last executing test programs: 2.82379841s ago: executing program 3 (id=5618): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x80000000000a}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(0x0, 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) fsmount(r2, 0x1, 0xf1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 2.583203743s ago: executing program 2 (id=5621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0xfffffffffffffcf2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000002}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 2.481802305s ago: executing program 2 (id=5622): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x4000}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rt_sigsuspend(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000700)={0x8, {{0xa, 0x0, 0x477, @mcast1, 0x8}}}, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$key(0xf, 0x3, 0x2) r3 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.368926456s ago: executing program 3 (id=5623): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67}, {@in6=@empty, 0x4d0, 0x32}, @in=@dev, {0xfffffffffffffffd}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x70bd26, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x8957) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r7) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x81]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.344577727s ago: executing program 2 (id=5624): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/129, 0x81, 0x10120, 0x0, 0x0) 1.972440212s ago: executing program 1 (id=5630): unshare(0x2040400) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) readahead(r0, 0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)={0xa4340, 0x1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgid(0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x194dd, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getpid() r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f909, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/56, 0x38}, {&(0x7f00000005c0)=""/162, 0xa2}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000127bd7000ffdbdf25110000001c00028006000b000a0000000800090000000000080005000d0000000c000280080008000a00000014000280080006000100000008000500389a00000800040002000000"], 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x4804) 1.743046795s ago: executing program 1 (id=5635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, &(0x7f00000001c0)=""/59}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) 1.656149546s ago: executing program 1 (id=5636): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x805}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xd8, 0x21, 0x10, 0x70bd2c, 0x25dfdbfb, {0x12}, [@typed={0x4, 0xe4}, @generic="556ec9a6d6f7c3b812dc0d486107cfb176618471a2d998551917acf9718700fe9c3a744b477b72e9e0a914e2ac3efaec824e15e636ab0fd7219d371a0ace99cd4a9e9dfd26366c42fcb4fd7e5fbf4ae21bd5d829a6141babdb7aac9b67c9845c2e622f2d15a5a7e8735de8535153ae623db1da40ed2648c81807819d1c53261699e05456915e0d4a2fe3ddd137442891e77bc507049041b5e1444c2e13ffb9bfc5f32f0e4d23579f5de5ade11d7837051ebb53a080b8dbdba99543cba3"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.584166867s ago: executing program 0 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.522275998s ago: executing program 0 (id=5639): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.466475289s ago: executing program 2 (id=5640): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x80000001}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.465422679s ago: executing program 3 (id=5641): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000003c0)={[{@usrquota}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@debug}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 1.331243001s ago: executing program 2 (id=5642): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000fc0)=""/196, 0xc4}, 0x7d}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 1.014601265s ago: executing program 4 (id=5643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0xfffffffc, 0x3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r8 = dup(r7) r9 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r8, r9, 0x0, 0x8000fffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='alarmtimer_suspend\x00', r10, 0x0, 0x200000000000000}, 0x7fe21b46cb6b655e) socket$netlink(0x10, 0x3, 0x0) 926.499067ms ago: executing program 0 (id=5644): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x80000000000a}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x12, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xb8b8, 0xff, 0x56b7, 0x80, 0x1, 0x41f6, '\x00', r2, r4, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)={0x768, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x380, 0x9, 0x80, 0x3}, {0x8, 0x6, 0x40, 0x2}, {0x7, 0x73, 0x40, 0x8}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa4}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff338}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc98e}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf6ee}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r9 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsmount(r9, 0x1, 0xf1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) syz_clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 894.525977ms ago: executing program 3 (id=5645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x400c084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) fadvise64(r0, 0x200, 0xd965, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r7, &(0x7f0000000180)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) 803.147248ms ago: executing program 3 (id=5646): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8, 0x6}, 0x0, 0xffffffffffffff81, 0x0, 0x12345}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="6583000000000000000001000000", @ANYRES32=0x0], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000640)=""/252, 0xfc}, {0x0}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f0000000b00)=""/180, 0xb4}, {&(0x7f0000000bc0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000cc0)=""/216, 0xd8}], 0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000600)={&(0x7f00000004c0), 0x10, &(0x7f00000005c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYBLOB="01000060010000000200000005000087592e3c5b260e773289f94dca3bee17c44d66"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8000, 0x0, 0x7}, {}, {0x3, 0x0, 0x4}, {0x8, 0x5}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000004}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0xfffffff9}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x8, 0xa, 0x1b, 0x11}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800800010001000000080003000100000006000200"], 0x264}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r14 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000040)=',\xa4\xec\xacQ\xbd', &(0x7f0000000380)='$\xc1', 0x0) fsconfig$FSCONFIG_SET_FD(r14, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r14) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000a00), &(0x7f0000000ec0)='\xf1\x8c\xb3>-\x8c\xd4\r\x01\xfa\xe2[eED\x0e\xaaPV\x11\xff\xb6j\xd4\x8d6\x82^\x06\x00\x00\x00a\x1b\xa0\x89\x05\xc9\x89aO5,\x81\x8d\x8aQ-$\x80\t\xed\xf4`\xb3w\x8cM\rFB\x91\xc2{\t<\x96\xcfVQ6\xab\x03u(\x81\n:\xe6\"\xbc5\xbb}\x80\x17\r\xaa\xd1{3^c\xd2\x14\xf9\xc2\x9b<\xea\xa5\xfb 7\x857e&hT0\x87\x17\x13n,#w\xb7\'Q\x8a\xe12_\x8a\x1ewSQH\x19Z[', 0x0) r15 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$sock_SIOCADDRT(r15, 0x890b, &(0x7f00000000c0)={0x0, @l2={0x1f, 0x48, @any, 0x8001, 0x1}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, @llc={0x1a, 0x18, 0x3, 0x3, 0x80, 0x3, @local}, 0x451a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x8, 0x200}) fsconfig$FSCONFIG_SET_BINARY(r14, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) 763.847269ms ago: executing program 1 (id=5647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x8000000000002}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 761.923959ms ago: executing program 0 (id=5648): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000880), 0x1}, 0x9321, 0xffffffe2, 0x3, 0x2, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x104, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000f00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "e9303b", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) tgkill(0x0, 0x0, 0x8012) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x2000300, 0xa, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x101320, 0xffffffff, 0x20000, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x400000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f000000f31f000004"], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 701.72018ms ago: executing program 1 (id=5649): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x44}}, 0x0) (fail_nth: 5) 677.61366ms ago: executing program 3 (id=5650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000040)='./file0\x00', 0x9) 431.352574ms ago: executing program 0 (id=5651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x5be056211b912dcc, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) (fail_nth: 8) 392.645544ms ago: executing program 1 (id=5652): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r5 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='+rdma'], 0x6) syz_usb_connect(0x6, 0xf84, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x34, 0xbe, 0xbd, 0x20, 0x4ad, 0x303, 0x6a47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf72, 0x4, 0x0, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x1b, 0x9, 0x10, 0xa6, 0x66, 0xb2, 0x5, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0xf, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x8}, @generic={0x2b, 0x31, "995731424236a571ed5ee9fed06b4e699c6723eea8d5dfbb60921e0d73f2be9008c654c35cc3dddd96"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x25, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x86}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2, 0xa1}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xff, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x200}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x9, 0x2, 0x11}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xd, 0x2, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0x10, 0x4, 0x40, 0x4, 0x4, 0x1, [@generic={0xdc, 0x31, "2dfebbc38ab552f810c08fc605479c8f5cb44916e6ddd54a99acdadbaae3262f231a21aba20a6646cd3d4ab37a85db9532285e7fd3592a9c79c52a456564ea3753c355a05d891dcfe9939ea4d914e3c66b4443a0b3b86549c7faf016ae5efe9ab86d0a3d0433c9a3b690de1e2f2071714635756ac7d7912c7bf6144ff05bbc7cea9f366a503278c3dc167ada427e43eff52b5b5f59cc782f1895450ada00ab55aa8ef2b2822a84f1e4752c655b6f93e745788e2869220328612e6da436dda8d194fbdf0fc1a2d4b8eddeec784022407f2468e8357ed9f471ca76"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xd4, 0x5, 0xc0, [@generic={0x7d, 0x8, "674171c092ae9aeb87c2fbbc7a175f9ccb2a77e0ff190aebd3e53e253a8775c6c087555c63e1477b54a5b73b1a1fc8ef78fd56170754b2148b2f97d29e3723f4f3fda786b1643b66b489e4aa69c4d4f7f938cdf2f481e25650e03a1e8902458b516856dd35e03636a6df0237bff96295c478f28f65bd5c7c0c318c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x5, 0xc, [@generic={0x22, 0xc, "edfcff6b744ba819d72446f69293b6b429b94e728d56700b48d513d2a6bd1200"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x3, 0x7f, [@generic={0x8, 0x22, "3b0c7ff1b8ab"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x18, 0xf, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6fbf}]}}, {{0x9, 0x5, 0x0, 0xd23c43a15c9685ab, 0x3ff, 0x3, 0x2, 0x98}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x89, 0x6, 0xb, [@generic={0x64, 0x65, "bee8f9f5d15bd2f9edc641bdd08194e81b606eedeaf86cc9db20f6357787595196fa2ea7f6e29e005dec88b46c75b250dbe27adad6d4b1c3d6269aff83e8f71e479d74500ae6f6ae6dbc2999129a563bdbcf0a9fab9af0da51ca78189a8e694e45b6"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x3}]}}, {{0x9, 0x5, 0xc9d719abcf8f28dd, 0x10, 0x40, 0x3, 0x5, 0x6, [@generic={0x14, 0x22, "9b2d0417aa6b162e8153b0ab2bee10be3e81"}, @generic={0x33, 0x21, "c39db5f64d6ae1a7046c0af8bb7c471379653b99f955322d26cb2b072aa07305f4f46093b24b18ac523ef6733193c30e4d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x48, 0x2, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0xf0, 0x16, 0x10, 0xff, 0x5, 0x49, 0xa2, [@hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb7e}}, @hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x2bc}}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x6}, @generic={0xa, 0xf, "741be5ac07c35a3a"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x42, 0x80, 0x81, [@generic={0x93, 0x21, "844d5bfd4be17301cbb5d7fe5bbbfd986dd8899c156918f6b4dc819b72e3a82c5d76634e50718ba3efb0065bbf8c4787e93286b1dc1056b911a5a29f7413a436bcdd20e8e1d3f8862118e3f1d972b6abc3761102a174aa85e30a0ca619d1a559107ec148973c04acf8d0689aaf56f989117e4313920226c8b1e6444d3160dd46c9f7ddd9c9bb96a97b0cc9ebd903166d82"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xb1, 0x9}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x8, 0xc, 0x8, [@generic={0xa8, 0x8, "d1b55b119319c4ecf44d9e2cc1f5af558d5bb3aad173fcb196f71c034255b847d3019685d34aaafa7f3715f7701db285b961738e2329f5eb829cf309dd8296fd2f253174ef3563b452b2663de0acb56a8607790726bf3cac018b3ab34c345fd636b39e17b4d962883c45cacfe3249ad1f477345670a7ab7e88efd48bf98af5457dae6740be247b06b0447f393d3acde4fcac83b0f2c63d8b9d985e44e915ecee4d6dbaa54252"}, @generic={0x45, 0x9, "0b5c710b68bd951b0db3b79a726af08fa77426d28dc6683a0ecd1353dcc62a8bde119d4720fcbbb440533afbf0091aa8c90e42a0a4bf050310673053e1bf06beef426f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}, @generic={0xdf, 0x31, "dc8efb6c682f8801757b6a273a1cf66662e1bd4ddf8eebcf4a5e3518db62cb4b22b13bfeb01b55534e0342724a0add7cb2909eb828387f1d2b9965833fff9b395f3d993a9c7f4ab5a628960ac8e54faec76d8f6e74b3cc46cc4f8ea279c58f54bb891f8054a4ab895445f2ddea87f1dcd38d93fc652001d4af1d75105a23e7fe4237c92e8d49659fa8a13376369f41571e62b779a296f9d3593bb0932ee989a676ef063ad8b2555bca025d20ea499fc809afb953f75ee86c435d846aaec5e14552f0450032cb59a3caffc397531ee8d29805372fe23a250c381ecd8938"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x9, 0x0, 0x81, [@generic={0xaa, 0x21, "2617a26f11bfe5a2e617ca5b5325dddf71b093b98bfad64712ea4039b434792c3c15f1359d8a9d798e7fad27fa2ebc3704f9d5b8ff3b34d5f8cd5b9ef7409e84ec5655fa75cc8127c036e9d10e3610d490579fc1a06deefc97a04db99958c2edc7846b24eaf95208ef1607e9b949a60bbb735d822e205275180f5f76264088e04663a200ad8a1aa37d8a624aa63bee395469409699fe7ed7e6144d531bb9a69ffc4372791d6e2a30"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x14, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x1, 0xb, 0x5, [@generic={0x90, 0x10, "88966360ce4b72f47a2a1195fc68afe141b1d16dccc0854c993feae9cee005d6211b964aa23b1cb74bc1ad9c327d3dbfe0a1361bd71637b497b41c7b160fcd556f3a6e482e6ae451e1530b6a85a4bbd6c9b1d13162c4c023eddb28b6df41097fe3c02b47f09de37c269caae4d429d5d3b3f63cc29588a0cc63fc1b89481513b010b8466cfcccaaec56d915b97175"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x6, 0x5}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x1, 0x7, 0xf1}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x10, 0x46, 0xfd}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x6, 0x7f, [@generic={0xc, 0x1, "7e9c692355ba98f705e5"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x1, 0x7, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x400}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x3, 0x4, 0xc, [@generic={0x8e, 0xe, "d3bab96480759454632bbf2d28ee85fd55dd7610997ed4fbb29875ebe2b2d51023bcc52ce82a1de70e529b5cfec9099f4764321e70671e829065e42cc3179f7c98e919a0755cbd5d15dbe7a942d024af09253ce715ab399d57a2baf0ef441cabeea51d126c11355e9b2fa36f9a6cfea3030d7099f1451c8d017096e8e338ecb6524b1e8e2f2a02de543f64cf"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xb, 0x7, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x12d1}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xf2, 0x24, 0x4}}]}}, {{0x9, 0x4, 0x8e, 0x81, 0xf, 0xb3, 0x2a, 0x7, 0x3, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0xfb, "", 'o;'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x3, 0x37, "ee"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0xff, 0xa9, "", "2952fa"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x5}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0xffff, 0x8, "3584df1e0c0213"}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x7ff, 0x7, "f9"}]}], [{{0x9, 0x5, 0x0, 0x2, 0x40, 0xc7, 0xa6, 0xff}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x97, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xa, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x0, 0x68, 0x5, [@generic={0x8, 0x11, "c1f990f33d9b"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0xfd, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}, @generic={0xe2, 0x31, "b3bb3d28f98b9dd548dbcdb2de6d63db362dd1af3ecd957352573ad4c0b0b8c4fcce6887afa6dfbb5f46a60a4e7d2affdeff2de168434f2ffbda8780beb49bdc4335fefe66038f251b224ae4678d9b25cbfbb9856b8e90415a312ad97cc5935534b2dfd161728eab34aea3ad4f5544cc42782bd5ae411147a881707090d547264ae3d7db5f46866db03d2049d199ee72b51ca59030ebb84c45fafb2fbfcb672aecc2e820fe9f03338eb28b2a2cdf5eca5cb3b54f4a15bf58df8311a73c4f4ea7401207da6f9ede53f4b282b9ae73d6d3ed9faca0d095f615274de3dfc498f622"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x8, 0x8, 0x0, [@generic={0xa3, 0x6, "09e3e36497dfc41f115bd07a88561625989ae59eb2f6e86e72039e5c365685043521a3d746cc423b699a156e2bc34830445f48ca156a4e647fbaa58dc1c80eb6391019331dc9da8dead3f330a447300d619910be2182d1a0484897c01c115897807a7105e4357daf840c32933388565406ce0213a8de509f85d18a9e6f767916d8b1e82668d4a647febdcaac0aae97e01cf904f570679637baa7084e52523c49c2"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0xb, 0x9, 0x5, [@generic={0xd, 0x7, "cbdd8c40b87de269b3dd9b"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x6, 0xfffa}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x6, 0x0, 0x80}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x1, 0xdb, 0x1, [@generic={0xef, 0x8, "8477a5b2ed5852e9d96786df1a8b1e6eeb4cdedf785bed9ff6c263cc7ccaf4610aa4d0f311b65b9db26093807d5edf11d8de5494d429da1d084878e00d2700072917e4a095c3558e5aafbd32675682e7374562d7da2a2606903f3a4cbaaf14d618ecb58ef0c992e22558472f7a939aa1659385b2c2c7619423cde1a887ef2994c18c38c843cb13c2317f3fef4415a877a1177da0abd532d2bcfbc29567e462c0486f8ebaed91e1fd50aebc9307e2915b0e78f904c2dc65e29d678261ff78809b3bd4a60d2273bbd5ecf70a0ee90b58258760db4e9a7716a5a8e3536c73caac195ebd2c1017e33a66f8bf21c6e9"}, @generic={0xa0, 0xa, "d85df50e259e3274632966c6626d808d608ffd279877eacf18352cd94d552c61534f6cc3567da374eb766c197b02cd98a0da8e1ab1cbde0985add7c5a284951223122b173ab7a9a516f9c4af8ad43c03472c79793f9ffee44248a3df70e427dbfe5d6bfd86730663abb5cbb24cb0b03c5ae5cc9351074803f3bf2d0a36b6901bda9c8512c99f783ddc2caa60861557530a10f9553fdf3a40076a9a9aa6c1"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x0, 0x1, 0x91}}, {{0x9, 0x5, 0x9, 0xc, 0x386cd95e9b2ebcf, 0xa7, 0x0, 0xf9, [@generic={0x35, 0x0, "8b8bfe2f91e0642f10fda33c20170054f758b3d521abfa80d0cb624f341811e7b1b556751721e8f87f8bb6f910463854c9efa0"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x4, 0x74, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x81, 0x2, 0x10, 0xfe, 0xbd, 0x0, [@generic={0x78, 0x10, "f754cad2db29c84677774fe6a54a1dd61ded0589b41aea812e281941ce1fec61400f93b27f465679cd5533f613976febc6321bf1ed21d0f8663737fbab782cebc017ae379c3e34fd94ce7404f18ad8e70ec54129d731a2579d11a63c139740add4569a257c20268f91fa866510fd3ebd34029f470f80"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x8, 0x8, 0x3, [@generic={0x8b, 0xc, "e5fad3971e041688ef0fdb29e76c1d7dc472592e8f713590c8ab33d2a96a95c1a11b3640b2db32011a71b18325cf99ac8d4f26d97908ef331d1a5dc4c9e7b8148c5ad52709c1cf196c56703beb59a38f899e4ff033cfe29d8f5ef11e31ada7a158e0cc042faae3ee0496a72155d73852b96919fb1aa191e567a19e5d2bdd32cb8803f47b1faaed21e4"}]}}]}}, {{0x9, 0x4, 0xb2, 0x9, 0x4, 0xff, 0x0, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x36, 0x3, "42195152f9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x32, 0x3, "c819ed", "eee4"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xc0, 0x2, 0x1, 0x5, "1e30d0", "dae30b"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "c7ecc4"}, {0x5, 0x24, 0x0, 0x7954}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x2, 0x80}}], [{{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0xaa, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xf, 0x8, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x60, 0x8, 0x0, 0x45, [@generic={0xb8, 0x2, "fbed05d60919bf7cdc9becbde2fca3d4626597332d2e03e702391570f8ff3a008fb2da5aff264f3f094c543d01be4c7cb6f018d619389c795e6b3e55577270c4bd072d3052476caf0f9e4a3678694b2d0dd0a711abc85dd9673fd083dd3f24f0c5bf6a35936da90b04eedfd97b4f1bd6aff2a5d5c8abb1e43d9eefc47b2be74c7acf2b128363598ef090ef7166a3b396f38bf5d11ef47db034d7bae84cec80d7bde810725a08f58dfecc82a651364c8b5867240a2c4e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0xd, 0x9, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}, @generic={0x9e, 0x8, "c847cc7d16851207cf5fe842e828af40689a1d6096a0e6ab00b2a217944080f07fec2b68969c6724965a5fbb182a629b48fe960472b251672586d920ed6b5c9882b20bd8c7bf3b6816c84f52a1bfbe35e032ac3692c333df11bd2e3852793f1b600c2b71a1faf1464daa6fa2c20da282f11f64dfaf0ccb42e91866362e48723df7a6f3e0b29292eb6d7a1e936eac5b0cdf159dea52ad9bbaaf34918a"}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x1, 0x6, 0x8, 0xf0}, 0xb, &(0x7f0000000080)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0xbe, &(0x7f0000000140)=@string={0xbe, 0x3, "7d4798b82515a664a334731590d1fab8d6213ff7d091a76c732e28fc2c764316b83bc4ee5f6b1b071385ebf46929c8de6e803c195467170d9ac910448a5b2a02926a184ef2e26fd5ecb3b0caf9c3b5b1062e2b516e036400e90128631b78e8a66caa1e2510e76da0563e2fa0999dca06485665aeafad2a24d29c44f6523aa3f8d3a5d932e63621760e3910e37e785bc5945962cb77ed58eb0a1d67e30c1c2079e0d74991d4a46c14f9733b60d3e53ee6bd746f0f3e0ebf6339fc1943"}}, {0xb6, &(0x7f0000000200)=@string={0xb6, 0x3, "90bc54c1db186d06ef43a23a96dd229e9722b5cdf1f67d5df51b95a219e7561977a63275bf25c34bc462d0df5341a7608e785a13de945c50513b7cb26842e22787c9da2dd382d4de2ac5772d8144b4122398cf05b16d0d89ae61c153e9626add81af36e0bb2d01696c9fdc6994d707ea10ce562e98b138a0e115b437f60adf4cb721098e6bdab7e413bf200bc904cbcf93c476a968bc29d6f6ec0ac53f736dc9afc0aeef05579b7d68f95cfdbc9c59bfd4e5d17f"}}, {0xda, &(0x7f00000013c0)=@string={0xda, 0x3, "34e3a87bfe94ce8f23e2c535bf31f4318586de7be9e4616ec23ac9871dcd77c0dc2777bff84c458184cb6114547c81657c22fb367fbcc2df6e4d0486f5d439804d5b4d3f42d7686f7f48d7fd492879014c6be53b2b0bcc5f3cf3e6850ff77fc31e7bf4b3d6f883abc29357c8e33dcb0865be58afbb694738db85e2828a68ad632b99fe27c67f9e0782590ca5707fc9cb6fcfea5ec34fc13d24b42cdb6e3d8413bb50506140025a78d6b41690698d60739f966b0b131594e40f22e1d4dbdfe0d5f2652d7f04f419a17115f7fff331542815cdc34263a95b3a"}}, {0x6, &(0x7f00000000c0)=@string={0x6, 0x3, "9122534b"}}, {0xc5, &(0x7f00000014c0)=@string={0xc5, 0x3, "13674bea8c4fcd605d4a0c7cdbc0f84a8e08a6913f9771cacaa66425d341d3549484c3443d9a5d66f16ecc9d0d70596c140ba87749dd425afb05760fe2097d7b4e7abdb41c385c0980278bd5ea2d71ff7a70d3f3cec5143e7eaac8989ae3dcec67e1047e3471274c126920e7f917458a2dcd1e2ff501221cc5bef89ea58834ffb0a691232a08fb1d318fa69df450796a51e5763981afb3ed5a32eb71da78299b4191cab02a4f9683dbe8c3ff7e3d0d84f30e16c068cc09aa7ce30eeb3cc04af0e07e91"}}, {0xa7, &(0x7f00000002c0)=@string={0xa7, 0x3, "2dc7b5f6e62d83de997c2ea3a50d0ec7827b0941af53622d8d3a1785e1069827a443a6d2b96e26658292fb84f38b5c448290a5c83605258b31251491f1514f18bbe7cb7834aba76ba5ac36509bf95c570ebf0c5f653d2ad5cb3e3f874d6c99db376a82cdb9aa49bd6563dbf2dceed2fd48062204941750a524361436e32495276dbb2681d9e6d44d0e13f1661dd96233ff6c3150145e9b3aae3b1ec2f8266191a67706c655"}}]}) 151.314988ms ago: executing program 4 (id=5653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100) 96.039998ms ago: executing program 0 (id=5654): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000b28000)=0x4) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000e85fc0d3242d39f600200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708ba28a20a1bf600000e0000007bbec68f21895c98840000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x5e, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x80000}, 0x18) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) 95.593719ms ago: executing program 2 (id=5655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@stripe}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@context={'context', 0x3d, 'system_u'}}, {@measure}]}, 0x2, 0x57b, &(0x7f0000000c00)="$eJzs3d9rW1UcAPDvTZP91nUwhvoghT04mUvX1h8ThM1H0eFA32doszKbLqNJx1oH2x7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96sadP0ZzSZ+Xzgbufk3ubc7z33nHxvbkICGFgj6T+5iJcj4usk4mjLunxkK0dWtlt6emsyXZJYXv7kjySS7LHm9kn2/+Gs8lJE/PJlxOlce7u1hcWZUqVSnsvqo/XZ66O1hcUzV2dL0+Xp8rXxiYlzb02Mv/vO212L9fVLf3338cMPzn11cunbnx4fu5/EhTiSrWuNYw/utFZGYiQ7JoW4sG7DsS401k+SXu8AuzKUjfNCpHPA0RjKRj3w/3c7IpaBAZUY/zCgmnlA89q+S9fBz40n769cALXHn195byQONK6NDi0la66M0uvd4S60n7bx8+8P7qdLbPE+xO0utAfQdOduRJzN59vnvySb/3bvbOPN482NxL419UF7/YFeepjmP29slP/knuU/sUH+c7h572iP1j9H+/jPPe5CMx2l+d97G+a/z6au4aGs9kIj5yskV65Wymcj4sWIOBWF/Wl9s/s555YeLXda15r/pUvafjMXzPbjcX7/2r+ZKtVLe4m51ZO7Ea+s5r9JtM3/Bxq57vr+T4/HpW22caL84NVO67aOv1X3M+DlHyNe27D/V+9oJZvfnxxtnA+jzbOi3Z/3Tvzaqf2dxd99af8f2jz+4aT1fm1t5238cODvcqd1uz3/9yWfNsrN7OFmqV6fG4vYl3zU/vj46t82683t0/hPndx8/tvo/D8YEZ9tM/57x+913LQf+n9qR/2/88KjD7/4vlP77fHno73/32yUTmWPbGf+2+4O7uXYAQAAAAAAQL/JRcSRSHLFZ+Vcrlhc+XzH8TiUq1Rr9dNXqvPXpqLxXdnhKOSad7qPtnweYiz7PGyzPr6uPhERxyLim6GDjXpxslqZ6nXwAAAAAAAAAAAAAAAAAAAA0CcOd/j+f+q3oV7vHfCv85PfMLi2HP/d+KUnoC95/YfBZfzD4DL+YXAZ/zC4jH8YXMY/DC7jHwaX8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAABddenixXRZXnp6azKtT91YmJ+p3jgzVa7NFGfnJ4uT1bnrxelqdbpSLk5WZ7d6vkq1en1sPOZvjtbLtfpobWHx8mx1/lr98tXZ0nT5crnwn0QFAAAAAAAAAAAAAAAAAAAAz5fawuJMqVIpzyl0LJyPvtiNXReSrXr5fHYy7KqJfO8D7OtC4fOVg9sv+7PdQi9nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY658AAAD//1S6L/k=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004810) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 87.938429ms ago: executing program 4 (id=5656): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='ext4_free_blocks\x00', r0, 0x0, 0x2}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x1) 71.148869ms ago: executing program 4 (id=5657): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 25.598869ms ago: executing program 4 (id=5658): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='xprt_retransmit\x00', r1}, 0xaa4f450e0e601fb4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) listen(r3, 0x8) 0s ago: executing program 4 (id=5659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f00000000c0)=""/226, 0xe2) kernel console output (not intermixed with test programs): 1.0: USB hub found [ 293.457691][T17270] hub 9-0:1.0: 8 ports detected [ 293.498252][T17276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5154'. [ 293.566926][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.574452][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.581917][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.590945][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.598437][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.606150][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.613663][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.621091][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.628609][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.636101][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.643525][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.650958][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.658556][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.666612][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.674098][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.681625][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.689069][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.696562][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.703994][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.711399][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.711661][T17289] loop0: detected capacity change from 0 to 512 [ 293.718836][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.718863][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.718893][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.727365][T17289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 293.732498][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.764645][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.772112][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.779639][T11763] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 293.787591][T11763] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 293.800312][T17289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5161: corrupted in-inode xattr: e_name out of bounds [ 293.818365][T17295] netlink: 'syz.3.5162': attribute type 13 has an invalid length. [ 293.828050][T17289] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5161: couldn't read orphan inode 15 (err -117) [ 293.844790][T17297] loop2: detected capacity change from 0 to 1024 [ 293.845437][T17289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.851644][T17297] EXT4-fs: Ignoring removed orlov option [ 293.869196][T17297] ext4: Unknown parameter 'noacl' [ 293.958004][T17289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5161: bg 0: block 255: padding at end of block bitmap is not set [ 293.983951][T17305] loop2: detected capacity change from 0 to 128 [ 294.020442][T11721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.051783][T17309] netlink: 'syz.1.5165': attribute type 10 has an invalid length. [ 294.141821][T17305] bio_check_eod: 12940 callbacks suppressed [ 294.141843][T17305] syz.2.5163: attempt to access beyond end of device [ 294.141843][T17305] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 294.198933][T17297] syz.2.5163: attempt to access beyond end of device [ 294.198933][T17297] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 294.214221][T17297] syz.2.5163: attempt to access beyond end of device [ 294.214221][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.232479][T17297] syz.2.5163: attempt to access beyond end of device [ 294.232479][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.247367][T17297] syz.2.5163: attempt to access beyond end of device [ 294.247367][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.261020][T17297] syz.2.5163: attempt to access beyond end of device [ 294.261020][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.274785][T17297] syz.2.5163: attempt to access beyond end of device [ 294.274785][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.302286][T17305] syz.2.5163: attempt to access beyond end of device [ 294.302286][T17305] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.316254][T17297] syz.2.5163: attempt to access beyond end of device [ 294.316254][T17297] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.329552][T17305] syz.2.5163: attempt to access beyond end of device [ 294.329552][T17305] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 294.329586][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 294.329602][ T29] audit: type=1400 audit(1742802465.803:46621): avc: denied { create } for pid=17318 comm="syz.0.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.369074][ T29] audit: type=1400 audit(1742802465.803:46622): avc: denied { write } for pid=17318 comm="syz.0.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.420469][ T29] audit: type=1400 audit(1742802465.833:46623): avc: denied { nlmsg_read } for pid=17318 comm="syz.0.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 294.441556][ T29] audit: type=1326 audit(1742802465.903:46624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.465284][ T29] audit: type=1326 audit(1742802465.903:46625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.488983][ T29] audit: type=1326 audit(1742802465.903:46626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.512633][ T29] audit: type=1326 audit(1742802465.903:46627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.536402][ T29] audit: type=1326 audit(1742802465.903:46628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.560013][ T29] audit: type=1326 audit(1742802465.903:46629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.583785][ T29] audit: type=1326 audit(1742802465.903:46630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 294.822530][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.830111][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.837623][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.846290][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.853823][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.861333][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.868762][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.876200][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.883644][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.891061][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.898511][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.906047][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.913476][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.934777][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.942242][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.949705][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.957212][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.964731][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.972199][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.979637][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.987178][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 294.994627][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.002040][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.009513][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.016948][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.024391][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.031830][T11778] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 295.058951][T11778] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 295.077815][T17335] loop0: detected capacity change from 0 to 1024 [ 295.089733][T17335] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 295.121648][T17344] dummy0 speed is unknown, defaulting to 1000 [ 295.130665][T17335] loop0: detected capacity change from 0 to 128 [ 295.167711][T17347] loop2: detected capacity change from 0 to 128 [ 295.187307][T17347] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.461627][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.469165][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.476618][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.485002][T17373] netlink: 'syz.3.5187': attribute type 10 has an invalid length. [ 295.650184][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.657818][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.665401][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.672869][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.680321][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.687781][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.695312][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.702724][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.710166][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.717696][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.742722][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.750241][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.757784][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.765192][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.772581][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.780065][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.787507][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.794965][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.802355][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.809790][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.817227][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.824698][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.832160][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.839576][T11766] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 295.847655][T11766] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 295.881439][T17385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.890203][T17385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.922336][T17385] loop0: detected capacity change from 0 to 1764 [ 296.205173][T17397] dummy0 speed is unknown, defaulting to 1000 [ 296.372955][T17400] __nla_validate_parse: 10 callbacks suppressed [ 296.372973][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5198'. [ 296.448558][T17402] hub 9-0:1.0: USB hub found [ 296.456429][T17402] hub 9-0:1.0: 8 ports detected [ 296.641047][T17409] netlink: 'syz.3.5200': attribute type 10 has an invalid length. [ 296.648979][T17409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5200'. [ 296.709199][T11766] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 296.716795][T17417] loop0: detected capacity change from 0 to 1024 [ 296.717673][T11766] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.724704][T17417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.739887][T17417] EXT4-fs: Mount option(s) incompatible with ext2 [ 296.899685][T17440] loop0: detected capacity change from 0 to 1024 [ 296.906584][T17440] EXT4-fs: Ignoring removed nobh option [ 296.917727][T17440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.945158][T17444] hub 9-0:1.0: USB hub found [ 296.950580][T17444] hub 9-0:1.0: 8 ports detected [ 296.959489][T11721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.250657][T17467] netlink: 'syz.2.5224': attribute type 10 has an invalid length. [ 297.258596][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5224'. [ 297.268008][T17467] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 297.329556][T17473] netlink: 'syz.0.5229': attribute type 21 has an invalid length. [ 297.396052][T17477] hub 9-0:1.0: USB hub found [ 297.401477][T17477] hub 9-0:1.0: 8 ports detected [ 297.437921][T17478] netlink: 'syz.0.5230': attribute type 10 has an invalid length. [ 297.445950][T17478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5230'. [ 297.509272][T17482] loop3: detected capacity change from 0 to 512 [ 297.515929][T17482] EXT4-fs: Ignoring removed oldalloc option [ 297.522136][T17482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.533769][T17482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 297.541917][T17482] System zones: 1-12 [ 297.546278][T17482] EXT4-fs (loop3): 1 truncate cleaned up [ 297.552292][T17482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.580517][T10767] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 297.598156][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.740601][T17494] vlan2: entered promiscuous mode [ 297.745773][T17494] ip6gretap0: entered promiscuous mode [ 297.755486][T17494] ip6gretap0: left promiscuous mode [ 297.792897][T17499] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 297.841506][T17501] netlink: 'syz.1.5241': attribute type 21 has an invalid length. [ 297.852012][T17503] hub 9-0:1.0: USB hub found [ 297.857963][T17503] hub 9-0:1.0: 8 ports detected [ 297.950244][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'. [ 297.979327][T17511] netlink: 'syz.3.5246': attribute type 13 has an invalid length. [ 298.045072][T17527] ip6t_srh: unknown srh invflags 4000 [ 298.052721][T17528] netlink: 'syz.0.5245': attribute type 10 has an invalid length. [ 298.060687][T17528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5245'. [ 298.088602][T17530] hub 9-0:1.0: USB hub found [ 298.095122][T17530] hub 9-0:1.0: 8 ports detected [ 298.176242][T17540] loop3: detected capacity change from 0 to 512 [ 298.191196][T17540] EXT4-fs: Ignoring removed oldalloc option [ 298.202697][T17540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.213756][T17542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=17542 comm=syz.1.5260 [ 298.215286][T17540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 298.234860][T17540] System zones: 1-12 [ 298.239497][T17540] EXT4-fs (loop3): 1 truncate cleaned up [ 298.247878][T17540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.308487][T10767] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 298.327901][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.436726][T17560] hub 9-0:1.0: USB hub found [ 298.442345][T17560] hub 9-0:1.0: 8 ports detected [ 298.463836][T17566] loop4: detected capacity change from 0 to 1024 [ 298.471374][T17566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.487958][T17566] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.505590][T17566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 298.523825][T17566] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.5271: lblock 2 mapped to illegal pblock 2 (length 1) [ 298.543560][T17566] EXT4-fs (loop4): Remounting filesystem read-only [ 298.550221][T17566] EXT4-fs (loop4): 1 orphan inode deleted [ 298.557535][T17566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.571886][T17566] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 298.582405][T17575] FAULT_INJECTION: forcing a failure. [ 298.582405][T17575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.593100][T17566] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.595504][T17575] CPU: 1 UID: 0 PID: 17575 Comm: syz.1.5275 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 298.595540][T17575] Tainted: [W]=WARN [ 298.595548][T17575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.595563][T17575] Call Trace: [ 298.595570][T17575] [ 298.595579][T17575] dump_stack_lvl+0xf2/0x150 [ 298.595639][T17575] dump_stack+0x15/0x1a [ 298.595669][T17575] should_fail_ex+0x24a/0x260 [ 298.595753][T17575] should_fail+0xb/0x10 [ 298.595788][T17575] should_fail_usercopy+0x1a/0x20 [ 298.595829][T17575] _copy_from_iter+0xd5/0xd00 [ 298.595887][T17575] ? kmalloc_reserve+0x16e/0x190 [ 298.595940][T17575] ? __build_skb_around+0x196/0x1f0 [ 298.596048][T17575] ? __alloc_skb+0x21f/0x310 [ 298.596074][T17575] ? __virt_addr_valid+0x1ed/0x250 [ 298.596106][T17575] ? __check_object_size+0x364/0x520 [ 298.596207][T17575] netlink_sendmsg+0x460/0x6e0 [ 298.596237][T17575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.596261][T17575] __sock_sendmsg+0x140/0x180 [ 298.596312][T17575] ____sys_sendmsg+0x326/0x4b0 [ 298.596365][T17575] __sys_sendmsg+0x19d/0x230 [ 298.596415][T17575] __x64_sys_sendmsg+0x46/0x50 [ 298.596449][T17575] x64_sys_call+0x2734/0x2dc0 [ 298.596536][T17575] do_syscall_64+0xc9/0x1c0 [ 298.596578][T17575] ? clear_bhb_loop+0x55/0xb0 [ 298.596657][T17575] ? clear_bhb_loop+0x55/0xb0 [ 298.596692][T17575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.596727][T17575] RIP: 0033:0x7fd0331dd169 [ 298.596748][T17575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.596836][T17575] RSP: 002b:00007fd031847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.596861][T17575] RAX: ffffffffffffffda RBX: 00007fd0333f5fa0 RCX: 00007fd0331dd169 [ 298.596876][T17575] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 298.596893][T17575] RBP: 00007fd031847090 R08: 0000000000000000 R09: 0000000000000000 [ 298.596916][T17575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.596932][T17575] R13: 0000000000000000 R14: 00007fd0333f5fa0 R15: 00007ffef540ae38 [ 298.596955][T17575] [ 298.942864][T17593] hub 9-0:1.0: USB hub found [ 298.950995][T17593] hub 9-0:1.0: 8 ports detected [ 299.023919][T17600] loop4: detected capacity change from 0 to 1764 [ 299.033923][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5287'. [ 299.034243][T17603] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 299.130458][T17614] FAULT_INJECTION: forcing a failure. [ 299.130458][T17614] name failslab, interval 1, probability 0, space 0, times 0 [ 299.143198][T17614] CPU: 0 UID: 0 PID: 17614 Comm: syz.1.5291 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 299.143236][T17614] Tainted: [W]=WARN [ 299.143244][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.143260][T17614] Call Trace: [ 299.143295][T17614] [ 299.143304][T17614] dump_stack_lvl+0xf2/0x150 [ 299.143361][T17614] dump_stack+0x15/0x1a [ 299.143388][T17614] should_fail_ex+0x24a/0x260 [ 299.143433][T17614] should_failslab+0x8f/0xb0 [ 299.143542][T17614] kmem_cache_alloc_noprof+0x52/0x320 [ 299.143633][T17614] ? security_file_alloc+0x32/0x100 [ 299.143733][T17614] security_file_alloc+0x32/0x100 [ 299.143791][T17614] init_file+0x5d/0x1b0 [ 299.143814][T17614] alloc_empty_file+0xea/0x200 [ 299.143840][T17614] alloc_file_pseudo+0xc9/0x160 [ 299.143947][T17614] __shmem_file_setup+0x1bb/0x1f0 [ 299.143993][T17614] shmem_file_setup+0x3b/0x50 [ 299.144031][T17614] __se_sys_memfd_create+0x2e1/0x5a0 [ 299.144086][T17614] __x64_sys_memfd_create+0x31/0x40 [ 299.144111][T17614] x64_sys_call+0x2d4c/0x2dc0 [ 299.144200][T17614] do_syscall_64+0xc9/0x1c0 [ 299.144239][T17614] ? clear_bhb_loop+0x55/0xb0 [ 299.144274][T17614] ? clear_bhb_loop+0x55/0xb0 [ 299.144308][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.144364][T17614] RIP: 0033:0x7fd0331dd169 [ 299.144381][T17614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.144399][T17614] RSP: 002b:00007fd031846e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 299.144417][T17614] RAX: ffffffffffffffda RBX: 000000000000044b RCX: 00007fd0331dd169 [ 299.144429][T17614] RDX: 00007fd031846ef0 RSI: 0000000000000000 RDI: 00007fd03325ec3c [ 299.144441][T17614] RBP: 00002000000004c0 R08: 00007fd031846bb7 R09: 00007fd031846e40 [ 299.144459][T17614] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 299.144473][T17614] R13: 00007fd031846ef0 R14: 00007fd031846eb0 R15: 0000200000000100 [ 299.144495][T17614] [ 299.428637][T17620] ip6tnl1: entered promiscuous mode [ 299.434094][T17620] ip6tnl1: entered allmulticast mode [ 299.466299][ T29] kauditd_printk_skb: 1021 callbacks suppressed [ 299.466317][ T29] audit: type=1326 audit(1742802470.953:47650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.496393][ T29] audit: type=1326 audit(1742802470.953:47651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.520031][ T29] audit: type=1326 audit(1742802470.953:47652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.543729][ T29] audit: type=1326 audit(1742802470.953:47653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.567332][ T29] audit: type=1326 audit(1742802470.953:47654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.591053][ T29] audit: type=1326 audit(1742802470.953:47655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.614719][ T29] audit: type=1326 audit(1742802470.953:47656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.638349][ T29] audit: type=1326 audit(1742802470.953:47657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.661873][ T29] audit: type=1326 audit(1742802470.953:47658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.685530][ T29] audit: type=1326 audit(1742802470.953:47659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17615 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f44d233d169 code=0x7ffc0000 [ 299.792835][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 299.810155][T17636] loop2: detected capacity change from 0 to 1764 [ 299.818776][T17634] netlink: 'syz.3.5298': attribute type 13 has an invalid length. [ 299.831592][T17638] hub 9-0:1.0: USB hub found [ 299.842214][T17638] hub 9-0:1.0: 8 ports detected [ 300.227639][T17663] netlink: 'syz.2.5308': attribute type 10 has an invalid length. [ 300.235616][T17663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5308'. [ 300.246728][T17663] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 300.299207][T17660] dummy0 speed is unknown, defaulting to 1000 [ 300.905268][T17674] hub 9-0:1.0: USB hub found [ 300.911959][T17674] hub 9-0:1.0: 8 ports detected [ 301.037562][T17681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.047562][T17681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.474662][ T3377] IPVS: starting estimator thread 0... [ 301.481217][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5318'. [ 301.563470][T17691] IPVS: using max 1680 ests per chain, 84000 per kthread [ 301.622285][T17693] ip6t_srh: unknown srh invflags 4000 [ 301.905642][T17711] netlink: 'syz.3.5324': attribute type 10 has an invalid length. [ 301.913570][T17711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5324'. [ 301.922657][T17711] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 301.943039][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5326'. [ 301.989952][T17714] netlink: 'syz.1.5327': attribute type 10 has an invalid length. [ 301.997906][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5327'. [ 302.169537][T17720] loop3: detected capacity change from 0 to 2048 [ 302.184816][T17720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.250576][T17724] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5330'. [ 302.301797][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.322678][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.330211][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.337710][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.345208][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.352617][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.360059][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.367588][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.375035][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.375398][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5331'. [ 302.382427][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.382456][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.382483][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.413842][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.421384][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.428952][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.436414][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.443880][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.451324][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.458808][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.466411][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.473883][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.481352][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.488783][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.496191][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.503628][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.511041][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.518489][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.525904][ T3377] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 302.534144][ T3377] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 302.718284][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.725871][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.733340][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.740913][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.748458][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.755960][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.763522][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.771001][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.771040][T17736] loop4: detected capacity change from 0 to 1024 [ 302.771587][T17736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.778500][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.800823][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.801061][T17736] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.808244][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.823359][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5334'. [ 302.825980][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.836571][T17736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 302.842250][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.851588][T17736] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.5335: lblock 2 mapped to illegal pblock 2 (length 1) [ 302.874018][T17736] EXT4-fs (loop4): Remounting filesystem read-only [ 302.876309][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.888038][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.888063][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.888084][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.888111][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.902920][T17736] EXT4-fs (loop4): 1 orphan inode deleted [ 302.910290][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.918177][T17736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.923432][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.930879][T17736] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 302.943305][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.943333][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.943359][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.974874][T17736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.979526][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 302.996093][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 303.003544][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 303.010966][T11778] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 303.024872][T11778] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 303.128734][T17754] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 303.137832][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'. [ 303.146892][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'. [ 303.193012][T17758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.202767][T17758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.249176][T17760] hub 9-0:1.0: USB hub found [ 303.256347][T17760] hub 9-0:1.0: 8 ports detected [ 303.341641][T17765] netlink: 'syz.0.5346': attribute type 10 has an invalid length. [ 303.344311][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.349594][T17765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5346'. [ 303.357015][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.373354][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.380837][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.388281][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.395919][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.403367][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.410797][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.418292][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.425848][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.433332][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.440874][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.448700][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.456214][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.463691][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.471137][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.478638][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.486055][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.493516][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.500994][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.508435][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.515995][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.523420][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.530825][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.538268][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.545792][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.553256][T11766] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 303.561016][T11766] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 303.595763][T17771] loop3: detected capacity change from 0 to 512 [ 303.602263][T17771] EXT4-fs: Ignoring removed oldalloc option [ 303.608717][T17771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.619939][T17771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 303.628130][T17771] System zones: 1-12 [ 303.632416][T17771] EXT4-fs (loop3): 1 truncate cleaned up [ 303.638642][T17771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.668088][T10767] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 303.683900][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.741596][T17778] loop3: detected capacity change from 0 to 1024 [ 303.748666][T17778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.758958][T17778] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.766041][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.776810][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.784332][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.792305][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.793947][T17778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 303.799819][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.799844][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.799866][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.799887][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.799910][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.810671][T17778] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.5352: lblock 2 mapped to illegal pblock 2 (length 1) [ 303.815496][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.823130][T17778] EXT4-fs (loop3): Remounting filesystem read-only [ 303.830345][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.830370][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.830391][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.860962][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.867773][T17778] EXT4-fs (loop3): 1 orphan inode deleted [ 303.873124][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.882595][T17778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.887884][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.896669][T17778] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 303.902644][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.909480][T17778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.915800][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.915829][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.973831][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.981248][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.988704][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.996153][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 304.003632][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 304.011072][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 304.018604][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 304.026025][T11774] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 304.027355][T17789] hub 9-0:1.0: USB hub found [ 304.040387][T11774] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 304.062480][T17789] hub 9-0:1.0: 8 ports detected [ 304.209322][T17805] netlink: 'syz.1.5364': attribute type 21 has an invalid length. [ 304.225155][T17806] netlink: 'syz.0.5357': attribute type 10 has an invalid length. [ 304.316573][T17807] dummy0 speed is unknown, defaulting to 1000 [ 304.324980][T17814] FAULT_INJECTION: forcing a failure. [ 304.324980][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.338233][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.1.5367 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 304.338266][T17814] Tainted: [W]=WARN [ 304.338272][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.338285][T17814] Call Trace: [ 304.338292][T17814] [ 304.338301][T17814] dump_stack_lvl+0xf2/0x150 [ 304.338346][T17814] dump_stack+0x15/0x1a [ 304.338372][T17814] should_fail_ex+0x24a/0x260 [ 304.338407][T17814] should_fail+0xb/0x10 [ 304.338467][T17814] should_fail_usercopy+0x1a/0x20 [ 304.338504][T17814] _copy_from_user+0x1c/0xa0 [ 304.338528][T17814] get_timespec64+0x49/0x140 [ 304.338554][T17814] __x64_sys_recvmmsg+0xa1/0x170 [ 304.338632][T17814] x64_sys_call+0x2a9a/0x2dc0 [ 304.338659][T17814] do_syscall_64+0xc9/0x1c0 [ 304.338698][T17814] ? clear_bhb_loop+0x55/0xb0 [ 304.338756][T17814] ? clear_bhb_loop+0x55/0xb0 [ 304.338784][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.338854][T17814] RIP: 0033:0x7fd0331dd169 [ 304.338873][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.338895][T17814] RSP: 002b:00007fd031847038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 304.338913][T17814] RAX: ffffffffffffffda RBX: 00007fd0333f5fa0 RCX: 00007fd0331dd169 [ 304.338926][T17814] RDX: 0000000000000274 RSI: 0000200000000f00 RDI: 0000000000000006 [ 304.339008][T17814] RBP: 00007fd031847090 R08: 0000200000001000 R09: 0000000000000000 [ 304.339023][T17814] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 304.339038][T17814] R13: 0000000000000000 R14: 00007fd0333f5fa0 R15: 00007ffef540ae38 [ 304.339058][T17814] [ 304.380585][T17811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.410508][T17818] 9pnet_fd: Insufficient options for proto=fd [ 304.422405][T17811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.537621][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 304.537639][ T29] audit: type=1326 audit(1742802476.023:48305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6564127 code=0x7ffc0000 [ 304.567494][ T29] audit: type=1326 audit(1742802476.023:48306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6509359 code=0x7ffc0000 [ 304.591298][ T29] audit: type=1326 audit(1742802476.023:48307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbad656d169 code=0x7ffc0000 [ 304.591360][T17811] loop4: detected capacity change from 0 to 1764 [ 304.616653][ T29] audit: type=1326 audit(1742802476.063:48308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6564127 code=0x7ffc0000 [ 304.644824][ T29] audit: type=1326 audit(1742802476.063:48309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6509359 code=0x7ffc0000 [ 304.644862][ T29] audit: type=1326 audit(1742802476.063:48310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbad656d169 code=0x7ffc0000 [ 304.692132][ T29] audit: type=1326 audit(1742802476.063:48311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6564127 code=0x7ffc0000 [ 304.715785][ T29] audit: type=1326 audit(1742802476.063:48312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbad6509359 code=0x7ffc0000 [ 304.739326][ T29] audit: type=1326 audit(1742802476.063:48313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbad656d169 code=0x7ffc0000 [ 304.762916][ T29] audit: type=1326 audit(1742802476.073:48314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad6564127 code=0x7ffc0000 [ 304.884067][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.891582][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.899049][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.907084][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.914550][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.921974][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.929815][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.937298][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.944791][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.952200][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.959693][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.967151][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 304.974713][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.027971][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.035563][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.039735][T17825] FAULT_INJECTION: forcing a failure. [ 305.039735][T17825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.043207][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.056109][T17825] CPU: 1 UID: 0 PID: 17825 Comm: syz.3.5371 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 305.056224][T17825] Tainted: [W]=WARN [ 305.056246][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.056263][T17825] Call Trace: [ 305.056270][T17825] [ 305.056291][T17825] dump_stack_lvl+0xf2/0x150 [ 305.056367][T17825] dump_stack+0x15/0x1a [ 305.056396][T17825] should_fail_ex+0x24a/0x260 [ 305.056441][T17825] should_fail+0xb/0x10 [ 305.056477][T17825] should_fail_usercopy+0x1a/0x20 [ 305.056526][T17825] _copy_from_user+0x1c/0xa0 [ 305.056551][T17825] kstrtouint_from_user+0x76/0xe0 [ 305.056691][T17825] ? 0xffffffff81000000 [ 305.056788][T17825] ? selinux_file_permission+0x22a/0x360 [ 305.056908][T17825] proc_fail_nth_write+0x4f/0x150 [ 305.057007][T17825] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.057047][T17825] vfs_write+0x27d/0x920 [ 305.057079][T17825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.057119][T17825] ? __fget_files+0x17c/0x1c0 [ 305.057293][T17825] ksys_write+0xe8/0x1b0 [ 305.057328][T17825] __x64_sys_write+0x42/0x50 [ 305.057362][T17825] x64_sys_call+0x287e/0x2dc0 [ 305.057396][T17825] do_syscall_64+0xc9/0x1c0 [ 305.057461][T17825] ? clear_bhb_loop+0x55/0xb0 [ 305.057504][T17825] ? clear_bhb_loop+0x55/0xb0 [ 305.057560][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.057743][T17825] RIP: 0033:0x7f9c6d00bc1f [ 305.057762][T17825] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 305.057785][T17825] RSP: 002b:00007f9c6b671030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 305.057809][T17825] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c6d00bc1f [ 305.057826][T17825] RDX: 0000000000000001 RSI: 00007f9c6b6710a0 RDI: 0000000000000006 [ 305.057841][T17825] RBP: 00007f9c6b671090 R08: 0000000000000000 R09: 0000000000000000 [ 305.057856][T17825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 305.057870][T17825] R13: 0000000000000000 R14: 00007f9c6d225fa0 R15: 00007ffd384e33f8 [ 305.057940][T17825] [ 305.274075][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.281535][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.288979][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.296448][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.303860][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.311259][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.318764][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.326198][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.333634][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.341048][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.348480][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 305.356646][ T3377] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 305.498754][T17858] FAULT_INJECTION: forcing a failure. [ 305.498754][T17858] name failslab, interval 1, probability 0, space 0, times 0 [ 305.511525][T17858] CPU: 0 UID: 0 PID: 17858 Comm: syz.2.5383 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 305.511575][T17858] Tainted: [W]=WARN [ 305.511584][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.511600][T17858] Call Trace: [ 305.511608][T17858] [ 305.511617][T17858] dump_stack_lvl+0xf2/0x150 [ 305.511686][T17858] dump_stack+0x15/0x1a [ 305.511707][T17858] should_fail_ex+0x24a/0x260 [ 305.511738][T17858] should_failslab+0x8f/0xb0 [ 305.511777][T17858] kmem_cache_alloc_node_noprof+0x59/0x320 [ 305.511800][T17858] ? __alloc_skb+0x10b/0x310 [ 305.511835][T17858] __alloc_skb+0x10b/0x310 [ 305.511863][T17858] tca_action_gd+0x86b/0x1280 [ 305.511895][T17858] ? is_reg64+0x8a/0x290 [ 305.511936][T17858] ? __nla_validate_parse+0x17b7/0x1e50 [ 305.511989][T17858] ? selinux_capable+0x1f2/0x260 [ 305.512089][T17858] ? __nla_parse+0x40/0x60 [ 305.512165][T17858] tc_ctl_action+0x203/0x840 [ 305.512191][T17858] ? xa_load+0xb9/0xe0 [ 305.512243][T17858] ? mod_objcg_state+0x2ea/0x4f0 [ 305.512271][T17858] ? __rcu_read_unlock+0x4e/0x70 [ 305.512299][T17858] ? avc_has_perm_noaudit+0x1cc/0x210 [ 305.512327][T17858] ? selinux_capable+0x1f2/0x260 [ 305.512411][T17858] ? security_capable+0x81/0x90 [ 305.512454][T17858] ? ns_capable+0x7d/0xb0 [ 305.512491][T17858] ? __pfx_tc_ctl_action+0x10/0x10 [ 305.512559][T17858] rtnetlink_rcv_msg+0x6aa/0x710 [ 305.512596][T17858] ? avc_has_perm_noaudit+0x1cc/0x210 [ 305.512625][T17858] netlink_rcv_skb+0x12c/0x230 [ 305.512662][T17858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.512732][T17858] rtnetlink_rcv+0x1c/0x30 [ 305.512764][T17858] netlink_unicast+0x599/0x670 [ 305.512804][T17858] netlink_sendmsg+0x5cc/0x6e0 [ 305.512829][T17858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.512875][T17858] __sock_sendmsg+0x140/0x180 [ 305.512960][T17858] ____sys_sendmsg+0x326/0x4b0 [ 305.513009][T17858] __sys_sendmsg+0x19d/0x230 [ 305.513065][T17858] __x64_sys_sendmsg+0x46/0x50 [ 305.513177][T17858] x64_sys_call+0x2734/0x2dc0 [ 305.513211][T17858] do_syscall_64+0xc9/0x1c0 [ 305.513252][T17858] ? clear_bhb_loop+0x55/0xb0 [ 305.513322][T17858] ? clear_bhb_loop+0x55/0xb0 [ 305.513349][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.513382][T17858] RIP: 0033:0x7fbad656d169 [ 305.513402][T17858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.513424][T17858] RSP: 002b:00007fbad4bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.513447][T17858] RAX: ffffffffffffffda RBX: 00007fbad6785fa0 RCX: 00007fbad656d169 [ 305.513488][T17858] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 305.513503][T17858] RBP: 00007fbad4bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.513517][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.513528][T17858] R13: 0000000000000000 R14: 00007fbad6785fa0 R15: 00007fffdd3b2378 [ 305.513546][T17858] [ 305.844792][T17864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.855356][T17864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.875002][T17864] loop3: detected capacity change from 0 to 1764 [ 305.878369][T17859] dummy0 speed is unknown, defaulting to 1000 [ 305.920307][T17865] loop2: detected capacity change from 0 to 1024 [ 305.932013][T17865] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 305.969395][T17865] loop2: detected capacity change from 0 to 128 [ 305.993822][T17868] hub 9-0:1.0: USB hub found [ 306.000094][T17868] hub 9-0:1.0: 8 ports detected [ 306.490696][T17879] netlink: 'syz.0.5393': attribute type 21 has an invalid length. [ 306.541269][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.548782][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.556303][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.576545][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.584065][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.591669][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.599169][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.607014][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.614578][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.622164][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.629688][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.637144][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.644738][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.653766][T17889] __nla_validate_parse: 8 callbacks suppressed [ 306.653784][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5394'. [ 306.674104][T17891] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 306.687689][T17893] loop0: detected capacity change from 0 to 1024 [ 306.696294][T17893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.720989][T17896] hub 9-0:1.0: USB hub found [ 306.727694][T17896] hub 9-0:1.0: 8 ports detected [ 306.734616][T17893] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.771847][T17893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 306.781935][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.789538][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.794185][T17901] loop3: detected capacity change from 0 to 512 [ 306.797303][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.810722][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.815528][T17893] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.5397: lblock 2 mapped to illegal pblock 2 (length 1) [ 306.818196][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.833654][T17893] EXT4-fs (loop0): Remounting filesystem read-only [ 306.839658][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.853573][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.853598][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.853619][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.861090][T17893] EXT4-fs (loop0): 1 orphan inode deleted [ 306.868491][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.878646][T17893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.881596][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.889030][T17893] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 306.901519][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.923086][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.923542][T17905] loop2: detected capacity change from 0 to 1024 [ 306.930665][ T3377] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 306.937563][T17905] EXT4-fs: Ignoring removed bh option [ 306.949936][T17901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.950510][T17893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.963550][ T3377] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 306.973366][T17901] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.013650][T17905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.040388][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.115633][T11322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.156134][T17916] loop2: detected capacity change from 0 to 1024 [ 307.163111][T17916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.173408][T17916] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.193410][T17916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 307.202852][T17916] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.5405: lblock 2 mapped to illegal pblock 2 (length 1) [ 307.218219][T17916] EXT4-fs (loop2): Remounting filesystem read-only [ 307.223820][T17918] netlink: 'syz.3.5403': attribute type 10 has an invalid length. [ 307.232659][T17918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5403'. [ 307.243123][T17916] EXT4-fs (loop2): 1 orphan inode deleted [ 307.249355][T17916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.263505][T17916] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 307.270543][T17916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.282640][T17918] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 307.312008][T17920] dummy0 speed is unknown, defaulting to 1000 [ 307.345032][T17922] 9pnet_fd: Insufficient options for proto=fd [ 307.388512][T17927] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 307.460537][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 307.555259][T17943] netlink: 'syz.4.5412': attribute type 10 has an invalid length. [ 307.563133][T17943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5412'. [ 307.584884][T17943] batman_adv: batadv0: Interface activated: veth1_vlan [ 308.222993][T17956] loop2: detected capacity change from 0 to 1024 [ 308.230298][T17956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.239962][T17956] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 308.251101][T17956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 308.261608][T17956] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.5418: lblock 2 mapped to illegal pblock 2 (length 1) [ 308.284536][T17956] EXT4-fs (loop2): Remounting filesystem read-only [ 308.291327][T17956] EXT4-fs (loop2): 1 orphan inode deleted [ 308.298165][T17956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.316634][T17956] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 308.325987][T17956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.351086][T17963] loop4: detected capacity change from 0 to 1024 [ 308.359114][T17963] EXT4-fs: Ignoring removed bh option [ 308.396909][T17963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.432627][T17965] loop2: detected capacity change from 0 to 8192 [ 308.440787][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.480824][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.488346][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.495791][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.504662][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.512099][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.519598][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.527265][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.534751][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.542417][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.549878][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.557379][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.564832][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.572383][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.580624][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.588110][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.595656][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.603067][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.610577][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.618078][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.625610][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.633023][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.640551][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.648132][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.655622][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.663105][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.670573][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.678068][T12529] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 308.688338][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5427'. [ 308.700443][T12529] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 308.710543][T17981] netlink: 'syz.1.5425': attribute type 10 has an invalid length. [ 308.718447][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5425'. [ 308.764599][T17976] netlink: 'syz.4.5426': attribute type 21 has an invalid length. [ 308.810698][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.819396][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.842532][T17985] loop0: detected capacity change from 0 to 1764 [ 308.954059][T17995] loop3: detected capacity change from 0 to 1024 [ 308.967557][T17995] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 309.005184][T17995] loop3: detected capacity change from 0 to 128 [ 309.352275][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5435'. [ 309.427487][T18006] netlink: 'syz.2.5435': attribute type 13 has an invalid length. [ 309.445203][T18010] 9pnet_fd: Insufficient options for proto=fd [ 309.519710][T18018] ip6t_srh: unknown srh invflags 4000 [ 309.526403][T18016] netlink: 'syz.2.5441': attribute type 21 has an invalid length. [ 309.544856][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 309.544872][ T29] audit: type=1326 audit(1742802481.023:48777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.574246][ T29] audit: type=1326 audit(1742802481.023:48778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.597366][ T29] audit: type=1326 audit(1742802481.023:48779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.620516][ T29] audit: type=1326 audit(1742802481.023:48780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.643594][ T29] audit: type=1326 audit(1742802481.023:48781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.666838][ T29] audit: type=1326 audit(1742802481.023:48782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.689959][ T29] audit: type=1326 audit(1742802481.023:48783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.713068][ T29] audit: type=1326 audit(1742802481.023:48784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.766654][ T29] audit: type=1326 audit(1742802481.253:48785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.789814][ T29] audit: type=1326 audit(1742802481.253:48786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8305e4d169 code=0x7ffc0000 [ 309.858295][T18033] loop4: detected capacity change from 0 to 512 [ 309.867884][T18033] EXT4-fs: Ignoring removed oldalloc option [ 309.874632][T18033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.885750][T18033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 309.895633][T18033] System zones: 1-12 [ 309.900544][T18033] EXT4-fs (loop4): 1 truncate cleaned up [ 309.906704][T18033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.957622][T11206] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 309.976071][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.978571][T18048] 9pnet_fd: Insufficient options for proto=fd [ 309.989460][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5451'. [ 310.001460][T18046] netlink: 'syz.3.5451': attribute type 13 has an invalid length. [ 310.119902][T18061] netlink: 'syz.1.5457': attribute type 21 has an invalid length. [ 310.326325][T18079] hub 9-0:1.0: USB hub found [ 310.332263][T18079] hub 9-0:1.0: 8 ports detected [ 310.464954][T18089] ip6t_srh: unknown srh invflags 4000 [ 310.498036][T18093] loop0: detected capacity change from 0 to 128 [ 310.522753][T18093] FAULT_INJECTION: forcing a failure. [ 310.522753][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.535924][T18093] CPU: 1 UID: 0 PID: 18093 Comm: syz.0.5472 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 310.536020][T18093] Tainted: [W]=WARN [ 310.536028][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.536042][T18093] Call Trace: [ 310.536107][T18093] [ 310.536117][T18093] dump_stack_lvl+0xf2/0x150 [ 310.536183][T18093] dump_stack+0x15/0x1a [ 310.536210][T18093] should_fail_ex+0x24a/0x260 [ 310.536248][T18093] should_fail+0xb/0x10 [ 310.536350][T18093] should_fail_usercopy+0x1a/0x20 [ 310.536390][T18093] _copy_from_iter+0xd5/0xd00 [ 310.536423][T18093] ? kmalloc_reserve+0x16e/0x190 [ 310.536521][T18093] ? __build_skb_around+0x196/0x1f0 [ 310.536549][T18093] ? __alloc_skb+0x21f/0x310 [ 310.536574][T18093] ? __virt_addr_valid+0x1ed/0x250 [ 310.536604][T18093] ? __check_object_size+0x364/0x520 [ 310.536632][T18093] netlink_sendmsg+0x460/0x6e0 [ 310.536723][T18093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.536745][T18093] __sock_sendmsg+0x140/0x180 [ 310.536786][T18093] sock_write_iter+0x15e/0x1a0 [ 310.536852][T18093] do_iter_readv_writev+0x403/0x4b0 [ 310.536899][T18093] vfs_writev+0x2d9/0x880 [ 310.536922][T18093] ? get_pid_task+0x8e/0xc0 [ 310.536956][T18093] ? proc_fail_nth_write+0x12a/0x150 [ 310.536993][T18093] do_writev+0xf4/0x220 [ 310.537048][T18093] __x64_sys_writev+0x45/0x50 [ 310.537083][T18093] x64_sys_call+0x1fab/0x2dc0 [ 310.537112][T18093] do_syscall_64+0xc9/0x1c0 [ 310.537165][T18093] ? clear_bhb_loop+0x55/0xb0 [ 310.537208][T18093] ? clear_bhb_loop+0x55/0xb0 [ 310.537240][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.537271][T18093] RIP: 0033:0x7f8305e4d169 [ 310.537370][T18093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.537391][T18093] RSP: 002b:00007f83044b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 310.537412][T18093] RAX: ffffffffffffffda RBX: 00007f8306065fa0 RCX: 00007f8305e4d169 [ 310.537426][T18093] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 310.537440][T18093] RBP: 00007f83044b7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.537453][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.537467][T18093] R13: 0000000000000000 R14: 00007f8306065fa0 R15: 00007fff4933c068 [ 310.537509][T18093] [ 310.543664][T18095] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5473'. [ 310.746059][T18099] loop4: detected capacity change from 0 to 1024 [ 310.821350][T18099] EXT4-fs: Ignoring removed bh option [ 310.828220][T18101] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 310.838748][T18103] FAULT_INJECTION: forcing a failure. [ 310.838748][T18103] name failslab, interval 1, probability 0, space 0, times 0 [ 310.851517][T18103] CPU: 0 UID: 0 PID: 18103 Comm: syz.0.5476 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 310.851576][T18103] Tainted: [W]=WARN [ 310.851585][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.851601][T18103] Call Trace: [ 310.851610][T18103] [ 310.851620][T18103] dump_stack_lvl+0xf2/0x150 [ 310.851654][T18103] dump_stack+0x15/0x1a [ 310.851680][T18103] should_fail_ex+0x24a/0x260 [ 310.851728][T18103] ? tipc_nametbl_lookup_group+0x452/0x620 [ 310.851765][T18103] should_failslab+0x8f/0xb0 [ 310.851805][T18103] __kmalloc_cache_noprof+0x4e/0x320 [ 310.851837][T18103] tipc_nametbl_lookup_group+0x452/0x620 [ 310.851885][T18103] __tipc_sendmsg+0x1103/0x1c40 [ 310.851918][T18103] ? selinux_socket_sendmsg+0x185/0x1c0 [ 310.851947][T18103] ? _raw_spin_unlock_bh+0x36/0x40 [ 310.851973][T18103] ? lock_sock_nested+0x10f/0x140 [ 310.852076][T18103] ? __pfx_tipc_sendmsg+0x10/0x10 [ 310.852099][T18103] tipc_sendmsg+0x3e/0x60 [ 310.852123][T18103] __sock_sendmsg+0x140/0x180 [ 310.852227][T18103] ____sys_sendmsg+0x326/0x4b0 [ 310.852364][T18103] __sys_sendmsg+0x19d/0x230 [ 310.852416][T18103] __x64_sys_sendmsg+0x46/0x50 [ 310.852447][T18103] x64_sys_call+0x2734/0x2dc0 [ 310.852476][T18103] do_syscall_64+0xc9/0x1c0 [ 310.852539][T18103] ? clear_bhb_loop+0x55/0xb0 [ 310.852571][T18103] ? clear_bhb_loop+0x55/0xb0 [ 310.852602][T18103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.852633][T18103] RIP: 0033:0x7f8305e4d169 [ 310.852649][T18103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.852684][T18103] RSP: 002b:00007f83044b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.852703][T18103] RAX: ffffffffffffffda RBX: 00007f8306065fa0 RCX: 00007f8305e4d169 [ 310.852724][T18103] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000009 [ 310.852738][T18103] RBP: 00007f83044b7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.852752][T18103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.852765][T18103] R13: 0000000000000000 R14: 00007f8306065fa0 R15: 00007fff4933c068 [ 310.852850][T18103] [ 311.109246][T18110] loop0: detected capacity change from 0 to 2048 [ 311.109416][T18099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.140688][T18110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.170802][T18110] EXT4-fs (loop0): shut down requested (0) [ 311.200808][T18110] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 311.224545][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.268878][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5479'. [ 311.285659][T18117] bond3: entered promiscuous mode [ 311.292516][T18117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.305060][T11721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.315057][T18121] netlink: 'syz.4.5480': attribute type 10 has an invalid length. [ 311.322695][T18117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.331094][T18117] bond4: entered promiscuous mode [ 311.336945][T18117] bond3: (slave bond4): Enslaving as an active interface with an up link [ 311.357805][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.366932][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.399204][T18128] ip6t_srh: unknown srh invflags 4000 [ 311.417789][T18120] loop3: detected capacity change from 0 to 1764 [ 311.443936][T18130] FAULT_INJECTION: forcing a failure. [ 311.443936][T18130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.457067][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz.0.5485 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 311.457150][T18130] Tainted: [W]=WARN [ 311.457159][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.457200][T18130] Call Trace: [ 311.457208][T18130] [ 311.457218][T18130] dump_stack_lvl+0xf2/0x150 [ 311.457253][T18130] dump_stack+0x15/0x1a [ 311.457280][T18130] should_fail_ex+0x24a/0x260 [ 311.457318][T18130] should_fail+0xb/0x10 [ 311.457424][T18130] should_fail_usercopy+0x1a/0x20 [ 311.457499][T18130] _copy_to_user+0x20/0xa0 [ 311.457519][T18130] simple_read_from_buffer+0xa0/0x110 [ 311.457552][T18130] proc_fail_nth_read+0xf9/0x140 [ 311.457638][T18130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.457674][T18130] vfs_read+0x19b/0x6f0 [ 311.457716][T18130] ? kmem_cache_free+0xdc/0x2d0 [ 311.457745][T18130] ? free_nsproxy+0x25f/0x300 [ 311.457774][T18130] ksys_read+0xe8/0x1b0 [ 311.457806][T18130] __x64_sys_read+0x42/0x50 [ 311.457869][T18130] x64_sys_call+0x2874/0x2dc0 [ 311.457910][T18130] do_syscall_64+0xc9/0x1c0 [ 311.457950][T18130] ? clear_bhb_loop+0x55/0xb0 [ 311.457983][T18130] ? clear_bhb_loop+0x55/0xb0 [ 311.458013][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.458110][T18130] RIP: 0033:0x7f8305e4bb7c [ 311.458127][T18130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.458146][T18130] RSP: 002b:00007f83044b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.458167][T18130] RAX: ffffffffffffffda RBX: 00007f8306065fa0 RCX: 00007f8305e4bb7c [ 311.458179][T18130] RDX: 000000000000000f RSI: 00007f83044b70a0 RDI: 0000000000000006 [ 311.458306][T18130] RBP: 00007f83044b7090 R08: 0000000000000000 R09: 0000000000000000 [ 311.458321][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.458336][T18130] R13: 0000000000000000 R14: 00007f8306065fa0 R15: 00007fff4933c068 [ 311.458354][T18130] [ 311.667971][T18133] __nla_validate_parse: 1 callbacks suppressed [ 311.667989][T18133] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5486'. [ 311.694587][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5488'. [ 311.707887][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.715431][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.722978][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.730931][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.738557][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.739056][T18136] netlink: 'syz.0.5488': attribute type 13 has an invalid length. [ 311.746021][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.746050][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.746075][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.755393][T18136] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 311.761601][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.790997][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.795680][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5489'. [ 311.798455][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.814919][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.822417][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.830082][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.837573][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.845043][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.852493][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.860049][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.867510][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.875067][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.882540][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.890217][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.897731][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.905187][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.912627][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.920143][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.927635][T12529] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 311.955328][T12529] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 312.016188][T18148] ip6t_srh: unknown srh invflags 4000 [ 312.048095][T18150] hub 9-0:1.0: USB hub found [ 312.073910][T18150] hub 9-0:1.0: 8 ports detected [ 312.156185][T18158] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 312.416064][T18176] FAULT_INJECTION: forcing a failure. [ 312.416064][T18176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.429291][T18176] CPU: 1 UID: 0 PID: 18176 Comm: syz.0.5504 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 312.429383][T18176] Tainted: [W]=WARN [ 312.429389][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.429402][T18176] Call Trace: [ 312.429410][T18176] [ 312.429419][T18176] dump_stack_lvl+0xf2/0x150 [ 312.429451][T18176] dump_stack+0x15/0x1a [ 312.429475][T18176] should_fail_ex+0x24a/0x260 [ 312.429583][T18176] should_fail+0xb/0x10 [ 312.429614][T18176] should_fail_usercopy+0x1a/0x20 [ 312.429653][T18176] _copy_from_user+0x1c/0xa0 [ 312.429673][T18176] do_ip6t_set_ctl+0x42c/0x8c0 [ 312.429735][T18176] ? kstrtouint+0x77/0xc0 [ 312.429840][T18176] nf_setsockopt+0x195/0x1b0 [ 312.429895][T18176] ipv6_setsockopt+0x10f/0x130 [ 312.429915][T18176] tcp_setsockopt+0x93/0xb0 [ 312.429952][T18176] sock_common_setsockopt+0x64/0x80 [ 312.429993][T18176] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 312.430066][T18176] __sys_setsockopt+0x187/0x200 [ 312.430098][T18176] __x64_sys_setsockopt+0x66/0x80 [ 312.430156][T18176] x64_sys_call+0x282e/0x2dc0 [ 312.430183][T18176] do_syscall_64+0xc9/0x1c0 [ 312.430296][T18176] ? clear_bhb_loop+0x55/0xb0 [ 312.430335][T18176] ? clear_bhb_loop+0x55/0xb0 [ 312.430361][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.430390][T18176] RIP: 0033:0x7f8305e4d169 [ 312.430407][T18176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.430426][T18176] RSP: 002b:00007f83044b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.430469][T18176] RAX: ffffffffffffffda RBX: 00007f8306065fa0 RCX: 00007f8305e4d169 [ 312.430482][T18176] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 312.430496][T18176] RBP: 00007f83044b7090 R08: 0000000000000478 R09: 0000000000000000 [ 312.430509][T18176] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 312.430523][T18176] R13: 0000000000000000 R14: 00007f8306065fa0 R15: 00007fff4933c068 [ 312.430544][T18176] [ 312.664531][T18139] syz.2.5490 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 312.675587][T18139] CPU: 0 UID: 0 PID: 18139 Comm: syz.2.5490 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 312.675620][T18139] Tainted: [W]=WARN [ 312.675628][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.675640][T18139] Call Trace: [ 312.675647][T18139] [ 312.675656][T18139] dump_stack_lvl+0xf2/0x150 [ 312.675691][T18139] dump_stack+0x15/0x1a [ 312.675780][T18139] dump_header+0x83/0x2d0 [ 312.675819][T18139] oom_kill_process+0x341/0x4c0 [ 312.675928][T18139] out_of_memory+0x9af/0xbe0 [ 312.675969][T18139] ? css_next_descendant_pre+0x11c/0x140 [ 312.675996][T18139] mem_cgroup_out_of_memory+0x13e/0x190 [ 312.676105][T18139] try_charge_memcg+0x508/0x7f0 [ 312.676132][T18139] charge_memcg+0x50/0xc0 [ 312.676196][T18139] __mem_cgroup_charge+0x29/0xb0 [ 312.676224][T18139] filemap_add_folio+0x53/0x1b0 [ 312.676267][T18139] __filemap_get_folio+0x346/0x690 [ 312.676295][T18139] filemap_fault+0x46d/0xb30 [ 312.676358][T18139] ? __rcu_read_lock+0x36/0x50 [ 312.676389][T18139] __do_fault+0xb6/0x200 [ 312.676415][T18139] handle_mm_fault+0xc7d/0x2b00 [ 312.676512][T18139] exc_page_fault+0x3b9/0x650 [ 312.676547][T18139] asm_exc_page_fault+0x26/0x30 [ 312.676579][T18139] RIP: 0033:0x7fbad644d2fa [ 312.676665][T18139] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 e0 a0 fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 [ 312.676687][T18139] RSP: 002b:00007fffdd3b2400 EFLAGS: 00010216 [ 312.676707][T18139] RAX: 0000001b2f81d108 RBX: 00007fbad72b5720 RCX: 0000001b2f81d100 [ 312.676722][T18139] RDX: 0000001b2f220220 RSI: 0000000000000008 RDI: 00007fbad72b5720 [ 312.676795][T18139] RBP: ffffffff84386fda R08: 00007fbad6786038 R09: 00007fbad6772000 [ 312.676807][T18139] R10: 00007fbad5bdf008 R11: 0000000000000001 R12: 0000000000000001 [ 312.676821][T18139] R13: 0000000000000001 R14: ffffffff843866b0 R15: 0000000000000001 [ 312.676837][T18139] ? __x64_sys_sendmsg+0x10/0x50 [ 312.676871][T18139] ? ____sys_recvmsg+0x25a/0x280 [ 312.676902][T18139] [ 312.676909][T18139] memory: usage 307200kB, limit 307200kB, failcnt 2248 [ 312.725121][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.728487][T18139] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 312.739566][T18188] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 312.744331][T18139] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 312.744349][T18139] Memory cgroup stats for /syz2 [ 312.749561][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.753614][T18139] : [ 312.774746][T18193] netlink: 'syz.4.5506': attribute type 10 has an invalid length. [ 312.778369][T18139] cache 0 [ 312.782295][T18193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5506'. [ 312.787146][T18139] rss 0 [ 312.787156][T18139] shmem 0 [ 312.787163][T18139] mapped_file 0 [ 312.787223][T18139] dirty 0 [ 312.787231][T18139] writeback 0 [ 312.787239][T18139] workingset_refault_anon 429 [ 312.787249][T18139] workingset_refault_file 1807 [ 312.977731][T18139] swap 212992 [ 312.981027][T18139] swapcached 0 [ 312.984432][T18139] pgpgin 193608 [ 312.987903][T18139] pgpgout 193608 [ 312.991480][T18139] pgfault 226537 [ 312.995046][T18139] pgmajfault 333 [ 312.998596][T18139] inactive_anon 0 [ 313.002259][T18139] active_anon 0 [ 313.005754][T18139] inactive_file 0 [ 313.009396][T18139] active_file 0 [ 313.012883][T18139] unevictable 0 [ 313.016376][T18139] hierarchical_memory_limit 314572800 [ 313.021761][T18139] hierarchical_memsw_limit 9223372036854771712 [ 313.027943][T18139] total_cache 0 [ 313.031409][T18139] total_rss 0 [ 313.034741][T18139] total_shmem 0 [ 313.038223][T18139] total_mapped_file 0 [ 313.042208][T18139] total_dirty 0 [ 313.045699][T18139] total_writeback 0 [ 313.049647][T18139] total_workingset_refault_anon 429 [ 313.054933][T18139] total_workingset_refault_file 1807 [ 313.060235][T18139] total_swap 212992 [ 313.064096][T18139] total_swapcached 0 [ 313.067999][T18139] total_pgpgin 193608 [ 313.071981][T18139] total_pgpgout 193608 [ 313.076124][T18139] total_pgfault 226537 [ 313.080202][T18139] total_pgmajfault 333 [ 313.084356][T18139] total_inactive_anon 0 [ 313.088533][T18139] total_active_anon 0 [ 313.092526][T18139] total_inactive_file 0 [ 313.096727][T18139] total_active_file 0 [ 313.100849][T18139] total_unevictable 0 [ 313.104885][T18139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5490,pid=18139,uid=0 [ 313.119950][T18139] Memory cgroup out of memory: Killed process 18139 (syz.2.5490) total-vm:95760kB, anon-rss:920kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 313.181548][T18197] ip6t_srh: unknown srh invflags 4000 [ 313.304689][T18203] loop0: detected capacity change from 0 to 1024 [ 313.322625][T18203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.331434][T18203] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.352552][T18203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 313.362582][T18203] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.5513: lblock 2 mapped to illegal pblock 2 (length 1) [ 313.376897][T18203] EXT4-fs (loop0): Remounting filesystem read-only [ 313.384792][T18203] EXT4-fs (loop0): 1 orphan inode deleted [ 313.391363][T18203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.404135][T18203] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 313.411141][T18203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.441606][T18210] netlink: 'syz.3.5515': attribute type 10 has an invalid length. [ 313.449578][T18210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5515'. [ 313.598729][T18218] No such timeout policy "syz0" [ 313.652084][T18225] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 313.681742][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.686001][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.689300][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.696635][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.703987][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.711392][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.719192][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.728190][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.733689][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.741065][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.748467][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.755841][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.763235][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.770607][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.770667][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.770688][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.778075][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.785504][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.792886][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.800267][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.807687][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.815066][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.822394][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.829823][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.831983][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.837358][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.837387][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.844852][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.853311][T18231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5523'. [ 313.859603][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.874709][T18230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'. [ 313.881764][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.889777][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.898134][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.905559][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.914518][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.921964][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.929283][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.936668][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.944060][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.951431][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.958814][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.966198][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.973580][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.980948][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.988317][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 313.995705][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.995731][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 313.995756][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 314.003130][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 314.010516][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 314.017879][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 314.025277][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 314.032650][T12529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 314.040027][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 314.092439][T11778] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 314.100392][T11778] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 314.116472][T12529] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 314.258974][T18237] dummy0 speed is unknown, defaulting to 1000 [ 314.260228][T18249] cgroup: Invalid name [ 314.360564][T18255] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 314.390076][T18261] loop3: detected capacity change from 0 to 1764 [ 314.411846][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.428176][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.446305][T18265] loop2: detected capacity change from 0 to 1764 [ 314.496739][T18275] FAULT_INJECTION: forcing a failure. [ 314.496739][T18275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.510151][T18275] CPU: 0 UID: 0 PID: 18275 Comm: syz.4.5543 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 314.510189][T18275] Tainted: [W]=WARN [ 314.510198][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.510244][T18275] Call Trace: [ 314.510251][T18275] [ 314.510260][T18275] dump_stack_lvl+0xf2/0x150 [ 314.510295][T18275] dump_stack+0x15/0x1a [ 314.510321][T18275] should_fail_ex+0x24a/0x260 [ 314.510380][T18275] should_fail+0xb/0x10 [ 314.510414][T18275] should_fail_usercopy+0x1a/0x20 [ 314.510462][T18275] strncpy_from_user+0x25/0x210 [ 314.510490][T18275] ? __fget_files+0x17c/0x1c0 [ 314.510532][T18275] __se_sys_add_key+0x81/0x320 [ 314.510590][T18275] ? fput+0x1c4/0x200 [ 314.510618][T18275] __x64_sys_add_key+0x67/0x80 [ 314.510651][T18275] x64_sys_call+0x2964/0x2dc0 [ 314.510677][T18275] do_syscall_64+0xc9/0x1c0 [ 314.510741][T18275] ? clear_bhb_loop+0x55/0xb0 [ 314.510775][T18275] ? clear_bhb_loop+0x55/0xb0 [ 314.510809][T18275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.510848][T18275] RIP: 0033:0x7f44d233d169 [ 314.510866][T18275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.510917][T18275] RSP: 002b:00007f44d09a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 314.510936][T18275] RAX: ffffffffffffffda RBX: 00007f44d2555fa0 RCX: 00007f44d233d169 [ 314.510948][T18275] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 314.510960][T18275] RBP: 00007f44d09a1090 R08: 0000000000557d37 R09: 0000000000000000 [ 314.510972][T18275] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 314.510983][T18275] R13: 0000000000000000 R14: 00007f44d2555fa0 R15: 00007ffd31efaf38 [ 314.511056][T18275] [ 314.712892][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 314.712911][ T29] audit: type=1326 audit(1742802486.193:49354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.3.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.742869][ T29] audit: type=1326 audit(1742802486.193:49355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.3.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.766514][ T29] audit: type=1326 audit(1742802486.193:49356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.3.5544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.790249][ T29] audit: type=1326 audit(1742802486.193:49357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.813447][ T29] audit: type=1326 audit(1742802486.193:49358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.836772][ T29] audit: type=1326 audit(1742802486.193:49359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.859907][ T29] audit: type=1326 audit(1742802486.193:49360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.883342][ T29] audit: type=1326 audit(1742802486.193:49361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.906472][ T29] audit: type=1326 audit(1742802486.193:49362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.929886][ T29] audit: type=1326 audit(1742802486.193:49363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d00d169 code=0x7ffc0000 [ 314.953724][T18271] netlink: 'syz.0.5539': attribute type 21 has an invalid length. [ 314.966688][T18291] loop3: detected capacity change from 0 to 128 [ 315.035357][T18293] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 315.073075][T18298] ip6t_srh: unknown srh invflags 4000 [ 315.078669][T18297] loop0: detected capacity change from 0 to 1024 [ 315.090856][T18297] EXT4-fs: Ignoring removed bh option [ 315.105385][T18297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.136076][T11721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.154799][T18304] netlink: 'syz.3.5553': attribute type 1 has an invalid length. [ 315.176018][T18304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 315.249563][T18316] dummy0 speed is unknown, defaulting to 1000 [ 315.250069][T18318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.265039][T18318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.273625][T18310] FAULT_INJECTION: forcing a failure. [ 315.273625][T18310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.286991][T18310] CPU: 0 UID: 0 PID: 18310 Comm: syz.4.5555 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 315.287021][T18310] Tainted: [W]=WARN [ 315.287030][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.287045][T18310] Call Trace: [ 315.287053][T18310] [ 315.287063][T18310] dump_stack_lvl+0xf2/0x150 [ 315.287133][T18310] dump_stack+0x15/0x1a [ 315.287156][T18310] should_fail_ex+0x24a/0x260 [ 315.287188][T18310] should_fail_alloc_page+0xfd/0x110 [ 315.287222][T18310] __alloc_frozen_pages_noprof+0x109/0x340 [ 315.287331][T18310] alloc_pages_mpol+0xb4/0x260 [ 315.287359][T18310] vma_alloc_folio_noprof+0x1a0/0x310 [ 315.287385][T18310] do_wp_page+0x64b/0x2340 [ 315.287425][T18310] ? __rcu_read_lock+0x36/0x50 [ 315.287458][T18310] handle_mm_fault+0xc63/0x2b00 [ 315.287498][T18310] exc_page_fault+0x3b9/0x650 [ 315.287528][T18310] asm_exc_page_fault+0x26/0x30 [ 315.287554][T18310] RIP: 0033:0x7f44d220cf7d [ 315.287569][T18310] Code: 00 00 00 64 f0 83 04 25 90 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 c8 fe ff ff e8 5b c1 0c 00 85 c0 0f 84 a3 01 00 00 <64> f0 83 2c 25 90 ff ff ff 01 e8 a4 9b 0b 00 48 8b 0c 24 8b 00 48 [ 315.287636][T18310] RSP: 002b:00007f44d09a1060 EFLAGS: 00010202 [ 315.287655][T18310] RAX: 0000000000000002 RBX: 00007f44d2555fa0 RCX: 0000000000000002 [ 315.287670][T18310] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f44d08f7000 [ 315.287685][T18310] RBP: 00007f44d09a1090 R08: 0000000000000000 R09: 0000000000000000 [ 315.287697][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.287709][T18310] R13: 0000000000000000 R14: 00007f44d2555fa0 R15: 00007ffd31efaf38 [ 315.287747][T18310] [ 315.287757][T18310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 315.329647][T18318] loop3: detected capacity change from 0 to 1764 [ 315.336869][T18321] netlink: 'syz.0.5556': attribute type 10 has an invalid length. [ 315.355547][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5556'. [ 315.370251][T18321] batman_adv: batadv0: Interface activated: veth1_vlan [ 315.736490][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.744078][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.751534][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.760699][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.768236][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.775688][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.783080][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.790499][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.797921][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.805345][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.812746][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.820156][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.827590][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.837161][T18325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5559'. [ 315.850207][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.857675][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.865091][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.872517][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.879925][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.887325][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.894723][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.902203][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.909737][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.917229][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.924641][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.932022][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.939452][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.946970][T11778] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 315.992932][T11778] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 316.044091][T18328] loop0: detected capacity change from 0 to 128 [ 316.094507][T18332] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 316.103619][T18330] netlink: 'syz.2.5561': attribute type 21 has an invalid length. [ 316.144578][T18337] ip6t_srh: unknown srh invflags 4000 [ 316.186527][T18342] sd 0:0:1:0: device reset [ 316.249609][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.258448][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.337732][T18364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.348374][T18364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.472221][T18364] loop3: detected capacity change from 0 to 1764 [ 316.520994][T18383] ip6t_srh: unknown srh invflags 4000 [ 316.826224][T18400] loop0: detected capacity change from 0 to 1024 [ 316.833461][T18400] EXT4-fs: Ignoring removed bh option [ 316.845965][T18400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.876413][T11721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.970414][T18347] syz.2.5570 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 316.981572][T18347] CPU: 0 UID: 0 PID: 18347 Comm: syz.2.5570 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 316.981616][T18347] Tainted: [W]=WARN [ 316.981624][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.981671][T18347] Call Trace: [ 316.981676][T18347] [ 316.981682][T18347] dump_stack_lvl+0xf2/0x150 [ 316.981709][T18347] dump_stack+0x15/0x1a [ 316.981737][T18347] dump_header+0x83/0x2d0 [ 316.981781][T18347] oom_kill_process+0x341/0x4c0 [ 316.981814][T18347] out_of_memory+0x9af/0xbe0 [ 316.981843][T18347] ? css_next_descendant_pre+0x11c/0x140 [ 316.981865][T18347] mem_cgroup_out_of_memory+0x13e/0x190 [ 316.982036][T18347] try_charge_memcg+0x508/0x7f0 [ 316.982058][T18347] charge_memcg+0x50/0xc0 [ 316.982079][T18347] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 316.982179][T18347] __read_swap_cache_async+0x236/0x480 [ 316.982205][T18347] swap_cluster_readahead+0x279/0x3f0 [ 316.982233][T18347] swapin_readahead+0xe4/0x6f0 [ 316.982256][T18347] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 316.982303][T18347] ? swap_cache_get_folio+0x77/0x210 [ 316.982326][T18347] do_swap_page+0x31b/0x2550 [ 316.982358][T18347] ? __rcu_read_lock+0x36/0x50 [ 316.982378][T18347] ? __pfx_default_wake_function+0x10/0x10 [ 316.982479][T18347] handle_mm_fault+0x8e4/0x2b00 [ 316.982533][T18347] exc_page_fault+0x3b9/0x650 [ 316.982559][T18347] asm_exc_page_fault+0x26/0x30 [ 316.982581][T18347] RIP: 0033:0x7fbad6443bcc [ 316.982595][T18347] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 316.982630][T18347] RSP: 002b:00007fffdd3b24e0 EFLAGS: 00010206 [ 316.982643][T18347] RAX: 0000000000000000 RBX: 00007fbad6785fa0 RCX: 0000000000000000 [ 316.982659][T18347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557f72f808 [ 316.982674][T18347] RBP: 00007fbad6787ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 316.982689][T18347] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004d660 [ 316.982746][T18347] R13: 00007fbad6786080 R14: ffffffffffffffff R15: 00007fffdd3b25f0 [ 316.982762][T18347] [ 316.982768][T18347] memory: usage 307200kB, limit 307200kB, failcnt 2687 [ 317.201123][T18347] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 317.209051][T18347] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 317.216349][T18347] Memory cgroup stats for /syz2: [ 317.216575][T18347] cache 0 [ 317.224480][T18347] rss 0 [ 317.227288][T18347] shmem 0 [ 317.230233][T18347] mapped_file 0 [ 317.233787][T18347] dirty 0 [ 317.236774][T18347] writeback 0 [ 317.240049][T18347] workingset_refault_anon 445 [ 317.244870][T18347] workingset_refault_file 1871 [ 317.249637][T18347] swap 212992 [ 317.252938][T18347] swapcached 0 [ 317.256322][T18347] pgpgin 194356 [ 317.259817][T18347] pgpgout 194356 [ 317.263400][T18347] pgfault 227886 [ 317.266946][T18347] pgmajfault 346 [ 317.270482][T18347] inactive_anon 0 [ 317.274143][T18347] active_anon 0 [ 317.277622][T18347] inactive_file 0 [ 317.281274][T18347] active_file 0 [ 317.284805][T18347] unevictable 0 [ 317.288288][T18347] hierarchical_memory_limit 314572800 [ 317.293678][T18347] hierarchical_memsw_limit 9223372036854771712 [ 317.299839][T18347] total_cache 0 [ 317.303363][T18347] total_rss 0 [ 317.306660][T18347] total_shmem 0 [ 317.310116][T18347] total_mapped_file 0 [ 317.314117][T18347] total_dirty 0 [ 317.317640][T18347] total_writeback 0 [ 317.321457][T18347] total_workingset_refault_anon 445 [ 317.326798][T18347] total_workingset_refault_file 1871 [ 317.332089][T18347] total_swap 212992 [ 317.335909][T18347] total_swapcached 0 [ 317.339858][T18347] total_pgpgin 194356 [ 317.343936][T18347] total_pgpgout 194356 [ 317.348023][T18347] total_pgfault 227886 [ 317.352095][T18347] total_pgmajfault 346 [ 317.356258][T18347] total_inactive_anon 0 [ 317.360408][T18347] total_active_anon 0 [ 317.364420][T18347] total_inactive_file 0 [ 317.368573][T18347] total_active_file 0 [ 317.372579][T18347] total_unevictable 0 [ 317.376619][T18347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5570,pid=18347,uid=0 [ 317.391578][T18347] Memory cgroup out of memory: Killed process 18347 (syz.2.5570) total-vm:95760kB, anon-rss:1044kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 317.491799][T18417] hub 9-0:1.0: USB hub found [ 317.505268][T18417] hub 9-0:1.0: 8 ports detected [ 317.529559][T18419] loop3: detected capacity change from 0 to 2048 [ 317.581471][T18419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.601816][T18419] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.720691][T18428] netlink: 'syz.1.5599': attribute type 10 has an invalid length. [ 317.728735][T18428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5599'. [ 317.811278][T18435] loop2: detected capacity change from 0 to 512 [ 317.819119][T18435] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 317.829305][T18435] EXT4-fs (loop2): group descriptors corrupted! [ 317.838606][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 317.848194][T18437] netlink: 'syz.0.5604': attribute type 13 has an invalid length. [ 317.856437][T18437] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 317.893281][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.901879][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.919037][T18445] hub 9-0:1.0: USB hub found [ 317.925195][T18445] hub 9-0:1.0: 8 ports detected [ 317.930500][T18443] loop0: detected capacity change from 0 to 1764 [ 318.021272][T18447] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 318.051800][T18449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.060491][T18449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.076001][T18449] loop2: detected capacity change from 0 to 1764 [ 318.328062][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.368341][T18453] hub 9-0:1.0: USB hub found [ 318.374281][T18453] hub 9-0:1.0: 8 ports detected [ 318.488601][T18458] loop3: detected capacity change from 0 to 1024 [ 318.496209][T18458] EXT4-fs: Ignoring removed bh option [ 318.515791][T18458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.629925][T10767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.752689][T18477] dummy0 speed is unknown, defaulting to 1000 [ 318.989871][T18482] ip6t_srh: unknown srh invflags 4000 [ 319.192838][T18489] netlink: 'syz.3.5623': attribute type 10 has an invalid length. [ 319.200820][T18489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5623'. [ 319.366652][T18491] hub 9-0:1.0: USB hub found [ 319.372890][T18491] hub 9-0:1.0: 8 ports detected [ 319.477215][T18499] loop4: detected capacity change from 0 to 1024 [ 319.484580][T18499] EXT4-fs: Ignoring removed bh option [ 319.498275][T18499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.527652][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.565610][T18510] loop4: detected capacity change from 0 to 512 [ 319.572242][T18510] EXT4-fs: Ignoring removed oldalloc option [ 319.578612][T18510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.608998][T18510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 319.620697][T18512] loop0: detected capacity change from 0 to 1024 [ 319.627977][T18510] System zones: 1-12 [ 319.632015][T18512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.641127][T18510] EXT4-fs (loop4): 1 truncate cleaned up [ 319.641923][T18512] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.647464][T18510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.668110][T18512] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 319.680584][T18512] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.5633: lblock 2 mapped to illegal pblock 2 (length 1) [ 319.696058][T18512] EXT4-fs (loop0): Remounting filesystem read-only [ 319.702716][T18512] EXT4-fs (loop0): 1 orphan inode deleted [ 319.709468][T18512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.712503][T11206] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 319.722278][T18512] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 319.743867][T18512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.755818][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.843111][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 319.843130][ T29] audit: type=1404 audit(1742802491.323:50116): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 319.874516][ T29] audit: type=1404 audit(1742802491.353:50117): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 319.889718][ T29] audit: type=1400 audit(1742802491.353:50118): avc: denied { prog_load } for pid=18523 comm="syz.0.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.909007][ T29] audit: type=1400 audit(1742802491.353:50119): avc: denied { bpf } for pid=18523 comm="syz.0.5638" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.916190][T18527] hub 9-0:1.0: USB hub found [ 319.929937][ T29] audit: type=1400 audit(1742802491.353:50120): avc: denied { perfmon } for pid=18523 comm="syz.0.5638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.930009][ T29] audit: type=1400 audit(1742802491.353:50121): avc: denied { prog_run } for pid=18523 comm="syz.0.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.930039][ T29] audit: type=1400 audit(1742802491.353:50122): avc: denied { mounton } for pid=18523 comm="syz.0.5638" path="/464/bus" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 319.930139][ T29] audit: type=1400 audit(1742802491.383:50123): avc: denied { read write } for pid=11721 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 319.930234][ T29] audit: type=1400 audit(1742802491.383:50124): avc: denied { open } for pid=11721 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 319.930332][ T29] audit: type=1400 audit(1742802491.383:50125): avc: denied { ioctl } for pid=11721 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.060128][T18529] loop3: detected capacity change from 0 to 1024 [ 320.081650][T18527] hub 9-0:1.0: 8 ports detected [ 320.085928][T18529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.097617][T18529] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.206253][T18536] dummy0 speed is unknown, defaulting to 1000 [ 320.312754][T18529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 320.323154][T18529] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.5641: lblock 2 mapped to illegal pblock 2 (length 1) [ 320.371540][T18529] EXT4-fs (loop3): Remounting filesystem read-only [ 320.395206][T18529] EXT4-fs (loop3): 1 orphan inode deleted [ 320.415818][T18529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.481503][T18529] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 320.494901][T18529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.510401][T18540] loop4: detected capacity change from 0 to 512 [ 320.538232][T18542] netlink: 'syz.0.5644': attribute type 1 has an invalid length. [ 320.561129][T18542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.604723][T18540] EXT4-fs (loop4): 1 orphan inode deleted [ 320.618468][T18540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.665156][T18540] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.665457][T12444] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:24: Failed to release dquot type 1 [ 320.695908][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5646'. [ 320.728631][T18551] netlink: 'syz.3.5646': attribute type 13 has an invalid length. [ 320.738233][T18554] netlink: 'syz.0.5648': attribute type 21 has an invalid length. [ 320.774848][T18556] FAULT_INJECTION: forcing a failure. [ 320.774848][T18556] name failslab, interval 1, probability 0, space 0, times 0 [ 320.787698][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.1.5649 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 320.787753][T18556] Tainted: [W]=WARN [ 320.787760][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.787773][T18556] Call Trace: [ 320.787778][T18556] [ 320.787786][T18556] dump_stack_lvl+0xf2/0x150 [ 320.787815][T18556] dump_stack+0x15/0x1a [ 320.787840][T18556] should_fail_ex+0x24a/0x260 [ 320.787901][T18556] should_failslab+0x8f/0xb0 [ 320.787998][T18556] kmem_cache_alloc_noprof+0x52/0x320 [ 320.788026][T18556] ? skb_clone+0x154/0x1f0 [ 320.788070][T18556] skb_clone+0x154/0x1f0 [ 320.788098][T18556] __netlink_deliver_tap+0x2bd/0x4f0 [ 320.788230][T18556] netlink_unicast+0x64a/0x670 [ 320.788272][T18556] netlink_sendmsg+0x5cc/0x6e0 [ 320.788305][T18556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.788328][T18556] __sock_sendmsg+0x140/0x180 [ 320.788371][T18556] ____sys_sendmsg+0x326/0x4b0 [ 320.788408][T18556] __sys_sendmsg+0x19d/0x230 [ 320.788481][T18556] __x64_sys_sendmsg+0x46/0x50 [ 320.788553][T18556] x64_sys_call+0x2734/0x2dc0 [ 320.788658][T18556] do_syscall_64+0xc9/0x1c0 [ 320.788698][T18556] ? clear_bhb_loop+0x55/0xb0 [ 320.788732][T18556] ? clear_bhb_loop+0x55/0xb0 [ 320.788786][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.788847][T18556] RIP: 0033:0x7fd0331dd169 [ 320.788866][T18556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.788888][T18556] RSP: 002b:00007fd031847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.788910][T18556] RAX: ffffffffffffffda RBX: 00007fd0333f5fa0 RCX: 00007fd0331dd169 [ 320.788990][T18556] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 320.789003][T18556] RBP: 00007fd031847090 R08: 0000000000000000 R09: 0000000000000000 [ 320.789017][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.789031][T18556] R13: 0000000000000000 R14: 00007fd0333f5fa0 R15: 00007ffef540ae38 [ 320.789053][T18556] [ 321.034181][T18562] FAULT_INJECTION: forcing a failure. [ 321.034181][T18562] name failslab, interval 1, probability 0, space 0, times 0 [ 321.046894][T18562] CPU: 1 UID: 0 PID: 18562 Comm: syz.0.5651 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 321.046929][T18562] Tainted: [W]=WARN [ 321.046935][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.046995][T18562] Call Trace: [ 321.047001][T18562] [ 321.047009][T18562] dump_stack_lvl+0xf2/0x150 [ 321.047037][T18562] dump_stack+0x15/0x1a [ 321.047126][T18562] should_fail_ex+0x24a/0x260 [ 321.047157][T18562] should_failslab+0x8f/0xb0 [ 321.047270][T18562] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 321.047296][T18562] ? sidtab_sid2str_get+0xb8/0x140 [ 321.047377][T18562] kmemdup_noprof+0x2b/0x70 [ 321.047426][T18562] sidtab_sid2str_get+0xb8/0x140 [ 321.047485][T18562] security_sid_to_context_core+0x1eb/0x2f0 [ 321.047518][T18562] security_sid_to_context+0x27/0x30 [ 321.047565][T18562] avc_audit_post_callback+0x10d/0x530 [ 321.047602][T18562] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 321.047710][T18562] common_lsm_audit+0x90e/0x10c0 [ 321.047737][T18562] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 321.047777][T18562] slow_avc_audit+0xf9/0x140 [ 321.047891][T18562] avc_has_perm+0x129/0x160 [ 321.047912][T18562] selinux_socket_sendmsg+0x185/0x1c0 [ 321.047942][T18562] security_socket_sendmsg+0x47/0x80 [ 321.048020][T18562] __sock_sendmsg+0x2d/0x180 [ 321.048054][T18562] ____sys_sendmsg+0x326/0x4b0 [ 321.048157][T18562] __sys_sendmsg+0x19d/0x230 [ 321.048217][T18562] __x64_sys_sendmsg+0x46/0x50 [ 321.048243][T18562] x64_sys_call+0x2734/0x2dc0 [ 321.048270][T18562] do_syscall_64+0xc9/0x1c0 [ 321.048340][T18562] ? clear_bhb_loop+0x55/0xb0 [ 321.048368][T18562] ? clear_bhb_loop+0x55/0xb0 [ 321.048471][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.048498][T18562] RIP: 0033:0x7f8305e4d169 [ 321.048531][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.048549][T18562] RSP: 002b:00007f83044b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.048568][T18562] RAX: ffffffffffffffda RBX: 00007f8306065fa0 RCX: 00007f8305e4d169 [ 321.048580][T18562] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000004 [ 321.048632][T18562] RBP: 00007f83044b7090 R08: 0000000000000000 R09: 0000000000000000 [ 321.048644][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.048656][T18562] R13: 0000000000000000 R14: 00007f8306065fa0 R15: 00007fff4933c068 [ 321.048674][T18562] [ 321.316393][T11206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.336338][T18566] loop2: detected capacity change from 0 to 1024 [ 321.343084][T18566] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 321.356783][T18566] loop2: detected capacity change from 0 to 128 [ 321.608870][T18566] ================================================================== [ 321.617027][T18566] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 321.624988][T18566] [ 321.627328][T18566] write to 0xffff88810679f728 of 4 bytes by task 18578 on cpu 0: [ 321.635071][T18566] __mark_inode_dirty+0x24e/0x7e0 [ 321.640148][T18566] mark_buffer_dirty+0x149/0x230 [ 321.645110][T18566] block_write_end+0x123/0x210 [ 321.649894][T18566] generic_write_end+0x5c/0x160 [ 321.654784][T18566] fat_write_end+0x4e/0x160 [ 321.659296][T18566] generic_perform_write+0x31c/0x4a0 [ 321.664616][T18566] __generic_file_write_iter+0xa1/0x120 [ 321.670177][T18566] generic_file_write_iter+0x8f/0x310 [ 321.675599][T18566] iter_file_splice_write+0x5f1/0x980 [ 321.681011][T18566] direct_splice_actor+0x160/0x2c0 [ 321.686144][T18566] splice_direct_to_actor+0x302/0x670 [ 321.691532][T18566] do_splice_direct+0xd7/0x150 [ 321.696333][T18566] do_sendfile+0x398/0x660 [ 321.700757][T18566] __x64_sys_sendfile64+0x110/0x150 [ 321.705976][T18566] x64_sys_call+0xfbd/0x2dc0 [ 321.710599][T18566] do_syscall_64+0xc9/0x1c0 [ 321.715129][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.721038][T18566] [ 321.723363][T18566] read to 0xffff88810679f728 of 4 bytes by task 18566 on cpu 1: [ 321.731001][T18566] __mark_inode_dirty+0x198/0x7e0 [ 321.736049][T18566] fat_update_time+0x1e8/0x200 [ 321.740838][T18566] touch_atime+0x14f/0x350 [ 321.745280][T18566] filemap_splice_read+0x8a5/0x910 [ 321.750410][T18566] splice_direct_to_actor+0x269/0x670 [ 321.755797][T18566] do_splice_direct+0xd7/0x150 [ 321.760573][T18566] do_sendfile+0x398/0x660 [ 321.764999][T18566] __x64_sys_sendfile64+0x110/0x150 [ 321.770225][T18566] x64_sys_call+0xfbd/0x2dc0 [ 321.774831][T18566] do_syscall_64+0xc9/0x1c0 [ 321.779354][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.785270][T18566] [ 321.787593][T18566] value changed: 0x00000008 -> 0x00000038 [ 321.793309][T18566] [ 321.795632][T18566] Reported by Kernel Concurrency Sanitizer on: [ 321.801784][T18566] CPU: 1 UID: 0 PID: 18566 Comm: syz.2.5655 Tainted: G W 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 321.814036][T18566] Tainted: [W]=WARN [ 321.817839][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.827901][T18566] ================================================================== [ 327.756871][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 327.756891][ T29] audit: type=1400 audit(1742802499.243:50179): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 327.785199][ T29] audit: type=1400 audit(1742802499.243:50180): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.806979][ T29] audit: type=1400 audit(1742802499.243:50181): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 327.829360][ T29] audit: type=1400 audit(1742802499.243:50182): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 327.851998][ T29] audit: type=1400 audit(1742802499.243:50183): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1