last executing test programs: 3.560937063s ago: executing program 4 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.498481947s ago: executing program 4 (id=498): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f0ffffff7f0000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000200000000000000000000000000070000008300ba9c3594a2ec3097000000960000206a77bdd1a0041200"/160], 0xf}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f00000003c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2a8, &(0x7f0000000d00)="$eJzs3UFr034YwPHnv+6/dh1bK4igoD7oRS9hqy9Ai2wgFpS5DvUgZC7V0tiOpEwq4noRr76O4dGboL6BXcSLd29DELzsIEZMmi3dutlt7Vq77wfG70me30N+a9PypNB0/e7rJ6WCaxTMqgwlVIZE6rIhkv4TNfzXGIf8eESi6nJ57MeXs3fu3b+ZzeWmZ1VnsnNXMqo6cf790+dvLnysjs2/nXgXl7X0g/Xvma9rp9ZOr/+ae1x0tehquVJVUxcqlaq5YFu6WHRLhupt2zJdS4tl13Ka8gW7srRUU7O8OJ5ccizXVbNc05JV02pFq05NzUdmsayGYeh4Uo634Tbm5FdnZ83srmkv1tEVoetGW+10nGy9dTK/egRrAgAAfWbv/j/o9Xfv/3Pzwdjh/l+E/r9L6k1bf+n/MRAcJ2smG6/fZvT/AAAAAAAAAAAAAAAAAAAAAAD8CzY8L+V5Xiocw7+4iCREJNzu9TrRHQd8/q/2aLnosMgX9xIi9qvl/HI+GIN8tiBFscWSSUnJT/98aAjimRu56Un1peWDvdKoX1nOxyQe1ofSrerPnZgK6rW5/n9JRo+fkZScbH38TMv6Ebl0MVJvSEo+PZSK2LLon9db9S+mVK/fym2rH/XnAQAAAAAwCAzdtOP63c/7ExKymR8N80H9Pj4f2HZ9PSxn2rlFJQAAAAAAODS39qxk2rblHCCIi8ghygc1iElfLGNbcE1E+mAZRxUkRCTYowcp/7ZZ3laV18acYRHp+cOyj6DX70wAAAAAOm2r6Y/u3flLIU0+v+zyqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOF7avR9YOH9HKkzsUR45XOzI/0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wOAAD//1s0H8I=") ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a2c0)=@newtaction={0x14, 0x52, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0xa0ed5e, &(0x7f0000000080)=ANY=[], 0x1, 0x1224, &(0x7f0000001540)="$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") r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x4100) write$cgroup_type(r6, &(0x7f0000000200), 0x175d9003) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 3.20635995s ago: executing program 4 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.110964777s ago: executing program 4 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 3.019884194s ago: executing program 4 (id=513): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timerfd_create(0x8, 0x0) (fail_nth: 3) 2.722127816s ago: executing program 4 (id=515): r0 = eventfd(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x3a) read$eventfd(r0, &(0x7f00000001c0), 0x8) futex(0x0, 0x6, 0xfffffff2, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.544653849s ago: executing program 2 (id=522): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000580)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03a", 0x35}], 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 2.515921791s ago: executing program 2 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 2.456908986s ago: executing program 2 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x8, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x80000) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x4}, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=ANY=[@ANYBLOB="0207000802"], 0x10}}, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x11, &(0x7f0000000080)=0x7, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fd00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xff2f) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r11, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0xc00, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003"], 0x7c}}, 0x0) 1.528277685s ago: executing program 2 (id=539): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) 1.394087535s ago: executing program 1 (id=543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000a4f209ceafc0071d0b581eebb7f8000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='btrfs_clear_extent_bit\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x22c0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40886) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x0, [0x5, 0xffff, 0x5]}, &(0x7f0000000540)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00'}, 0x24) syz_emit_ethernet(0x53, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffedffffffffffffff86dd60122d92001d3a00fe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000feffffff020194dcd397febaeebaaec6db"], 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="184600000600"/16], &(0x7f0000000480)='GPL\x00', 0x1cd, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x5, 0x10, 0xc}, {0x0, 0x2, 0xd, 0x9}, {0x0, 0x5}, {0x5, 0x3, 0x5, 0x1}, {0x5, 0x2, 0x1, 0x4}, {0x0, 0x2, 0x0, 0x5}, {0x4, 0x0, 0x1}], 0x10, 0x3}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r7, @ANYRESDEC=r6, @ANYRESDEC=r8], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32], 0x3, 0x352, &(0x7f0000000480)="$eJzs3U9oXFUXAPAzfclMWvi+ZCEUBeHhTtDQVlzoKqGkUJyNyuCfhTjYVCWJhQwOpotM40ZcCi515c6FLlx0LYIi7ly4tYJUiwvtrmDxysy8ybzJTNJUmNbg77cYTu655917M4/My0vmzqtLsXZhNi7evHk95uZupJTOLsWtSixEFgNXYlx1QhsAcDTcSin+SH2HLKlMeUoAwJT1Xv9f/1+p5d2vD+qfvPoDwJFX/P5//KA+c/slLk1lSgDAlI3d/39kJF0d/VP/TOm/AgCAo+r5l15+Zrke8Vyez0VsvNdutBvx9DC/fDHejPVYjVMxH7cj+hcK3YdK7/Hc+frKqTzPO/HLQjS6Fe1GxEan3ehfKSxnvfpanI75WCjqi6uNlFJ27ov6yum8JyKudHrjx0al3ZiNE8X4P56I1TgTeTwwVh9xvr5yJi8O0NgY1Hcidob3LbrzX4z5+P61uBTrcSG6tYPLmvrK9uk8P5vqI/XtRq3Xr2/fOyAAAAAAAAAAAAAAAAAAAAAAAPCPLOa7Fnb3v0nD/XsWFyfke/vj9OuL/YF2+vsDpVqKlH5/5/HG+1mM7A+0d3+edmMmjt3fpQMAAAAAAAAAAAAAAAAAAMC/RmurGs319dXN1tbltXLQ2WxtHYuIbstb33721fEY73OHYKYYo5TKi6bLa82UDTqnbKRPEWTdwQctn17dnXG5T213FROnUZucGszr54+GqYezwZH/GnbOYvICsz3TKAcb/+8f/G6+UbvBmTv0uZZS2q98+5XxqqhEzNz9E3dwkLrBN9ffePCJ1skney1fpr5HH5t/4dqHn9xYa653R47eM1jdbN1Oa83i68kn2/5BVjp/KtEPKuUzYeag8p3Rlmb2w28vPvTBd/sPWiu1pHLq7Qmds/5yPt+bqvaD7jT3pI5PGnR2wsk/heDkx0vNq9s//XrYqtIPCRt1AAAAAAAAAAAAAAAAAADAPVF6r3iheLPv7EFVTz07/ZkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL0z/Pz/UrAz1nKY4M9OjKdqq5utiOr9XiYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9xfwcAAP//qiFu7Q==") io_setup(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 1.302292312s ago: executing program 0 (id=544): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.302023822s ago: executing program 0 (id=545): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000001c0)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) unshare(0x20000400) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, 0x0, 0x4000000000000}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000f40)=@tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x4}}, 0x80, 0x0}}], 0x2, 0x4000) poll(0x0, 0x0, 0x2) close(r2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1d, 0x0, @local, @remote}}}}, 0x0) 1.189124901s ago: executing program 1 (id=547): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a320000000005000400000000000c00078008000800050000000d00030068030000006e65"], 0x54}}, 0x0) 1.165800332s ago: executing program 0 (id=549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x6}}, 0x120) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x6c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r5 = socket(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) inotify_init1(0x0) 1.145443814s ago: executing program 1 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc", 0x1) r5 = socket(0x400000000000010, 0x802, 0x0) splice(r3, 0x0, r5, 0x0, 0x5, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r2], 0x48}}, 0x0) 857.820825ms ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000035000100000000000000000002000000040000800c000180080016"], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'macvtap0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xe, 0x100, 0xffffffff, 0xfffffffa, 0x3, 0x7f, 0x89, 0x7, 0x92, 0xfffffffd, 0xffffffc8, 0x3ff, 0x8, 0x6, 0x4, 0x9539, 0x9, 0x5, 0x3, 0x101, 0x21d, 0x4b, 0x4d}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8000, 0x708, 0x5, 0x1, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x64, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0xd, "ff9ae79598eab2c2693f82"}, {0x0, 0x5, "a9ad6f"}]}, @rr={0x7, 0xb, 0xc5, [@local, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x53d, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x28}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0xf4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'vlan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000007c0)={@mcast1, 0x0}, &(0x7f0000000800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x10, 0x8, 0x3ff, 0x293e00, {{0x30, 0x4, 0x2, 0x9, 0xc0, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}]}, @end, @ssrr={0x89, 0xb, 0x66, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x0, [{@multicast2, 0xfffffffc}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}, @cipso={0x86, 0x2d, 0x277c50a6c0dbae27, [{0x0, 0xc, "8768c3675fb385602803"}, {0x2, 0xf, "0bc1b986df8656887fcaaea4ba"}, {0x5, 0x4, 'IZ'}, {0x5, 0x8, "1af28c043821"}]}, @end, @generic={0x7, 0xc, "0effaebc28c6a0b05cd8"}, @lsrr={0x83, 0x23, 0x2f, [@rand_addr=0x64010102, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010101, @private=0xa010102, @multicast1, @private=0xa010101, @local]}, @rr={0x7, 0x13, 0xdf, [@empty, @broadcast, @rand_addr=0x64010102, @multicast1]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4100, 0x840}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xd, 0x193, 0xd, 0x88a8}}, {0x14, 0x1, {0x200, 0x864, 0x5, 0x88a8}}]}]}]}]}, 0x54}}, 0x200488c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e8080000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745e6d617070690267000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002f40ffff08000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="3c01028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bb0c000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004003a0f000008000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="bc0002806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400f8cd04090000000008000200f8ffffff020006007f0000000f00fd0400040000ea0c09030900000001000904070000000300eb00810000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x8e8}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 815.814399ms ago: executing program 1 (id=555): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 815.541029ms ago: executing program 3 (id=556): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) 803.28465ms ago: executing program 0 (id=557): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@bloom_filter={0x1e, 0x0, 0x100, 0x1ff, 0x551, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x0, 0x7}, 0xffffffffffffffc4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a30000000000fcffff0c000000080003005a"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000848}, 0x0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0xb1cb, 0x5}, {0xfd}, {}, @raw32={[0x0, 0x0, 0x3]}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa, {0x39}, {}, @quote={{0xfc}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000d00)=[{0x26, 0x0, 0x0, 0xfd, @tick=0xc44, {}, {}, @result}, {0x6e, 0xa, 0x7f, 0xc4, @time={0x5, 0x6}, {0xd, 0x7f}, {0x1, 0x1a}, @quote={{0x7, 0x8}, 0xff}}, {0x7, 0xf9, 0x6, 0x6, @tick=0x2, {0x9, 0xd}, {0x9, 0x60}, @time=@tick=0x1}, {0x3, 0x3, 0x9, 0x6, @time={0x2}, {0xd, 0x6}, {0x43, 0x6}, @raw32={[0x10001, 0x3, 0x2b]}}, {0xb5, 0xf, 0x20, 0x1, @tick=0x7, {0x5, 0x6}, {0x8, 0xf9}, @result={0xc5, 0xb9}}], 0x8c) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004e80)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xc808e8d6fcb00ba1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xfffffff5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r10, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r10, 0x1, &(0x7f00000000c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) 803.03972ms ago: executing program 1 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r4}, 0x37) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0xd8, 0x32, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x200}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x101000, 0x0, 0x9}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)={0x4a0, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x15}, [@nested={0x19f, 0x126, 0x0, 0x1, [@generic="960a110fb0e99af47e5f3c6fde753f2d014e86db8b7da0437b5bc39aebe94d232972c791e769e7d0de777aa7b8fa0381d7154703f6f25ec5ab7c78d6eacf3dd2e83b6aaad1e57226d3a8f4202fa148105109cdfdebb38a1d8c83b49200c6a4c8ec1b4a19bb7a", @typed={0xf, 0xb4, 0x0, 0x0, @str=',\\\\.}{&(\xae.\x00'}, @typed={0x8, 0x141, 0x0, 0x0, @u32=0x658f}, @generic="ff469b7b65be773af02432f0405c4f2c136014707dd3a340c4c7c7d1bb06c30bbe6be9f44db2691a3e2e49c632252ee4f77dfc33182f364a86e597f1704ac729617553e6a893e5931cca596d3f23b594ceb9689df31985de988bb4d447e866b841c330eecf7b6219f385bc0b0de3306cad1211221ba41ee02adf4d261cece7f1c570b19b88a01fc9753976142e40167121e596e6cf05047cd531bafe3a20f984275b0ba7df5674ee15d1dc8972aacb623ba8c310db8c2093b99f8fe97be50b0877cbf4b5986d8b7e9231e68faff4860a757ecca9824e", @generic="fa74a209ca0e118913f88470f9bbb24c1c84caa46492433e44a0a7dc343a6d0fc8f5fbd5e2c85eca9ad8f3c19b44265dc22a41eac336fac44efa18bb20efc3c1aec21f453e59f3"]}, @generic="b393a3388f093b29f5b4bc4122a04010ac01c3a0d038d5dbcacb309d1d48adc6ea7a64fd3e6030d81de1be12fa3573d787ba810614147a13d895569784d56344c86e78b2fe216162177a6796043789cc1b6b0ae3230f4782bf083a1e1df5e685683d04038733f1b4ef200eae75bc5d0cfc51c6f66b928fcf15e8f8c0fd6bfe3185eddebd3cc66944b0524b645a575b42bd0af827e18c720c9e4ac17817a2861aba21e1407a1b661c2986643a66df9fe690b5f15ac2cef896c56481ef2685a386cfddfa8efd6a956890ba8d02eae253aecca3edb6c655", @generic="65ec3364cf4824448b76ddc6e1ae5f0054e27f2dd8b966633042a8dce6bc242c7168c12983a51d38c1bba9245ad2cfde13ec259f4b3f5017ca67d7d97ace77442f62e530710bc9e3556d900214684919b7b73ec3e91d636982d218fa8eab1bae1c275a8d5ff4eb1277deb4f65570ca3febf56a0802a807858d354083b928256dd6e6508a51eaf2e6599a54", @generic="7666b685365135251ccfee229cf4f77eb8de509661941e4f42a0181b2064aab54463e4a2605ef08483101d79929184afcffcf1157c", @nested={0x153, 0xb5, 0x0, 0x1, [@generic="a2794c5cd39a3246a4fbe5012f6697084e0eeff715d6ee80bfb006ee676ef00e0e08e74918d5f58aa802a50eb58d378b8eedb71599a9c939c79ce175c94038ff7c79c70db044405c68b8fe2a06c642c7ba687720d635c54645e4f66129388bdb422ea1ef356bacd2ab0380bb2f4c2e25", @generic="26e4aa1045fb0263e6eca27ddf60bb8373038c0ca54536f21e628cd7f730a8e3528f318584618ac645fd59e452e116736b2273497fe3aed326a1d43b93cabd5badc40850d85c9a29c5c549bfe31ed92a1809f0ca6196f4a9fa6a8c7f3100419754a37ffffb0f97", @typed={0x66, 0x10c, 0x0, 0x0, @binary="919607f5d7fd211e3034debd8ed9ba7b2736c1354df189d077b4f3e6c64a64881ab4dcf6ef296794b3c479702fabb36a7ac981b8aee1ffe98962574bf76f1c9d6dd233fb7c1076fc5af9fdc024f700a84683d3261095e0624b7bf67b3be1391c6ff1"}, @generic="5755b2459ec73b3f", @typed={0x8, 0x115, 0x0, 0x0, @pid=r7}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x41015}, 0x80) name_to_handle_at(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@reiserfs_4={0x10, 0x4, {0x1, 0x7, 0x3, 0x5}}, &(0x7f0000000480), 0x600) 774.289492ms ago: executing program 3 (id=559): syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 737.853475ms ago: executing program 1 (id=560): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'ip_vti0\x00'}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x1, &(0x7f0000000240)={0x10000, 0x4}) ioprio_get$uid(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)={0x0, 0x144}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) iopl(0x3) rt_sigreturn() sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x810) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4004) r3 = open(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendfile(r3, r0, 0x0, 0x11f04) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0xa0c4cc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="5791125b581ec623b551f43ec955d0dbef069139f5ec97ee6ef69c24b1e932ba2a7a833132939328b6c04151be37d42900946a6027a2d7f4445ff4ccf3345b966c1ee45ad37a4254c8470ffa11dbcfabb1310f4829b94279e0feef13ca6e0f6f8380e89415e8d646e684d3f6d82cc3db11b4a01c00b25211cb21bcbac38f794e1b6b46d537f4b44a9fd3357d1448738905d0f78b73e1183a4094d8f7f4f1914e675772eb01788aba5af05f97600080c83fe100870fc15e9af34b5f71280c52843e3bad4f90f50b41842502e39393cde38b38f2baa70bc7acf5513478b10c1ec082f2581ea287451e1949408cabf3ed8ec30c8d76f2ddd7189a2ebff8e5df88d8d78991e3f028b4739fa7ace66e04772a8d1fd07b460220db897e86558949c3c6b2fedef1168fe1a7778bc1275eeb570d64143fd1786bd3a57b4b0acedd26e64db91483d11936f4d537fda02f145ee5268266ab4e7e1eebca0e41050000005856fdc4c0aee8fe373c84c3c506b1625da40080204d5e13b8528a2be4d9b9be7fb18c6d76df5fd33b1342ed0658b0c8acaef44aea0f0c6484dea22ceda68f0a587ede87d1", @ANYRESHEX, @ANYRES16], 0x1, 0x5a9, &(0x7f0000000540)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlink(0x0, 0x0) 737.526534ms ago: executing program 3 (id=561): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a320000000005000400000000000c00078008000800050000000d0003006803000000"], 0x54}}, 0x0) 661.92541ms ago: executing program 2 (id=562): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x6e20, 0x0, @empty}, 0x1c) 642.008362ms ago: executing program 3 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x6}}, 0x120) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x6c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r5 = socket(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) inotify_init1(0x0) 594.035945ms ago: executing program 2 (id=564): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x1200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0xfffffff8, @private2, 0x2}]}, &(0x7f0000000280)=0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000009006001b00000000000000000a3c000000090a050600000000000000000100000008000a05000000000000000073797a31000000000900010073a37a30bea3000007000000000000141400000011000198fb7ab0100ef46efd72f158f89e36da3b85cb2820efbad19d43bf544d77d5f229a0a2de"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000094a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000440000000040800044000000089140000001100640000000000000000000084000a7366929b7bc32395597356470d1c0dff7c5cd0a479a65294548f21218bf69749b67ce51ee1851e8655c408da"], 0x6c}}, 0x24008001) iopl(0x3) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000df0c000000000400000000000000d56dd91a38bf2be75ad820f75fba443c4c89998819bf1bfe4edb7d1c88777841eb40344938e882ac88acca86df80f5371d5ae8187ca807b4f69c4e3ccdaa3f62e8463ad11f7f0089d29b891a73a795efb859a46ef81d506f2375a00a7efd4b705ddfd9f4865aced0b9ba644dd1afd189efef9d5f01bf405e", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001000180c20000030000"], 0x40}}, 0x0) recvmsg(r7, &(0x7f0000000480)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/224, 0xe0}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/218, 0xda}], 0x3, &(0x7f0000000380)=""/227, 0xe3}, 0x2001) close(r0) 300.763807ms ago: executing program 3 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r4}, 0x37) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 5) 272.744269ms ago: executing program 0 (id=566): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000400)='./file0/file0\x00', 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="71756965742c6e66732c6e6f646f74732c6e6f646f74732c646f74732c636865636b3d72656c617865642c6e6f646f74732c71756965742c6e6f646f74732c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c6e6f646f74732c636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c640d4468fe747a3d5554432c646f74732c646973636172642c757365667265652c7379735f696d6d757461626c652c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") (async) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = socket(0x1a, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) mount$bind(&(0x7f0000000900)='./file0\x00', &(0x7f0000000b00)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x80000) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) sendfile(r1, r0, 0x0, 0x80006800) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=r3], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x0, 0x6, 0x0, 0x0, r0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800feca2f5bbd1a319264000000000000000000bbfffa2d0000000000000000000000000132"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042abd7000fdea13a0c2345080f8dbdf251300000008000300163b3f4151d36c324f2a54c0d3356865e7be0941e66d21b7c76531367ac71a606117310eff56577c4ec9051478ab56b45e18bf159a0f694bb72622f0aa955ba061372d5e2ca2391a9cceefe94cd7ae90ef04afeaf3e82bdfd34f67c82751f5f13c4ec1000000", @ANYRES32=r11, @ANYBLOB="0c009900028000005b000000050013010000000006a6db000080000005001900020000000600b5004800e1004903fe6dc946"], 0x50}, 0x1, 0x0, 0x0, 0x4040481}, 0x0) 0s ago: executing program 3 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r4}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, r3, 0x2f, 0x10, 0xffffffffffffffff, @link_fd=r2}, 0x20) kernel console output (not intermixed with test programs): 0 [ 54.104030][ T5526] _copy_from_user+0x1e/0xd0 [ 54.108630][ T5526] copy_msghdr_from_user+0x54/0x2a0 [ 54.113967][ T5526] __sys_sendmsg+0x17d/0x280 [ 54.118594][ T5526] __x64_sys_sendmsg+0x46/0x50 [ 54.123369][ T5526] x64_sys_call+0x2689/0x2d60 [ 54.128052][ T5526] do_syscall_64+0xc9/0x1c0 [ 54.132563][ T5526] ? clear_bhb_loop+0x55/0xb0 [ 54.137246][ T5526] ? clear_bhb_loop+0x55/0xb0 [ 54.141925][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.147849][ T5526] RIP: 0033:0x7f1e82459eb9 [ 54.152280][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.172017][ T5526] RSP: 002b:00007f1e810d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.180465][ T5526] RAX: ffffffffffffffda RBX: 00007f1e825f5f80 RCX: 00007f1e82459eb9 [ 54.188436][ T5526] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 54.196413][ T5526] RBP: 00007f1e810d7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.204382][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.212359][ T5526] R13: 0000000000000000 R14: 00007f1e825f5f80 R15: 00007fff76c63118 [ 54.220371][ T5526] [ 54.262535][ T5534] FAULT_INJECTION: forcing a failure. [ 54.262535][ T5534] name failslab, interval 1, probability 0, space 0, times 0 [ 54.275478][ T5534] CPU: 0 UID: 0 PID: 5534 Comm: syz.2.291 Not tainted 6.11.0-rc6-syzkaller #0 [ 54.284410][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.294475][ T5534] Call Trace: [ 54.297755][ T5534] [ 54.300718][ T5534] dump_stack_lvl+0xf2/0x150 [ 54.305407][ T5534] dump_stack+0x15/0x20 [ 54.309595][ T5534] should_fail_ex+0x229/0x230 [ 54.314286][ T5534] ? v9fs_session_init+0x79/0xda0 [ 54.319388][ T5534] should_failslab+0x8f/0xb0 [ 54.324017][ T5534] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 54.330492][ T5534] kstrdup+0x3a/0x80 [ 54.334612][ T5534] v9fs_session_init+0x79/0xda0 [ 54.339535][ T5534] ? __rcu_read_unlock+0x4e/0x70 [ 54.344500][ T5534] ? __rcu_read_unlock+0x4e/0x70 [ 54.349480][ T5534] ? v9fs_mount+0x53/0x560 [ 54.353982][ T5534] ? __kmalloc_cache_noprof+0x20c/0x2a0 [ 54.359624][ T5534] v9fs_mount+0x69/0x560 [ 54.363983][ T5534] ? __pfx_v9fs_mount+0x10/0x10 [ 54.368900][ T5534] legacy_get_tree+0x77/0xd0 [ 54.373538][ T5534] vfs_get_tree+0x56/0x1e0 [ 54.377967][ T5534] do_new_mount+0x227/0x690 [ 54.382479][ T5534] path_mount+0x49b/0xb30 [ 54.386835][ T5534] __se_sys_mount+0x27c/0x2d0 [ 54.391514][ T5534] __x64_sys_mount+0x67/0x80 [ 54.396110][ T5534] x64_sys_call+0x203e/0x2d60 [ 54.400898][ T5534] do_syscall_64+0xc9/0x1c0 [ 54.405392][ T5534] ? clear_bhb_loop+0x55/0xb0 [ 54.410055][ T5534] ? clear_bhb_loop+0x55/0xb0 [ 54.414716][ T5534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.420706][ T5534] RIP: 0033:0x7f8d2fca9eb9 [ 54.425122][ T5534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.444850][ T5534] RSP: 002b:00007f8d2e921038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.453250][ T5534] RAX: ffffffffffffffda RBX: 00007f8d2fe45f80 RCX: 00007f8d2fca9eb9 [ 54.461224][ T5534] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 54.469233][ T5534] RBP: 00007f8d2e921090 R08: 0000000020000200 R09: 0000000000000000 [ 54.477198][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.485215][ T5534] R13: 0000000000000000 R14: 00007f8d2fe45f80 R15: 00007ffecf7a7868 [ 54.493182][ T5534] [ 54.508551][ T5531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 54.517454][ T5531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 54.526291][ T5531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 54.535163][ T5531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 54.544172][ T5531] geneve2: entered promiscuous mode [ 54.545198][ T5462] loop1: detected capacity change from 512 to 64 [ 54.549374][ T5531] geneve2: entered allmulticast mode [ 54.564754][ T5539] bridge_slave_0: left allmulticast mode [ 54.570494][ T5539] bridge_slave_0: left promiscuous mode [ 54.576206][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.588896][ T5539] bridge_slave_1: left allmulticast mode [ 54.594773][ T5539] bridge_slave_1: left promiscuous mode [ 54.600601][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.607498][ T5462] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 54.623147][ T5539] bond0: (slave bond_slave_0): Releasing backup interface [ 54.644681][ T5539] bond0: (slave bond_slave_1): Releasing backup interface [ 54.678220][ T5539] team0: Port device team_slave_0 removed [ 54.688463][ T5539] team0: Port device team_slave_1 removed [ 54.696104][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.703651][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.712272][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.719685][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.767844][ T3258] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 54.770883][ T5550] loop2: detected capacity change from 0 to 2048 [ 54.786429][ T3258] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 54.840447][ T5555] netlink: 'syz.4.302': attribute type 27 has an invalid length. [ 54.980917][ T5569] loop2: detected capacity change from 0 to 512 [ 54.991834][ T5569] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.004491][ T5569] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.306: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 55.025137][ T5569] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.306: couldn't read orphan inode 15 (err -117) [ 55.049797][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.062886][ T5569] ext2 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.074700][ T5555] 0ªX¹¦À: left allmulticast mode [ 55.078619][ T5569] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.306: Directory hole found for htree leaf block 0 [ 55.141633][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.182439][ T5555] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.191379][ T5555] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.200453][ T5555] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.209319][ T5555] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.258093][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.300622][ T5583] loop4: detected capacity change from 0 to 128 [ 55.320988][ T5584] loop2: detected capacity change from 0 to 128 [ 55.349014][ T5584] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.366596][ T5584] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.381534][ T4205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.456310][ T5589] bond0: entered promiscuous mode [ 55.461641][ T5589] bond_slave_0: entered promiscuous mode [ 55.467610][ T5589] bond_slave_1: entered promiscuous mode [ 55.478674][ T3265] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 55.486601][ T3265] FAT-fs (loop4): Filesystem has been set read-only [ 55.512448][ T4205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.544379][ T5593] loop4: detected capacity change from 0 to 1024 [ 55.599316][ T4205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634482][ T5573] chnl_net:caif_netlink_parms(): no params data found [ 55.668486][ T5600] loop2: detected capacity change from 0 to 2048 [ 55.684955][ T4205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.699642][ T5593] loop4: detected capacity change from 0 to 1024 [ 55.724736][ T5593] journal_path: Non-blockdev passed as '' [ 55.730546][ T5593] EXT4-fs: error: could not find journal device path [ 55.734708][ T5603] loop0: detected capacity change from 0 to 256 [ 55.754774][ T5603] FAT-fs (loop0): codepage cp866 not found [ 55.882847][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.889983][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.900566][ T5573] bridge_slave_0: entered allmulticast mode [ 55.907474][ T5573] bridge_slave_0: entered promiscuous mode [ 55.972797][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.979925][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.991234][ T5573] bridge_slave_1: entered allmulticast mode [ 56.010521][ T5573] bridge_slave_1: entered promiscuous mode [ 56.162955][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 56.162968][ T29] audit: type=1400 audit(1725216563.589:969): avc: denied { create } for pid=5615 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.309065][ T5616] loop4: detected capacity change from 0 to 1024 [ 56.321109][ T5616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.343415][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.362078][ T5616] ext4: Unknown parameter 'uid>00000000000000000000' [ 56.424161][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.443092][ T4205] bond0 (unregistering): Released all slaves [ 56.504787][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.520989][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.531171][ T29] audit: type=1400 audit(1725216563.959:970): avc: denied { read } for pid=5623 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.586665][ T5573] team0: Port device team_slave_0 added [ 56.609875][ T29] audit: type=1400 audit(1725216563.959:971): avc: denied { open } for pid=5623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.613590][ T5573] team0: Port device team_slave_1 added [ 56.634800][ T29] audit: type=1400 audit(1725216563.959:972): avc: denied { getattr } for pid=5623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.697179][ T4205] hsr_slave_0: left promiscuous mode [ 56.714291][ T4205] hsr_slave_1: left promiscuous mode [ 56.727442][ T4205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.734909][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.745390][ T29] audit: type=1326 audit(1725216564.069:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.768739][ T29] audit: type=1326 audit(1725216564.069:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.791991][ T29] audit: type=1326 audit(1725216564.099:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.815349][ T29] audit: type=1326 audit(1725216564.099:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.838582][ T29] audit: type=1326 audit(1725216564.109:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.861785][ T29] audit: type=1326 audit(1725216564.109:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82459eb9 code=0x7ffc0000 [ 56.885689][ T4205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.893122][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.902182][ T4205] veth1_macvtap: left promiscuous mode [ 56.907693][ T4205] veth0_macvtap: left promiscuous mode [ 56.913361][ T4205] veth1_vlan: left promiscuous mode [ 56.918738][ T4205] veth0_vlan: left promiscuous mode [ 56.951424][ T5648] FAULT_INJECTION: forcing a failure. [ 56.951424][ T5648] name failslab, interval 1, probability 0, space 0, times 0 [ 56.964111][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: syz.3.324 Not tainted 6.11.0-rc6-syzkaller #0 [ 56.973015][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.983072][ T5648] Call Trace: [ 56.986332][ T5648] [ 56.989246][ T5648] dump_stack_lvl+0xf2/0x150 [ 56.993889][ T5648] dump_stack+0x15/0x20 [ 56.998059][ T5648] should_fail_ex+0x229/0x230 [ 57.002723][ T5648] ? iovec_from_user+0x84/0x210 [ 57.007563][ T5648] should_failslab+0x8f/0xb0 [ 57.012140][ T5648] __kmalloc_noprof+0xa5/0x370 [ 57.016885][ T5648] iovec_from_user+0x84/0x210 [ 57.021608][ T5648] __import_iovec+0xd8/0x520 [ 57.026220][ T5648] ? __rcu_read_unlock+0x34/0x70 [ 57.031140][ T5648] import_iovec+0xbc/0xd0 [ 57.035451][ T5648] copy_msghdr_from_user+0x24e/0x2a0 [ 57.040837][ T5648] do_recvmmsg+0x290/0x720 [ 57.045318][ T5648] __x64_sys_recvmmsg+0xe2/0x170 [ 57.050260][ T5648] x64_sys_call+0x26e3/0x2d60 [ 57.054928][ T5648] do_syscall_64+0xc9/0x1c0 [ 57.059428][ T5648] ? clear_bhb_loop+0x55/0xb0 [ 57.064086][ T5648] ? clear_bhb_loop+0x55/0xb0 [ 57.068833][ T5648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.074773][ T5648] RIP: 0033:0x7f1b7ff09eb9 [ 57.079303][ T5648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.098889][ T5648] RSP: 002b:00007f1b7eb66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 57.107358][ T5648] RAX: ffffffffffffffda RBX: 00007f1b800a6058 RCX: 00007f1b7ff09eb9 [ 57.115400][ T5648] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 57.123460][ T5648] RBP: 00007f1b7eb66090 R08: 0000000000000000 R09: 0000000000000000 [ 57.131472][ T5648] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 57.139434][ T5648] R13: 0000000000000001 R14: 00007f1b800a6058 R15: 00007ffd6fd12918 [ 57.147390][ T5648] [ 57.177551][ T4205] team0 (unregistering): Port device team_slave_1 removed [ 57.187146][ T4205] team0 (unregistering): Port device team_slave_0 removed [ 57.224389][ T5640] __nla_validate_parse: 1 callbacks suppressed [ 57.224466][ T5640] netlink: 60 bytes leftover after parsing attributes in process `syz.2.323'. [ 57.247763][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.254753][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.272167][ T5650] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 57.281073][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.301414][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.308362][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.334473][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.345440][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 57.425385][ T5650] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 57.426447][ T5573] hsr_slave_0: entered promiscuous mode [ 57.469603][ T5573] hsr_slave_1: entered promiscuous mode [ 57.478124][ T5573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.485972][ T5573] Cannot create hsr debugfs directory [ 57.555612][ T5659] loop0: detected capacity change from 0 to 2048 [ 57.616533][ T5679] loop2: detected capacity change from 0 to 164 [ 57.650194][ T5679] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.658467][ T5681] loop0: detected capacity change from 0 to 256 [ 57.667728][ T5679] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.684931][ T5681] FAT-fs (loop0): codepage cp866 not found [ 57.820223][ T5702] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.885507][ T5706] program syz.3.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.001091][ T5573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.030596][ T5573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.073726][ T5573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.126331][ T5573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.233620][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.247847][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.259108][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.266289][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.289289][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.296403][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.366912][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.440746][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'. [ 58.520136][ T5573] veth0_vlan: entered promiscuous mode [ 58.558878][ T5765] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 58.559446][ T5573] veth1_vlan: entered promiscuous mode [ 58.566622][ T5765] netlink: 232 bytes leftover after parsing attributes in process `syz.2.338'. [ 58.581113][ T5765] NCSI netlink: No device for ifindex 131092 [ 58.601885][ T5763] loop2: detected capacity change from 0 to 128 [ 58.616538][ T5573] veth0_macvtap: entered promiscuous mode [ 58.626492][ T5769] 9pnet: Could not find request transport: fd [ 58.638779][ T5573] veth1_macvtap: entered promiscuous mode [ 58.644713][ T5763] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.651036][ T5769] netlink: 3 bytes leftover after parsing attributes in process `syz.0.339'. [ 58.665873][ T5763] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.671435][ T5769] 0ªX¹¦À: renamed from caif0 [ 58.687196][ T5769] 0ªX¹¦À: entered allmulticast mode [ 58.692537][ T5769] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 58.706768][ T5777] loop4: detected capacity change from 0 to 1024 [ 58.715621][ T5777] EXT4-fs: Ignoring removed orlov option [ 58.721323][ T5777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.733551][ T5777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 58.741737][ T5777] System zones: 0-1, 3-36 [ 58.748312][ T5777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.749411][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.771457][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.782236][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.783166][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.790670][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.808871][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.820042][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.833417][ T5573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.842210][ T5573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.850959][ T5573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.859740][ T5573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.875601][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.897359][ T5782] loop3: detected capacity change from 0 to 1024 [ 58.908414][ T5782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.916348][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 58.920648][ T5782] ext4: Unknown parameter 'uid>00000000000000000000' [ 58.934664][ T5784] netlink: 'syz.2.343': attribute type 27 has an invalid length. [ 58.993126][ T5791] loop4: detected capacity change from 0 to 512 [ 59.024484][ T5791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.030653][ T5793] FAULT_INJECTION: forcing a failure. [ 59.030653][ T5793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.037591][ T5791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.050649][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz.1.308 Not tainted 6.11.0-rc6-syzkaller #0 [ 59.069333][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.079399][ T5793] Call Trace: [ 59.082724][ T5793] [ 59.085742][ T5793] dump_stack_lvl+0xf2/0x150 [ 59.090447][ T5793] dump_stack+0x15/0x20 [ 59.094612][ T5793] should_fail_ex+0x229/0x230 [ 59.099340][ T5793] should_fail+0xb/0x10 [ 59.103503][ T5793] should_fail_usercopy+0x1a/0x20 [ 59.108538][ T5793] copy_fpstate_to_sigframe+0x575/0x720 [ 59.114181][ T5793] ? copy_fpstate_to_sigframe+0xde/0x720 [ 59.119826][ T5793] ? dequeue_signal+0x29f/0x430 [ 59.124746][ T5793] ? fpu__alloc_mathframe+0x95/0xd0 [ 59.130000][ T5793] get_sigframe+0x295/0x350 [ 59.133473][ T5791] EXT4-fs (loop4): 1 truncate cleaned up [ 59.134507][ T5793] x64_setup_rt_frame+0xa7/0x570 [ 59.141414][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.145035][ T5793] arch_do_signal_or_restart+0x287/0x4b0 [ 59.162766][ T5793] syscall_exit_to_user_mode+0x59/0x130 [ 59.168382][ T5793] do_syscall_64+0xd6/0x1c0 [ 59.172918][ T5793] ? clear_bhb_loop+0x55/0xb0 [ 59.177603][ T5793] ? clear_bhb_loop+0x55/0xb0 [ 59.182395][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.188329][ T5793] RIP: 0033:0x7fdf2a919eb7 [ 59.192751][ T5793] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 59.212420][ T5793] RSP: 002b:00007fdf29591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 59.220823][ T5793] RAX: 0000000000000013 RBX: 00007fdf2aab5f80 RCX: 00007fdf2a919eb9 [ 59.228816][ T5793] RDX: 0000000000000001 RSI: 0000000020000b00 RDI: 0000000000000006 [ 59.236821][ T5793] RBP: 00007fdf29591090 R08: 0000000000000000 R09: 0000000000000000 [ 59.244778][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.252823][ T5793] R13: 0000000000000000 R14: 00007fdf2aab5f80 R15: 00007fff1d2ad7c8 [ 59.260789][ T5793] [ 59.305722][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.311044][ T5796] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 59.312985][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.320526][ T5796] netlink: 232 bytes leftover after parsing attributes in process `syz.3.347'. [ 59.328190][ T5801] loop4: detected capacity change from 512 to 511 [ 59.336539][ T5796] NCSI netlink: No device for ifindex 131092 [ 59.364927][ T5784] bond0: left promiscuous mode [ 59.365952][ T5808] loop1: detected capacity change from 0 to 256 [ 59.369728][ T5784] bond_slave_0: left promiscuous mode [ 59.381431][ T5784] bond_slave_1: left promiscuous mode [ 59.393899][ T5808] FAT-fs (loop1): codepage cp866 not found [ 59.416860][ T5796] loop3: detected capacity change from 0 to 128 [ 59.448054][ T5784] 0ªX¹¦À: left allmulticast mode [ 59.463982][ T5796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.480348][ T5796] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.542621][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.603152][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.641968][ T5784] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.650920][ T5784] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.660085][ T5784] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.668939][ T5784] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.703068][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 59.722517][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 59.816016][ T3265] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /85/file2: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 59.849348][ T5823] loop2: detected capacity change from 0 to 128 [ 59.859041][ T3260] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.871196][ T5823] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.908062][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.929695][ T5826] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 59.946075][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 59.982504][ T5828] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 59.982504][ T5828] program syz.3.355 not setting count and/or reply_len properly [ 60.002018][ T5828] FAULT_INJECTION: forcing a failure. [ 60.002018][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 60.014760][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.3.355 Not tainted 6.11.0-rc6-syzkaller #0 [ 60.023606][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.033654][ T5828] Call Trace: [ 60.036938][ T5828] [ 60.039854][ T5828] dump_stack_lvl+0xf2/0x150 [ 60.044500][ T5828] dump_stack+0x15/0x20 [ 60.048645][ T5828] should_fail_ex+0x229/0x230 [ 60.053360][ T5828] ? alloc_mnt_ns+0x71/0x240 [ 60.057946][ T5828] should_failslab+0x8f/0xb0 [ 60.062602][ T5828] __kmalloc_cache_noprof+0x4b/0x2a0 [ 60.067880][ T5828] alloc_mnt_ns+0x71/0x240 [ 60.072299][ T5828] copy_mnt_ns+0xa5/0x5c0 [ 60.076618][ T5828] ? create_new_namespaces+0x3c/0x430 [ 60.081983][ T5828] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 60.087635][ T5828] create_new_namespaces+0x89/0x430 [ 60.092837][ T5828] unshare_nsproxy_namespaces+0xe6/0x120 [ 60.098506][ T5828] ksys_unshare+0x3da/0x720 [ 60.103082][ T5828] ? ksys_write+0x169/0x1b0 [ 60.107577][ T5828] __x64_sys_unshare+0x1f/0x30 [ 60.112330][ T5828] x64_sys_call+0x2c8d/0x2d60 [ 60.116998][ T5828] do_syscall_64+0xc9/0x1c0 [ 60.121605][ T5828] ? clear_bhb_loop+0x55/0xb0 [ 60.126330][ T5828] ? clear_bhb_loop+0x55/0xb0 [ 60.130993][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.137044][ T5828] RIP: 0033:0x7f1b7ff09eb9 [ 60.141451][ T5828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.161044][ T5828] RSP: 002b:00007f1b7eb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 60.169577][ T5828] RAX: ffffffffffffffda RBX: 00007f1b800a5f80 RCX: 00007f1b7ff09eb9 [ 60.177533][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 60.185487][ T5828] RBP: 00007f1b7eb87090 R08: 0000000000000000 R09: 0000000000000000 [ 60.193458][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.201486][ T5828] R13: 0000000000000000 R14: 00007f1b800a5f80 R15: 00007ffd6fd12918 [ 60.209490][ T5828] [ 60.260389][ T5831] loop3: detected capacity change from 0 to 128 [ 60.271544][ T5831] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.289807][ T5831] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.300534][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.307954][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.315380][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.322899][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.330460][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.337836][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.345420][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.352844][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.360259][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.367713][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.375209][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.382604][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.389989][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.397432][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.404879][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.412325][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.419801][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.427236][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.434764][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.442349][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.450014][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.457403][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.464834][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.472261][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.479643][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.487235][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.494692][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.502215][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.509798][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.517281][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.524688][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.532095][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.539630][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.547117][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.554653][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.562069][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.569504][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.576955][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.584399][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.591828][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.599310][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.606723][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.614162][ T3513] hid-generic 0006:0000:0000.0012: unknown main item tag 0x0 [ 60.631841][ T5845] 9pnet: Could not find request transport: fd [ 60.638078][ T5849] 1ªX¹¦À: renamed from 60ªX¹¦À [ 60.644649][ T3513] hid-generic 0006:0000:0000.0012: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 60.655175][ T5849] 1ªX¹¦À: entered allmulticast mode [ 60.660641][ T5849] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 60.734878][ T5858] netlink: 'syz.0.363': attribute type 27 has an invalid length. [ 60.742782][ T5858] 0ªX¹¦À: left allmulticast mode [ 60.750129][ T5858] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 60.759213][ T5858] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 60.768283][ T5858] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 60.777345][ T5858] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 60.788623][ T5858] geneve2: left promiscuous mode [ 60.793714][ T5858] geneve2: left allmulticast mode [ 60.806688][ T5866] bridge_slave_0: left allmulticast mode [ 60.812466][ T5866] bridge_slave_0: left promiscuous mode [ 60.818164][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.840802][ T5866] bridge_slave_1: left allmulticast mode [ 60.846471][ T5866] bridge_slave_1: left promiscuous mode [ 60.851996][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x1 [ 60.852223][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.859455][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.874022][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.881617][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.889225][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x2 [ 60.896664][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.904086][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.911557][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.918950][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.926413][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.933823][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.941215][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.948654][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.956046][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.963437][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.971035][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.978460][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.986050][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 60.993452][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.000915][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.008324][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.015733][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.023148][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.030618][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.038012][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.045402][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.052783][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.060173][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.067571][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.075079][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.082472][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.090067][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.097487][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.104908][ T1050] hid-generic 0006:0000:0000.0013: unknown main item tag 0x0 [ 61.113114][ T1050] hid-generic 0006:0000:0000.0013: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 61.123076][ T5866] bond0: (slave bond_slave_0): Releasing backup interface [ 61.131164][ T5866] bond0: (slave bond_slave_1): Releasing backup interface [ 61.139470][ T5866] team0: Port device team_slave_0 removed [ 61.146251][ T5866] team0: Port device team_slave_1 removed [ 61.152237][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.159933][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.172287][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 61.185885][ T5874] team0: Port device wg2 added [ 61.204439][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 61.204450][ T29] audit: type=1400 audit(1725216568.629:1187): avc: denied { listen } for pid=5879 comm="syz.1.368" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.279935][ T5886] loop1: detected capacity change from 0 to 128 [ 61.290808][ T5886] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.301465][ T5888] FAULT_INJECTION: forcing a failure. [ 61.301465][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.314687][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: syz.0.369 Not tainted 6.11.0-rc6-syzkaller #0 [ 61.323645][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.333695][ T5888] Call Trace: [ 61.336964][ T5888] [ 61.339892][ T5888] dump_stack_lvl+0xf2/0x150 [ 61.344540][ T5888] dump_stack+0x15/0x20 [ 61.348683][ T5888] should_fail_ex+0x229/0x230 [ 61.353419][ T5888] should_fail+0xb/0x10 [ 61.357593][ T5888] should_fail_usercopy+0x1a/0x20 [ 61.362687][ T5888] _copy_from_user+0x1e/0xd0 [ 61.367292][ T5888] copy_msghdr_from_user+0x54/0x2a0 [ 61.372538][ T5888] __sys_sendmsg+0x17d/0x280 [ 61.377299][ T5888] __x64_sys_sendmsg+0x46/0x50 [ 61.382093][ T5888] x64_sys_call+0x2689/0x2d60 [ 61.386769][ T5888] do_syscall_64+0xc9/0x1c0 [ 61.391357][ T5888] ? clear_bhb_loop+0x55/0xb0 [ 61.396164][ T5888] ? clear_bhb_loop+0x55/0xb0 [ 61.400896][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.406787][ T5888] RIP: 0033:0x7f208a1d9eb9 [ 61.411208][ T5888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.430804][ T5888] RSP: 002b:00007f2088e36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.439241][ T5888] RAX: ffffffffffffffda RBX: 00007f208a376058 RCX: 00007f208a1d9eb9 [ 61.447298][ T5888] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 61.455263][ T5888] RBP: 00007f2088e36090 R08: 0000000000000000 R09: 0000000000000000 [ 61.463227][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.471253][ T5888] R13: 0000000000000000 R14: 00007f208a376058 R15: 00007ffe23f14848 [ 61.479256][ T5888] [ 61.515659][ T4925] bond0 (unregistering): Released all slaves [ 61.530016][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.537458][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.544905][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.552329][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.559723][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.567184][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.574641][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.582173][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.589554][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.596981][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.604628][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.612044][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.619519][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.627062][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.634477][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.641865][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.649237][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.656631][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.664236][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.671818][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.679253][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.686649][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.694092][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.701487][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.708856][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.716252][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.723721][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.731269][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.738745][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.746144][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.753537][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.760983][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.768352][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.776100][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.783488][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.790874][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.798242][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.805659][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.813057][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.820492][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.827870][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.835268][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.842703][ T1050] hid-generic 0006:0000:0000.0014: unknown main item tag 0x0 [ 61.858108][ T1050] hid-generic 0006:0000:0000.0014: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 61.879784][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.886953][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.894681][ T5836] bridge_slave_0: entered allmulticast mode [ 61.903619][ T5836] bridge_slave_0: entered promiscuous mode [ 61.911862][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.918961][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.935476][ T5836] bridge_slave_1: entered allmulticast mode [ 61.942206][ T5836] bridge_slave_1: entered promiscuous mode [ 61.962326][ T4925] hsr_slave_0: left promiscuous mode [ 61.968019][ T4925] hsr_slave_1: left promiscuous mode [ 61.992279][ T5901] loop2: detected capacity change from 0 to 8192 [ 62.002489][ T5901] FAULT_INJECTION: forcing a failure. [ 62.002489][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 62.015269][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.2.376 Not tainted 6.11.0-rc6-syzkaller #0 [ 62.024135][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.034194][ T5901] Call Trace: [ 62.037468][ T5901] [ 62.040383][ T5901] dump_stack_lvl+0xf2/0x150 [ 62.044954][ T5901] dump_stack+0x15/0x20 [ 62.049092][ T5901] should_fail_ex+0x229/0x230 [ 62.053751][ T5901] ? getname_flags+0x81/0x3b0 [ 62.058426][ T5901] should_failslab+0x8f/0xb0 [ 62.063006][ T5901] kmem_cache_alloc_noprof+0x4c/0x290 [ 62.068399][ T5901] getname_flags+0x81/0x3b0 [ 62.072910][ T5901] user_path_at+0x26/0x110 [ 62.077354][ T5901] __x64_sys_fchmodat+0x75/0x120 [ 62.082294][ T5901] x64_sys_call+0x2a3f/0x2d60 [ 62.086955][ T5901] do_syscall_64+0xc9/0x1c0 [ 62.091459][ T5901] ? clear_bhb_loop+0x55/0xb0 [ 62.096164][ T5901] ? clear_bhb_loop+0x55/0xb0 [ 62.100830][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.106725][ T5901] RIP: 0033:0x7f8d2fca9eb9 [ 62.111149][ T5901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.130746][ T5901] RSP: 002b:00007f8d2e921038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 62.139248][ T5901] RAX: ffffffffffffffda RBX: 00007f8d2fe45f80 RCX: 00007f8d2fca9eb9 [ 62.147201][ T5901] RDX: 00000000fffffff7 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 62.155163][ T5901] RBP: 00007f8d2e921090 R08: 0000000000000000 R09: 0000000000000000 [ 62.163121][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.171095][ T5901] R13: 0000000000000000 R14: 00007f8d2fe45f80 R15: 00007ffecf7a7868 [ 62.179056][ T5901] [ 62.188253][ T5899] netlink: 'syz.3.375': attribute type 27 has an invalid length. [ 62.196247][ T5899] 1ªX¹¦À: left allmulticast mode [ 62.219476][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.231551][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.260855][ T5906] FAULT_INJECTION: forcing a failure. [ 62.260855][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 62.269944][ T5909] loop2: detected capacity change from 0 to 1024 [ 62.273523][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.3.378 Not tainted 6.11.0-rc6-syzkaller #0 [ 62.288646][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.292176][ T5909] EXT4-fs: Ignoring removed orlov option [ 62.298690][ T5906] Call Trace: [ 62.298701][ T5906] [ 62.298708][ T5906] dump_stack_lvl+0xf2/0x150 [ 62.304354][ T5909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.307581][ T5906] dump_stack+0x15/0x20 [ 62.325936][ T5906] should_fail_ex+0x229/0x230 [ 62.330693][ T5906] ? fcntl_setlease+0x88/0x300 [ 62.335448][ T5906] should_failslab+0x8f/0xb0 [ 62.340035][ T5906] kmem_cache_alloc_noprof+0x4c/0x290 [ 62.345453][ T5906] fcntl_setlease+0x88/0x300 [ 62.350052][ T5906] do_fcntl+0x442/0xe20 [ 62.354194][ T5906] ? selinux_file_fcntl+0x1b4/0x1e0 [ 62.359414][ T5906] __se_sys_fcntl+0xc4/0x190 [ 62.364116][ T5906] __x64_sys_fcntl+0x43/0x50 [ 62.368852][ T5906] x64_sys_call+0x209e/0x2d60 [ 62.373531][ T5906] do_syscall_64+0xc9/0x1c0 [ 62.378023][ T5906] ? clear_bhb_loop+0x55/0xb0 [ 62.382742][ T5906] ? clear_bhb_loop+0x55/0xb0 [ 62.387413][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.393404][ T5906] RIP: 0033:0x7f1b7ff09eb9 [ 62.397851][ T5906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.417528][ T5906] RSP: 002b:00007f1b7eb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 62.425936][ T5906] RAX: ffffffffffffffda RBX: 00007f1b800a5f80 RCX: 00007f1b7ff09eb9 [ 62.433986][ T5906] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000003 [ 62.441947][ T5906] RBP: 00007f1b7eb87090 R08: 0000000000000000 R09: 0000000000000000 [ 62.449908][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.457864][ T5906] R13: 0000000000000000 R14: 00007f1b800a5f80 R15: 00007ffd6fd12918 [ 62.465839][ T5906] [ 62.474704][ T5836] team0: Port device team_slave_0 added [ 62.481485][ T5836] team0: Port device team_slave_1 added [ 62.488335][ T5909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 62.499686][ T5909] System zones: 0-1, 3-36 [ 62.509035][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.527674][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.534679][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.560695][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.579526][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.597687][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.604696][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.630713][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.657132][ T5836] hsr_slave_0: entered promiscuous mode [ 62.663575][ T5836] hsr_slave_1: entered promiscuous mode [ 62.669426][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.677217][ T5836] Cannot create hsr debugfs directory [ 62.685953][ T29] audit: type=1400 audit(1725216570.109:1188): avc: denied { mounton } for pid=5929 comm="syz.2.380" path="/90/file0" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 62.749534][ T5946] loop3: detected capacity change from 0 to 256 [ 62.762477][ T5948] loop1: detected capacity change from 0 to 128 [ 62.771119][ T5948] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.812382][ T5946] FAT-fs (loop3): codepage cp863 not found [ 62.921207][ T5961] __nla_validate_parse: 4 callbacks suppressed [ 62.921222][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 62.949739][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 63.073172][ T5977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.388'. [ 63.240840][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.248674][ T5983] loop1: detected capacity change from 0 to 164 [ 63.288418][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.311957][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.322649][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.338239][ T29] audit: type=1400 audit(1725216570.759:1189): avc: denied { write } for pid=5987 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.365121][ T29] audit: type=1400 audit(1725216570.789:1190): avc: denied { read } for pid=5987 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.377073][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.384381][ T29] audit: type=1400 audit(1725216570.789:1191): avc: denied { create } for pid=5987 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 63.397052][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.424944][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.432070][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.459434][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.466536][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.475689][ T29] audit: type=1400 audit(1725216570.879:1192): avc: denied { connect } for pid=5993 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.526667][ T29] audit: type=1400 audit(1725216570.949:1193): avc: denied { bind } for pid=5993 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.559794][ T29] audit: type=1400 audit(1725216570.949:1194): avc: denied { write } for pid=5993 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.610491][ T6010] loop3: detected capacity change from 0 to 128 [ 63.617641][ T6010] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.642777][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.650545][ T6014] FAULT_INJECTION: forcing a failure. [ 63.650545][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 63.663213][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.1.393 Not tainted 6.11.0-rc6-syzkaller #0 [ 63.672066][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.682127][ T6014] Call Trace: [ 63.685399][ T6014] [ 63.688316][ T6014] dump_stack_lvl+0xf2/0x150 [ 63.692960][ T6014] dump_stack+0x15/0x20 [ 63.697136][ T6014] should_fail_ex+0x229/0x230 [ 63.701854][ T6014] ? __alloc_skb+0x10b/0x310 [ 63.706467][ T6014] should_failslab+0x8f/0xb0 [ 63.711128][ T6014] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 63.716964][ T6014] __alloc_skb+0x10b/0x310 [ 63.721417][ T6014] fdb_notify+0x70/0x120 [ 63.725775][ T6014] fdb_delete+0x6b4/0x860 [ 63.730140][ T6014] fdb_delete_local+0x225/0x2e0 [ 63.734990][ T6014] br_fdb_delete_by_port+0x16c/0x240 [ 63.740275][ T6014] br_dev_delete+0x86/0xe0 [ 63.744690][ T6014] br_del_bridge+0x99/0xc0 [ 63.749112][ T6014] br_ioctl_stub+0x2fe/0x5d0 [ 63.753703][ T6014] ? __mutex_lock+0x221/0x8e0 [ 63.758393][ T6014] ? __pfx_br_ioctl_stub+0x10/0x10 [ 63.763506][ T6014] sock_ioctl+0x439/0x640 [ 63.767867][ T6014] ? __pfx_sock_ioctl+0x10/0x10 [ 63.772734][ T6014] __se_sys_ioctl+0xd3/0x150 [ 63.777322][ T6014] __x64_sys_ioctl+0x43/0x50 [ 63.781955][ T6014] x64_sys_call+0x15cc/0x2d60 [ 63.786629][ T6014] do_syscall_64+0xc9/0x1c0 [ 63.791123][ T6014] ? clear_bhb_loop+0x55/0xb0 [ 63.795787][ T6014] ? clear_bhb_loop+0x55/0xb0 [ 63.800478][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.806398][ T6014] RIP: 0033:0x7fdf2a919eb9 [ 63.810799][ T6014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.830396][ T6014] RSP: 002b:00007fdf29570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.838871][ T6014] RAX: ffffffffffffffda RBX: 00007fdf2aab6058 RCX: 00007fdf2a919eb9 [ 63.846892][ T6014] RDX: 0000000020000040 RSI: 00000000000089a1 RDI: 000000000000000b [ 63.854849][ T6014] RBP: 00007fdf29570090 R08: 0000000000000000 R09: 0000000000000000 [ 63.862813][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.870794][ T6014] R13: 0000000000000000 R14: 00007fdf2aab6058 R15: 00007fff1d2ad7c8 [ 63.878807][ T6014] [ 63.952136][ T6029] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 63.959883][ T6029] netlink: 232 bytes leftover after parsing attributes in process `syz.2.399'. [ 63.968801][ T6029] NCSI netlink: No device for ifindex 131092 [ 63.983571][ T6027] FAULT_INJECTION: forcing a failure. [ 63.983571][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 63.996383][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.0.397 Not tainted 6.11.0-rc6-syzkaller #0 [ 64.005313][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.015413][ T6027] Call Trace: [ 64.018699][ T6027] [ 64.021674][ T6027] dump_stack_lvl+0xf2/0x150 [ 64.026273][ T6027] dump_stack+0x15/0x20 [ 64.030431][ T6027] should_fail_ex+0x229/0x230 [ 64.035265][ T6027] ? __alloc_skb+0x10b/0x310 [ 64.039858][ T6027] should_failslab+0x8f/0xb0 [ 64.044478][ T6027] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 64.050300][ T6027] __alloc_skb+0x10b/0x310 [ 64.054769][ T6027] netlink_alloc_large_skb+0xad/0xe0 [ 64.060063][ T6027] netlink_sendmsg+0x3b4/0x6e0 [ 64.060643][ T6029] loop2: detected capacity change from 0 to 128 [ 64.064825][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.076349][ T6027] __sock_sendmsg+0x140/0x180 [ 64.081045][ T6027] ____sys_sendmsg+0x312/0x410 [ 64.085903][ T6027] __sys_sendmsg+0x1e9/0x280 [ 64.090557][ T6027] __x64_sys_sendmsg+0x46/0x50 [ 64.095335][ T6027] x64_sys_call+0x2689/0x2d60 [ 64.100027][ T6027] do_syscall_64+0xc9/0x1c0 [ 64.104650][ T6027] ? clear_bhb_loop+0x55/0xb0 [ 64.109369][ T6027] ? clear_bhb_loop+0x55/0xb0 [ 64.114122][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.120036][ T6027] RIP: 0033:0x7f208a1d9eb9 [ 64.124454][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.144103][ T6027] RSP: 002b:00007f2088e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.152555][ T6027] RAX: ffffffffffffffda RBX: 00007f208a375f80 RCX: 00007f208a1d9eb9 [ 64.160557][ T6027] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000c [ 64.168534][ T6027] RBP: 00007f2088e57090 R08: 0000000000000000 R09: 0000000000000000 [ 64.176515][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.184548][ T6027] R13: 0000000000000000 R14: 00007f208a375f80 R15: 00007ffe23f14848 [ 64.192533][ T6027] [ 64.197837][ T6029] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.215949][ T6029] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.243175][ T6066] xt_connbytes: Forcing CT accounting to be enabled [ 64.256728][ T6066] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.279977][ T6066] xt_bpf: check failed: parse error [ 64.282891][ T5836] veth0_vlan: entered promiscuous mode [ 64.303808][ T6066] all: renamed from bridge_slave_0 [ 64.321387][ T29] audit: type=1400 audit(1725216571.739:1195): avc: denied { ioctl } for pid=6065 comm="syz.0.401" path="socket:[9385]" dev="sockfs" ino=9385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.348084][ T5836] veth1_vlan: entered promiscuous mode [ 64.356213][ T6076] 9pnet: Could not find request transport: fd [ 64.367797][ T5836] veth0_macvtap: entered promiscuous mode [ 64.375654][ T5836] veth1_macvtap: entered promiscuous mode [ 64.383551][ T6076] netlink: 3 bytes leftover after parsing attributes in process `syz.3.402'. [ 64.394057][ T6076] 0ªX¹¦À: renamed from 61ªX¹¦À [ 64.400628][ T6076] 0ªX¹¦À: entered allmulticast mode [ 64.405965][ T6076] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 64.428744][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.433549][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.448260][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.471501][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.482341][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.492815][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.504612][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.516971][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.519794][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.524491][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.533099][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.540445][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.549077][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556457][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.565258][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.582015][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.589449][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.596874][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.604268][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.611667][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.619100][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.626530][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.633984][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.641380][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.648756][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.656151][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.663536][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.670973][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.678349][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.685761][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.693217][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.700617][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.708006][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.715423][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.722911][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.730343][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.737718][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.745142][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.752532][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.759991][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.767422][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.774852][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.782303][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.789705][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.797240][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.804665][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.812118][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.819504][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.826897][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.834285][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.841769][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.849238][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.856672][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.864219][ T3337] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 64.872853][ T3337] hid-generic 0006:0000:0000.0015: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 64.912921][ T29] audit: type=1326 audit(1725216572.339:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6095 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 64.924012][ T6096] No control pipe specified [ 64.975275][ T6100] loop2: detected capacity change from 0 to 1024 [ 64.984077][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.994041][ T6100] ext4: Unknown parameter 'uid>00000000000000000000' [ 65.046524][ T6105] netlink: 'syz.2.412': attribute type 27 has an invalid length. [ 65.076962][ T6103] FAULT_INJECTION: forcing a failure. [ 65.076962][ T6103] name failslab, interval 1, probability 0, space 0, times 0 [ 65.089597][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.4.360 Not tainted 6.11.0-rc6-syzkaller #0 [ 65.098504][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.108568][ T6103] Call Trace: [ 65.111843][ T6103] [ 65.114871][ T6103] dump_stack_lvl+0xf2/0x150 [ 65.119451][ T6103] dump_stack+0x15/0x20 [ 65.123591][ T6103] should_fail_ex+0x229/0x230 [ 65.128254][ T6103] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 65.135024][ T6103] ? switchdev_deferred_enqueue+0x43/0x1e0 [ 65.140973][ T6103] should_failslab+0x8f/0xb0 [ 65.145672][ T6103] __kmalloc_noprof+0xa5/0x370 [ 65.150432][ T6103] switchdev_deferred_enqueue+0x43/0x1e0 [ 65.156064][ T6103] switchdev_port_attr_set+0x80/0x1c0 [ 65.161438][ T6103] ? finish_wait+0x4a/0x90 [ 65.165891][ T6103] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 65.171714][ T6103] br_set_state+0x202/0x390 [ 65.176236][ T6103] br_stp_disable_port+0x5c/0x130 [ 65.181352][ T6103] ? __pfx_br_dev_stop+0x10/0x10 [ 65.186272][ T6103] br_stp_disable_bridge+0x5d/0xf0 [ 65.191436][ T6103] br_dev_stop+0x1f/0xc0 [ 65.195660][ T6103] __dev_close_many+0x127/0x1e0 [ 65.200591][ T6103] __dev_change_flags+0x366/0x410 [ 65.205675][ T6103] dev_change_flags+0x59/0xd0 [ 65.210568][ T6103] dev_ifsioc+0x67f/0xa10 [ 65.214906][ T6103] dev_ioctl+0x7fa/0xab0 [ 65.219203][ T6103] sock_do_ioctl+0x11c/0x260 [ 65.223859][ T6103] sock_ioctl+0x470/0x640 [ 65.228270][ T6103] ? __pfx_sock_ioctl+0x10/0x10 [ 65.233111][ T6103] __se_sys_ioctl+0xd3/0x150 [ 65.237685][ T6103] __x64_sys_ioctl+0x43/0x50 [ 65.242343][ T6103] x64_sys_call+0x15cc/0x2d60 [ 65.247002][ T6103] do_syscall_64+0xc9/0x1c0 [ 65.251644][ T6103] ? clear_bhb_loop+0x55/0xb0 [ 65.256303][ T6103] ? clear_bhb_loop+0x55/0xb0 [ 65.260958][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.266837][ T6103] RIP: 0033:0x7f4cc7c59eb9 [ 65.271271][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.291023][ T6103] RSP: 002b:00007f4cc68b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.299437][ T6103] RAX: ffffffffffffffda RBX: 00007f4cc7df6058 RCX: 00007f4cc7c59eb9 [ 65.307426][ T6103] RDX: 00000000200003c0 RSI: 0000000000008914 RDI: 0000000000000003 [ 65.315390][ T6103] RBP: 00007f4cc68b0090 R08: 0000000000000000 R09: 0000000000000000 [ 65.323500][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.331530][ T6103] R13: 0000000000000000 R14: 00007f4cc7df6058 R15: 00007ffce336f1d8 [ 65.339500][ T6103] [ 65.342536][ T6103] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 65.350772][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.392787][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 65.402203][ T6113] bridge_slave_1: left allmulticast mode [ 65.407955][ T6113] bridge_slave_1: left promiscuous mode [ 65.413926][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.420069][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.428402][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.435871][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.443475][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.450963][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.458331][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.465847][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.473249][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.480671][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.488039][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.495499][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.503098][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.510602][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.517977][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.525360][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.532843][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.540247][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.548145][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.555651][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.563110][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.570497][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.578006][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.585598][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.593109][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.600507][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.607951][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.615435][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.622868][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.630331][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.637732][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.645196][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.652591][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.660092][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.667465][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.675048][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.682438][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.689891][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.697341][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.704774][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.712200][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.719698][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.727141][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.734649][ T35] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 65.742809][ T6113] bridge_slave_0: left allmulticast mode [ 65.743411][ T35] hid-generic 0006:0000:0000.0016: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 65.748476][ T6113] bridge_slave_0: left promiscuous mode [ 65.748552][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.829236][ T6143] loop2: detected capacity change from 0 to 1024 [ 65.836868][ T6143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.843716][ T6143] ext4: Unknown parameter 'uid>00000000000000000000' [ 65.877566][ T6146] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 65.885309][ T6146] netlink: 232 bytes leftover after parsing attributes in process `syz.2.423'. [ 65.894286][ T6146] NCSI netlink: No device for ifindex 131092 [ 65.903738][ T6146] loop2: detected capacity change from 0 to 128 [ 65.913929][ T6146] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.926504][ T6146] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.964476][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.995613][ T6156] loop2: detected capacity change from 0 to 2048 [ 66.011339][ T6156] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.425: bad orphan inode 8192 [ 66.022062][ T6156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.037285][ T6156] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.425: corrupted in-inode xattr: e_name out of bounds [ 66.056047][ T6156] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.425: corrupted in-inode xattr: e_name out of bounds [ 66.067258][ T6158] loop0: detected capacity change from 0 to 2048 [ 66.139151][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.165675][ T6165] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 66.354520][ T6175] loop3: detected capacity change from 0 to 128 [ 66.360441][ T6172] netlink: 'syz.1.433': attribute type 27 has an invalid length. [ 66.365581][ T6175] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.464279][ T6180] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 66.464334][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.472058][ T6180] netlink: 232 bytes leftover after parsing attributes in process `syz.2.435'. [ 66.479207][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.488059][ T6180] NCSI netlink: No device for ifindex 131092 [ 66.505172][ T6180] loop2: detected capacity change from 0 to 128 [ 66.516114][ T6180] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.531467][ T6180] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.653250][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.669286][ T6191] loop3: detected capacity change from 0 to 128 [ 66.691489][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.697431][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.767479][ T6172] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.776460][ T6172] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.785612][ T6172] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.794676][ T6172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.816718][ T6197] netlink: 'syz.2.439': attribute type 27 has an invalid length. [ 66.854070][ T6196] loop3: detected capacity change from 0 to 2048 [ 66.871855][ T6200] loop1: detected capacity change from 0 to 512 [ 66.871953][ T6202] loop2: detected capacity change from 0 to 128 [ 66.888877][ T6202] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.904270][ T6202] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.912657][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.938114][ T6202] FAULT_INJECTION: forcing a failure. [ 66.938114][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.961878][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.2.442 Not tainted 6.11.0-rc6-syzkaller #0 [ 66.964341][ T6200] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.970723][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.970735][ T6202] Call Trace: [ 66.970743][ T6202] [ 66.970751][ T6202] dump_stack_lvl+0xf2/0x150 [ 66.970776][ T6202] dump_stack+0x15/0x20 [ 66.970794][ T6202] should_fail_ex+0x229/0x230 [ 66.970818][ T6202] should_fail+0xb/0x10 [ 66.991036][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.441: corrupted inode contents [ 66.991214][ T6202] should_fail_usercopy+0x1a/0x20 [ 66.994691][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 66.994701][ T29] audit: type=1400 audit(1725216574.389:1267): avc: denied { setattr } for pid=6199 comm="syz.1.441" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.997381][ T6202] _copy_from_user+0x1e/0xd0 [ 67.002483][ T6200] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.441: mark_inode_dirty error [ 67.006067][ T6202] move_addr_to_kernel+0x82/0x120 [ 67.011021][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.441: corrupted inode contents [ 67.014863][ T6202] copy_msghdr_from_user+0x271/0x2a0 [ 67.096976][ T6202] __sys_sendmsg+0x17d/0x280 [ 67.101659][ T6202] __x64_sys_sendmsg+0x46/0x50 [ 67.106486][ T6202] x64_sys_call+0x2689/0x2d60 [ 67.107100][ T6200] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.441: Directory hole found for htree leaf block 0 [ 67.111187][ T6202] do_syscall_64+0xc9/0x1c0 [ 67.111212][ T6202] ? clear_bhb_loop+0x55/0xb0 [ 67.111233][ T6202] ? clear_bhb_loop+0x55/0xb0 [ 67.133518][ T29] audit: type=1400 audit(1725216574.549:1268): avc: denied { getopt } for pid=6199 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.137835][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.163008][ T6202] RIP: 0033:0x7f8d2fca9eb9 [ 67.167409][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.187015][ T6202] RSP: 002b:00007f8d2e921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.195423][ T6202] RAX: ffffffffffffffda RBX: 00007f8d2fe45f80 RCX: 00007f8d2fca9eb9 [ 67.203382][ T6202] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000006 [ 67.211344][ T6202] RBP: 00007f8d2e921090 R08: 0000000000000000 R09: 0000000000000000 [ 67.219301][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.227309][ T6202] R13: 0000000000000000 R14: 00007f8d2fe45f80 R15: 00007ffecf7a7868 [ 67.235307][ T6202] [ 67.269253][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.291713][ T29] audit: type=1400 audit(1725216574.719:1269): avc: denied { nlmsg_write } for pid=6199 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.404157][ T6221] loop0: detected capacity change from 0 to 128 [ 67.453321][ T5573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.456784][ T6227] program syz.2.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.489140][ T29] audit: type=1400 audit(1725216574.909:1270): avc: denied { setopt } for pid=6228 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.506420][ T6231] loop1: detected capacity change from 0 to 512 [ 67.521934][ T6231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.552177][ T29] audit: type=1400 audit(1725216574.979:1271): avc: denied { attach_queue } for pid=6232 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.559964][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 67.581126][ T29] audit: type=1326 audit(1725216574.999:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 67.586763][ T6235] FAULT_INJECTION: forcing a failure. [ 67.586763][ T6235] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.604444][ T29] audit: type=1326 audit(1725216574.999:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 67.604468][ T29] audit: type=1326 audit(1725216574.999:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 67.604491][ T29] audit: type=1326 audit(1725216574.999:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 67.604515][ T29] audit: type=1326 audit(1725216574.999:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8d2fca9eb9 code=0x7ffc0000 [ 67.608855][ T6234] loop2: detected capacity change from 0 to 2048 [ 67.617890][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.3.452 Not tainted 6.11.0-rc6-syzkaller #0 [ 67.725848][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 67.735890][ T6235] Call Trace: [ 67.739181][ T6235] [ 67.742098][ T6235] dump_stack_lvl+0xf2/0x150 [ 67.746678][ T6235] dump_stack+0x15/0x20 [ 67.750820][ T6235] should_fail_ex+0x229/0x230 [ 67.755547][ T6235] should_fail_alloc_page+0xfd/0x110 [ 67.760835][ T6235] __alloc_pages_noprof+0x109/0x360 [ 67.766043][ T6235] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 67.771476][ T6235] alloc_pages_noprof+0xe1/0x100 [ 67.776407][ T6235] pte_alloc_one+0x32/0xf0 [ 67.780818][ T6235] __pte_alloc+0x33/0x270 [ 67.785135][ T6235] handle_mm_fault+0x1ae6/0x2a30 [ 67.790113][ T6235] exc_page_fault+0x3b9/0x650 [ 67.794783][ T6235] asm_exc_page_fault+0x26/0x30 [ 67.799654][ T6235] RIP: 0033:0x7f1b7fdcdbf3 [ 67.804140][ T6235] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 67.823732][ T6235] RSP: 002b:00007f1b7eb864a0 EFLAGS: 00010206 [ 67.829785][ T6235] RAX: 0000000000000000 RBX: 00007f1b7eb86540 RCX: 00007f1b76767000 [ 67.837831][ T6235] RDX: 00007f1b7eb866e0 RSI: 0000000000000000 RDI: 00007f1b7eb865e0 [ 67.845876][ T6235] RBP: 000000000000013c R08: 0000000000000008 R09: 00000000000000ad [ 67.853830][ T6235] R10: 00000000000000bc R11: 00007f1b7eb86540 R12: 00007f1b7eb86540 [ 67.861784][ T6235] R13: 00007f1b7ff8b880 R14: 00000000000000eb R15: 00007f1b7eb865e0 [ 67.869747][ T6235] [ 67.872863][ T6235] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 67.882464][ T6235] loop3: detected capacity change from 0 to 128 [ 67.887483][ T6238] loop0: detected capacity change from 0 to 2048 [ 67.889886][ T6235] FAT-fs (loop3): bogus number of reserved sectors [ 67.897528][ T6231] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.901598][ T6235] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 67.901620][ T6235] FAT-fs (loop3): Can't find a valid FAT filesystem [ 67.931158][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.946868][ T6231] EXT4-fs (loop1): 1 truncate cleaned up [ 67.953126][ T6231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.989962][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 67.991385][ T6246] loop3: detected capacity change from 0 to 128 [ 67.997379][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.011148][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.014279][ T6246] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.018537][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.035133][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.042545][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.050022][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.057515][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.064985][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.072408][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.079787][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.087262][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.094762][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.102165][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.109604][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.116996][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.124526][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.131966][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.139340][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.146803][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.154201][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.161678][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.169043][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.176472][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.183873][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.191258][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.198625][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.206055][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.213505][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.220970][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.228423][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.235873][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.243248][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.250627][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.257996][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.265373][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.272762][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.280159][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.287541][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.294924][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.302348][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.309710][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.317094][ T3339] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 68.325581][ T3339] hid-generic 0006:0000:0000.0017: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 68.329222][ T5573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.399117][ T6258] loop3: detected capacity change from 0 to 256 [ 68.463687][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.508600][ T6275] loop2: detected capacity change from 0 to 128 [ 68.514945][ T6273] loop1: detected capacity change from 0 to 1024 [ 68.521764][ T6273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.528446][ T6273] ext4: Unknown parameter 'uid>00000000000000000000' [ 68.549973][ T6268] syz.3.461 uses obsolete (PF_INET,SOCK_PACKET) [ 68.591638][ T6279] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 68.599326][ T6279] netlink: 232 bytes leftover after parsing attributes in process `syz.1.467'. [ 68.608358][ T6279] NCSI netlink: No device for ifindex 131092 [ 68.621232][ T6277] loop0: detected capacity change from 0 to 2048 [ 68.621253][ T6279] loop1: detected capacity change from 0 to 128 [ 68.633190][ T6282] loop2: detected capacity change from 0 to 128 [ 68.646086][ T6282] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.662205][ T6279] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.675457][ T6279] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.718180][ T6287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.469'. [ 68.750834][ T6290] netlink: 'syz.2.470': attribute type 27 has an invalid length. [ 68.766981][ T5573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.787740][ T6295] program syz.1.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.808977][ T6293] FAULT_INJECTION: forcing a failure. [ 68.808977][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 68.821744][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.2.472 Not tainted 6.11.0-rc6-syzkaller #0 [ 68.830600][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.840710][ T6293] Call Trace: [ 68.843990][ T6293] [ 68.846925][ T6293] dump_stack_lvl+0xf2/0x150 [ 68.851558][ T6293] dump_stack+0x15/0x20 [ 68.855721][ T6293] should_fail_ex+0x229/0x230 [ 68.860409][ T6293] ? audit_log_start+0x34c/0x6b0 [ 68.865380][ T6293] should_failslab+0x8f/0xb0 [ 68.870188][ T6293] kmem_cache_alloc_noprof+0x4c/0x290 [ 68.875603][ T6293] audit_log_start+0x34c/0x6b0 [ 68.880423][ T6293] ? fcntl_setlk+0x2b8/0x990 [ 68.885032][ T6293] audit_seccomp+0x4b/0x130 [ 68.889630][ T6293] ? kmem_cache_free+0xd8/0x280 [ 68.894558][ T6293] __seccomp_filter+0x6fa/0x1180 [ 68.899559][ T6293] __secure_computing+0x9f/0x1c0 [ 68.904587][ T6293] syscall_trace_enter+0xd1/0x1f0 [ 68.909633][ T6293] ? fpregs_assert_state_consistent+0x83/0xa0 [ 68.915770][ T6293] do_syscall_64+0xaa/0x1c0 [ 68.920267][ T6293] ? clear_bhb_loop+0x55/0xb0 [ 68.924922][ T6293] ? clear_bhb_loop+0x55/0xb0 [ 68.929589][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.935478][ T6293] RIP: 0033:0x7f8d2fca88fc [ 68.939873][ T6293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 68.959649][ T6293] RSP: 002b:00007f8d2e921030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.968098][ T6293] RAX: ffffffffffffffda RBX: 00007f8d2fe45f80 RCX: 00007f8d2fca88fc [ 68.976134][ T6293] RDX: 000000000000000f RSI: 00007f8d2e9210a0 RDI: 000000000000000c [ 68.984093][ T6293] RBP: 00007f8d2e921090 R08: 0000000000000000 R09: 0000000000000000 [ 68.992118][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.000076][ T6293] R13: 0000000000000000 R14: 00007f8d2fe45f80 R15: 00007ffecf7a7868 [ 69.008031][ T6293] [ 69.024941][ T6293] loop2: detected capacity change from 0 to 2048 [ 69.043770][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.061632][ T6304] loop1: detected capacity change from 0 to 512 [ 69.075944][ T6304] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.094398][ T6304] EXT4-fs (loop1): 1 truncate cleaned up [ 69.101157][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.138422][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.164312][ T5573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.172319][ T6309] loop3: detected capacity change from 0 to 1024 [ 69.180804][ T6309] EXT4-fs: Ignoring removed orlov option [ 69.186490][ T6309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.197647][ T6309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 69.206819][ T6309] System zones: 0-1, 3-36 [ 69.208018][ T6314] loop1: detected capacity change from 0 to 128 [ 69.212691][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.243880][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.277350][ T6318] loop1: detected capacity change from 0 to 128 [ 69.292741][ T6318] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.332870][ T6323] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 69.340714][ T6323] netlink: 232 bytes leftover after parsing attributes in process `syz.3.482'. [ 69.349645][ T6323] NCSI netlink: No device for ifindex 131092 [ 69.357406][ T6323] loop3: detected capacity change from 0 to 128 [ 69.369962][ T6323] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.382479][ T6323] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.437785][ T3260] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.454224][ T6329] FAULT_INJECTION: forcing a failure. [ 69.454224][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.467365][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.3.484 Not tainted 6.11.0-rc6-syzkaller #0 [ 69.476469][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.486526][ T6329] Call Trace: [ 69.489796][ T6329] [ 69.492721][ T6329] dump_stack_lvl+0xf2/0x150 [ 69.497389][ T6329] dump_stack+0x15/0x20 [ 69.501532][ T6329] should_fail_ex+0x229/0x230 [ 69.506224][ T6329] should_fail+0xb/0x10 [ 69.510380][ T6329] should_fail_usercopy+0x1a/0x20 [ 69.515467][ T6329] _copy_from_user+0x1e/0xd0 [ 69.520046][ T6329] sk_setsockopt+0x1c2/0x1f30 [ 69.524717][ T6329] sock_setsockopt+0x3c/0x50 [ 69.529309][ T6329] __sys_setsockopt+0x194/0x250 [ 69.534267][ T6329] __x64_sys_setsockopt+0x66/0x80 [ 69.539283][ T6329] x64_sys_call+0x278d/0x2d60 [ 69.543969][ T6329] do_syscall_64+0xc9/0x1c0 [ 69.548500][ T6329] ? clear_bhb_loop+0x55/0xb0 [ 69.553162][ T6329] ? clear_bhb_loop+0x55/0xb0 [ 69.557826][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.563724][ T6329] RIP: 0033:0x7f1b7ff09eb9 [ 69.568204][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.587887][ T6329] RSP: 002b:00007f1b7eb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.596353][ T6329] RAX: ffffffffffffffda RBX: 00007f1b800a5f80 RCX: 00007f1b7ff09eb9 [ 69.604480][ T6329] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 69.612442][ T6329] RBP: 00007f1b7eb87090 R08: 0000000000000010 R09: 0000000000000000 [ 69.620419][ T6329] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.628383][ T6329] R13: 0000000000000000 R14: 00007f1b800a5f80 R15: 00007ffd6fd12918 [ 69.636372][ T6329] [ 69.678100][ T6331] loop1: detected capacity change from 0 to 128 [ 69.687857][ T6331] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.764568][ T6343] loop1: detected capacity change from 0 to 256 [ 69.768354][ T6340] 9pnet: Could not find request transport: fdÿÿÿÿ [ 69.779380][ T6340] netlink: 3 bytes leftover after parsing attributes in process `syz.3.487'. [ 69.788879][ T6340] 1ªX¹¦À: renamed from 60ªX¹¦À [ 69.795485][ T6340] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.001429][ T6348] program syz.4.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.034068][ T6350] loop4: detected capacity change from 0 to 128 [ 70.099181][ T6352] netlink: 'syz.2.491': attribute type 27 has an invalid length. [ 70.133412][ T6357] loop4: detected capacity change from 0 to 2048 [ 70.177766][ T6357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.190449][ T6357] FAULT_INJECTION: forcing a failure. [ 70.190449][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 70.203201][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.4.493 Not tainted 6.11.0-rc6-syzkaller #0 [ 70.212175][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.222230][ T6357] Call Trace: [ 70.225504][ T6357] [ 70.228429][ T6357] dump_stack_lvl+0xf2/0x150 [ 70.233028][ T6357] dump_stack+0x15/0x20 [ 70.237182][ T6357] should_fail_ex+0x229/0x230 [ 70.242036][ T6357] ? __d_alloc+0x3d/0x340 [ 70.246372][ T6357] should_failslab+0x8f/0xb0 [ 70.251032][ T6357] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 70.256776][ T6357] __d_alloc+0x3d/0x340 [ 70.260932][ T6357] __d_obtain_alias+0xbb/0x5d0 [ 70.265698][ T6357] ? __pfx_ext4_nfs_get_inode+0x10/0x10 [ 70.271327][ T6357] d_obtain_alias+0x1a/0x20 [ 70.275896][ T6357] generic_fh_to_dentry+0x8a/0xa0 [ 70.280928][ T6357] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 70.286735][ T6357] ext4_fh_to_dentry+0x33/0x40 [ 70.291506][ T6357] exportfs_decode_fh_raw+0xaf/0x480 [ 70.296856][ T6357] do_handle_open+0x44e/0x570 [ 70.301537][ T6357] __x64_sys_open_by_handle_at+0x46/0x50 [ 70.307175][ T6357] x64_sys_call+0x2909/0x2d60 [ 70.311858][ T6357] do_syscall_64+0xc9/0x1c0 [ 70.316408][ T6357] ? clear_bhb_loop+0x55/0xb0 [ 70.321078][ T6357] ? clear_bhb_loop+0x55/0xb0 [ 70.325756][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.331715][ T6357] RIP: 0033:0x7f4cc7c59eb9 [ 70.336159][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.355772][ T6357] RSP: 002b:00007f4cc68d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 70.364192][ T6357] RAX: ffffffffffffffda RBX: 00007f4cc7df5f80 RCX: 00007f4cc7c59eb9 [ 70.372223][ T6357] RDX: 0000000000000082 RSI: 0000000020000040 RDI: 0000000000000005 [ 70.380196][ T6357] RBP: 00007f4cc68d1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.388154][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.396112][ T6357] R13: 0000000000000000 R14: 00007f4cc7df5f80 R15: 00007ffce336f1d8 [ 70.404085][ T6357] [ 70.422693][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.445719][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 70.468445][ T6370] loop4: detected capacity change from 0 to 128 [ 70.475348][ T6370] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.549371][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x1 [ 70.556916][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.564398][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572007][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572030][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x2 [ 70.572060][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572079][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572097][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572116][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572136][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572215][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572236][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572254][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572306][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572325][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572545][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572565][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572589][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572608][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572627][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572657][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572680][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572781][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572800][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572824][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.572884][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743446][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743469][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743489][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743507][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743526][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743653][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743674][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.743694][ T4090] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 70.744432][ T4090] hid-generic 0006:0000:0000.0018: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 70.842089][ T6390] netlink: 'syz.1.504': attribute type 27 has an invalid length. [ 70.885075][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 70.925690][ T6405] loop2: detected capacity change from 0 to 128 [ 70.970175][ T6411] FAULT_INJECTION: forcing a failure. [ 70.970175][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 70.982878][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.2.514 Not tainted 6.11.0-rc6-syzkaller #0 [ 70.991720][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.001754][ T6411] Call Trace: [ 71.005097][ T6411] [ 71.008009][ T6411] dump_stack_lvl+0xf2/0x150 [ 71.012660][ T6411] dump_stack+0x15/0x20 [ 71.016832][ T6411] should_fail_ex+0x229/0x230 [ 71.021491][ T6411] ? __d_alloc+0x3d/0x340 [ 71.025799][ T6411] should_failslab+0x8f/0xb0 [ 71.030379][ T6411] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 71.036190][ T6411] __d_alloc+0x3d/0x340 [ 71.040338][ T6411] ? ktime_get_coarse_real_ts64+0xf3/0x100 [ 71.046233][ T6411] d_alloc_pseudo+0x1e/0x80 [ 71.050887][ T6411] alloc_file_pseudo+0x70/0x140 [ 71.055727][ T6411] create_pipe_files+0x1be/0x390 [ 71.060706][ T6411] __do_pipe_flags+0x46/0x190 [ 71.063472][ T6415] 9pnet: Could not find request transport: fdÿÿÿÿ [ 71.065386][ T6411] do_pipe2+0x64/0x130 [ 71.072742][ T6415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.512'. [ 71.075830][ T6411] __x64_sys_pipe2+0x30/0x40 [ 71.085875][ T6415] 0ªX¹¦À: renamed from caif0 [ 71.089138][ T6411] x64_sys_call+0x65f/0x2d60 [ 71.089166][ T6411] do_syscall_64+0xc9/0x1c0 [ 71.089185][ T6411] ? clear_bhb_loop+0x55/0xb0 [ 71.107542][ T6411] ? clear_bhb_loop+0x55/0xb0 [ 71.112298][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.118180][ T6411] RIP: 0033:0x7f8d2fca9eb9 [ 71.122573][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.142230][ T6411] RSP: 002b:00007f8d2e921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 71.150703][ T6411] RAX: ffffffffffffffda RBX: 00007f8d2fe45f80 RCX: 00007f8d2fca9eb9 [ 71.158677][ T6411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.166655][ T6411] RBP: 00007f8d2e921090 R08: 0000000000000000 R09: 0000000000000000 [ 71.174625][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.182628][ T6411] R13: 0000000000000000 R14: 00007f8d2fe45f80 R15: 00007ffecf7a7868 [ 71.190627][ T6411] [ 71.196652][ T6415] 0ªX¹¦À: entered allmulticast mode [ 71.201894][ T6415] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 71.240628][ T6422] loop2: detected capacity change from 0 to 128 [ 71.247388][ T6422] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.338092][ T6425] loop2: detected capacity change from 0 to 1024 [ 71.345739][ T6425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.352593][ T6425] ext4: Unknown parameter 'uid>00000000000000000000' [ 71.401647][ T6431] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 71.411773][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 71.413282][ T6433] loop0: detected capacity change from 0 to 2048 [ 71.450067][ T6435] program syz.2.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.468226][ T6437] program syz.0.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.479682][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 71.488770][ T6441] loop0: detected capacity change from 0 to 128 [ 71.559296][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x1 [ 71.566772][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.574259][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.581677][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.589134][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x2 [ 71.596560][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.604044][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.611466][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.618869][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.626272][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.633733][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.641239][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.648628][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.656039][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.663515][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.671050][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.678446][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.686011][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.693436][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.700850][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.708244][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.715662][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.723150][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.730646][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.738176][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.745626][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.753071][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.760532][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.767919][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.775344][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.782776][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.790183][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.797667][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.805097][ T35] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 71.825733][ T35] hid-generic 0006:0000:0000.0019: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 71.870913][ T6498] loop0: detected capacity change from 0 to 128 [ 71.981900][ T6521] loop0: detected capacity change from 0 to 128 [ 71.989617][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x1 [ 71.997081][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.004493][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.011910][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019295][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x2 [ 72.019320][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019398][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019421][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019499][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019520][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019613][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019636][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019655][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019677][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019699][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019720][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019743][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019764][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019787][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019891][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019961][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.019983][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020046][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020109][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020130][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020182][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020207][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020229][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020253][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020276][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020300][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020320][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020338][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.020394][ T4090] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 72.021331][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 72.021343][ T29] audit: type=1326 audit(1725216579.439:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7ff09eb9 code=0x7ffc0000 [ 72.021371][ T29] audit: type=1326 audit(1725216579.439:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7ff09eb9 code=0x7ffc0000 [ 72.050679][ T3266] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.056214][ T4090] hid-generic 0006:0000:0000.001A: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 72.063418][ T3266] FAT-fs (loop0): Filesystem has been set read-only [ 72.447238][ T6590] loop0: detected capacity change from 0 to 512 [ 72.465015][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.478825][ T6590] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.494542][ T29] audit: type=1400 audit(1725216579.919:1509): avc: denied { map } for pid=6589 comm="syz.0.537" path="/109/bus/memory.events.local" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.522877][ T29] audit: type=1400 audit(1725216579.949:1510): avc: denied { setattr } for pid=6589 comm="syz.0.537" name="bus" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.525217][ T6600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 72.557049][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 72.566861][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.595621][ T29] audit: type=1400 audit(1725216580.019:1511): avc: denied { mount } for pid=6604 comm="syz.0.541" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.602810][ T6605] loop0: detected capacity change from 0 to 256 [ 72.631434][ T6605] FAT-fs (loop0): bogus number of directory entries (17407) [ 72.638773][ T6605] FAT-fs (loop0): Can't find a valid FAT filesystem [ 72.689827][ C1] hrtimer: interrupt took 17093 ns [ 72.697034][ T29] audit: type=1400 audit(1725216580.119:1512): avc: denied { create } for pid=6611 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.712418][ T6607] loop1: detected capacity change from 0 to 256 [ 72.730309][ T6607] FAT-fs (loop1): bogus number of directory entries (17407) [ 72.737751][ T6607] FAT-fs (loop1): Can't find a valid FAT filesystem [ 72.748956][ T29] audit: type=1400 audit(1725216580.169:1513): avc: denied { append } for pid=6611 comm="syz.0.545" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.800584][ T6619] program syz.3.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.840166][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x1 [ 72.847585][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.855026][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.862553][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.870219][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x2 [ 72.877597][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.885062][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.892482][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.899902][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.907280][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.914696][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.922118][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.929473][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.937009][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.944395][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.951784][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.959213][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.966633][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.974010][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.981469][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.989039][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 72.996441][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.003831][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.011315][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.018687][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.026097][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.033555][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.040962][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.048359][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.055753][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.063176][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.070608][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.078070][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.085463][ T4090] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 73.093656][ T4090] hid-generic 0006:0000:0000.001B: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 73.138399][ T6636] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.160331][ T6640] loop3: detected capacity change from 0 to 128 [ 73.183418][ T6642] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 73.183418][ T6642] program syz.0.557 not setting count and/or reply_len properly [ 73.222625][ T6642] loop0: detected capacity change from 0 to 2048 [ 73.233513][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.251430][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.252376][ T29] audit: type=1400 audit(1725216580.679:1514): avc: denied { read } for pid=6647 comm="syz.1.560" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.286200][ T29] audit: type=1400 audit(1725216580.679:1515): avc: denied { open } for pid=6647 comm="syz.1.560" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.364650][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x1 [ 73.372247][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.379687][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.387136][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.394551][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x2 [ 73.402047][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.409514][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.416942][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.424358][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.431882][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.435428][ T29] audit: type=1400 audit(1725216580.779:1516): avc: denied { create } for pid=6657 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.439341][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.466630][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.474051][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.481454][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.488846][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.496308][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.503721][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.511155][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.518541][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.525990][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.533398][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.540799][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548188][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548212][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548234][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548253][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548276][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548297][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548356][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548376][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548395][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548419][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548495][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.548515][ T24] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 73.550005][ T24] hid-generic 0006:0000:0000.001C: hidraw0: VIRTUAL HID v0.00 Device [syz0] on syz0 [ 73.587271][ T6662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.557: bg 0: block 234: padding at end of block bitmap is not set [ 73.665604][ T6662] EXT4-fs (loop0): Remounting filesystem read-only [ 73.684324][ T6642] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 73.700472][ T6668] FAULT_INJECTION: forcing a failure. [ 73.700472][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 73.713133][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.3.565 Not tainted 6.11.0-rc6-syzkaller #0 [ 73.722022][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 73.732084][ T6668] Call Trace: [ 73.735375][ T6668] [ 73.738315][ T6668] dump_stack_lvl+0xf2/0x150 [ 73.742909][ T6668] dump_stack+0x15/0x20 [ 73.747150][ T6668] should_fail_ex+0x229/0x230 [ 73.751832][ T6668] ? __alloc_skb+0x10b/0x310 [ 73.756459][ T6668] should_failslab+0x8f/0xb0 [ 73.761081][ T6668] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 73.766918][ T6668] ? __rtnl_unlock+0x99/0xb0 [ 73.771523][ T6668] __alloc_skb+0x10b/0x310 [ 73.776016][ T6668] netlink_ack+0xef/0x4f0 [ 73.780583][ T6668] ? avc_has_perm_noaudit+0x1cc/0x210 [ 73.785990][ T6668] netlink_rcv_skb+0x19c/0x230 [ 73.790772][ T6668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.796243][ T6668] rtnetlink_rcv+0x1c/0x30 [ 73.800698][ T6668] netlink_unicast+0x599/0x670 [ 73.805523][ T6668] netlink_sendmsg+0x5cc/0x6e0 [ 73.810327][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.815708][ T6668] __sock_sendmsg+0x140/0x180 [ 73.820411][ T6668] ____sys_sendmsg+0x312/0x410 [ 73.825234][ T6668] __sys_sendmsg+0x1e9/0x280 [ 73.829928][ T6668] __x64_sys_sendmsg+0x46/0x50 [ 73.834860][ T6668] x64_sys_call+0x2689/0x2d60 [ 73.839568][ T6668] do_syscall_64+0xc9/0x1c0 [ 73.844180][ T6668] ? clear_bhb_loop+0x55/0xb0 [ 73.848929][ T6668] ? clear_bhb_loop+0x55/0xb0 [ 73.853665][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.859675][ T6668] RIP: 0033:0x7f1b7ff09eb9 [ 73.864109][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.883851][ T6668] RSP: 002b:00007f1b7eb87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.892321][ T6668] RAX: ffffffffffffffda RBX: 00007f1b800a5f80 RCX: 00007f1b7ff09eb9 [ 73.900299][ T6668] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 73.908350][ T6668] RBP: 00007f1b7eb87090 R08: 0000000000000000 R09: 0000000000000000 [ 73.916331][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.924380][ T6668] R13: 0000000000000000 R14: 00007f1b800a5f80 R15: 00007ffd6fd12918 [ 73.932362][ T6668] [ 73.992830][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.009492][ T6672] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 74.035489][ T6674] ================================================================== [ 74.043608][ T6674] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 74.050399][ T6674] [ 74.052721][ T6674] write to 0xffff888101fb6c00 of 8 bytes by task 6673 on cpu 1: [ 74.060450][ T6674] mas_wmb_replace+0x20f/0x14f0 [ 74.065313][ T6674] mas_wr_modify+0x183d/0x3c90 [ 74.070084][ T6674] mas_wr_store_entry+0x250/0x390 [ 74.075377][ T6674] mas_store_prealloc+0x151/0x2b0 [ 74.080403][ T6674] vma_iter_store+0x168/0x190 [ 74.085081][ T6674] mmap_region+0xfc2/0x1620 [ 74.089591][ T6674] do_mmap+0x72a/0xb70 [ 74.093662][ T6674] vm_mmap_pgoff+0x133/0x290 [ 74.098280][ T6674] ksys_mmap_pgoff+0xd0/0x340 [ 74.102966][ T6674] x64_sys_call+0x1884/0x2d60 [ 74.106540][ T6679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 74.107640][ T6674] do_syscall_64+0xc9/0x1c0 [ 74.120525][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.126425][ T6674] [ 74.128728][ T6674] read to 0xffff888101fb6c00 of 8 bytes by task 6674 on cpu 0: [ 74.136243][ T6674] mas_walk+0x123/0x320 [ 74.140391][ T6674] lock_vma_under_rcu+0x84/0x260 [ 74.145311][ T6674] exc_page_fault+0x150/0x650 [ 74.149971][ T6674] asm_exc_page_fault+0x26/0x30 [ 74.154807][ T6674] [ 74.157108][ T6674] value changed: 0xffff888115e88041 -> 0xffff888101fb6c00 [ 74.164186][ T6674] [ 74.166482][ T6674] Reported by Kernel Concurrency Sanitizer on: [ 74.172604][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.0.566 Not tainted 6.11.0-rc6-syzkaller #0 [ 74.181433][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.191639][ T6674] ==================================================================