ffc0000 [ 180.077413][ T29] audit: type=1326 audit(1738227825.703:90724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcd43e1cda9 code=0x7ffc0000 [ 180.101107][ T29] audit: type=1326 audit(1738227825.703:90725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd43e13d67 code=0x7ffc0000 [ 180.124953][ T35] hid-generic 0000:3000000:0000.009E: hidraw0: HID v0.00 Device [sy] on syz0 [ 180.128602][ T8] hid-generic 0000:3000000:0000.009F: hidraw1: HID v0.00 Device [sy] on syz0 [ 180.193707][ T9445] loop5: detected capacity change from 0 to 512 [ 180.206255][ T9445] EXT4-fs (loop5): orphan cleanup on readonly fs [ 180.213113][ T9445] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 180.228588][ T9445] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 180.235483][ T9445] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1769: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 180.236453][ T9447] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.254515][ T9445] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1769: couldn't read orphan inode 13 (err -117) [ 180.260875][ T9447] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 180.280640][ T9445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.364989][ T9448] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 180.375733][ T9448] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 180.561328][ T9459] loop0: detected capacity change from 0 to 2048 [ 180.587238][ T9459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.602042][ T9459] EXT4-fs (loop0): shut down requested (2) [ 180.621214][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.653055][ T9464] loop0: detected capacity change from 0 to 1024 [ 180.660220][ T9464] EXT4-fs: Ignoring removed bh option [ 180.675189][ T9464] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 181.006349][ T9470] loop2: detected capacity change from 0 to 512 [ 181.020159][ T9470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.032805][ T9470] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.044977][ T9470] FAULT_INJECTION: forcing a failure. [ 181.044977][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 181.057748][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.2.1776 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 181.057823][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.057838][ T9470] Call Trace: [ 181.057846][ T9470] [ 181.057855][ T9470] dump_stack_lvl+0xf2/0x150 [ 181.057962][ T9470] dump_stack+0x15/0x1a [ 181.057987][ T9470] should_fail_ex+0x24a/0x260 [ 181.058034][ T9470] should_failslab+0x8f/0xb0 [ 181.058098][ T9470] kmem_cache_alloc_noprof+0x52/0x320 [ 181.058138][ T9470] ? getname_flags+0x81/0x3b0 [ 181.058173][ T9470] getname_flags+0x81/0x3b0 [ 181.058200][ T9470] __x64_sys_mkdir+0x33/0x50 [ 181.058261][ T9470] x64_sys_call+0x1b2b/0x2dc0 [ 181.058292][ T9470] do_syscall_64+0xc9/0x1c0 [ 181.058326][ T9470] ? clear_bhb_loop+0x55/0xb0 [ 181.058357][ T9470] ? clear_bhb_loop+0x55/0xb0 [ 181.058448][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.058511][ T9470] RIP: 0033:0x7fcd43e1cda9 [ 181.058530][ T9470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.058551][ T9470] RSP: 002b:00007fcd42487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 181.058574][ T9470] RAX: ffffffffffffffda RBX: 00007fcd44035fa0 RCX: 00007fcd43e1cda9 [ 181.058587][ T9470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 181.058599][ T9470] RBP: 00007fcd42487090 R08: 0000000000000000 R09: 0000000000000000 [ 181.058622][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.058636][ T9470] R13: 0000000000000000 R14: 00007fcd44035fa0 R15: 00007ffe074838b8 [ 181.058655][ T9470] [ 181.237998][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.294472][ T9474] random: crng reseeded on system resumption [ 181.424020][ T9479] FAULT_INJECTION: forcing a failure. [ 181.424020][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.437164][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.2.1779 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 181.437190][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.437202][ T9479] Call Trace: [ 181.437208][ T9479] [ 181.437216][ T9479] dump_stack_lvl+0xf2/0x150 [ 181.437248][ T9479] dump_stack+0x15/0x1a [ 181.437274][ T9479] should_fail_ex+0x24a/0x260 [ 181.437313][ T9479] should_fail+0xb/0x10 [ 181.437345][ T9479] should_fail_usercopy+0x1a/0x20 [ 181.437396][ T9479] _copy_from_user+0x1c/0xa0 [ 181.437419][ T9479] memdup_user_nul+0x65/0xd0 [ 181.437450][ T9479] sel_commit_bools_write+0xcd/0x260 [ 181.437483][ T9479] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 181.437616][ T9479] vfs_write+0x27d/0x920 [ 181.437638][ T9479] ? __fget_files+0x17c/0x1c0 [ 181.437704][ T9479] __x64_sys_pwrite64+0xf6/0x150 [ 181.437733][ T9479] x64_sys_call+0xab0/0x2dc0 [ 181.437762][ T9479] do_syscall_64+0xc9/0x1c0 [ 181.437853][ T9479] ? clear_bhb_loop+0x55/0xb0 [ 181.437886][ T9479] ? clear_bhb_loop+0x55/0xb0 [ 181.437939][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.437972][ T9479] RIP: 0033:0x7fcd43e1cda9 [ 181.437989][ T9479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.438011][ T9479] RSP: 002b:00007fcd42487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 181.438031][ T9479] RAX: ffffffffffffffda RBX: 00007fcd44035fa0 RCX: 00007fcd43e1cda9 [ 181.438042][ T9479] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000006 [ 181.438053][ T9479] RBP: 00007fcd42487090 R08: 0000000000000000 R09: 0000000000000000 [ 181.438071][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.438125][ T9479] R13: 0000000000000000 R14: 00007fcd44035fa0 R15: 00007ffe074838b8 [ 181.438147][ T9479] [ 181.677843][ T9485] loop0: detected capacity change from 0 to 1024 [ 181.685210][ T9485] EXT4-fs: Ignoring removed bh option [ 181.695429][ T9485] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 181.760801][ T9493] FAULT_INJECTION: forcing a failure. [ 181.760801][ T9493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.773924][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.2.1785 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 181.773950][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.773966][ T9493] Call Trace: [ 181.773973][ T9493] [ 181.773982][ T9493] dump_stack_lvl+0xf2/0x150 [ 181.774058][ T9493] dump_stack+0x15/0x1a [ 181.774084][ T9493] should_fail_ex+0x24a/0x260 [ 181.774136][ T9493] should_fail+0xb/0x10 [ 181.774178][ T9493] should_fail_usercopy+0x1a/0x20 [ 181.774286][ T9493] _copy_from_user+0x1c/0xa0 [ 181.774340][ T9493] do_ip6t_set_ctl+0x42c/0x8c0 [ 181.774374][ T9493] ? kstrtouint+0x77/0xc0 [ 181.774399][ T9493] ? __rcu_read_unlock+0x4e/0x70 [ 181.774426][ T9493] nf_setsockopt+0x195/0x1b0 [ 181.774451][ T9493] ipv6_setsockopt+0x10f/0x130 [ 181.774508][ T9493] udpv6_setsockopt+0x95/0xb0 [ 181.774552][ T9493] sock_common_setsockopt+0x64/0x80 [ 181.774582][ T9493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.774612][ T9493] __sys_setsockopt+0x187/0x200 [ 181.774708][ T9493] __x64_sys_setsockopt+0x66/0x80 [ 181.774737][ T9493] x64_sys_call+0x282e/0x2dc0 [ 181.774762][ T9493] do_syscall_64+0xc9/0x1c0 [ 181.774851][ T9493] ? clear_bhb_loop+0x55/0xb0 [ 181.774953][ T9493] ? clear_bhb_loop+0x55/0xb0 [ 181.774979][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.775005][ T9493] RIP: 0033:0x7fcd43e1cda9 [ 181.775018][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.775078][ T9493] RSP: 002b:00007fcd42487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.775120][ T9493] RAX: ffffffffffffffda RBX: 00007fcd44035fa0 RCX: 00007fcd43e1cda9 [ 181.775132][ T9493] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 181.775143][ T9493] RBP: 00007fcd42487090 R08: 0000000000000060 R09: 0000000000000000 [ 181.775154][ T9493] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 181.775165][ T9493] R13: 0000000000000000 R14: 00007fcd44035fa0 R15: 00007ffe074838b8 [ 181.775221][ T9493] [ 182.032637][ T9501] FAULT_INJECTION: forcing a failure. [ 182.032637][ T9501] name failslab, interval 1, probability 0, space 0, times 0 [ 182.045402][ T9501] CPU: 0 UID: 0 PID: 9501 Comm: syz.2.1788 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 182.045426][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.045436][ T9501] Call Trace: [ 182.045467][ T9501] [ 182.045475][ T9501] dump_stack_lvl+0xf2/0x150 [ 182.045503][ T9501] dump_stack+0x15/0x1a [ 182.045574][ T9501] should_fail_ex+0x24a/0x260 [ 182.045598][ T9501] ? audit_log_d_path+0x96/0x250 [ 182.045683][ T9501] should_failslab+0x8f/0xb0 [ 182.045704][ T9501] __kmalloc_cache_noprof+0x4e/0x320 [ 182.045732][ T9501] audit_log_d_path+0x96/0x250 [ 182.045824][ T9501] ? __rcu_read_unlock+0x4e/0x70 [ 182.045841][ T9501] audit_log_d_path_exe+0x42/0x70 [ 182.045867][ T9501] audit_log_task+0x192/0x1c0 [ 182.045890][ T9501] audit_seccomp+0x68/0x130 [ 182.045954][ T9501] __seccomp_filter+0x6fa/0x1180 [ 182.046055][ T9501] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.046089][ T9501] ? vfs_write+0x644/0x920 [ 182.046110][ T9501] __secure_computing+0x9f/0x1c0 [ 182.046178][ T9501] syscall_trace_enter+0xd1/0x1f0 [ 182.046196][ T9501] ? fpregs_assert_state_consistent+0x83/0xa0 [ 182.046235][ T9501] do_syscall_64+0xaa/0x1c0 [ 182.046263][ T9501] ? clear_bhb_loop+0x55/0xb0 [ 182.046286][ T9501] ? clear_bhb_loop+0x55/0xb0 [ 182.046308][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.046329][ T9501] RIP: 0033:0x7fcd43e1cda9 [ 182.046342][ T9501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.046374][ T9501] RSP: 002b:00007fcd42487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 182.046388][ T9501] RAX: ffffffffffffffda RBX: 00007fcd44035fa0 RCX: 00007fcd43e1cda9 [ 182.046398][ T9501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 182.046407][ T9501] RBP: 00007fcd42487090 R08: 0000000000000000 R09: 0000000000000000 [ 182.046432][ T9501] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 182.046442][ T9501] R13: 0000000000000000 R14: 00007fcd44035fa0 R15: 00007ffe074838b8 [ 182.046456][ T9501] [ 182.294806][ T9505] vlan2: entered promiscuous mode [ 182.300583][ T9507] loop2: detected capacity change from 0 to 1024 [ 182.301707][ T9505] $Hÿ: (slave vlan2): Opening slave failed [ 182.308414][ T9507] EXT4-fs: Ignoring removed bh option [ 182.335048][ T9507] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 182.435837][ C1] hrtimer: interrupt took 26466 ns [ 182.531743][ T9516] vlan2: entered promiscuous mode [ 182.537461][ T9516] $Hÿ: (slave vlan2): Opening slave failed [ 183.169234][ T9532] loop2: detected capacity change from 0 to 1024 [ 183.176585][ T9532] EXT4-fs: Ignoring removed bh option [ 183.187569][ T9532] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 183.217813][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.485130][ T9545] vlan2: entered promiscuous mode [ 183.490780][ T9545] $Hÿ: (slave vlan2): Opening slave failed [ 183.563717][ T9547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9547 comm=syz.0.1806 [ 183.576275][ T9547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9547 comm=syz.0.1806 [ 183.590472][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x4 [ 183.598182][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x2 [ 183.606164][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.613843][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.621614][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.629332][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.637009][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.644875][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.652682][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.660382][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.665762][ T9549] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 183.668045][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.681687][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.689357][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.697036][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.704868][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.712535][ T24] hid-generic 0000:3000000:0000.00A0: unknown main item tag 0x0 [ 183.720809][ T24] hid-generic 0000:3000000:0000.00A0: hidraw0: HID v0.00 Device [sy] on syz0 [ 183.954728][ T9552] FAULT_INJECTION: forcing a failure. [ 183.954728][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.968012][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.4.1807 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 183.968034][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.968045][ T9552] Call Trace: [ 183.968050][ T9552] [ 183.968056][ T9552] dump_stack_lvl+0xf2/0x150 [ 183.968080][ T9552] dump_stack+0x15/0x1a [ 183.968116][ T9552] should_fail_ex+0x24a/0x260 [ 183.968165][ T9552] should_fail+0xb/0x10 [ 183.968190][ T9552] should_fail_usercopy+0x1a/0x20 [ 183.968357][ T9552] _copy_from_iter+0xd5/0xd00 [ 183.968404][ T9552] ? kmalloc_reserve+0x16e/0x190 [ 183.968490][ T9552] ? __build_skb_around+0x196/0x1f0 [ 183.968515][ T9552] ? __alloc_skb+0x21f/0x310 [ 183.968539][ T9552] ? __virt_addr_valid+0x1ed/0x250 [ 183.968665][ T9552] ? __check_object_size+0x364/0x520 [ 183.968710][ T9552] netlink_sendmsg+0x460/0x6e0 [ 183.968741][ T9552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.968830][ T9552] __sock_sendmsg+0x140/0x180 [ 183.968852][ T9552] ____sys_sendmsg+0x312/0x410 [ 183.968884][ T9552] __sys_sendmsg+0x19d/0x230 [ 183.968925][ T9552] __x64_sys_sendmsg+0x46/0x50 [ 183.968964][ T9552] x64_sys_call+0x2734/0x2dc0 [ 183.969060][ T9552] do_syscall_64+0xc9/0x1c0 [ 183.969089][ T9552] ? clear_bhb_loop+0x55/0xb0 [ 183.969121][ T9552] ? clear_bhb_loop+0x55/0xb0 [ 183.969147][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.969227][ T9552] RIP: 0033:0x7f2b7505cda9 [ 183.969319][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.969335][ T9552] RSP: 002b:00007f2b736c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.969351][ T9552] RAX: ffffffffffffffda RBX: 00007f2b75275fa0 RCX: 00007f2b7505cda9 [ 183.969362][ T9552] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 183.969372][ T9552] RBP: 00007f2b736c7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.969383][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.969393][ T9552] R13: 0000000000000000 R14: 00007f2b75275fa0 R15: 00007ffe8347d3a8 [ 183.969409][ T9552] [ 184.241885][ T9559] loop5: detected capacity change from 0 to 512 [ 184.264264][ T9561] loop2: detected capacity change from 0 to 1024 [ 184.268080][ T9564] loop4: detected capacity change from 0 to 1024 [ 184.279128][ T9559] EXT4-fs (loop5): orphan cleanup on readonly fs [ 184.286802][ T9561] EXT4-fs: Ignoring removed bh option [ 184.292800][ T9564] EXT4-fs: Ignoring removed orlov option [ 184.298804][ T9559] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 184.314437][ T9559] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 184.320063][ T9561] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 184.322376][ T9559] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1811: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 184.332702][ T9567] loop1: detected capacity change from 0 to 1024 [ 184.348600][ T9564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.366323][ T9567] EXT4-fs: Ignoring removed orlov option [ 184.372139][ T9559] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1811: couldn't read orphan inode 13 (err -117) [ 184.389125][ T9559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.395735][ T9567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.449100][ T9573] loop0: detected capacity change from 0 to 1024 [ 184.459913][ T9573] EXT4-fs: Ignoring removed bh option [ 184.505001][ T9577] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 184.515703][ T9573] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 184.525176][ T9577] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 184.526984][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.569091][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.604294][ T9585] FAULT_INJECTION: forcing a failure. [ 184.604294][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 184.604348][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: syz.4.1818 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 184.604375][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 184.604390][ T9585] Call Trace: [ 184.604397][ T9585] [ 184.604405][ T9585] dump_stack_lvl+0xf2/0x150 [ 184.604488][ T9585] dump_stack+0x15/0x1a [ 184.604510][ T9585] should_fail_ex+0x24a/0x260 [ 184.604607][ T9585] ? vc_allocate+0x10c/0x400 [ 184.604666][ T9585] should_failslab+0x8f/0xb0 [ 184.604774][ T9585] __kmalloc_cache_noprof+0x4e/0x320 [ 184.604818][ T9585] vc_allocate+0x10c/0x400 [ 184.604848][ T9585] con_install+0x36/0x2d0 [ 184.604883][ T9585] tty_init_dev+0x7b/0x320 [ 184.604991][ T9585] tty_open+0x6c7/0xb00 [ 184.605028][ T9585] chrdev_open+0x2f9/0x370 [ 184.605061][ T9585] ? __pfx_chrdev_open+0x10/0x10 [ 184.605102][ T9585] do_dentry_open+0x621/0xa20 [ 184.605181][ T9585] vfs_open+0x38/0x1e0 [ 184.605212][ T9585] path_openat+0x1acf/0x1fb0 [ 184.605236][ T9585] ? _parse_integer_limit+0x167/0x180 [ 184.605280][ T9585] ? kstrtouint_from_user+0xb0/0xe0 [ 184.605346][ T9585] do_filp_open+0x107/0x230 [ 184.605399][ T9585] do_sys_openat2+0xab/0x120 [ 184.605429][ T9585] __x64_sys_openat+0xf3/0x120 [ 184.605475][ T9585] x64_sys_call+0x2b30/0x2dc0 [ 184.605507][ T9585] do_syscall_64+0xc9/0x1c0 [ 184.605541][ T9585] ? clear_bhb_loop+0x55/0xb0 [ 184.605574][ T9585] ? clear_bhb_loop+0x55/0xb0 [ 184.605599][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.605681][ T9585] RIP: 0033:0x7f2b7505b710 [ 184.605699][ T9585] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 184.605835][ T9585] RSP: 002b:00007f2b736c6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 184.605853][ T9585] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2b7505b710 [ 184.605864][ T9585] RDX: 0000000000000002 RSI: 00007f2b736c6c10 RDI: 00000000ffffff9c [ 184.605877][ T9585] RBP: 00007f2b736c6c10 R08: 0000000000000000 R09: 00007f2b736c6987 [ 184.605906][ T9585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 184.605918][ T9585] R13: 0000000000000000 R14: 00007f2b75275fa0 R15: 00007ffe8347d3a8 [ 184.605934][ T9585] [ 184.686174][ T9588] loop1: detected capacity change from 0 to 1024 [ 184.844853][ T29] kauditd_printk_skb: 3193 callbacks suppressed [ 184.844866][ T29] audit: type=1326 audit(1738227830.653:93919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0acaa1ba0a code=0x7ffc0000 [ 184.849813][ T9588] EXT4-fs: Ignoring removed bh option [ 184.867331][ T29] audit: type=1326 audit(1738227830.663:93920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0acaa1ba0a code=0x7ffc0000 [ 184.903251][ T29] audit: type=1326 audit(1738227830.663:93921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0acaa1b617 code=0x7ffc0000 [ 184.911014][ T9590] loop4: detected capacity change from 0 to 1024 [ 184.926831][ T29] audit: type=1326 audit(1738227830.663:93922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.1.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0acaa1e54a code=0x7ffc0000 [ 184.956749][ T29] audit: type=1326 audit(1738227830.673:93923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd43e13d67 code=0x7ffc0000 [ 184.963837][ T9590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.980231][ T29] audit: type=1326 audit(1738227830.673:93924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd43db8fa9 code=0x7ffc0000 [ 184.980268][ T29] audit: type=1326 audit(1738227830.673:93925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcd43e1cda9 code=0x7ffc0000 [ 185.000373][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1819'. [ 185.016398][ T29] audit: type=1326 audit(1738227830.673:93926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24e2d3d67 code=0x7ffc0000 [ 185.041219][ T9588] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 185.048809][ T29] audit: type=1326 audit(1738227830.673:93927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24e278fa9 code=0x7ffc0000 [ 185.103690][ T29] audit: type=1326 audit(1738227830.673:93928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe24e2dcda9 code=0x7ffc0000 [ 185.177577][ T9595] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.251951][ T9602] loop2: detected capacity change from 0 to 764 [ 185.259007][ T9602] iso9660: Unknown parameter '' [ 185.315127][ T9604] loop2: detected capacity change from 0 to 1024 [ 185.330711][ T9608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9608 comm=syz.0.1825 [ 185.331914][ T9604] EXT4-fs: Ignoring removed bh option [ 185.343225][ T9608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9608 comm=syz.0.1825 [ 185.364555][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x4 [ 185.372322][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x2 [ 185.375000][ T9604] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 185.380232][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.395496][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.403337][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.411029][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.418777][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.426476][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.434267][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.441997][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.448434][ T9611] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 185.449672][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.463314][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.471012][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.478732][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.486405][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.494057][ T24] hid-generic 0000:3000000:0000.00A1: unknown main item tag 0x0 [ 185.502577][ T24] hid-generic 0000:3000000:0000.00A1: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.652631][ T9618] loop1: detected capacity change from 0 to 512 [ 185.662520][ T9618] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 185.670654][ T9618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 185.678709][ T9618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.685230][ T9618] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 185.695723][ T9618] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 185.706286][ T9618] EXT4-fs (loop1): 1 truncate cleaned up [ 185.712397][ T9618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.736971][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.764705][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.782805][ T8] IPVS: starting estimator thread 0... [ 185.825406][ T9630] loop1: detected capacity change from 0 to 1024 [ 185.832779][ T9630] EXT4-fs: Ignoring removed bh option [ 185.845749][ T9630] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 185.874209][ T9636] netlink: 'syz.4.1834': attribute type 13 has an invalid length. [ 185.884885][ T9624] IPVS: using max 2544 ests per chain, 127200 per kthread [ 185.923047][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.930289][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.967567][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.977787][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.009119][ T9636] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.017709][ T9636] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.026253][ T9636] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.034616][ T9636] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.068692][ T9640] loop4: detected capacity change from 0 to 512 [ 186.075934][ T9640] EXT4-fs: Ignoring removed orlov option [ 186.082475][ T9640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.092153][ T9640] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.099221][ T9640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1835: bg 0: block 248: padding at end of block bitmap is not set [ 186.114392][ T9640] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1835: Failed to acquire dquot type 1 [ 186.126371][ T9640] EXT4-fs (loop4): 1 truncate cleaned up [ 186.132751][ T9640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.146844][ T9640] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 186.169226][ T9640] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1835: Abort forced by user [ 186.180146][ T9640] EXT4-fs (loop4): Remounting filesystem read-only [ 186.186716][ T9640] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 186.197971][ T9640] ext4 filesystem being remounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.208098][ T9648] loop0: detected capacity change from 0 to 512 [ 186.215811][ T9648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.233254][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.243639][ T9648] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.260202][ T9649] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.264471][ T9648] EXT4-fs (loop0): 1 truncate cleaned up [ 186.268236][ T9649] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 186.273920][ T9648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.306090][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.337003][ T9653] bond0 (unregistering): Released all slaves [ 186.408672][ T9658] loop4: detected capacity change from 0 to 1024 [ 186.416898][ T9658] EXT4-fs: Ignoring removed bh option [ 186.425765][ T9658] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 186.568478][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1843'. [ 186.603404][ T9668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9668 comm=syz.0.1844 [ 186.616127][ T9668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9668 comm=syz.0.1844 [ 186.630409][ T9668] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.679998][ T9675] FAULT_INJECTION: forcing a failure. [ 186.679998][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.687304][ T9673] loop1: detected capacity change from 0 to 1024 [ 186.693224][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.0.1847 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 186.693258][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.693273][ T9675] Call Trace: [ 186.693280][ T9675] [ 186.693289][ T9675] dump_stack_lvl+0xf2/0x150 [ 186.693333][ T9675] dump_stack+0x15/0x1a [ 186.693359][ T9675] should_fail_ex+0x24a/0x260 [ 186.693400][ T9675] should_fail+0xb/0x10 [ 186.693506][ T9675] should_fail_usercopy+0x1a/0x20 [ 186.693548][ T9675] _copy_from_user+0x1c/0xa0 [ 186.693643][ T9675] __se_sys_mount+0x115/0x2d0 [ 186.693675][ T9675] ? fput+0x1c4/0x200 [ 186.693719][ T9675] ? ksys_write+0x176/0x1b0 [ 186.693782][ T9675] __x64_sys_mount+0x67/0x80 [ 186.693815][ T9675] x64_sys_call+0x2c84/0x2dc0 [ 186.693848][ T9675] do_syscall_64+0xc9/0x1c0 [ 186.694071][ T9675] ? clear_bhb_loop+0x55/0xb0 [ 186.694105][ T9675] ? clear_bhb_loop+0x55/0xb0 [ 186.694138][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.694183][ T9675] RIP: 0033:0x7fe24e2dcda9 [ 186.694275][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.694297][ T9675] RSP: 002b:00007fe24c947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.694330][ T9675] RAX: ffffffffffffffda RBX: 00007fe24e4f5fa0 RCX: 00007fe24e2dcda9 [ 186.694344][ T9675] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 186.694358][ T9675] RBP: 00007fe24c947090 R08: 0000000020000540 R09: 0000000000000000 [ 186.694445][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.694459][ T9675] R13: 0000000000000000 R14: 00007fe24e4f5fa0 R15: 00007ffd01a35fb8 [ 186.694551][ T9675] [ 186.696248][ T9675] 9pnet_fd: Insufficient options for proto=fd [ 186.704653][ T9673] EXT4-fs: Ignoring removed bh option [ 186.768264][ T9677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9677 comm=syz.0.1848 [ 186.778308][ T9673] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 186.781238][ T9677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9677 comm=syz.0.1848 [ 186.783638][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x4 [ 186.865020][ T9680] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.869107][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x2 [ 186.937874][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.945578][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.953257][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.961049][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.968823][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.976606][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.984336][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.992050][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 186.999746][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.007567][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.015348][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.023013][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.030817][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.033378][ T9684] loop2: detected capacity change from 0 to 1024 [ 187.038533][ T8] hid-generic 0000:3000000:0000.00A2: unknown main item tag 0x0 [ 187.039754][ T8] hid-generic 0000:3000000:0000.00A2: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.047070][ T9684] EXT4-fs: Ignoring removed orlov option [ 187.084741][ T9684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.284175][ T9689] loop4: detected capacity change from 0 to 2048 [ 187.387146][ T9694] loop4: detected capacity change from 0 to 2048 [ 187.429233][ T9694] EXT4-fs (loop4): shut down requested (2) [ 187.502137][ T9702] xt_connbytes: Forcing CT accounting to be enabled [ 187.508890][ T9702] Cannot find add_set index 0 as target [ 187.619169][ T9707] loop1: detected capacity change from 0 to 1024 [ 187.627212][ T9707] EXT4-fs: Ignoring removed bh option [ 187.661943][ T9709] loop0: detected capacity change from 0 to 512 [ 187.669205][ T9709] EXT4-fs: Invalid want_extra_isize 3 [ 187.676133][ T9707] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 187.687218][ T9709] mmap: syz.0.1857 (9709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.812551][ T9717] loop0: detected capacity change from 0 to 512 [ 187.822364][ T9717] EXT4-fs (loop0): orphan cleanup on readonly fs [ 187.833527][ T9717] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 187.853343][ T9717] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 187.860997][ T9717] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.1860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 187.879505][ T9717] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1860: couldn't read orphan inode 13 (err -117) [ 187.924233][ T9720] loop2: detected capacity change from 0 to 1024 [ 187.932165][ T9720] EXT4-fs: Ignoring removed bh option [ 187.945337][ T9720] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 187.971612][ T9722] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 187.981889][ T9722] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 188.289610][ T9727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9727 comm=syz.5.1863 [ 188.302301][ T9727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9727 comm=syz.5.1863 [ 188.318434][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x4 [ 188.326146][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x2 [ 188.348403][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.354609][ T9729] loop4: detected capacity change from 0 to 2048 [ 188.356198][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.356225][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.356249][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.356274][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.380948][ T9729] EXT4-fs (loop4): shut down requested (2) [ 188.385606][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.385631][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.414540][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.422232][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.429951][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.437630][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.445304][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.452949][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.460612][ T8] hid-generic 0000:3000000:0000.00A3: unknown main item tag 0x0 [ 188.469897][ T8] hid-generic 0000:3000000:0000.00A3: hidraw0: HID v0.00 Device [sy] on syz0 [ 188.525953][ T9735] loop1: detected capacity change from 0 to 1024 [ 188.546030][ T9735] EXT4-fs: Ignoring removed bh option [ 188.555307][ T9737] loop5: detected capacity change from 0 to 2048 [ 188.561772][ T9735] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 188.597009][ T9737] Alternate GPT is invalid, using primary GPT. [ 188.603409][ T9737] loop5: p2 p3 p7 [ 188.636405][ T9737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9737 comm=syz.5.1867 [ 188.663192][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1867'. [ 188.693407][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.707635][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.716649][ T9737] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 188.728847][ T9737] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 188.847552][ T9752] loop5: detected capacity change from 0 to 1024 [ 188.857387][ T9752] EXT4-fs: Ignoring removed orlov option [ 188.973176][ T9765] loop2: detected capacity change from 0 to 1024 [ 188.980498][ T9765] EXT4-fs: Ignoring removed bh option [ 188.997890][ T9767] loop4: detected capacity change from 0 to 1024 [ 189.007305][ T9767] EXT4-fs: Ignoring removed bh option [ 189.012933][ T9765] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 189.035485][ T9767] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 189.051074][ T9771] loop5: detected capacity change from 0 to 1024 [ 189.062994][ T9771] EXT4-fs: Ignoring removed bh option [ 189.076181][ T9771] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 189.825817][ T9791] loop2: detected capacity change from 0 to 512 [ 189.836761][ T9791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.848748][ T9791] EXT4-fs (loop2): 1 truncate cleaned up [ 189.858953][ T29] kauditd_printk_skb: 3014 callbacks suppressed [ 189.858967][ T29] audit: type=1326 audit(1738227835.673:96941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfebc83d67 code=0x7ffc0000 [ 189.888896][ T29] audit: type=1326 audit(1738227835.673:96942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfebc28fa9 code=0x7ffc0000 [ 189.912475][ T29] audit: type=1326 audit(1738227835.673:96943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcfebc8cda9 code=0x7ffc0000 [ 189.937686][ T29] audit: type=1326 audit(1738227835.713:96944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfebc83d67 code=0x7ffc0000 [ 189.944297][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1886'. [ 189.961145][ T29] audit: type=1326 audit(1738227835.713:96945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfebc28fa9 code=0x7ffc0000 [ 189.993533][ T29] audit: type=1326 audit(1738227835.713:96946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcfebc8cda9 code=0x7ffc0000 [ 190.017070][ T29] audit: type=1326 audit(1738227835.733:96947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfebc83d67 code=0x7ffc0000 [ 190.040480][ T29] audit: type=1326 audit(1738227835.733:96948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfebc28fa9 code=0x7ffc0000 [ 190.064027][ T29] audit: type=1326 audit(1738227835.733:96949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcfebc8cda9 code=0x7ffc0000 [ 190.087829][ T29] audit: type=1326 audit(1738227835.793:96950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfebc83d67 code=0x7ffc0000 [ 190.126817][ T9791] wireguard0: entered promiscuous mode [ 190.132368][ T9791] wireguard0: entered allmulticast mode [ 190.170310][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1887'. [ 190.333938][ T3303] EXT4-fs unmount: 10 callbacks suppressed [ 190.333961][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.387320][ T9807] loop2: detected capacity change from 0 to 1024 [ 190.422016][ T9807] EXT4-fs: Ignoring removed orlov option [ 190.463586][ T9810] loop1: detected capacity change from 0 to 1024 [ 190.471469][ T9810] EXT4-fs: Ignoring removed bh option [ 190.477322][ T9807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.552063][ T9810] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 190.685290][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.832692][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.033922][ T9828] wireguard0: entered promiscuous mode [ 191.039503][ T9828] wireguard0: entered allmulticast mode [ 191.089710][ T9833] loop5: detected capacity change from 0 to 1024 [ 191.097125][ T9833] EXT4-fs: Ignoring removed bh option [ 191.105386][ T9833] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 191.165021][ T9837] loop0: detected capacity change from 0 to 2048 [ 191.177654][ T9837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.249170][ T2963] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 191.256673][ T2963] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 191.264084][ T2963] hid-generic 0000:0000:0000.00A4: unexpected long global item [ 191.272036][ T2963] hid-generic 0000:0000:0000.00A4: probe with driver hid-generic failed with error -22 [ 191.306342][ T9843] loop1: detected capacity change from 0 to 1024 [ 191.313310][ T9843] EXT4-fs: Ignoring removed bh option [ 191.335254][ T9843] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 191.865209][ T9852] loop4: detected capacity change from 0 to 512 [ 191.872973][ T9852] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.881386][ T9852] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 191.896898][ T9852] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 191.903785][ T9852] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.1902: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.923503][ T9852] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1902: couldn't read orphan inode 13 (err -117) [ 191.936145][ T9852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.997079][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.029493][ T9856] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 192.039177][ T9856] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 192.068599][ T9859] rdma_op ffff88810b251580 conn xmit_rdma 0000000000000000 [ 192.853811][ T9881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9881 comm=syz.5.1913 [ 192.866413][ T9881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9881 comm=syz.5.1913 [ 192.880848][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x4 [ 192.888575][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x2 [ 192.896697][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.904392][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.909657][ T9885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9885 comm=syz.0.1914 [ 192.912082][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.924516][ T9885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9885 comm=syz.0.1914 [ 192.932123][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.932146][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.951039][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x4 [ 192.952243][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.959891][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x2 [ 192.967529][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.984837][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 192.990481][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 192.998140][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.005756][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.013433][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.021089][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.021116][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.028791][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.036408][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.044023][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.051662][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.059340][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.066956][ T8] hid-generic 0000:3000000:0000.00A5: unknown main item tag 0x0 [ 193.074690][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.097855][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.105536][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.113200][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.121072][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.128750][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.136482][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.144201][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x0 [ 193.154974][ T8] hid-generic 0000:3000000:0000.00A5: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.156190][ T3375] hid-generic 0000:3000000:0000.00A6: hidraw1: HID v0.00 Device [sy] on syz0 [ 193.175139][ T9886] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.266295][ T9896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9896 comm=syz.5.1919 [ 193.277924][ T9899] loop1: detected capacity change from 0 to 1024 [ 193.278773][ T9896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9896 comm=syz.5.1919 [ 193.285746][ T9899] EXT4-fs: Ignoring removed orlov option [ 193.304548][ T9896] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.323553][ T9899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.328895][ T9902] netlink: 'syz.5.1922': attribute type 9 has an invalid length. [ 193.343890][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1922'. [ 193.468750][ T9904] loop5: detected capacity change from 0 to 8192 [ 193.476167][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.504480][ T9908] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.515515][ T9904] loop5: p1 p2 p3 [ 193.519401][ T9904] loop5: p1 size 67108864 extends beyond EOD, truncated [ 193.532988][ T9904] loop5: p2 start 98631679 is beyond EOD, truncated [ 193.539669][ T9904] loop5: p3 size 423702036 extends beyond EOD, truncated [ 193.565534][ T5321] udevd[5321]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 193.581178][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 193.701963][ T9927] FAULT_INJECTION: forcing a failure. [ 193.701963][ T9927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.715152][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.2.1932 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 193.715180][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 193.715193][ T9927] Call Trace: [ 193.715199][ T9927] [ 193.715208][ T9927] dump_stack_lvl+0xf2/0x150 [ 193.715298][ T9927] dump_stack+0x15/0x1a [ 193.715333][ T9927] should_fail_ex+0x24a/0x260 [ 193.715438][ T9927] should_fail+0xb/0x10 [ 193.715470][ T9927] should_fail_usercopy+0x1a/0x20 [ 193.715510][ T9927] strncpy_from_user+0x25/0x210 [ 193.715541][ T9927] ? __fget_files+0x17c/0x1c0 [ 193.715616][ T9927] __se_sys_add_key+0x81/0x320 [ 193.715642][ T9927] ? fput+0x1c4/0x200 [ 193.715777][ T9927] __x64_sys_add_key+0x67/0x80 [ 193.715804][ T9927] x64_sys_call+0x2964/0x2dc0 [ 193.715895][ T9927] do_syscall_64+0xc9/0x1c0 [ 193.715927][ T9927] ? clear_bhb_loop+0x55/0xb0 [ 193.716002][ T9927] ? clear_bhb_loop+0x55/0xb0 [ 193.716030][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.716058][ T9927] RIP: 0033:0x7fcd43e1cda9 [ 193.716075][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.716102][ T9927] RSP: 002b:00007fcd42487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 193.716123][ T9927] RAX: ffffffffffffffda RBX: 00007fcd44035fa0 RCX: 00007fcd43e1cda9 [ 193.716137][ T9927] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 00000000200001c0 [ 193.716150][ T9927] RBP: 00007fcd42487090 R08: 000000003866eeb5 R09: 0000000000000000 [ 193.716162][ T9927] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 193.716173][ T9927] R13: 0000000000000000 R14: 00007fcd44035fa0 R15: 00007ffe074838b8 [ 193.716189][ T9927] [ 193.717718][ T9929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9929 comm=syz.5.1933 [ 193.756132][ T9932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9932 comm=syz.2.1934 [ 193.758294][ T9929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9929 comm=syz.5.1933 [ 193.762440][ T9932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9932 comm=syz.2.1934 [ 193.779718][ T9929] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.804380][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x4 [ 193.883881][ T9936] loop0: detected capacity change from 0 to 1024 [ 193.888640][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x2 [ 193.893808][ T9936] EXT4-fs: Ignoring removed bh option [ 193.918898][ T9937] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.955087][ T9936] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 193.955687][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 193.996644][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.004317][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.012021][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.019726][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.027437][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.029842][ T9942] loop5: detected capacity change from 0 to 1024 [ 194.035236][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.044263][ T9942] EXT4-fs: Ignoring removed bh option [ 194.049193][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.062473][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.065177][ T9942] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 194.070144][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.085675][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.093346][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.101061][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.108806][ T8] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x0 [ 194.117183][ T8] hid-generic 0000:3000000:0000.00A7: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.175692][ T9945] loop2: detected capacity change from 0 to 2048 [ 194.186739][ T9945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.219486][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.313634][ T9957] loop2: detected capacity change from 0 to 1024 [ 194.332404][ T9957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.347297][ T9957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1942'. [ 194.440984][ T9961] loop1: detected capacity change from 0 to 1024 [ 194.448255][ T9961] EXT4-fs: Ignoring removed bh option [ 194.455374][ T9961] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 194.662272][ T9967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9967 comm=syz.0.1945 [ 194.674914][ T9967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9967 comm=syz.0.1945 [ 194.689128][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x4 [ 194.696869][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x2 [ 194.704681][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.712407][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.720215][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.727964][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.735727][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.743367][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.751038][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.758844][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.766538][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.774184][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.781861][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.789556][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.797243][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.804968][ T3375] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x0 [ 194.813293][ T3375] hid-generic 0000:3000000:0000.00A8: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.868548][ T29] kauditd_printk_skb: 2795 callbacks suppressed [ 194.868561][ T29] audit: type=1326 audit(1738227840.683:99746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 194.898372][ T29] audit: type=1326 audit(1738227840.683:99747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 194.921890][ T29] audit: type=1326 audit(1738227840.683:99748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 194.929277][ T9969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.948265][ T29] audit: type=1326 audit(1738227840.763:99749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 194.974937][ T29] audit: type=1326 audit(1738227840.763:99750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 194.998484][ T29] audit: type=1326 audit(1738227840.763:99751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 195.024467][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.033865][ T29] audit: type=1326 audit(1738227840.793:99752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 195.057411][ T29] audit: type=1326 audit(1738227840.793:99753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aca9b8fa9 code=0x7ffc0000 [ 195.080854][ T29] audit: type=1326 audit(1738227840.793:99754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0acaa1cda9 code=0x7ffc0000 [ 195.104359][ T29] audit: type=1326 audit(1738227840.813:99755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0acaa13d67 code=0x7ffc0000 [ 195.155307][ T9974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9974 comm=syz.4.1947 [ 195.167925][ T9974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9974 comm=syz.4.1947 [ 195.182192][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.183971][ T9974] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 195.531120][ T9994] loop0: detected capacity change from 0 to 512 [ 195.539116][ T9994] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.546600][ T9994] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 195.561665][ T9994] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 195.568956][ T9994] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.1957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 195.587489][ T9994] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1957: couldn't read orphan inode 13 (err -117) [ 195.600072][ T9994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.677660][ T9996] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 195.687337][ T9996] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 195.942678][ T9998] netlink: 'syz.5.1958': attribute type 1 has an invalid length. [ 195.956599][ T9998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.973373][ T9998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.980825][ T9998] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 195.992922][ T9998] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 196.167857][T10007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10007 comm=syz.2.1961 [ 196.180519][T10007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10007 comm=syz.2.1961 [ 196.208340][T10007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.219888][T10017] loop4: detected capacity change from 0 to 1024 [ 196.235471][T10017] EXT4-fs: Ignoring removed bh option [ 196.246792][T10017] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 196.264239][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x4 [ 196.272047][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x2 [ 196.281582][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.289298][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.297047][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.304778][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.312494][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.320227][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.327953][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.335770][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.343436][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.351303][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.359004][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.366753][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.374427][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.382180][ T2963] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x0 [ 196.391676][ T2963] hid-generic 0000:3000000:0000.00A9: hidraw0: HID v0.00 Device [sy] on syz0 [ 196.394102][T10033] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.989654][T10048] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 197.017057][T10051] bridge0: entered promiscuous mode [ 197.022375][T10051] macvlan2: entered promiscuous mode [ 197.029112][T10051] bridge0: port 3(macvlan2) entered blocking state [ 197.035760][T10051] bridge0: port 3(macvlan2) entered disabled state [ 197.042564][T10051] macvlan2: entered allmulticast mode [ 197.047997][T10051] bridge0: entered allmulticast mode [ 197.054502][T10051] macvlan2: left allmulticast mode [ 197.059795][T10051] bridge0: left allmulticast mode [ 197.065938][T10051] bridge0: left promiscuous mode [ 197.081056][T10054] bond0: entered promiscuous mode [ 197.086214][T10054] bond0: entered allmulticast mode [ 197.091478][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.100537][T10054] bond0 (unregistering): Released all slaves [ 197.129779][T10057] loop5: detected capacity change from 0 to 1024 [ 197.148672][T10057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.163492][T10057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1981'. [ 197.190279][T10061] loop4: detected capacity change from 0 to 1024 [ 197.199543][T10061] EXT4-fs: Ignoring removed bh option [ 197.215066][T10061] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 197.411435][T10085] SELinux: Context Ü is not valid (left unmapped). [ 197.528596][T10099] loop2: detected capacity change from 0 to 1024 [ 197.535712][T10099] EXT4-fs: Ignoring removed orlov option [ 197.543926][T10099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.715905][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.813751][T10113] loop2: detected capacity change from 0 to 1024 [ 197.820529][T10113] EXT4-fs: Ignoring removed orlov option [ 197.828810][T10113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.905955][T10113] ================================================================== [ 197.914091][T10113] BUG: KCSAN: data-race in redirty_tail_locked / vfs_fsync_range [ 197.921873][T10113] [ 197.924206][T10113] read-write to 0xffff8881064e5cb8 of 4 bytes by task 10115 on cpu 0: [ 197.932373][T10113] redirty_tail_locked+0x54/0x270 [ 197.937426][T10113] writeback_single_inode+0x221/0x3f0 [ 197.942838][T10113] sync_inode_metadata+0x5c/0x90 [ 197.947818][T10113] generic_buffers_fsync_noflush+0xd8/0x120 [ 197.953740][T10113] ext4_sync_file+0x1ff/0x6c0 [ 197.958448][T10113] vfs_fsync_range+0x116/0x130 [ 197.963238][T10113] ext4_buffered_write_iter+0x358/0x3c0 [ 197.968814][T10113] ext4_file_write_iter+0x383/0xf20 [ 197.974042][T10113] iter_file_splice_write+0x5f1/0x980 [ 197.979433][T10113] direct_splice_actor+0x160/0x2c0 [ 197.984544][T10113] splice_direct_to_actor+0x302/0x670 [ 197.989933][T10113] do_splice_direct+0xd7/0x150 [ 197.994696][T10113] do_sendfile+0x398/0x660 [ 197.999145][T10113] __x64_sys_sendfile64+0x110/0x150 [ 198.004351][T10113] x64_sys_call+0xfbd/0x2dc0 [ 198.008964][T10113] do_syscall_64+0xc9/0x1c0 [ 198.013504][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.019443][T10113] [ 198.021763][T10113] read to 0xffff8881064e5cb8 of 4 bytes by task 10113 on cpu 1: [ 198.029384][T10113] vfs_fsync_range+0x9a/0x130 [ 198.034067][T10113] ext4_buffered_write_iter+0x358/0x3c0 [ 198.039641][T10113] ext4_file_write_iter+0x383/0xf20 [ 198.044863][T10113] iter_file_splice_write+0x5f1/0x980 [ 198.050243][T10113] direct_splice_actor+0x160/0x2c0 [ 198.055354][T10113] splice_direct_to_actor+0x302/0x670 [ 198.060727][T10113] do_splice_direct+0xd7/0x150 [ 198.065516][T10113] do_sendfile+0x398/0x660 [ 198.069992][T10113] __x64_sys_sendfile64+0x110/0x150 [ 198.075201][T10113] x64_sys_call+0xfbd/0x2dc0 [ 198.079827][T10113] do_syscall_64+0xc9/0x1c0 [ 198.084335][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.090233][T10113] [ 198.092559][T10113] value changed: 0x0000003a -> 0x00000002 [ 198.098274][T10113] [ 198.100588][T10113] Reported by Kernel Concurrency Sanitizer on: [ 198.106735][T10113] CPU: 1 UID: 0 PID: 10113 Comm: syz.2.2002 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 198.117177][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.127266][T10113] ================================================================== [ 198.155315][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.208859][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.540444][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.