last executing test programs: 6.081704365s ago: executing program 3 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81f, &(0x7f00000009c0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_continue}, {@bsdgroups}, {@errors_continue}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 5.669949529s ago: executing program 3 (id=2289): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 5.53574388s ago: executing program 3 (id=2291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0xe8, 0x1170, 0x1170, 0xe8, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x12, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\xd9', 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 4.340537781s ago: executing program 2 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 4.161712412s ago: executing program 2 (id=2299): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000400)=""/181, &(0x7f0000000580)=0xb5) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x3, 0x8, 0x68, 0x0, "090ebfec9e2e3f6284fffc3a53"}]}, 0x28}}, 0x4040014) 2.397430718s ago: executing program 0 (id=2307): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.381003748s ago: executing program 2 (id=2308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r0, 0x0, 0x0) 2.21510156s ago: executing program 1 (id=2311): open(&(0x7f0000000180)='.\x00', 0x204003, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000d5", @ANYRES8=r2], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r5, @ANYBLOB="0000000092000000000000000000000071376ccc70586c976c20de3d6bfa6a2a6a526ad59810e7a04aa7e216ba95ee00000000", @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r2], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001b40)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mlockall(0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2.17722616s ago: executing program 0 (id=2312): open(&(0x7f0000000180)='.\x00', 0x204003, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000d5", @ANYRES8=r2], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r5, @ANYBLOB="0000000092000000000000000000000071376ccc70586c976c20de3d6bfa6a2a6a526ad59810e7a04aa7e216ba95ee00000000", @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r2], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001b40)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mlockall(0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2.085402501s ago: executing program 2 (id=2313): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81f, &(0x7f00000009c0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_continue}, {@bsdgroups}, {@errors_continue}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 2.015647491s ago: executing program 1 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.962677952s ago: executing program 0 (id=2315): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000280)={&(0x7f0000002000)={[{&(0x7f0000000180)="97de17617a68349d3bfe05d30cb4bd6bc4ffb0c15249347d8b8a2660836c783ccb2c3a70aac2b51efa04deb1ca9cd9774f415709", 0x34, 0x1}, {&(0x7f00000001c0)="fe1b8add4e207c3a8cc46a09cabff5f7f1e108c739031f3488126d14f842a50ad0225796ae9d30b01fb4492443943a2a853b34f098efbd8bc1129ce74db9fe18f50652906865ce0b7cbf", 0x4a}, {&(0x7f0000000240)="fbbc779725a69491c3379fbe634b788459028bc83088648c22b5745f36b7a95ed797534dc20bd52ac4a06fd475b78bbd09e90ad26a", 0x35, 0x103}, {&(0x7f00000008c0)="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", 0x1000, 0x1}, {&(0x7f0000000380)="2facd60e0da84a6c136499e1adfdba7eb1fe4680d16a0e0d09885d3accea1180d844e00c7a4241868afe17d078d85caac441e96a4ff3c4630dc4855d6f12c7b72311b27d2d9d6a3f17c26a2003c8e9c8913d87119d330ff98b272020d0acdfe53ad9b6533ab6f62446bda6109bab83a10085545220848cdb927a8748f6537163e95f11c979db82ce39c4b3", 0x8b, 0x1}]}, 0x5, 0x1}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000066009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xffff, 0x6480d7acd8201374}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000004c0)='GPL\x00', 0x67db, 0xa2, &(0x7f0000000500)=""/162, 0x40f00, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xb, 0x56a07f39, 0xf}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r0, r2, r0, r0, 0x1, r0], &(0x7f0000000700)=[{0x1, 0x3, 0x3, 0x6}, {0x2, 0x4, 0x2, 0x7}, {0x5, 0x4, 0x3}, {0x3, 0x2, 0x1, 0x5}, {0x2, 0x4, 0xe, 0xd}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) timer_delete(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1.878560213s ago: executing program 1 (id=2316): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60, 0x8}]}) write$ppp(r0, &(0x7f0000000100)="5fa5", 0x2) sysinfo(&(0x7f0000000500)=""/218) r1 = syz_io_uring_setup(0x189c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040043001f0003000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r6 = open_tree(r5, &(0x7f00000001c0)='\x00', 0x81801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) write$rfkill(r6, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x1}, 0x8) shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000000100000000000000000000001100000000000000000000000100000000000000000000002c000000000000000000000007000000071bb5640101010a010101640101026401010000000000ffffffff0000000000140000000000000000000000020000004afffffff200000010000000000000000000000007000000140000000000000000000000070000004404627000"/184], 0xb8}}], 0x1, 0x1) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xfd44) sysinfo(&(0x7f0000000300)=""/223) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x35, 0x0, 0x2}, {0x5}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000100)={0x4, 0xae16, 0x8ae}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r8, 0x5607) ioctl$KDMKTONE(r5, 0x4b30, 0x2) 1.807982953s ago: executing program 2 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x181381) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r3, 0x400101, 0x1) getdents64(r3, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/5, 0x5, 0x8, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r6 = gettid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, r6, 0x0, 0x4001) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) fstat(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r14}]}]}, 0x28}}, 0x0) r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r19 = openat(r3, &(0x7f0000000780)='./file0\x00', 0x200081, 0x28) sendmmsg$unix(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="174f85e11e7a2756477c917164802f4f8434b6789b", 0x15}, {&(0x7f0000000400)="ad90a052c233cb783657ad589127d26ea49517176ead73ee47d0d9ac47ca376d3163d98cb97735dddcaaea6eb8edb59d95135a04b7f73be644f24008227cc95c19f40a898e669b5977f3c03885131d3e3d60684c37d3f4624a4171a1b7a55b4d23476ba379e4a084972f1233e8b6941674087af32d9e4d5c2064b14c8732713289", 0x81}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000800", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYRES32=0xee00, @ANYBLOB="0000000039000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r5, @ANYRES32=r16, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="000000001000000000000000010000000100000030000000000000000100000001000000", @ANYRES32=r18, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r19, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r17, @ANYBLOB="00000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x50}}], 0x1, 0x4) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010004000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040007000000000008000600f66501fc1603c00ee3f3ed2189131f56ea42705ef4a29f4761f6b81e21313c3453da3dee8d7eb33b690b1d21bb83139e0874a2e25e59f188b09fb3f013b45127d188d088e4026a768140a1c2da7be575ae9edad9ecdfcd1596865b28988f83", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r20, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.513097766s ago: executing program 2 (id=2319): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000400)=""/181, &(0x7f0000000580)=0xb5) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x3, 0x8, 0x68, 0x0, "090ebfec9e2e3f6284fffc3a53"}]}, 0x28}}, 0x4040014) 1.375833677s ago: executing program 1 (id=2320): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r0, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x880) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 1.248347228s ago: executing program 0 (id=2322): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000600)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) syz_io_uring_setup(0x195d, &(0x7f0000000180)={0x0, 0x28d4, 0x4000, 0x0, 0x20a, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000200)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122f, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 948.544951ms ago: executing program 4 (id=2325): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000080)={0x0, 0x79af, 0x400, 0x800, 0x32c}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c5, 0x8, 0x0, 0x0) 828.361412ms ago: executing program 1 (id=2326): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x49d, &(0x7f0000000080)={0x0, 0x79af, 0x400, 0x800, 0x32c}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd=r4, 0xa3f, 0x0, 0x0, 0xa, 0x0, {0x3, r3}}) io_uring_enter(r0, 0xfd0, 0x4c5, 0x8, 0x0, 0x0) 817.277122ms ago: executing program 4 (id=2327): unshare(0x2a020400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x20060400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c0000007548d310b32c24", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x10) r8 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r8, 0x110, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 662.345533ms ago: executing program 1 (id=2328): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r0, 0x0, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 627.901184ms ago: executing program 4 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x2060, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 469.582796ms ago: executing program 4 (id=2330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000003700)=""/4093, 0xffd}, {&(0x7f0000000c80)=""/180, 0xb4}, {&(0x7f0000000d40)=""/198, 0xc6}, {&(0x7f0000000e40)=""/186, 0xba}], 0x5}, 0x1801}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e489bcdd", 0x4}], 0x1, 0xfffffffc, 0xb, 0x2) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000840)={0x0, 0x0, 0x1d, 0xe4e, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) r7 = io_uring_setup(0x5d73, &(0x7f0000000880)={0x0, 0x2ac9, 0x8000, 0x2, 0x16f}) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0xffff}, {0x7}, {0xe, 0xc}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000040) fcntl$getflags(r7, 0x408) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x0, 0x0, 0x0, 0xb, 0x9, 0x9}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') lseek(r11, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r12, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="80000000010901040000e0ffffffffff000000010900010073797a3000000000080003400000000808000640000000000900010073797a3000000000080003400000000508000340000000090c0002000600034000020000280002000c0002800500010001000000060003400003000006000340000400000600034000020000bdcfe499846d747623a7721db21c12c6d6e0f686a7afb6fcc91717229b3bfecd08442b612160ec8403cc6c792a14e80dc085f508cc192a0383fa025702c357868fcac2c59fcbff6435bccb669a6bfd3b9da26b212fb9e506cb6b06c8d83b49bd834ba852a1e278d31893b73206f9c1da653f70d0b913d3f8021ad0c5c7fa4fb08fc0674c554cfcc8a80bb0640648f32f83fbb612"], 0x80}, 0x1, 0x0, 0x0, 0x400c081}, 0x400c040) 417.701626ms ago: executing program 0 (id=2331): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 348.366897ms ago: executing program 0 (id=2332): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1, 0x4}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) splice(r2, 0x0, r5, 0x0, 0x33fe0, 0x0) syslog(0x2, &(0x7f0000000040)=""/19, 0xe2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@debug}, {@minixdf}, {@lazytime}, {@nojournal_checksum}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file2\x00', 0x2000080, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572ad50372615d30b1c00000000000000000000000000000000000004"], 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) 280.265957ms ago: executing program 4 (id=2333): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 253.694987ms ago: executing program 3 (id=2334): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="cfbd7c161790", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 181.694118ms ago: executing program 4 (id=2335): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r2, 0x0, 0x9, 0x2000406) 84.935379ms ago: executing program 3 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async, rerun: 64) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0, 0x0, 0x0, 0xffffffffffffffd2}, 0x1}], 0x40, 0x2, 0x0) (async, rerun: 64) ioctl$sock_ifreq(r2, 0x8918, 0x0) (async, rerun: 64) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4620, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) (async) writev(r4, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) (async, rerun: 64) fstatfs(r4, &(0x7f0000000040)=""/10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000}, 0x18) (rerun: 64) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x18) (rerun: 32) 0s ago: executing program 3 (id=2337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r0, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x880) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) kernel console output (not intermixed with test programs): HW filter on device macvlan2 [ 161.964043][ T3417] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 161.972843][ T3417] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.007544][ T3004] udevd[3004]: worker [9564] terminated by signal 33 (Unknown signal 33) [ 162.020348][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 162.025822][ T3004] udevd[3004]: worker [9564] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000A/hidraw/hidraw0' [ 162.313017][ T9864] loop2: detected capacity change from 0 to 512 [ 162.323539][ T9864] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.339967][ T9864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1648: error while reading EA inode 32 err=-116 [ 162.359606][ T9864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1648: error while reading EA inode 32 err=-116 [ 162.377833][ T9864] EXT4-fs (loop2): 1 orphan inode deleted [ 162.447628][ T9881] loop0: detected capacity change from 0 to 512 [ 162.455019][ T9881] ext4: Unknown parameter 'euid>00000000000000000000' [ 162.605993][ T9890] loop4: detected capacity change from 0 to 128 [ 162.697779][ T9901] bond0: option miimon: invalid value (18446744073709551615) [ 162.705350][ T9901] bond0: option miimon: allowed values 0 - 2147483647 [ 162.713645][ T9901] bond0 (unregistering): Released all slaves [ 162.789651][ T9911] loop4: detected capacity change from 0 to 128 [ 162.803781][ T9911] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.819924][ T9911] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.893736][ T9918] loop0: detected capacity change from 0 to 512 [ 162.904822][ T9918] ext4: Unknown parameter 'euid>00000000000000000000' [ 162.920125][ T52] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.030806][ T9922] loop3: detected capacity change from 0 to 128 [ 163.071716][ T3578] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.090304][ T3578] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.113373][ T3578] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.129792][ T3578] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.176660][ T9941] loop1: detected capacity change from 0 to 512 [ 163.214827][ T9941] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.226131][ T9947] loop0: detected capacity change from 0 to 512 [ 163.227576][ T9941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1681: error while reading EA inode 32 err=-116 [ 163.245210][ T9941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1681: error while reading EA inode 32 err=-116 [ 163.258260][ T9941] EXT4-fs (loop1): 1 orphan inode deleted [ 163.275043][ T9947] ext4: Unknown parameter 'euid>00000000000000000000' [ 163.324912][ T9749] udevd[9749]: Failed to create symlink /run/udev/watch/2826: File exists [ 163.333951][ T9950] __nla_validate_parse: 2 callbacks suppressed [ 163.333969][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 163.429137][ T9966] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 163.442498][ T9962] hub 2-0:1.0: USB hub found [ 163.452128][ T9960] loop3: detected capacity change from 0 to 128 [ 163.468118][ T9962] hub 2-0:1.0: 8 ports detected [ 163.520270][ T9973] process 'syz.3.1696' launched './file0' with NULL argv: empty string added [ 163.599970][ T9982] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.616786][ T9981] loop4: detected capacity change from 0 to 512 [ 163.623942][ T9981] ext4: Unknown parameter 'euid>00000000000000000000' [ 163.646839][ T9985] netlink: 'syz.1.1698': attribute type 4 has an invalid length. [ 163.682269][ T9982] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.710625][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 163.762703][ T9982] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.815879][ T9989] lo speed is unknown, defaulting to 1000 [ 163.849061][ T9995] loop2: detected capacity change from 0 to 128 [ 163.862746][ T9982] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.876998][ T9995] EXT4-fs mount: 62 callbacks suppressed [ 163.877016][ T9995] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.901596][ T9995] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.954939][ T9995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9995 comm=+% [ 163.988122][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.153163][T10007] hub 2-0:1.0: USB hub found [ 164.166817][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 164.168099][T10007] hub 2-0:1.0: 8 ports detected [ 164.196142][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1711'. [ 164.223474][T10011] loop0: detected capacity change from 0 to 512 [ 164.240702][T10011] ext4: Unknown parameter 'euid>00000000000000000000' [ 164.325214][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 164.366201][T10019] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 164.377479][T10019] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 164.389116][T10021] loop0: detected capacity change from 0 to 8192 [ 164.406490][T10023] loop4: detected capacity change from 0 to 128 [ 164.408936][T10021] xt_hashlimit: max too large, truncated to 1048576 [ 164.420748][T10021] x_tables: duplicate underflow at hook 2 [ 164.466352][T10028] netlink: 'syz.4.1720': attribute type 10 has an invalid length. [ 164.486727][T10030] loop2: detected capacity change from 0 to 128 [ 164.507994][T10030] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.510420][T10028] team0: Port device dummy0 added [ 164.526957][T10030] ext4 filesystem being mounted at /331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.608730][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 164.619838][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1723'. [ 164.620493][T10033] netlink: 'syz.4.1720': attribute type 10 has an invalid length. [ 164.640946][T10033] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.672344][T10033] team0: Failed to send options change via netlink (err -105) [ 164.680465][T10033] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.698134][T10033] team0: Port device dummy0 removed [ 164.706292][T10033] dummy0: entered promiscuous mode [ 164.712443][T10033] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 164.864643][ T9083] hid_parser_main: 2 callbacks suppressed [ 164.864659][ T9083] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 164.878253][ T9083] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 164.886172][ T9083] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 164.895219][ T9083] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 164.909648][ T3004] udevd[3004]: worker [9605] terminated by signal 33 (Unknown signal 33) [ 164.920036][ T3004] udevd[3004]: worker [9605] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000B/hidraw/hidraw0' [ 164.953697][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 164.987395][T10088] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 164.999368][T10088] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 165.086038][T10101] loop0: detected capacity change from 0 to 128 [ 165.175888][T10122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.266033][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 165.276145][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1734'. [ 165.786683][T10208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.006615][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 166.006630][ T29] audit: type=1326 audit(1762285795.037:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.160938][ T29] audit: type=1326 audit(1762285795.077:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.184705][ T29] audit: type=1326 audit(1762285795.087:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.208196][ T29] audit: type=1326 audit(1762285795.087:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.231747][ T29] audit: type=1326 audit(1762285795.087:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.255359][ T29] audit: type=1326 audit(1762285795.087:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.278950][ T29] audit: type=1326 audit(1762285795.087:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.302484][ T29] audit: type=1326 audit(1762285795.087:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.326018][ T29] audit: type=1326 audit(1762285795.087:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.349490][ T29] audit: type=1326 audit(1762285795.087:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 166.819894][T10225] loop4: detected capacity change from 0 to 512 [ 166.827031][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.869609][T10225] EXT4-fs (loop4): orphan cleanup on readonly fs [ 166.900496][T10225] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1749: error while reading EA inode 32 err=-116 [ 166.917980][T10225] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1749: error while reading EA inode 32 err=-116 [ 166.984610][T10225] EXT4-fs (loop4): 1 orphan inode deleted [ 167.003382][T10225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.159771][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.990541][T10254] lo speed is unknown, defaulting to 1000 [ 168.302994][T10268] bond0: option miimon: invalid value (18446744073709551615) [ 168.310462][T10268] bond0: option miimon: allowed values 0 - 2147483647 [ 168.371035][T10268] bond0 (unregistering): Released all slaves [ 168.535255][T10274] __nla_validate_parse: 4 callbacks suppressed [ 168.535270][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 168.574668][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 168.583669][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 168.603227][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1769'. [ 168.970372][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 169.065101][T10287] hub 2-0:1.0: USB hub found [ 169.081149][T10287] hub 2-0:1.0: 8 ports detected [ 169.105908][T10291] loop0: detected capacity change from 0 to 512 [ 169.116824][T10291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.158766][T10291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1777: error while reading EA inode 32 err=-116 [ 169.200389][T10291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1777: error while reading EA inode 32 err=-116 [ 169.239778][ T3571] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.251467][T10291] EXT4-fs (loop0): 1 orphan inode deleted [ 169.257809][T10291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.308488][T10296] wireguard2: entered promiscuous mode [ 169.314084][T10296] wireguard2: entered allmulticast mode [ 169.324914][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.346143][ T3571] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.392144][T10296] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.436412][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 169.458870][T10302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1782'. [ 169.471644][ T3571] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.497783][ T3571] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.527940][T10304] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 169.538054][T10308] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1779'. [ 169.637078][T10296] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.681450][T10312] loop1: detected capacity change from 0 to 512 [ 169.715501][T10312] ext4: Unknown parameter 'euid>00000000000000000000' [ 169.851162][T10296] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.179846][T10296] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.195594][T10325] loop0: detected capacity change from 0 to 128 [ 170.435506][T10334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.223096][T10325] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.530263][T10325] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.564581][ T407] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.614121][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 172.640131][ T407] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.802048][T10353] loop4: detected capacity change from 0 to 512 [ 172.814638][ T407] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.848642][T10353] ext4: Unknown parameter 'euid>00000000000000000000' [ 172.869700][ T407] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.127730][T10367] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 173.481336][T10391] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.539940][T10393] bond0: option miimon: invalid value (18446744073709551615) [ 173.547449][T10393] bond0: option miimon: allowed values 0 - 2147483647 [ 173.561027][T10393] bond0 (unregistering): Released all slaves [ 173.580780][T10394] netlink: 'syz.3.1805': attribute type 4 has an invalid length. [ 173.700504][T10391] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.846711][T10422] __nla_validate_parse: 1 callbacks suppressed [ 173.846729][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 173.917068][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.933843][T10391] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.968809][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1807'. [ 173.990126][T10430] loop4: detected capacity change from 0 to 512 [ 174.004171][T10430] ext4: Unknown parameter 'euid>00000000000000000000' [ 174.143400][T10438] loop4: detected capacity change from 0 to 512 [ 174.155255][T10391] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.175813][T10438] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.193191][T10438] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1813: error while reading EA inode 32 err=-116 [ 174.258474][T10438] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1813: error while reading EA inode 32 err=-116 [ 174.313474][T10438] EXT4-fs (loop4): 1 orphan inode deleted [ 174.332141][T10438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.424943][ T3558] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.468448][ T3558] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.507541][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.521330][T10448] hub 2-0:1.0: USB hub found [ 174.534159][ T3558] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.544727][T10450] loop1: detected capacity change from 0 to 128 [ 174.551902][T10448] hub 2-0:1.0: 8 ports detected [ 174.577851][ T3558] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.594443][T10450] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.626805][T10454] loop3: detected capacity change from 0 to 512 [ 174.644779][T10450] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.687231][T10454] EXT4-fs (loop3): orphan cleanup on readonly fs [ 174.700314][T10454] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1819: error while reading EA inode 32 err=-116 [ 174.723869][T10454] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1819: error while reading EA inode 32 err=-116 [ 174.750999][T10454] EXT4-fs (loop3): 1 orphan inode deleted [ 174.767840][T10454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.849613][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.867916][T10459] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.926808][T10461] netlink: 'syz.0.1820': attribute type 4 has an invalid length. [ 175.045666][T10459] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.205382][T10459] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.272175][T10459] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.287431][T10463] loop3: detected capacity change from 0 to 512 [ 175.334210][T10463] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.361458][T10463] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1821: error while reading EA inode 32 err=-116 [ 175.389114][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 175.402434][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.402692][T10463] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1821: error while reading EA inode 32 err=-116 [ 175.417566][T10468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1822'. [ 175.455599][ T3560] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.484506][ T3560] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.513491][ T3560] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.544069][T10470] wireguard3: entered promiscuous mode [ 175.549711][T10470] wireguard3: entered allmulticast mode [ 175.571513][ T3560] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.584592][T10470] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.656777][T10474] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1824'. [ 175.755589][T10470] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.840546][ T9081] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 175.848287][ T9081] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 175.860649][ T9081] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 175.871703][ T9081] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.886842][ T3004] udevd[3004]: worker [9749] terminated by signal 33 (Unknown signal 33) [ 175.902319][T10470] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.921896][ T3004] udevd[3004]: worker [9749] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000C/hidraw/hidraw0' [ 176.045232][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 176.045247][ T29] audit: type=1326 audit(1762285805.037:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.075094][ T29] audit: type=1326 audit(1762285805.037:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.098664][ T29] audit: type=1326 audit(1762285805.037:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.122208][ T29] audit: type=1326 audit(1762285805.037:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.145854][ T29] audit: type=1326 audit(1762285805.037:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.169449][ T29] audit: type=1326 audit(1762285805.047:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.192967][ T29] audit: type=1326 audit(1762285805.047:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.216566][ T29] audit: type=1326 audit(1762285805.047:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.240161][ T29] audit: type=1326 audit(1762285805.047:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.263687][ T29] audit: type=1326 audit(1762285805.047:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 176.313825][T10470] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.336418][T10492] loop1: detected capacity change from 0 to 512 [ 176.345567][T10463] EXT4-fs (loop3): 1 orphan inode deleted [ 176.355398][T10463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.370568][T10492] ext4: Unknown parameter 'euid>00000000000000000000' [ 176.440652][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.516669][T10503] loop3: detected capacity change from 0 to 128 [ 176.538730][T10500] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 176.552432][T10505] loop1: detected capacity change from 0 to 128 [ 176.573524][T10503] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.640335][T10513] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 176.640357][T10503] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.739121][T10520] loop2: detected capacity change from 0 to 512 [ 176.748627][T10521] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.779620][T10520] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.801981][T10520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1841: error while reading EA inode 32 err=-116 [ 176.804683][T10525] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 176.815465][T10520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1841: error while reading EA inode 32 err=-116 [ 176.835439][T10520] EXT4-fs (loop2): 1 orphan inode deleted [ 176.842460][T10520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.843452][T10521] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.868806][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 176.880969][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.896154][T10521] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.929700][T10528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1844'. [ 176.954208][T10521] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.006359][T10532] hub 2-0:1.0: USB hub found [ 177.011750][T10532] hub 2-0:1.0: 8 ports detected [ 177.135962][T10537] loop2: detected capacity change from 0 to 128 [ 177.320816][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.373029][T10561] loop3: detected capacity change from 0 to 128 [ 177.396813][T10561] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.410159][T10561] ext4 filesystem being mounted at /389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.554385][ T9084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 177.562418][ T9084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 177.606761][ T9084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 177.623498][ T9084] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 177.637391][ T3004] udevd[3004]: worker [3793] terminated by signal 33 (Unknown signal 33) [ 177.656940][ T3004] udevd[3004]: worker [3793] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000D/hidraw/hidraw0' [ 177.782972][ T3563] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.793838][T10603] loop0: detected capacity change from 0 to 128 [ 177.805485][ T3563] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.824880][ T3563] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.844319][ T3558] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.850567][T10603] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.867816][T10603] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.244853][T10650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.639678][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.215647][ T2967] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 179.223827][ T2967] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 179.232603][ T2967] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 179.246120][ T2967] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.253167][ T3004] udevd[3004]: worker [10594] terminated by signal 33 (Unknown signal 33) [ 179.267341][ T3004] udevd[3004]: worker [10594] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000E/hidraw/hidraw0' [ 179.451689][ T3558] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480275][ T3558] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.507037][ T3558] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.543978][ T3558] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.625102][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 179.838515][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 179.868225][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 179.892480][T10751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1883'. [ 179.946820][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 180.057974][T10761] loop0: detected capacity change from 0 to 512 [ 180.090023][T10761] ext4: Unknown parameter 'euid>00000000000000000000' [ 180.239691][T10772] wireguard2: entered promiscuous mode [ 180.245216][T10772] wireguard2: entered allmulticast mode [ 180.294402][T10777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.310757][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.412954][T10794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1888'. [ 180.457149][T10777] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.494056][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 180.534195][T10777] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.551413][T10801] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.562695][T10793] syz.4.1891 (10793) used greatest stack depth: 8760 bytes left [ 180.580060][T10803] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.604173][T10806] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 180.630264][T10777] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.647257][T10808] netlink: 'syz.3.1890': attribute type 4 has an invalid length. [ 180.689729][T10801] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.714510][T10803] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.755793][T10801] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.756242][T10826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1896'. [ 180.816764][T10803] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.922417][T10801] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.960232][T10803] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.971630][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 181.018085][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 181.070875][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.092297][T10876] loop2: detected capacity change from 0 to 512 [ 181.099462][ T3567] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.114001][ T3567] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.128066][ T3567] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.137995][T10876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.153323][T10876] EXT4-fs (loop2): 1 truncate cleaned up [ 181.154171][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 181.154189][ T29] audit: type=1326 audit(1762285810.187:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.166297][T10876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.213226][ T29] audit: type=1326 audit(1762285810.227:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.236767][ T29] audit: type=1326 audit(1762285810.227:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.260537][ T29] audit: type=1326 audit(1762285810.227:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.284232][ T29] audit: type=1326 audit(1762285810.227:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.307823][ T29] audit: type=1326 audit(1762285810.227:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.331349][ T29] audit: type=1326 audit(1762285810.227:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.343307][T10889] loop4: detected capacity change from 0 to 512 [ 181.354912][ T29] audit: type=1326 audit(1762285810.237:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.384660][ T29] audit: type=1326 audit(1762285810.237:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.408226][ T29] audit: type=1326 audit(1762285810.237:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.4.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f455560f6c9 code=0x7ffc0000 [ 181.427893][T10889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.440342][T10889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1905: error while reading EA inode 32 err=-116 [ 181.453539][T10889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1905: error while reading EA inode 32 err=-116 [ 181.465299][ T2967] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 181.466967][T10889] EXT4-fs (loop4): 1 orphan inode deleted [ 181.473694][ T2967] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 181.481262][T10889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.491380][ T2967] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 181.514448][ T3004] udevd[3004]: worker [10749] terminated by signal 33 (Unknown signal 33) [ 181.523648][ T3004] udevd[3004]: worker [10749] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.000F/hidraw/hidraw0' [ 181.523751][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.536751][ T2967] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 181.645202][T10898] loop4: detected capacity change from 0 to 512 [ 181.658260][T10898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.669805][T10898] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1909: error while reading EA inode 32 err=-116 [ 181.687447][T10901] loop3: detected capacity change from 0 to 512 [ 181.692643][T10898] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1909: error while reading EA inode 32 err=-116 [ 181.702010][T10901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 181.713762][T10901] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1910: error while reading EA inode 32 err=-116 [ 181.718324][T10898] EXT4-fs (loop4): 1 orphan inode deleted [ 181.733041][T10901] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1910: error while reading EA inode 32 err=-116 [ 181.740463][T10898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.746625][T10901] EXT4-fs (loop3): 1 orphan inode deleted [ 181.764201][T10901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.801204][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.803848][ T3588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.818891][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.824728][ T3588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.859725][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.868500][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.974329][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.997668][T10914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.030698][T10916] loop0: detected capacity change from 0 to 512 [ 182.068455][T10916] EXT4-fs (loop0): orphan cleanup on readonly fs [ 182.076677][T10916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1916: error while reading EA inode 32 err=-116 [ 182.090562][T10916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1916: error while reading EA inode 32 err=-116 [ 182.111680][T10916] EXT4-fs (loop0): 1 orphan inode deleted [ 182.136712][T10916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.171119][T10925] loop3: detected capacity change from 0 to 8192 [ 182.190902][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.338011][ T3417] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 182.345913][ T3417] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 182.362606][ T3417] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 182.380325][ T3417] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 182.392861][T10943] loop3: detected capacity change from 0 to 128 [ 182.416730][ T3004] udevd[3004]: worker [9745] terminated by signal 33 (Unknown signal 33) [ 182.428721][ T3004] udevd[3004]: worker [9745] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.0010/hidraw/hidraw0' [ 182.442668][ T3004] udevd[3004]: worker [10927] terminated by signal 33 (Unknown signal 33) [ 182.451628][ T3004] udevd[3004]: worker [10927] failed while handling '/devices/virtual/block/loop3' [ 182.537559][T10957] loop0: detected capacity change from 0 to 512 [ 182.597784][T10957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 182.668061][T10957] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1935: error while reading EA inode 32 err=-116 [ 182.697659][T10957] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1935: error while reading EA inode 32 err=-116 [ 182.713199][T10957] EXT4-fs (loop0): 1 orphan inode deleted [ 182.724717][T10957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.752289][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.772757][ T3389] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 182.780654][ T3389] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 182.796656][ T3389] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 182.807308][T10977] loop3: detected capacity change from 0 to 128 [ 182.834863][ T3004] udevd[3004]: worker [10958] terminated by signal 33 (Unknown signal 33) [ 182.838474][ T3389] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 182.854809][ T3004] udevd[3004]: worker [10958] failed while handling '/devices/virtual/block/loop3' [ 182.907284][T10988] fido_id[10988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.980496][T10994] loop2: detected capacity change from 0 to 4096 [ 182.999939][T10994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.010750][T10994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.102337][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.176031][T11011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.192557][T11006] loop4: detected capacity change from 0 to 512 [ 183.208173][T11006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 183.217462][T11006] System zones: 1-2, 4-12, 8-8 [ 183.224625][T11006] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1955: invalid indirect mapped block 256 (level 2) [ 183.243611][T11015] loop2: detected capacity change from 0 to 128 [ 183.259227][T11006] EXT4-fs (loop4): 2 truncates cleaned up [ 183.266604][T11006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.314776][ T9084] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 183.323895][ T9084] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 183.365716][T11027] loop2: detected capacity change from 0 to 128 [ 183.385660][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.410252][T11027] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.414280][T11028] fido_id[11028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.449056][T11027] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.606670][ T295] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.623050][ T295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.654256][ T295] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.699424][ T295] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.790053][ T9084] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 183.848192][T11056] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 183.860217][T11056] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 183.899708][T11061] fido_id[11061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.008743][T11073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.319957][T11099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.298406][T11116] __nla_validate_parse: 15 callbacks suppressed [ 185.298426][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 186.007747][T11112] lo speed is unknown, defaulting to 1000 [ 186.267889][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 186.267906][ T29] audit: type=1326 audit(1762285814.347:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.297841][ T29] audit: type=1326 audit(1762285814.347:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.321429][ T29] audit: type=1326 audit(1762285814.647:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.344965][ T29] audit: type=1326 audit(1762285814.657:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.368590][ T29] audit: type=1326 audit(1762285814.657:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.392343][ T29] audit: type=1326 audit(1762285814.657:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.415922][ T29] audit: type=1326 audit(1762285814.657:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.661032][T11127] siw: device registration error -23 [ 186.671320][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 186.680458][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 186.724273][T11127] loop1: detected capacity change from 0 to 512 [ 186.923774][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1995'. [ 186.949492][ T29] audit: type=1326 audit(1762285815.967:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 186.973146][ T29] audit: type=1326 audit(1762285815.967:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e65cf6c9 code=0x7ffc0000 [ 187.114499][T11166] loop4: detected capacity change from 0 to 512 [ 187.129550][T11127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 187.182949][T11127] System zones: 1-2, 4-12, 8-8 [ 187.224459][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.248586][T11166] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1994: EA inode hash validation failed [ 187.261940][T11127] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1991: invalid indirect mapped block 256 (level 2) [ 187.385793][T11166] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 187.403410][T11127] EXT4-fs (loop1): 2 truncates cleaned up [ 187.449547][T11127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.527755][T11166] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1994: corrupted inode contents [ 187.592424][ T29] audit: type=1326 audit(1762285816.627:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa0e65cde17 code=0x7ffc0000 [ 187.641781][T11166] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1994: mark_inode_dirty error [ 187.773967][T11166] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1994: corrupted inode contents [ 187.852344][T11166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1994: mark_inode_dirty error [ 187.923901][T11166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1994: mark inode dirty (error -117) [ 187.957598][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.976876][T11166] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 187.994151][T11166] EXT4-fs (loop4): 1 orphan inode deleted [ 188.007303][T11166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.040857][T11166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.337145][T11205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.518472][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 188.619272][T11207] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 188.704263][T11207] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 188.728953][T11209] loop0: detected capacity change from 0 to 8192 [ 188.949573][T11222] wireguard3: entered promiscuous mode [ 188.955121][T11222] wireguard3: entered allmulticast mode [ 189.048723][T11227] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.114036][T11222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2010'. [ 189.170640][T11227] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.264902][T11227] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.330897][T11227] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.464170][ T2409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.483115][ T2409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.510322][ T2409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.536626][ T2409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.734892][T11249] loop1: detected capacity change from 0 to 512 [ 189.750199][T11249] ext4: Unknown parameter 'euid>00000000000000000000' [ 190.021920][T11257] loop1: detected capacity change from 0 to 512 [ 190.081429][T11257] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2019: EA inode hash validation failed [ 190.165859][T11257] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2019: corrupted inode contents [ 190.233781][T11257] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2019: mark_inode_dirty error [ 190.293362][T11257] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2019: corrupted inode contents [ 190.333895][T11257] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2019: mark_inode_dirty error [ 190.371968][T11257] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2019: mark inode dirty (error -117) [ 190.449017][T11257] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 190.491288][T11257] EXT4-fs (loop1): 1 orphan inode deleted [ 190.527301][T11257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.558551][T11270] loop4: detected capacity change from 0 to 512 [ 190.570887][T11257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.607877][T11270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.671308][T11270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2027: error while reading EA inode 32 err=-116 [ 190.720048][T11270] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 190.758047][T11270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2027: error while reading EA inode 32 err=-116 [ 190.774804][T11270] EXT4-fs (loop4): 1 orphan inode deleted [ 190.781480][T11273] wireguard4: entered promiscuous mode [ 190.787021][T11273] wireguard4: entered allmulticast mode [ 190.814162][T11270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.837811][T11273] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.917557][T11277] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2026'. [ 190.939960][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.040958][T11273] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.180946][T11273] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.239290][T11289] loop2: detected capacity change from 0 to 164 [ 191.249889][T11289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 191.338693][ T3417] hid_parser_main: 5 callbacks suppressed [ 191.338714][ T3417] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 191.352319][ T3417] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 191.363565][ T3417] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 191.378978][ T3004] udevd[3004]: worker [10960] terminated by signal 33 (Unknown signal 33) [ 191.389346][ T3004] udevd[3004]: worker [10960] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.0014/hidraw/hidraw0' [ 191.404509][ T3417] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 191.420330][T11273] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.707160][T11306] lo speed is unknown, defaulting to 1000 [ 192.783130][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 192.806615][T11310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2041'. [ 193.776565][T11303] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 193.786008][T11303] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 194.131869][T11315] loop4: detected capacity change from 0 to 128 [ 194.213837][T11325] loop2: detected capacity change from 0 to 164 [ 194.241288][T11325] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.257158][T11327] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.364908][T11331] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 194.541276][T11327] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.556511][T11332] loop2: detected capacity change from 0 to 512 [ 194.590343][T11332] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2049: EA inode hash validation failed [ 194.603920][T11332] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 194.618629][T11332] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2049: corrupted inode contents [ 194.631256][T11332] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.2049: mark_inode_dirty error [ 194.647806][T11327] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.659060][T11332] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2049: corrupted inode contents [ 194.673453][T11332] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2049: mark_inode_dirty error [ 194.697254][T11332] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2049: mark inode dirty (error -117) [ 194.724846][T11332] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 194.743890][T11332] EXT4-fs (loop2): 1 orphan inode deleted [ 194.918081][T11332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.953607][T11327] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.967001][T11332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.067387][T11337] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.100659][ T295] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.118291][T11338] netlink: 'syz.3.2050': attribute type 4 has an invalid length. [ 195.129262][ T295] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.148622][ T295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.166083][ T295] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.191087][T11337] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.259042][T11342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2052'. [ 195.270863][T11340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.285894][T11342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2052'. [ 195.300872][T11337] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.385362][T11337] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.502985][T11349] hub 2-0:1.0: USB hub found [ 195.511538][T11349] hub 2-0:1.0: 8 ports detected [ 195.534981][T11352] netlink: 'syz.2.2057': attribute type 4 has an invalid length. [ 195.623499][ T2409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.641554][ T2409] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.769947][ T2409] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.809647][ T2409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.830477][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 195.839571][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 195.947106][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.992739][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.008008][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 196.008026][ T29] audit: type=1326 audit(1762285825.037:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 196.090033][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.120954][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.164333][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2063'. [ 196.178416][T11363] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 196.220280][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2063'. [ 196.337342][T11371] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 196.411907][T11374] loop3: detected capacity change from 0 to 128 [ 196.512803][T11381] loop0: detected capacity change from 0 to 164 [ 196.605744][T11381] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.617688][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 196.627024][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2070'. [ 196.664850][T11381] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.686798][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 196.991143][ T29] audit: type=1326 audit(1762285825.037:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.014887][ T29] audit: type=1326 audit(1762285825.127:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.3.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.034877][T11392] lo speed is unknown, defaulting to 1000 [ 197.038575][ T29] audit: type=1326 audit(1762285825.127:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.067273][ T29] audit: type=1326 audit(1762285825.127:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.090460][ T29] audit: type=1326 audit(1762285825.137:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.113491][ T29] audit: type=1326 audit(1762285825.147:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.136549][ T29] audit: type=1326 audit(1762285825.147:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.159717][ T29] audit: type=1326 audit(1762285825.157:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.182837][ T29] audit: type=1326 audit(1762285825.157:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 197.184043][T11397] FAULT_INJECTION: forcing a failure. [ 197.184043][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 197.218591][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.2.2072 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.218633][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.218654][T11397] Call Trace: [ 197.218665][T11397] [ 197.218675][T11397] __dump_stack+0x1d/0x30 [ 197.218749][T11397] dump_stack_lvl+0xe8/0x140 [ 197.218778][T11397] dump_stack+0x15/0x1b [ 197.218904][T11397] should_fail_ex+0x265/0x280 [ 197.218926][T11397] should_failslab+0x8c/0xb0 [ 197.218964][T11397] __kmalloc_noprof+0xa5/0x570 [ 197.218993][T11397] ? bpf_test_init+0x86/0x140 [ 197.219101][T11397] bpf_test_init+0x86/0x140 [ 197.219143][T11397] bpf_prog_test_run_xdp+0x305/0x970 [ 197.219268][T11397] ? kstrtouint+0x51/0xc0 [ 197.219359][T11397] ? __rcu_read_unlock+0x4f/0x70 [ 197.219403][T11397] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 197.219463][T11397] bpf_prog_test_run+0x22a/0x390 [ 197.219495][T11397] __sys_bpf+0x4c0/0x7c0 [ 197.219531][T11397] __x64_sys_bpf+0x41/0x50 [ 197.219574][T11397] x64_sys_call+0x2aee/0x3000 [ 197.219668][T11397] do_syscall_64+0xd2/0x200 [ 197.219693][T11397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.219787][T11397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 197.219827][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.219856][T11397] RIP: 0033:0x7f2baeb9f6c9 [ 197.219870][T11397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.219958][T11397] RSP: 002b:00007f2bad607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.220036][T11397] RAX: ffffffffffffffda RBX: 00007f2baedf5fa0 RCX: 00007f2baeb9f6c9 [ 197.220096][T11397] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 197.220113][T11397] RBP: 00007f2bad607090 R08: 0000000000000000 R09: 0000000000000000 [ 197.220130][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.220163][T11397] R13: 00007f2baedf6038 R14: 00007f2baedf5fa0 R15: 00007fffb79edb38 [ 197.220183][T11397] [ 197.715227][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2076'. [ 197.764585][T11407] loop4: detected capacity change from 0 to 128 [ 197.771707][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2076'. [ 197.825849][T11407] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.888154][T11407] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.002887][T11415] loop0: detected capacity change from 0 to 128 [ 198.173405][T11422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.584484][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 199.358340][T11466] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.397658][T11473] netlink: 'syz.2.2093': attribute type 4 has an invalid length. [ 199.515604][T11466] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.671138][T11477] netlink: 'syz.0.2095': attribute type 4 has an invalid length. [ 199.807659][T11466] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.128612][T11466] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.155530][T11484] netlink: 'syz.3.2097': attribute type 4 has an invalid length. [ 200.246753][T11486] loop3: detected capacity change from 0 to 512 [ 200.269252][T11486] EXT4-fs (loop3): orphan cleanup on readonly fs [ 200.295923][T11486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2098: error while reading EA inode 32 err=-116 [ 200.325446][T11486] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.349765][T11486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2098: error while reading EA inode 32 err=-116 [ 200.365577][T11486] EXT4-fs (loop3): 1 orphan inode deleted [ 200.375701][T11486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 200.395530][ T3588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.412960][ T3588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.438885][ T3588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.462612][ T3588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.497192][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.614274][T11493] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 200.638532][T11493] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 200.951019][T11527] loop2: detected capacity change from 0 to 128 [ 201.023613][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.044383][T11527] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.079756][T11527] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.241420][T11538] netlink: 'syz.1.2106': attribute type 4 has an invalid length. [ 201.284042][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 201.284092][ T29] audit: type=1326 audit(1762285830.317:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.314306][ T29] audit: type=1326 audit(1762285830.317:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.352586][T11542] __nla_validate_parse: 3 callbacks suppressed [ 201.352603][T11542] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 201.354768][ T29] audit: type=1326 audit(1762285830.377:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.391321][ T29] audit: type=1326 audit(1762285830.377:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.414554][ T29] audit: type=1326 audit(1762285830.377:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.437623][ T29] audit: type=1326 audit(1762285830.377:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.460651][ T29] audit: type=1326 audit(1762285830.377:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.483798][ T29] audit: type=1326 audit(1762285830.377:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.506835][ T29] audit: type=1326 audit(1762285830.377:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.529931][ T29] audit: type=1326 audit(1762285830.377:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08940af6c9 code=0x7ffc0000 [ 201.642593][T11551] loop3: detected capacity change from 0 to 8192 [ 201.673555][T11553] loop4: detected capacity change from 0 to 128 [ 201.757651][T11558] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.830810][T11562] loop4: detected capacity change from 0 to 164 [ 201.844661][T11561] netlink: 'syz.3.2111': attribute type 4 has an invalid length. [ 201.863573][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.893683][T11558] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.907403][T11562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.944793][T11558] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.992587][ T3389] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 202.000412][ T3389] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 202.014176][T11558] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.103102][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.119576][ T3389] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 202.137344][T11567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.146513][ T3389] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 202.231664][T11163] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.237688][T11569] fido_id[11569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.254242][T11163] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.292252][T11163] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.341983][T11163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.351581][T11582] loop3: detected capacity change from 0 to 128 [ 202.375460][T11578] loop0: detected capacity change from 0 to 128 [ 202.579316][T11591] loop2: detected capacity change from 0 to 512 [ 202.631197][T11589] loop0: detected capacity change from 0 to 8192 [ 202.705301][T11591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.789179][T11591] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2122: error while reading EA inode 32 err=-116 [ 202.799756][T11594] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 202.877009][T11591] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2122: error while reading EA inode 32 err=-116 [ 202.897055][T11596] loop0: detected capacity change from 0 to 164 [ 202.912284][T11591] EXT4-fs (loop2): 1 orphan inode deleted [ 202.930495][T11591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.948778][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.956550][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.964333][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.972186][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.980284][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.988044][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 202.995766][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 203.010985][ T36] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 203.110753][T11596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 203.119745][T11600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.120045][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.171396][T11603] fido_id[11603]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.185330][T11606] loop4: detected capacity change from 0 to 128 [ 203.193021][T11596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 203.220955][T11606] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.243600][T11608] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 203.256600][T11606] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.300615][ T36] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 203.424279][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 203.480077][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2134'. [ 203.568320][T11642] loop3: detected capacity change from 0 to 128 [ 203.643983][T11642] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.670274][T11642] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.718043][T11660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2143'. [ 203.872333][T11672] hub 2-0:1.0: USB hub found [ 203.898105][T11672] hub 2-0:1.0: 8 ports detected [ 204.380274][T11725] loop1: detected capacity change from 0 to 8192 [ 204.529955][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 204.555002][T11747] syz_tun: entered allmulticast mode [ 204.567329][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 204.591242][T11747] syz_tun (unregistering): left allmulticast mode [ 204.747606][T11768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.771661][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.821202][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.904698][T11790] loop1: detected capacity change from 0 to 128 [ 204.944076][T11790] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.968445][T11792] loop2: detected capacity change from 0 to 128 [ 204.976360][T11790] ext4 filesystem being mounted at /381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.055072][T11798] lo speed is unknown, defaulting to 1000 [ 205.244804][ T23] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 205.296306][T11828] fido_id[11828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.898990][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.989761][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.990718][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.065628][T11883] hub 2-0:1.0: USB hub found [ 206.100121][T11883] hub 2-0:1.0: 8 ports detected [ 206.133435][T11887] loop3: detected capacity change from 0 to 512 [ 206.183995][T11887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.235124][T11891] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 206.245880][T11887] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2163: error while reading EA inode 32 err=-116 [ 206.300085][T11887] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2163: error while reading EA inode 32 err=-116 [ 206.322004][T11897] loop0: detected capacity change from 0 to 512 [ 206.327164][T11887] EXT4-fs (loop3): 1 orphan inode deleted [ 206.335099][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 206.347317][T11887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.368602][T11897] EXT4-fs (loop0): orphan cleanup on readonly fs [ 206.390028][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.396592][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 206.433797][T11897] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2167: error while reading EA inode 32 err=-116 [ 206.451281][T11904] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 206.467995][T11897] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2167: error while reading EA inode 32 err=-116 [ 206.530391][T11897] EXT4-fs (loop0): 1 orphan inode deleted [ 206.541162][T11897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.554111][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 206.589459][ T9081] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 206.667697][T11916] fido_id[11916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.687419][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.703434][T11918] loop1: detected capacity change from 0 to 1764 [ 206.729013][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 206.729031][ T29] audit: type=1400 audit(1762285835.757:6144): avc: denied { remount } for pid=11917 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 206.759134][T11922] loop3: detected capacity change from 0 to 512 [ 206.796629][T11922] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2171: EA inode hash validation failed [ 206.854069][T11922] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 206.904992][T11925] lo speed is unknown, defaulting to 1000 [ 206.909125][T11922] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2171: corrupted inode contents [ 206.924069][T11927] loop1: detected capacity change from 0 to 128 [ 206.964206][T11922] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.2171: mark_inode_dirty error [ 206.998394][T11922] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2171: corrupted inode contents [ 207.010670][T11922] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.2171: mark_inode_dirty error [ 207.031478][T11922] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2171: mark inode dirty (error -117) [ 207.044711][T11922] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 207.054970][T11922] EXT4-fs (loop3): 1 orphan inode deleted [ 207.061751][T11922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.088265][T11922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.313848][T11938] loop0: detected capacity change from 0 to 512 [ 207.322421][T11939] loop4: detected capacity change from 0 to 128 [ 207.334737][T11941] netlink: 'syz.2.2181': attribute type 4 has an invalid length. [ 207.373803][T11942] loop1: detected capacity change from 0 to 512 [ 207.387188][T11938] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.403745][T11938] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2180: error while reading EA inode 32 err=-116 [ 207.450880][T11938] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 207.465388][T11939] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 207.486079][T11942] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2179: EA inode hash validation failed [ 207.499703][T11942] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 207.513155][T11942] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2179: corrupted inode contents [ 207.579892][T11942] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2179: mark_inode_dirty error [ 207.604903][T11938] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2180: error while reading EA inode 32 err=-116 [ 207.666923][T11942] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2179: corrupted inode contents [ 207.703730][T11942] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2179: mark_inode_dirty error [ 207.705904][T11938] EXT4-fs (loop0): 1 orphan inode deleted [ 207.716289][T11942] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2179: mark inode dirty (error -117) [ 207.734534][T11942] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 207.745936][T11942] EXT4-fs (loop1): 1 orphan inode deleted [ 207.754038][T11942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.766760][T11938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.767790][T11942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.813452][T11956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2186'. [ 207.890237][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.983909][T11960] hub 2-0:1.0: USB hub found [ 207.989110][T11960] hub 2-0:1.0: 8 ports detected [ 208.136469][ T29] audit: type=1404 audit(1762285837.167:6145): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 208.151781][ T29] audit: type=1404 audit(1762285837.167:6146): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 208.161010][T11969] loop0: detected capacity change from 0 to 512 [ 208.178697][T11967] loop2: detected capacity change from 0 to 512 [ 208.191614][T11967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.203333][ T29] audit: type=1400 audit(1762285837.197:6147): avc: denied { read write } for pid=11961 comm="syz.0.2188" name="loop0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.227599][ T29] audit: type=1400 audit(1762285837.197:6148): avc: denied { open } for pid=11961 comm="syz.0.2188" path="/dev/loop0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.251781][ T29] audit: type=1400 audit(1762285837.197:6149): avc: denied { ioctl } for pid=11961 comm="syz.0.2188" path="/dev/loop0" dev="devtmpfs" ino=696 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.277454][ T29] audit: type=1400 audit(1762285837.227:6150): avc: denied { mounton } for pid=11966 comm="syz.2.2190" path="/429/file2" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.291372][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2193'. [ 208.301288][ T29] audit: type=1400 audit(1762285837.237:6151): avc: denied { create } for pid=11971 comm="syz.1.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.310888][T11970] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.330043][ T29] audit: type=1400 audit(1762285837.247:6152): avc: denied { mounton } for pid=11961 comm="syz.0.2188" path="/473/file0" dev="tmpfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.362692][ T29] audit: type=1400 audit(1762285837.297:6153): avc: denied { create } for pid=11968 comm="syz.3.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.391066][T11969] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2188: EA inode hash validation failed [ 208.404902][T11976] netlink: 'syz.3.2191': attribute type 4 has an invalid length. [ 208.413583][T11967] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 208.421848][T11967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 208.432458][T11969] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2188: corrupted inode contents [ 208.451364][T11970] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.464717][T11969] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.2188: mark_inode_dirty error [ 208.476966][T11967] System zones: 0-1, 15-15, 18-18, 34-34 [ 208.483237][T11969] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2188: corrupted inode contents [ 208.496199][T11967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 208.503569][T11967] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.518231][T11967] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 208.530101][T11970] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.542351][T11969] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2188: mark_inode_dirty error [ 208.560236][T11967] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2190: bg 0: block 40: padding at end of block bitmap is not set [ 208.585866][T11967] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 208.595201][T11969] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2188: mark inode dirty (error -117) [ 208.613334][T11967] EXT4-fs (loop2): 1 truncate cleaned up [ 208.619201][T11970] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.642937][T11980] loop1: detected capacity change from 0 to 512 [ 208.663603][T11967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.677828][T11980] ext4: Unknown parameter 'euid>00000000000000000000' [ 208.685859][T11969] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 208.709653][T11969] EXT4-fs (loop0): 1 orphan inode deleted [ 208.718625][T11967] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.2190: bad symlink. [ 208.735281][T11969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.776370][T11969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.791524][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.803800][T11877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.817172][T11877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.846069][T11877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.895655][T11877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.942565][T11988] loop3: detected capacity change from 0 to 512 [ 208.951937][T11988] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.959521][T11988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2199: error while reading EA inode 32 err=-116 [ 208.998746][T11988] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.089593][T11988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2199: error while reading EA inode 32 err=-116 [ 209.108949][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 209.120483][T11988] EXT4-fs (loop3): 1 orphan inode deleted [ 209.137226][T11988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.165701][T11993] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 209.176813][T11993] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 209.220031][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.220786][T11997] hub 2-0:1.0: USB hub found [ 209.256242][T11997] hub 2-0:1.0: 8 ports detected [ 209.345217][T12007] loop1: detected capacity change from 0 to 512 [ 209.357186][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2204'. [ 209.399611][T12010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2204'. [ 209.429288][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2204'. [ 209.440457][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2204'. [ 209.449987][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2204'. [ 209.480180][T12007] EXT4-fs (loop1): orphan cleanup on readonly fs [ 209.508216][T12007] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2205: error while reading EA inode 32 err=-116 [ 209.633858][T12007] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2205: error while reading EA inode 32 err=-116 [ 209.698505][T12007] EXT4-fs (loop1): 1 orphan inode deleted [ 209.720687][T12007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.824785][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.967540][T12028] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.001555][T12033] loop3: detected capacity change from 0 to 128 [ 210.009621][T12029] siw: device registration error -23 [ 210.020001][T12029] loop0: detected capacity change from 0 to 512 [ 210.025347][T12032] loop2: detected capacity change from 0 to 1024 [ 210.037622][T12029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 210.052045][T12032] EXT4-fs: inline encryption not supported [ 210.059126][T12035] netlink: 'syz.1.2212': attribute type 4 has an invalid length. [ 210.080397][T12029] System zones: 1-2, 4-12, 8-8 [ 210.105836][T12032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.119976][T12029] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2210: invalid indirect mapped block 256 (level 2) [ 210.150766][T12028] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.239535][T12029] EXT4-fs (loop0): 2 truncates cleaned up [ 210.249425][T12029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.293943][T12028] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.344100][T12028] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.442966][T11867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.463604][T11867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.491496][T11867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.500959][ T3424] hid_parser_main: 45 callbacks suppressed [ 210.500975][ T3424] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 210.513113][T11867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.514517][ T3424] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 210.546142][T12032] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 210.561601][T12032] EXT4-fs (loop2): Remounting filesystem read-only [ 210.577233][ T3424] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 210.591014][ T3424] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 210.629020][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.639082][T12049] fido_id[12049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.763522][T12053] FAULT_INJECTION: forcing a failure. [ 210.763522][T12053] name failslab, interval 1, probability 0, space 0, times 0 [ 210.776208][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.2.2218 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.776308][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.776324][T12053] Call Trace: [ 210.776332][T12053] [ 210.776340][T12053] __dump_stack+0x1d/0x30 [ 210.776369][T12053] dump_stack_lvl+0xe8/0x140 [ 210.776406][T12053] dump_stack+0x15/0x1b [ 210.776424][T12053] should_fail_ex+0x265/0x280 [ 210.776444][T12053] should_failslab+0x8c/0xb0 [ 210.776481][T12053] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 210.776547][T12053] ? __alloc_skb+0x101/0x320 [ 210.776585][T12053] __alloc_skb+0x101/0x320 [ 210.776625][T12053] netlink_alloc_large_skb+0xbf/0xf0 [ 210.776716][T12053] netlink_sendmsg+0x3cf/0x6b0 [ 210.776769][T12053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.776796][T12053] __sock_sendmsg+0x145/0x180 [ 210.776862][T12053] ____sys_sendmsg+0x31e/0x4e0 [ 210.776948][T12053] ___sys_sendmsg+0x17b/0x1d0 [ 210.776991][T12053] __x64_sys_sendmsg+0xd4/0x160 [ 210.777016][T12053] x64_sys_call+0x191e/0x3000 [ 210.777190][T12053] do_syscall_64+0xd2/0x200 [ 210.777217][T12053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.777249][T12053] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 210.777353][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.777375][T12053] RIP: 0033:0x7f2baeb9f6c9 [ 210.777394][T12053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.777416][T12053] RSP: 002b:00007f2bad607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.777441][T12053] RAX: ffffffffffffffda RBX: 00007f2baedf5fa0 RCX: 00007f2baeb9f6c9 [ 210.777464][T12053] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 000000000000000d [ 210.777482][T12053] RBP: 00007f2bad607090 R08: 0000000000000000 R09: 0000000000000000 [ 210.777512][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.777524][T12053] R13: 00007f2baedf6038 R14: 00007f2baedf5fa0 R15: 00007fffb79edb38 [ 210.777550][T12053] [ 211.010960][T12053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12053 comm=syz.2.2218 [ 211.058183][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.289111][T12076] loop2: detected capacity change from 0 to 8192 [ 211.456957][ T9081] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 211.464853][ T9081] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 211.490905][T12084] loop0: detected capacity change from 0 to 512 [ 211.497602][ T9081] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 211.508953][T12086] loop2: detected capacity change from 0 to 128 [ 211.520822][ T9081] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 211.533302][T12084] EXT4-fs (loop0): orphan cleanup on readonly fs [ 211.550549][T12084] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2227: error while reading EA inode 32 err=-116 [ 211.620927][T12091] fido_id[12091]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.639339][T12084] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2227: error while reading EA inode 32 err=-116 [ 211.661953][T12084] EXT4-fs (loop0): 1 orphan inode deleted [ 211.680622][T12084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.792789][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.802605][T12095] siw: device registration error -23 [ 211.812695][T12095] loop1: detected capacity change from 0 to 512 [ 211.821847][T12097] __nla_validate_parse: 36 callbacks suppressed [ 211.821864][T12097] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 211.839014][T12095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 211.860679][T12095] System zones: 1-2, 4-12, 8-8 [ 211.890796][T12095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2232: invalid indirect mapped block 256 (level 2) [ 211.939147][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 211.939166][ T29] audit: type=1400 audit(1762285840.967:6311): avc: denied { read } for pid=12099 comm="syz.2.2235" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.968743][ T29] audit: type=1400 audit(1762285840.967:6312): avc: denied { open } for pid=12099 comm="syz.2.2235" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 211.994008][T12095] EXT4-fs (loop1): 2 truncates cleaned up [ 212.035768][T12095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.128568][ T29] audit: type=1400 audit(1762285841.037:6313): avc: denied { create } for pid=12102 comm="syz.4.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.148729][ T29] audit: type=1400 audit(1762285841.037:6314): avc: denied { ioctl } for pid=12102 comm="syz.4.2236" path="socket:[33569]" dev="sockfs" ino=33569 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.173636][ T29] audit: type=1400 audit(1762285841.037:6315): avc: denied { mount } for pid=12102 comm="syz.4.2236" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.196172][ T29] audit: type=1400 audit(1762285841.037:6316): avc: denied { unmount } for pid=12102 comm="syz.4.2236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.216263][ T29] audit: type=1400 audit(1762285841.047:6317): avc: denied { ioctl } for pid=12099 comm="syz.2.2235" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.241468][ T29] audit: type=1400 audit(1762285841.097:6318): avc: denied { create } for pid=12109 comm="syz.0.2239" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.244546][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 212.276487][T12107] loop3: detected capacity change from 0 to 8192 [ 212.315997][ T29] audit: type=1400 audit(1762285841.337:6319): avc: denied { create } for pid=12115 comm="syz.2.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.349699][ T29] audit: type=1400 audit(1762285841.357:6320): avc: denied { read } for pid=12117 comm="syz.4.2242" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.452238][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 212.482217][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 212.740060][T12136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.815390][T12139] loop4: detected capacity change from 0 to 128 [ 212.854314][T12139] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 212.895897][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.924819][T12136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.027036][T12136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.108815][T12146] loop2: detected capacity change from 0 to 512 [ 213.122649][T12136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.150285][T12146] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.171756][T12146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2253: error while reading EA inode 32 err=-116 [ 213.197468][T12146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2253: error while reading EA inode 32 err=-116 [ 213.286387][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 213.369826][T12146] EXT4-fs (loop2): 1 orphan inode deleted [ 213.376602][T12146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.446417][T11877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.479529][T11877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.495925][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.513436][T11877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.534729][T12156] loop1: detected capacity change from 0 to 128 [ 213.539625][T11877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.611163][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 213.674181][T12167] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 213.739680][T12169] loop2: detected capacity change from 0 to 512 [ 213.765334][T12169] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.781073][T12169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2263: error while reading EA inode 32 err=-116 [ 213.812701][T12171] loop0: detected capacity change from 0 to 2048 [ 213.876783][T12171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.900002][T12169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2263: error while reading EA inode 32 err=-116 [ 213.913931][T12169] EXT4-fs (loop2): 1 orphan inode deleted [ 213.921068][T12169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.954925][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.965042][T12171] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 213.981766][T12173] lo speed is unknown, defaulting to 1000 [ 214.001140][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 214.020321][T12171] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 214.032675][T12171] EXT4-fs (loop0): This should not happen!! Data will be lost [ 214.032675][T12171] [ 214.042476][T12171] EXT4-fs (loop0): Total free blocks count 0 [ 214.048483][T12171] EXT4-fs (loop0): Free/Dirty block details [ 214.051220][T12177] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #12: comm syz.0.2264: corrupted in-inode xattr: e_name out of bounds [ 214.054489][T12171] EXT4-fs (loop0): free_blocks=2415919104 [ 214.074156][T12171] EXT4-fs (loop0): dirty_blocks=32 [ 214.079302][T12171] EXT4-fs (loop0): Block reservation details [ 214.085320][T12171] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 214.127437][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'. [ 214.237417][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 214.246541][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 214.315058][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.339951][T12199] loop1: detected capacity change from 0 to 512 [ 214.371813][T12199] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.393920][T12199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2271: error while reading EA inode 32 err=-116 [ 214.407434][T12199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2271: error while reading EA inode 32 err=-116 [ 214.421274][T12199] EXT4-fs (loop1): 1 orphan inode deleted [ 214.427943][T12199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 214.509742][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.654862][T12215] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.798752][T12231] loop1: detected capacity change from 0 to 512 [ 214.812669][T12215] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.850198][T12231] ext4: Unknown parameter 'euid>00000000000000000000' [ 214.939713][T12215] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.006953][T12251] loop3: detected capacity change from 0 to 512 [ 215.034751][T12215] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.050449][T12251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 215.061276][T12251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2286: error while reading EA inode 32 err=-116 [ 215.080533][T12254] loop1: detected capacity change from 0 to 128 [ 215.115703][T12254] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.149802][T12254] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.187778][T12251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2286: error while reading EA inode 32 err=-116 [ 215.223821][T12247] lo speed is unknown, defaulting to 1000 [ 215.244712][T11849] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.255909][T12251] EXT4-fs (loop3): 1 orphan inode deleted [ 215.273865][T11849] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.295327][T12251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.319406][T11849] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.338617][T11849] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.396228][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.624443][T12271] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 215.644827][T12271] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 215.880703][T12293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.900135][T12292] siw: device registration error -23 [ 216.000449][T12292] loop2: detected capacity change from 0 to 512 [ 216.216368][T12292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 216.224913][T12292] System zones: 1-2, 4-12, 8-8 [ 216.231550][T12292] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2292: invalid indirect mapped block 256 (level 2) [ 216.254855][T12292] EXT4-fs (loop2): 2 truncates cleaned up [ 216.279350][T12292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.438105][T12308] loop0: detected capacity change from 0 to 512 [ 216.470205][T12308] ext4: Unknown parameter 'euid>00000000000000000000' [ 216.628030][T12317] loop0: detected capacity change from 0 to 128 [ 216.731322][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.731764][T12329] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.814547][T12331] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 216.883865][T12329] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.897474][T12340] loop2: detected capacity change from 0 to 128 [ 216.940754][T12340] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.957878][T12329] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.001530][T12340] ext4 filesystem being mounted at /455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.051293][T12329] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.138912][ T3593] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.167187][ T3593] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.186786][ T3593] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.214201][ T3593] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.129341][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 218.129359][ T29] audit: type=1326 audit(1762285847.157:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.181529][ T29] audit: type=1326 audit(1762285847.167:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.183413][T12434] siw: device registration error -23 [ 218.206459][ T29] audit: type=1326 audit(1762285847.237:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.234302][ T29] audit: type=1326 audit(1762285847.237:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.271874][T12433] loop0: detected capacity change from 0 to 512 [ 218.293057][T12433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 218.302916][ T29] audit: type=1326 audit(1762285847.297:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.326523][ T29] audit: type=1326 audit(1762285847.297:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.326931][T12433] System zones: 1-2, 4-12, 8-8 [ 218.350258][ T29] audit: type=1326 audit(1762285847.297:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.378901][ T29] audit: type=1326 audit(1762285847.297:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.402560][ T29] audit: type=1326 audit(1762285847.297:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.402924][T12433] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2302: invalid indirect mapped block 256 (level 2) [ 218.426305][ T29] audit: type=1326 audit(1762285847.297:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c2baf6c9 code=0x7ffc0000 [ 218.453136][T12433] EXT4-fs (loop0): 2 truncates cleaned up [ 218.477869][T12433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.670380][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.692509][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.706628][T12445] loop4: detected capacity change from 0 to 512 [ 218.714028][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.725061][T12445] ext4: Unknown parameter 'euid>00000000000000000000' [ 218.754166][T12449] __nla_validate_parse: 3 callbacks suppressed [ 218.754185][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 218.769336][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 218.786275][T12447] loop0: detected capacity change from 0 to 128 [ 218.812192][ T2967] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 218.820060][ T2967] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 218.829724][T12454] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.861251][ T2967] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 218.885432][T12456] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 218.909765][ T2967] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 218.950928][T12454] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.985251][T12459] fido_id[12459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.024350][T12464] loop2: detected capacity change from 0 to 512 [ 219.054291][T12454] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.073931][T12464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.086902][T12464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2313: error while reading EA inode 32 err=-116 [ 219.103196][T12464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2313: error while reading EA inode 32 err=-116 [ 219.128701][T12454] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.144913][T12464] EXT4-fs (loop2): 1 orphan inode deleted [ 219.170216][T12464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 219.257551][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.308889][ T3593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.351064][ T3593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.369768][ T3593] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.424139][ T3593] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.449803][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 219.581257][T12479] loop2: detected capacity change from 0 to 128 [ 219.594069][T12480] loop4: detected capacity change from 0 to 512 [ 219.670482][T12479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.744726][T12479] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.794659][T12486] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.844087][T12486] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.882515][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 219.902152][T12492] loop0: detected capacity change from 0 to 1024 [ 219.924378][T12486] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.943383][T12492] EXT4-fs: inline encryption not supported [ 219.950109][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 219.991475][T12486] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.012101][T12492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.108338][T11877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.160305][T11877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.190772][T11877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.199553][T11877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.398013][T12526] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.445455][T12526] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.504816][T12533] netlink: 'syz.1.2328': attribute type 4 has an invalid length. [ 220.525275][T12492] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 220.525987][T12526] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.558334][T12492] EXT4-fs (loop0): Remounting filesystem read-only [ 220.585060][T12526] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.672547][T12541] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2330'. [ 220.764365][T12541] netlink: 'syz.4.2330': attribute type 2 has an invalid length. [ 220.831503][T12564] siw: device registration error -23 [ 220.838116][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 220.851732][T12557] loop0: detected capacity change from 0 to 512 [ 220.863515][T12557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 220.877214][T12567] loop4: detected capacity change from 0 to 128 [ 220.884885][T12557] System zones: 1-2, 4-12, 8-8 [ 220.902195][T12557] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2332: invalid indirect mapped block 256 (level 2) [ 220.916946][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 220.927488][T12557] EXT4-fs (loop0): 2 truncates cleaned up [ 221.082569][T12575] ================================================================== [ 221.090724][T12575] BUG: KCSAN: data-race in fat32_ent_put / fat_mirror_bhs [ 221.097903][T12575] [ 221.100243][T12575] read-write to 0xffff88813590d130 of 4 bytes by task 12571 on cpu 0: [ 221.108409][T12575] fat32_ent_put+0x4e/0x90 [ 221.112843][T12575] fat_alloc_clusters+0x4d1/0xa80 [ 221.117912][T12575] fat_get_block+0x258/0x5e0 [ 221.122533][T12575] __block_write_begin_int+0x400/0xf90 [ 221.128027][T12575] cont_write_begin+0x5fc/0x970 [ 221.132918][T12575] fat_write_begin+0x4f/0xe0 [ 221.137534][T12575] cont_write_begin+0x1b0/0x970 [ 221.142414][T12575] fat_write_begin+0x4f/0xe0 [ 221.147035][T12575] generic_perform_write+0x184/0x490 [ 221.152335][T12575] __generic_file_write_iter+0x9e/0x120 [ 221.157897][T12575] generic_file_write_iter+0x8d/0x2f0 [ 221.163280][T12575] __kernel_write_iter+0x2d6/0x540 [ 221.168412][T12575] dump_user_range+0x61e/0x8f0 [ 221.173207][T12575] elf_core_dump+0x1de7/0x1f80 [ 221.177998][T12575] coredump_write+0xb12/0xe30 [ 221.182698][T12575] vfs_coredump+0x143a/0x20d0 [ 221.187498][T12575] get_signal+0xd84/0xf70 [ 221.191844][T12575] arch_do_signal_or_restart+0x96/0x440 [ 221.197409][T12575] irqentry_exit_to_user_mode+0x5b/0xa0 [ 221.202987][T12575] irqentry_exit+0x12/0x50 [ 221.207437][T12575] asm_exc_page_fault+0x26/0x30 [ 221.212310][T12575] [ 221.214755][T12575] read to 0xffff88813590d000 of 512 bytes by task 12575 on cpu 1: [ 221.222575][T12575] fat_mirror_bhs+0x1df/0x320 [ 221.227287][T12575] fat_ent_write+0xd0/0xe0 [ 221.231727][T12575] fat_chain_add+0x15d/0x440 [ 221.236424][T12575] fat_get_block+0x46c/0x5e0 [ 221.241043][T12575] __block_write_begin_int+0x400/0xf90 [ 221.246526][T12575] cont_write_begin+0x5fc/0x970 [ 221.251406][T12575] fat_write_begin+0x4f/0xe0 [ 221.256014][T12575] cont_write_begin+0x1b0/0x970 [ 221.260893][T12575] fat_write_begin+0x4f/0xe0 [ 221.265500][T12575] generic_cont_expand_simple+0xb0/0x150 [ 221.271168][T12575] fat_cont_expand+0x3e/0x170 [ 221.275872][T12575] fat_fallocate+0x177/0x1c0 [ 221.280478][T12575] vfs_fallocate+0x3b6/0x400 [ 221.285095][T12575] __x64_sys_fallocate+0x7a/0xd0 [ 221.290054][T12575] x64_sys_call+0x2518/0x3000 [ 221.294756][T12575] do_syscall_64+0xd2/0x200 [ 221.299270][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.305176][T12575] [ 221.307516][T12575] Reported by Kernel Concurrency Sanitizer on: [ 221.313675][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.4.2335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.323515][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.333584][T12575] ================================================================== [ 221.359070][T12589] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.424854][T12589] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.485086][T12589] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.526115][T12589] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.593179][T11849] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.606259][ T3593] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.623960][ T3593] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.636861][T11849] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.515547][ T3593] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.527831][ T3593] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.540353][ T3593] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.552347][ T3593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0