last executing test programs: 1m9.820958421s ago: executing program 0 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) chown(&(0x7f0000000100)='./file0\x00', 0x0, r2) setns(0xffffffffffffffff, 0x24020000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r7, r6) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 1m9.429147777s ago: executing program 0 (id=1792): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m8.60966962s ago: executing program 0 (id=1801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000200000000000000300"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 1m8.008322051s ago: executing program 0 (id=1807): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="007885b257455400000000111e51b7f9f29ae659cdba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x810) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000"], 0x1c) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = gettid() process_vm_readv(r5, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff, 0xa}, {&(0x7f0000000140)=""/88, 0xbc}], 0x2, 0x0) r6 = syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ebe719f604dbd54a", 0x8) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x5, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x20000000, 0xd, {{0x11, 0x4, 0x1, 0x2e, 0x44, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x6}, @noop, @rr={0x7, 0x23, 0x7c, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @rand_addr=0x64010100, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="9500000000000000185c000007000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000184a0000f8ffffff000000000000000018230000", @ANYRES32=r4, @ANYBLOB="000000000a00002085200000040000008520000001000000bdead60fc000000018320000f7ffffff0000000000000000"], &(0x7f0000000500)='GPL\x00', 0x5, 0x72, &(0x7f0000000540)=""/114, 0x1f00, 0x4c, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x7, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, r4, r4, r8, r4], 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@gettaction={0x5c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 1m7.561024818s ago: executing program 0 (id=1814): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 1m7.352653051s ago: executing program 0 (id=1817): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 1m7.352251491s ago: executing program 32 (id=1817): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 3.291811035s ago: executing program 3 (id=2817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x9, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x80, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x4100, 0x20a29}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bond={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}, @IFLA_BOND_PRIMARY={0x8, 0xb, r4}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}, @IFLA_BOND_ARP_IP_TARGET={0x1c, 0x8, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x48}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fcfff4ff1d000100fcff09ad72d92031325a0000", @ANYRES32=0x0, @ANYBLOB="0000000014000100200100000000000000000000000000000600050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) r10 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r10, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000040), &(0x7f0000000180)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.911637882s ago: executing program 4 (id=2823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x20400, 0x10) finit_module(r2, 0x0, 0x2) 2.885213702s ago: executing program 4 (id=2824): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e3659902362d, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x4, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100c75, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 2.866606812s ago: executing program 4 (id=2825): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000000000011800000000000000"], 0x28}, 0x20008000) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9ff9a841e2eb21486e05ddee41240bc9d3ce3a9a5915be607c5cce0385d1db5d73fe4794696bea5234b5b7209ef99689157147ba0bea60c07affcc3d2706527418b3fbc67dbee9e29d93b4938d36a0e3f01c52cbea346f00e6bf6acce5d8e8eedf69af14bdb88bb7d2d40847bce82093fa40b6ed5f9ee97fdb7265d5342696d18c05b0278e21f98bb64d111424f71bdb84800a55ded9cbfb81313876006e513a28834022aed2e5e1784d02202fc9bca90c3c2552ae9b25346c12942e758c68ba6b3513fed39552171f78882a", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6c6f6f73652c6e6f657874656e642c6f626a5f757365723d2c6d61736b3d5e4d41595f57524954452c61756469742c6f626aef65ffa05f72cf6c653d67656e6576655b5d2c736d61636b66736861743d63657068002c00"/97]) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="a00100000314000127bd7000fbdbdf250900020073797a320000000008004100736977001400330076657468315f746f5f626f6e640000000900020073797a300000000008004100727865001400330076657468315f746f5f687372000000000900020073797a3200000000080041007278650014003300697036677265300000000000000000000900020073797a3200000000080041007278650014003300697036677265746170300000000000000900020073797a300000000008004100736977001400330073797a6b616c6c6572300000000000000900020073797a3100000000080041007369770014003300677265300000000000000000000000000900020073797a3200000000080041007278650014003300000000000000000000000000000000000900020073797a300000000008004100727865001400330076657468315f766972745f77696669000900020073797a300000000008004100720000000000000000000900020073797a320000000008004100736977001400330064756d6d793000"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) 2.733774155s ago: executing program 5 (id=2827): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000200000000000000300"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 2.43609605s ago: executing program 5 (id=2830): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaab1071a1d2ba986dd693d5109078c08a9180ec994001406ff00000000000000000000ffffe0000001fe8000000000000000000000000000aa5e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c200039078007f"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xab9d, 0x800, 0x0, 0x200019b}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020304090a00000000000000000000000300060000000e0002000000e000000900000000000000000200010000000000001d000200000000030005000000000002000000e00000010000000000000000a260b35b8648a34b24482fb27965f7d6a5e9d92a27ae719997fe9a00e37a92fb9728259c0be106bde4a6dd2dbfcbb3428ff30ed16e02a88cb111d90c8d324e5554230e12b1cafedce54861b74aa4a9857be44bab5e65e36715ecded3290e030005e4e0ecaaccbdf24d4f2b6af74fa26b00e3bb745d351fca15b15abaae7b954da2232bedffc33be1b61cec34ac56403a7bd8a05767037385fad4"], 0x50}}, 0x0) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$BTRFS_IOC_DEV_INFO(r2, 0x891a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r8], 0x48) 2.378308091s ago: executing program 3 (id=2832): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") syz_io_uring_setup(0x1d9e, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x0, 0x2d4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc}, {@dioread_lock}, {@noblock_validity}, {@abort}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@stripe={'stripe', 0x3d, 0x8001}}, {@bh}, {@dioread_nolock}]}, 0x3, 0x563, &(0x7f00000014c0)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYRES16=r1, @ANYRES16=r0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="149902000000000008001b0000000000a7da80d9eaf477900b63aeb59d19c02c4e203f8d244d7393c2ac9cd8165eba83ceb16399232cc9d5877749326da352a0c916dd7d60833af003daba9140"], 0x28}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xf, 0x1000, &(0x7f0000001a40)=""/4096, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x9, 0x800, 0x800}, 0x10, 0xffffffffffffffff, r6, 0x2, &(0x7f0000000980)=[r2], &(0x7f0000000a40)=[{0x1, 0x4, 0x8, 0x7}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0x1}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x32}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'veth1\x00', 'veth0\x00', {0xff}, {0xff}, 0x87, 0x2, 0x6, 0x9}, 0x0, 0x258, 0x2b8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3, 0x0, 0x20}, {0x2}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0xffffffff, 0xffffff00], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x41f86f8c, 0x9, 0x49, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r8, 0x8, 0x0, 0x0, 0x14}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, &(0x7f0000000340)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x8, 0x0, 0x0}) 2.272959172s ago: executing program 1 (id=2834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x20400, 0x10) finit_module(r2, 0x0, 0x2) 2.202064654s ago: executing program 1 (id=2835): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x560, &(0x7f00000007c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)) 2.158417194s ago: executing program 5 (id=2838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 2.099148105s ago: executing program 1 (id=2839): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r4, 0x0, 0x2000}, 0x18) tkill(r0, 0x13) 2.014905587s ago: executing program 1 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000200000000000000300"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.967490578s ago: executing program 4 (id=2841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) chown(&(0x7f0000000100)='./file0\x00', 0x0, r2) setns(0xffffffffffffffff, 0x24020000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfc0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r7, r6) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) 1.922878458s ago: executing program 1 (id=2842): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000780)={[{@errors_remount}, {@bsdgroups}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'errors=remount-ro'}}, {@smackfsroot={'smackfsroot', 0x3d, 'Us\r\xf4g_\xde\nnc\xd6\xcb\x80\xef\x8f3\xe6\xab\t=Q/n\x90\x1cP\x16m\xbfU\x82CPj6&QK\xe4\xbb \xf9\xc8\x9c\x19\x82\xb0\xf6I\xf9\x15\xee\x89\xf7?\fV\vc\x04\x1cK\x0f>q\xff13\x9fF\xca0/\xc9\xf1=T\xcc}\x85(\xe2\x92\xf3*{\xa7\xeb\x8d\xc5\x8e\xcb\xa7\xba\xfbq\xd2iom\xa0V\xb0\x83\xe9\x88\xdc\xc4\xc9\x80\x80\x9cK\x92\xce\xa3\x9a\xa7AMLW\xaa\xc7\xa7\xb8\x8e\xa5\x8d\x00\x8c>\x1f\xb3f\xe1xJqV\x18\xda\xbb\xd0`\xd0\xa4\x14\xf6\xe8\xdaO/\xa3\xc6P\x86\xd6 \xc0}\x97\xa7\x99zos\xe9\x164I\xc3z\xee/\x8f\xf8\xf6\x1f\x91Z)<\xd94\xb6\xea-\x14\xa2\x87\x84.7:A\xb8\xd6yo\xa7\b$\xf2m+\xd6\xb0\xc7dUh\xf4'}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@hash}]}, 0x4, 0x505, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.921931208s ago: executing program 3 (id=2843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 1.83620504s ago: executing program 5 (id=2845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) 1.770743571s ago: executing program 5 (id=2846): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ffd000/0x1000)=nil, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@noload}, {@nombcache}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.769837241s ago: executing program 4 (id=2847): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f00000010c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000240)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001100)=0x0) sched_setscheduler(r11, 0x5, &(0x7f0000001140)=0x7fff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 1.748736951s ago: executing program 3 (id=2848): r0 = syz_socket_connect_nvme_tcp() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x3) 1.675898992s ago: executing program 3 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 847.342346ms ago: executing program 3 (id=2850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 796.645277ms ago: executing program 2 (id=2851): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 749.580748ms ago: executing program 1 (id=2852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 748.885598ms ago: executing program 2 (id=2853): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) 748.199008ms ago: executing program 4 (id=2854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (fail_nth: 3) 683.161729ms ago: executing program 5 (id=2855): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x64000600) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x5, 0x3}, {0xa1}]}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socket$netlink(0x10, 0x3, 0x0) 614.98927ms ago: executing program 2 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) 573.030451ms ago: executing program 2 (id=2857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x4f, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 14.30948ms ago: executing program 2 (id=2858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0x1000000000}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x8, 0x204) 0s ago: executing program 2 (id=2859): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) kernel console output (not intermixed with test programs): 67295 subj=root:sysadm_r:sysadm_t pid=10703 comm="syz.4.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 196.995585][T10710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2313'. [ 197.000955][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.008370][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.012513][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.029366][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.029510][T10710] dummy0: entered promiscuous mode [ 197.037569][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.051803][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.059900][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.067902][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.076200][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.084380][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.092775][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.100611][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.108582][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.116452][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.125293][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.134804][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.144015][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.154011][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.164558][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.172503][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.181389][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.189268][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.197341][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.205034][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.212915][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.220776][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.228573][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.236360][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.244118][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.252016][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.259760][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.267533][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.275253][ T3586] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 197.283631][T10710] team0: Port device dummy0 removed [ 197.307085][T10710] bridge0: port 3(dummy0) entered blocking state [ 197.313476][T10710] bridge0: port 3(dummy0) entered disabled state [ 197.321149][T10710] dummy0: entered allmulticast mode [ 197.344250][ T3586] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 197.363699][T10718] ALSA: seq fatal error: cannot create timer (-19) [ 197.392992][T10720] fido_id[10720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.422790][T10723] netlink: 'syz.3.2323': attribute type 13 has an invalid length. [ 197.436119][T10724] netlink: 'syz.1.2322': attribute type 13 has an invalid length. [ 197.540430][T10736] loop2: detected capacity change from 0 to 128 [ 197.569253][T10736] Invalid ELF header magic: != ELF [ 197.617274][T10739] syzkaller0: entered promiscuous mode [ 197.623126][T10739] syzkaller0: entered allmulticast mode [ 197.849923][T10749] loop3: detected capacity change from 0 to 512 [ 197.920157][T10749] ext2: Unknown parameter 'dont_hash' [ 198.000139][T10753] ALSA: seq fatal error: cannot create timer (-19) [ 198.056778][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.065356][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.073088][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.080928][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.088645][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.096599][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.104311][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.112128][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.119876][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.127622][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.135413][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.143138][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.152012][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.159789][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.167516][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.175438][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.183278][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.191198][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.199595][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.207321][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.215615][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.224772][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.225932][T10768] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 198.233892][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.233915][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.262843][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.271279][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.280261][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.289176][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.297010][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.305856][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.313685][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.321475][ T9] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 198.372283][T10765] dummy0: left allmulticast mode [ 198.375111][ T9] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.395651][T10765] dummy0: left promiscuous mode [ 198.400936][T10765] bridge0: port 3(dummy0) entered disabled state [ 198.418115][T10774] fido_id[10774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 198.433795][T10765] team0: Port device dummy0 added [ 198.617296][T10792] loop1: detected capacity change from 0 to 512 [ 198.624091][T10791] ALSA: seq fatal error: cannot create timer (-19) [ 198.649213][T10792] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.714379][T10792] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.748289][T10792] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2346: corrupted inode contents [ 198.792938][T10792] EXT4-fs (loop1): Remounting filesystem read-only [ 198.803287][T10792] EXT4-fs (loop1): 1 truncate cleaned up [ 198.809758][ T154] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.820561][ T154] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.848966][ T154] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.864400][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.886866][T10806] syzkaller0: entered promiscuous mode [ 198.892636][T10806] syzkaller0: entered allmulticast mode [ 198.919336][T10808] vcan0: entered allmulticast mode [ 198.925113][T10808] vcan0: left allmulticast mode [ 198.937822][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.949448][T10813] loop3: detected capacity change from 0 to 1024 [ 198.966919][T10813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.014439][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.030737][T10819] __nla_validate_parse: 4 callbacks suppressed [ 199.030754][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 199.082939][T10822] loop3: detected capacity change from 0 to 1024 [ 199.094702][T10824] loop1: detected capacity change from 0 to 512 [ 199.111652][T10824] ext2: Unknown parameter 'dont_hash' [ 199.155210][T10826] ALSA: seq fatal error: cannot create timer (-19) [ 199.181745][T10822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.240624][T10824] validate_nla: 2 callbacks suppressed [ 199.240665][T10824] netlink: 'syz.1.2358': attribute type 10 has an invalid length. [ 199.254456][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2358'. [ 199.264790][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.274908][T10824] team0: Port device dummy0 removed [ 199.280635][T10824] bridge0: port 1(dummy0) entered blocking state [ 199.287744][T10824] bridge0: port 1(dummy0) entered disabled state [ 199.294583][T10824] dummy0: entered allmulticast mode [ 199.392633][T10839] loop2: detected capacity change from 0 to 1024 [ 199.465596][T10839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.480223][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2368'. [ 199.497504][T10839] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.545620][T10839] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 199.561185][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2368'. [ 199.586217][T10857] netlink: 'syz.5.2369': attribute type 13 has an invalid length. [ 199.594441][T10848] syzkaller0: entered promiscuous mode [ 199.600067][T10848] syzkaller0: entered allmulticast mode [ 199.606250][T10839] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 199.618896][T10839] EXT4-fs (loop2): This should not happen!! Data will be lost [ 199.618896][T10839] [ 199.628732][T10839] EXT4-fs (loop2): Total free blocks count 0 [ 199.634753][T10839] EXT4-fs (loop2): Free/Dirty block details [ 199.640645][T10839] EXT4-fs (loop2): free_blocks=4293918720 [ 199.646410][T10839] EXT4-fs (loop2): dirty_blocks=48 [ 199.651564][T10839] EXT4-fs (loop2): Block reservation details [ 199.657632][T10839] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 199.672430][T10861] loop3: detected capacity change from 0 to 512 [ 199.692632][T10861] EXT4-fs: Ignoring removed i_version option [ 199.709483][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.716494][T10864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2371'. [ 199.733589][T10861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.744909][T10861] EXT4-fs (loop3): 1 truncate cleaned up [ 199.751249][T10861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.808929][T10871] loop2: detected capacity change from 0 to 512 [ 199.864290][T10871] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.892354][T10878] netlink: 'syz.1.2376': attribute type 13 has an invalid length. [ 199.908629][T10874] syzkaller0: entered promiscuous mode [ 199.914185][T10874] syzkaller0: entered allmulticast mode [ 199.925171][T10871] EXT4-fs (loop2): mount failed [ 199.947943][T10871] loop2: detected capacity change from 0 to 1024 [ 199.970169][T10883] tipc: Started in network mode [ 199.975145][T10883] tipc: Node identity ac14140f, cluster identity 4711 [ 199.983461][T10871] EXT4-fs: Ignoring removed nobh option [ 199.986915][T10883] tipc: New replicast peer: 255.255.255.255 [ 199.995236][T10883] tipc: Enabled bearer , priority 10 [ 199.997926][T10871] EXT4-fs: Ignoring removed bh option [ 200.003203][T10883] hub 9-0:1.0: USB hub found [ 200.011568][T10883] hub 9-0:1.0: 8 ports detected [ 200.048035][T10871] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 200.080878][T10871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.118301][T10871] lo: entered promiscuous mode [ 200.123290][T10871] tunl0: entered promiscuous mode [ 200.128495][T10871] gre0: entered promiscuous mode [ 200.133705][T10871] gretap0: entered promiscuous mode [ 200.139109][T10871] ip_vti0: entered promiscuous mode [ 200.144539][T10871] ip6_vti0: entered promiscuous mode [ 200.149899][T10871] sit0: entered promiscuous mode [ 200.155024][T10871] ip6tnl0: entered promiscuous mode [ 200.160594][T10871] ip6gre0: entered promiscuous mode [ 200.166095][T10871] syz_tun: entered promiscuous mode [ 200.171554][T10871] ip6gretap0: entered promiscuous mode [ 200.177172][T10871] bridge0: entered promiscuous mode [ 200.182763][T10871] vcan0: entered promiscuous mode [ 200.187952][T10871] bond0: entered promiscuous mode [ 200.193003][T10871] bond_slave_0: entered promiscuous mode [ 200.198595][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2382'. [ 200.198669][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 200.216822][T10871] bond_slave_1: entered promiscuous mode [ 200.222689][T10871] team0: entered promiscuous mode [ 200.230535][T10902] loop1: detected capacity change from 0 to 128 [ 200.237015][T10871] team_slave_0: entered promiscuous mode [ 200.243038][T10871] team_slave_1: entered promiscuous mode [ 200.250770][T10871] dummy0: entered promiscuous mode [ 200.257576][T10871] nlmon0: entered promiscuous mode [ 200.262814][T10871] caif0: entered promiscuous mode [ 200.268402][T10871] vxcan0: entered promiscuous mode [ 200.273879][T10871] vxcan1: entered promiscuous mode [ 200.279503][T10871] veth0: entered promiscuous mode [ 200.285021][T10871] veth1: entered promiscuous mode [ 200.290625][T10871] wg0: entered promiscuous mode [ 200.295791][T10871] wg1: entered promiscuous mode [ 200.301569][T10871] wg2: entered promiscuous mode [ 200.306559][T10871] veth0_to_bridge: entered promiscuous mode [ 200.312904][T10871] veth1_to_bridge: entered promiscuous mode [ 200.318980][T10871] veth0_to_bond: entered promiscuous mode [ 200.324914][T10871] veth1_to_bond: entered promiscuous mode [ 200.331245][T10871] veth0_to_team: entered promiscuous mode [ 200.337208][T10871] veth1_to_team: entered promiscuous mode [ 200.343269][T10871] veth0_to_batadv: entered promiscuous mode [ 200.349549][T10871] batadv_slave_0: entered promiscuous mode [ 200.355703][T10871] veth1_to_batadv: entered promiscuous mode [ 200.362037][T10871] batadv_slave_1: entered promiscuous mode [ 200.368071][T10871] xfrm0: entered promiscuous mode [ 200.373251][T10871] veth0_to_hsr: entered promiscuous mode [ 200.379107][T10871] veth1_to_hsr: entered promiscuous mode [ 200.384919][T10871] hsr0: entered promiscuous mode [ 200.389942][T10871] veth1_virt_wifi: entered promiscuous mode [ 200.396535][T10871] veth0_virt_wifi: entered promiscuous mode [ 200.403220][T10871] vlan0: entered promiscuous mode [ 200.408640][T10871] vlan1: entered promiscuous mode [ 200.414816][T10871] macvlan0: entered promiscuous mode [ 200.420539][T10871] macvlan1: entered promiscuous mode [ 200.426516][T10871] ipvlan0: entered promiscuous mode [ 200.432320][T10871] ipvlan1: entered promiscuous mode [ 200.438128][T10871] macvtap0: entered promiscuous mode [ 200.443551][T10871] macsec0: entered promiscuous mode [ 200.449037][T10871] geneve0: entered promiscuous mode [ 200.454522][T10871] geneve1: entered promiscuous mode [ 200.459948][T10871] macsec1: entered promiscuous mode [ 200.465557][T10871] GPL: entered promiscuous mode [ 200.470649][T10871] bridge_slave_1.: entered promiscuous mode [ 200.476803][T10871] ip6tnl1: entered promiscuous mode [ 200.482177][T10871] netdevsim netdevsim2 eth0: entered promiscuous mode [ 200.489218][T10871] netdevsim netdevsim2 eth1: entered promiscuous mode [ 200.490242][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.496547][T10871] netdevsim netdevsim2 eth2: entered promiscuous mode [ 200.512807][T10871] netdevsim netdevsim2 eth3: entered promiscuous mode [ 200.533415][T10906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2384'. [ 200.551179][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.565867][T10902] FAULT_INJECTION: forcing a failure. [ 200.565867][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 200.578629][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.1.2383 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 200.578656][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.578667][T10902] Call Trace: [ 200.578672][T10902] [ 200.578680][T10902] __dump_stack+0x1d/0x30 [ 200.578700][T10902] dump_stack_lvl+0xe8/0x140 [ 200.578742][T10902] dump_stack+0x15/0x1b [ 200.578756][T10902] should_fail_ex+0x265/0x280 [ 200.578780][T10902] should_failslab+0x8c/0xb0 [ 200.578824][T10902] __kmalloc_noprof+0xa5/0x3e0 [ 200.578900][T10902] ? tcf_idr_create+0x41/0x4a0 [ 200.578990][T10902] tcf_idr_create+0x41/0x4a0 [ 200.579014][T10902] tcf_idr_create_from_flags+0x60/0x80 [ 200.579039][T10902] tcf_pedit_init+0x27b/0x970 [ 200.579059][T10902] ? should_fail_ex+0xdb/0x280 [ 200.579090][T10902] tcf_action_init_1+0x367/0x4a0 [ 200.579121][T10902] tcf_action_init+0x267/0x6d0 [ 200.579164][T10902] tc_ctl_action+0x291/0x830 [ 200.579362][T10902] ? __pfx_tc_ctl_action+0x10/0x10 [ 200.579412][T10902] rtnetlink_rcv_msg+0x657/0x6d0 [ 200.579434][T10902] ? avc_has_perm_noaudit+0x1b1/0x200 [ 200.579460][T10902] netlink_rcv_skb+0x120/0x220 [ 200.579529][T10902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.579650][T10902] rtnetlink_rcv+0x1c/0x30 [ 200.579670][T10902] netlink_unicast+0x5a8/0x680 [ 200.579764][T10902] netlink_sendmsg+0x58b/0x6b0 [ 200.579782][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.579798][T10902] __sock_sendmsg+0x145/0x180 [ 200.579818][T10902] ____sys_sendmsg+0x31e/0x4e0 [ 200.579867][T10902] ___sys_sendmsg+0x17b/0x1d0 [ 200.579927][T10902] __x64_sys_sendmsg+0xd4/0x160 [ 200.579950][T10902] x64_sys_call+0x2999/0x2fb0 [ 200.579970][T10902] do_syscall_64+0xd2/0x200 [ 200.580018][T10902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.580042][T10902] ? clear_bhb_loop+0x40/0x90 [ 200.580064][T10902] ? clear_bhb_loop+0x40/0x90 [ 200.580082][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.580146][T10902] RIP: 0033:0x7fb1011de9a9 [ 200.580160][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.580176][T10902] RSP: 002b:00007fb0ff847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.580204][T10902] RAX: ffffffffffffffda RBX: 00007fb101405fa0 RCX: 00007fb1011de9a9 [ 200.580215][T10902] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 200.580226][T10902] RBP: 00007fb0ff847090 R08: 0000000000000000 R09: 0000000000000000 [ 200.580236][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.580247][T10902] R13: 0000000000000000 R14: 00007fb101405fa0 R15: 00007ffd62e7eb48 [ 200.580262][T10902] [ 200.895970][T10914] loop3: detected capacity change from 0 to 1024 [ 200.944815][T10914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.957689][T10920] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 200.999012][T10926] loop5: detected capacity change from 0 to 1024 [ 201.015795][T10926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.029973][T10926] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.055288][ T36] tipc: Node number set to 2886997007 [ 201.085735][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.101037][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2396'. [ 201.110154][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 201.134292][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.165119][T10938] loop3: detected capacity change from 0 to 1024 [ 201.204333][T10938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.224958][T10943] loop5: detected capacity change from 0 to 1024 [ 201.246880][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.258680][T10945] loop2: detected capacity change from 0 to 512 [ 201.265823][T10945] vfat: Unknown parameter '01777777777777777777777' [ 201.278587][T10943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.335495][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.459072][T10966] loop4: detected capacity change from 0 to 1024 [ 201.487196][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.494898][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.502619][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.510318][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.518031][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.525815][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.527759][T10966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.533794][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.549572][T10962] syzkaller0: entered promiscuous mode [ 201.553513][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.558993][T10962] syzkaller0: entered allmulticast mode [ 201.566681][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.580048][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.587771][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.595477][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.603180][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.610864][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.618603][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.626806][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.634517][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.642322][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.650003][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.657758][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.665755][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.673535][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.681393][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.689106][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.696874][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.704856][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.713579][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.721633][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.730061][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.737756][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.745434][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.753159][ T1041] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x0 [ 201.761291][ T1041] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 201.761568][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.833439][T10973] fido_id[10973]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.848887][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 201.848906][ T29] audit: type=1326 audit(1753304605.143:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.1.2411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1011de9a9 code=0x0 [ 201.895945][ T29] audit: type=1400 audit(1753304605.191:2199): avc: denied { ioctl } for pid=10974 comm="syz.4.2410" path="socket:[28111]" dev="sockfs" ino=28111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.952630][ T29] audit: type=1326 audit(1753304605.240:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 201.985147][ T29] audit: type=1326 audit(1753304605.240:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.009449][ T29] audit: type=1326 audit(1753304605.240:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.033645][ T29] audit: type=1326 audit(1753304605.240:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.033667][ T29] audit: type=1326 audit(1753304605.240:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.081687][ T29] audit: type=1326 audit(1753304605.240:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.105412][ T29] audit: type=1326 audit(1753304605.240:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.130220][ T29] audit: type=1326 audit(1753304605.240:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.4.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52740e9a9 code=0x7ffc0000 [ 202.223139][T10997] loop5: detected capacity change from 0 to 256 [ 202.259428][T11001] Invalid ELF header magic: != ELF [ 202.298773][T11007] netlink: 'syz.2.2424': attribute type 13 has an invalid length. [ 202.318907][T11009] loop3: detected capacity change from 0 to 1024 [ 202.346864][T11009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.362229][T11009] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.384015][T11009] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 202.412155][T11009] EXT4-fs (loop3): Remounting filesystem read-only [ 202.419553][ T5986] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 202.445803][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.542127][T11026] Invalid ELF header magic: != ELF [ 202.601457][T11030] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 202.609370][T11030] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 202.618283][T11030] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 202.626803][T11030] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 202.635231][T11030] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 202.778272][T11036] loop2: detected capacity change from 0 to 256 [ 202.890077][T11053] loop3: detected capacity change from 0 to 512 [ 202.899972][T11053] ext2: Unknown parameter 'dont_hash' [ 202.912776][T11056] loop1: detected capacity change from 0 to 512 [ 202.922591][T11056] EXT4-fs: Ignoring removed i_version option [ 202.934730][T11056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.945941][T11056] EXT4-fs (loop1): 1 truncate cleaned up [ 202.952293][T11056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.068362][T11062] syzkaller0: entered promiscuous mode [ 203.074009][T11062] syzkaller0: entered allmulticast mode [ 203.189093][T11065] wireguard0: entered promiscuous mode [ 203.194825][T11065] wireguard0: entered allmulticast mode [ 203.393679][T11073] loop5: detected capacity change from 0 to 256 [ 203.771532][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.934783][T11087] FAULT_INJECTION: forcing a failure. [ 203.934783][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.948136][T11087] CPU: 0 UID: 0 PID: 11087 Comm: wÞ¡ÿ Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 203.948161][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.948170][T11087] Call Trace: [ 203.948177][T11087] [ 203.948184][T11087] __dump_stack+0x1d/0x30 [ 203.948202][T11087] dump_stack_lvl+0xe8/0x140 [ 203.948218][T11087] dump_stack+0x15/0x1b [ 203.948286][T11087] should_fail_ex+0x265/0x280 [ 203.948313][T11087] should_fail+0xb/0x20 [ 203.948353][T11087] should_fail_usercopy+0x1a/0x20 [ 203.948381][T11087] _copy_from_user+0x1c/0xb0 [ 203.948415][T11087] ___sys_sendmsg+0xc1/0x1d0 [ 203.948443][T11087] __x64_sys_sendmsg+0xd4/0x160 [ 203.948461][T11087] x64_sys_call+0x2999/0x2fb0 [ 203.948478][T11087] do_syscall_64+0xd2/0x200 [ 203.948496][T11087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.948533][T11087] ? clear_bhb_loop+0x40/0x90 [ 203.948551][T11087] ? clear_bhb_loop+0x40/0x90 [ 203.948572][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.948593][T11087] RIP: 0033:0x7fb52740e9a9 [ 203.948609][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.948701][T11087] RSP: 002b:00007fb525a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.948719][T11087] RAX: ffffffffffffffda RBX: 00007fb527635fa0 RCX: 00007fb52740e9a9 [ 203.948733][T11087] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 203.948744][T11087] RBP: 00007fb525a77090 R08: 0000000000000000 R09: 0000000000000000 [ 203.948756][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.948826][T11087] R13: 0000000000000000 R14: 00007fb527635fa0 R15: 00007ffd9fa81af8 [ 203.948845][T11087] [ 205.109608][T11095] loop2: detected capacity change from 0 to 512 [ 205.131204][T11095] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.225662][T11099] __nla_validate_parse: 10 callbacks suppressed [ 205.225678][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2456'. [ 205.241189][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 205.254487][T11095] EXT4-fs (loop2): mount failed [ 205.526198][T11095] loop2: detected capacity change from 0 to 1024 [ 205.533207][T11095] EXT4-fs: Ignoring removed nobh option [ 205.539141][T11095] EXT4-fs: Ignoring removed bh option [ 205.545098][T11095] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 205.559101][T11095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.585700][T11095] ip6tnl2: entered promiscuous mode [ 205.606912][T11119] Invalid ELF header magic: != ELF [ 205.637484][T11118] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 205.709054][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.781132][T11134] ALSA: seq fatal error: cannot create timer (-19) [ 205.914359][T11139] syzkaller0: entered promiscuous mode [ 205.919913][T11139] syzkaller0: entered allmulticast mode [ 206.073747][ T3586] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 206.086344][ T3586] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.164220][T11153] loop1: detected capacity change from 0 to 1024 [ 206.190239][T11153] EXT4-fs: Ignoring removed nobh option [ 206.195851][T11153] EXT4-fs: Ignoring removed bh option [ 206.215862][T11155] loop3: detected capacity change from 0 to 512 [ 206.235415][T11155] ext2: Unknown parameter 'dont_hash' [ 206.244083][T11153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.317666][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.394896][T11167] loop4: detected capacity change from 0 to 1024 [ 206.481396][T11167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.498120][T11173] validate_nla: 2 callbacks suppressed [ 206.498134][T11173] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 206.511829][T11173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2472'. [ 206.730826][T11176] netlink: 'syz.2.2477': attribute type 13 has an invalid length. [ 206.768703][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.961785][T11183] loop5: detected capacity change from 0 to 256 [ 207.110667][T11188] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 207.149707][T11195] ALSA: seq fatal error: cannot create timer (-19) [ 207.174624][T11199] wireguard0: entered promiscuous mode [ 207.180150][T11199] wireguard0: entered allmulticast mode [ 207.327283][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 207.362306][T11210] loop5: detected capacity change from 0 to 128 [ 207.403902][T11210] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.429668][T11212] loop1: detected capacity change from 0 to 512 [ 207.446746][T11212] EXT4-fs: Ignoring removed i_version option [ 207.454230][T11214] loop2: detected capacity change from 0 to 512 [ 207.454929][T11210] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.506427][T11216] loop3: detected capacity change from 0 to 1024 [ 207.519564][T11212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.561422][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 207.561436][ T29] audit: type=1400 audit(1753304610.716:2334): avc: denied { ioctl } for pid=11209 comm="syz.5.2488" path="/120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop5" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 207.612123][T11216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.627733][T11214] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 207.642363][T11214] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.657624][ T29] audit: type=1326 audit(1753304610.824:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.681189][ T29] audit: type=1326 audit(1753304610.824:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.681938][T11214] EXT4-fs (loop2): mount failed [ 207.705030][ T29] audit: type=1326 audit(1753304610.824:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.705056][ T29] audit: type=1326 audit(1753304610.824:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.705079][ T29] audit: type=1326 audit(1753304610.824:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.705127][ T29] audit: type=1326 audit(1753304610.824:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.714233][ T8987] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.735378][ T29] audit: type=1326 audit(1753304610.844:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.783362][T11212] EXT4-fs (loop1): 1 truncate cleaned up [ 207.805624][ T29] audit: type=1326 audit(1753304610.844:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.3.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4b89e9a9 code=0x7ffc0000 [ 207.868841][T11212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.881841][T11218] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 207.903331][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.912708][T11214] loop2: detected capacity change from 0 to 1024 [ 207.934678][T11214] EXT4-fs: Ignoring removed nobh option [ 207.940533][T11214] EXT4-fs: Ignoring removed bh option [ 207.946658][T11214] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 207.998424][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2492'. [ 207.998455][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 208.026569][T11235] loop3: detected capacity change from 0 to 512 [ 208.028674][T11214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.048878][T11232] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 208.080515][T11235] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 208.089282][T11235] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.112001][T11235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2496: corrupted inode contents [ 208.132445][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.140295][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.146643][T11235] EXT4-fs (loop3): Remounting filesystem read-only [ 208.148223][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.162886][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.168805][T11235] EXT4-fs (loop3): 1 truncate cleaned up [ 208.171076][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.185285][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.194453][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.202374][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.210427][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.220009][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.229154][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.237611][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.245443][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.253125][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.260859][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.268677][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.276889][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.284679][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.292381][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.300272][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.308067][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.315851][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.324077][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.331912][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.339734][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.347508][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.355320][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.363112][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.370830][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.378557][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.386250][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.394112][ T1041] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x0 [ 208.402060][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.403250][ T1041] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 208.412853][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.433720][ T41] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 208.455963][T11250] fido_id[11250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.898019][T11271] loop1: detected capacity change from 0 to 256 [ 209.025576][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 209.133691][T11274] loop3: detected capacity change from 0 to 512 [ 209.135924][T11274] EXT4-fs: Ignoring removed i_version option [ 209.138821][T11274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.164277][T11287] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 209.193386][T11274] EXT4-fs (loop3): 1 truncate cleaned up [ 209.251683][T11296] loop2: detected capacity change from 0 to 512 [ 209.266971][T11296] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 209.295687][T11296] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.311745][T11296] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2514: corrupted inode contents [ 209.407863][T11296] EXT4-fs (loop2): Remounting filesystem read-only [ 209.437190][T11296] EXT4-fs (loop2): 1 truncate cleaned up [ 209.443044][ T57] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.453629][ T57] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.476751][ T57] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 209.517926][T11311] netlink: 'syz.1.2519': attribute type 13 has an invalid length. [ 209.626430][T11314] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 209.628960][T11307] syzkaller0: entered promiscuous mode [ 209.640574][T11307] syzkaller0: entered allmulticast mode [ 209.717923][T11324] loop2: detected capacity change from 0 to 512 [ 209.737141][T11324] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 209.761313][T11324] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.2523: iget: bad i_size value: 12154757448730 [ 209.775320][T11324] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2523: couldn't read orphan inode 13 (err -117) [ 209.789404][T11324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 209.819596][T11331] netlink: 'syz.3.2527': attribute type 13 has an invalid length. [ 209.891787][T11336] loop1: detected capacity change from 0 to 1024 [ 209.937615][T11344] Invalid ELF header magic: != ELF [ 210.009504][T11348] netlink: 'syz.1.2531': attribute type 13 has an invalid length. [ 210.188983][T11368] netlink: 'syz.2.2540': attribute type 13 has an invalid length. [ 210.214329][T11370] loop1: detected capacity change from 0 to 512 [ 210.223839][T11370] ext2: Unknown parameter 'dont_hash' [ 210.376603][T11380] loop5: detected capacity change from 0 to 512 [ 210.387378][T11380] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 210.394468][T11376] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 210.403432][T11376] __nla_validate_parse: 2 callbacks suppressed [ 210.403445][T11376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'. [ 210.421881][T11380] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.2543: iget: bad i_size value: 12154757448730 [ 210.435316][T11380] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2543: couldn't read orphan inode 13 (err -117) [ 210.449186][T11380] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 210.468626][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 210.470123][T11378] netlink: 'syz.2.2542': attribute type 10 has an invalid length. [ 210.536100][T11385] netlink: 'syz.2.2544': attribute type 13 has an invalid length. [ 210.578588][T11389] Invalid ELF header magic: != ELF [ 210.597736][T11392] netlink: 'syz.2.2546': attribute type 13 has an invalid length. [ 210.668271][T11398] ALSA: seq fatal error: cannot create timer (-19) [ 210.812518][T11408] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 210.935569][T11420] Invalid ELF header magic: != ELF [ 211.058499][T11431] loop3: detected capacity change from 0 to 1024 [ 211.131721][T11433] loop4: detected capacity change from 0 to 512 [ 211.305979][T11433] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 211.382733][T11433] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.2561: iget: bad i_size value: 12154757448730 [ 211.464078][T11433] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2561: couldn't read orphan inode 13 (err -117) [ 211.479174][T11445] loop3: detected capacity change from 0 to 256 [ 211.495627][T11433] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 211.516218][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2561'. [ 211.552920][T11449] syzkaller0: entered promiscuous mode [ 211.558462][T11449] syzkaller0: entered allmulticast mode [ 211.600485][T11455] Invalid ELF header magic: != ELF [ 211.647194][T11460] validate_nla: 4 callbacks suppressed [ 211.647211][T11460] netlink: 'syz.1.2570': attribute type 13 has an invalid length. [ 211.678547][T11464] loop3: detected capacity change from 0 to 512 [ 211.700288][T11464] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.716706][T11464] EXT4-fs (loop3): mount failed [ 211.728517][T11458] netlink: 'syz.2.2569': attribute type 10 has an invalid length. [ 211.747970][T11464] loop3: detected capacity change from 0 to 1024 [ 211.754842][T11464] EXT4-fs: Ignoring removed nobh option [ 211.760881][T11464] EXT4-fs: Ignoring removed bh option [ 211.767556][T11464] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 211.839484][T11464] lo: entered promiscuous mode [ 211.844389][T11464] tunl0: entered promiscuous mode [ 211.849747][T11464] gre0: entered promiscuous mode [ 211.854770][T11464] gretap0: entered promiscuous mode [ 211.860153][T11464] erspan0: entered promiscuous mode [ 211.865443][T11464] ip_vti0: entered promiscuous mode [ 211.870799][T11464] ip6_vti0: entered promiscuous mode [ 211.876338][T11464] sit0: entered promiscuous mode [ 211.881543][T11464] ip6tnl0: entered promiscuous mode [ 211.886791][T11464] ip6gre0: entered promiscuous mode [ 211.892253][T11464] syz_tun: entered promiscuous mode [ 211.897589][T11464] ip6gretap0: entered promiscuous mode [ 211.903198][T11464] bridge0: entered promiscuous mode [ 211.908623][T11464] vcan0: entered promiscuous mode [ 211.914269][T11464] bond0: entered promiscuous mode [ 211.919386][T11464] bond_slave_0: entered promiscuous mode [ 211.925244][T11464] bond_slave_1: entered promiscuous mode [ 211.940623][T11464] team0: entered promiscuous mode [ 211.967274][T11464] team_slave_0: entered promiscuous mode [ 211.973202][T11464] team_slave_1: entered promiscuous mode [ 211.984455][T11464] nlmon0: entered promiscuous mode [ 211.989690][T11464] caif0: entered promiscuous mode [ 211.994997][T11464] vxcan0: entered promiscuous mode [ 212.000163][T11464] vxcan1: entered promiscuous mode [ 212.005471][T11464] veth0: entered promiscuous mode [ 212.010642][T11464] veth1: entered promiscuous mode [ 212.015958][T11464] wg0: entered promiscuous mode [ 212.020857][T11464] wg1: entered promiscuous mode [ 212.025932][T11464] wg2: entered promiscuous mode [ 212.025958][T11486] loop5: detected capacity change from 0 to 256 [ 212.030902][T11464] veth0_to_bridge: entered promiscuous mode [ 212.038306][T11483] ALSA: seq fatal error: cannot create timer (-19) [ 212.043277][T11464] veth1_to_bridge: entered promiscuous mode [ 212.055760][T11464] veth0_to_bond: entered promiscuous mode [ 212.061676][T11464] veth1_to_bond: entered promiscuous mode [ 212.067698][T11464] veth0_to_team: entered promiscuous mode [ 212.073717][T11464] veth1_to_team: entered promiscuous mode [ 212.079672][T11464] veth0_to_batadv: entered promiscuous mode [ 212.085755][T11464] batadv_slave_0: entered promiscuous mode [ 212.091623][T11464] veth1_to_batadv: entered promiscuous mode [ 212.097725][T11464] batadv_slave_1: entered promiscuous mode [ 212.103656][T11464] xfrm0: entered promiscuous mode [ 212.108747][T11464] veth0_to_hsr: entered promiscuous mode [ 212.114597][T11464] veth1_to_hsr: entered promiscuous mode [ 212.120448][T11464] hsr0: entered promiscuous mode [ 212.125513][T11464] veth1_virt_wifi: entered promiscuous mode [ 212.131560][T11464] veth0_virt_wifi: entered promiscuous mode [ 212.137737][T11464] vlan0: entered promiscuous mode [ 212.143133][T11464] vlan1: entered promiscuous mode [ 212.148278][T11464] macvlan0: entered promiscuous mode [ 212.153696][T11464] macvlan1: entered promiscuous mode [ 212.159104][T11464] ipvlan0: entered promiscuous mode [ 212.164459][T11464] ipvlan1: entered promiscuous mode [ 212.169880][T11464] macvtap0: entered promiscuous mode [ 212.175274][T11464] macsec0: entered promiscuous mode [ 212.180675][T11464] geneve0: entered promiscuous mode [ 212.186084][T11464] geneve1: entered promiscuous mode [ 212.213233][T11464] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 212.227044][T11464] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 212.234798][T11464] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 212.242190][T11464] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 212.249691][T11464] macsec1: entered promiscuous mode [ 212.255122][T11464] gre1: entered promiscuous mode [ 212.260190][T11464] bridge1: entered promiscuous mode [ 212.265595][T11464] ip6tnl1: entered promiscuous mode [ 212.292978][T11488] syzkaller0: entered promiscuous mode [ 212.298566][T11488] syzkaller0: entered allmulticast mode [ 212.338182][T11502] syzkaller0: entered promiscuous mode [ 212.343708][T11502] syzkaller0: entered allmulticast mode [ 212.343952][T11508] loop1: detected capacity change from 0 to 512 [ 212.361568][T11506] loop3: detected capacity change from 0 to 512 [ 212.417742][T11506] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 212.434793][T11506] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.443586][T11506] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2582: corrupted inode contents [ 212.458451][T11508] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 212.466773][T11508] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.473326][T11506] EXT4-fs (loop3): Remounting filesystem read-only [ 212.479249][T11508] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2579: corrupted inode contents [ 212.481093][T11506] EXT4-fs (loop3): 1 truncate cleaned up [ 212.494486][T11508] EXT4-fs (loop1): Remounting filesystem read-only [ 212.497899][ T57] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.505584][T11508] EXT4-fs (loop1): 1 truncate cleaned up [ 212.514391][ T57] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.530754][ T57] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.555396][ T57] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.566052][ T57] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.585127][ T57] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.775652][ T57] __quota_error: 89 callbacks suppressed [ 212.775667][ T57] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 212.917742][T11518] netlink: 'syz.4.2584': attribute type 10 has an invalid length. [ 213.076200][T11528] loop3: detected capacity change from 0 to 256 [ 213.085753][T11530] netlink: 'syz.2.2587': attribute type 10 has an invalid length. [ 213.144525][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.152378][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.160144][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.167986][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.175668][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.183352][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.191048][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.198799][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.206479][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.214206][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.221876][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.229793][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.237730][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.245395][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.253234][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.261229][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.269004][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.276652][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.284434][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.292186][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.299981][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.307685][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.315320][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.322992][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.330665][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.338333][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.345992][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.353826][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.361569][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.369239][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.377073][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.385339][ T3586] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x0 [ 213.495470][T11539] Invalid ELF header magic: != ELF [ 213.518851][ T3586] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 213.548121][T11545] loop4: detected capacity change from 0 to 512 [ 213.572623][T11542] syzkaller0: entered promiscuous mode [ 213.578214][T11542] syzkaller0: entered allmulticast mode [ 213.603389][T11545] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 213.613649][T11545] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.629805][T11545] EXT4-fs (loop4): mount failed [ 213.636550][T11541] hub 9-0:1.0: USB hub found [ 213.641881][T11541] hub 9-0:1.0: 8 ports detected [ 213.697261][T11545] loop4: detected capacity change from 0 to 1024 [ 213.727089][T11545] EXT4-fs: Ignoring removed nobh option [ 213.732038][T11553] syzkaller0: entered promiscuous mode [ 213.738353][T11553] syzkaller0: entered allmulticast mode [ 213.748226][T11545] EXT4-fs: Ignoring removed bh option [ 213.765490][T11545] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 213.785002][T11545] lo: entered promiscuous mode [ 213.789936][T11545] tunl0: entered promiscuous mode [ 213.795257][T11545] gre0: entered promiscuous mode [ 213.800268][T11545] gretap0: entered promiscuous mode [ 213.805652][T11545] erspan0: entered promiscuous mode [ 213.810909][T11545] ip_vti0: entered promiscuous mode [ 213.816215][T11545] ip6_vti0: entered promiscuous mode [ 213.821684][T11545] sit0: entered promiscuous mode [ 213.826757][T11545] ip6tnl0: entered promiscuous mode [ 213.832071][T11545] ip6gre0: entered promiscuous mode [ 213.837521][T11545] ip6gretap0: entered promiscuous mode [ 213.843075][T11545] bridge0: entered promiscuous mode [ 213.848399][T11545] vcan0: entered promiscuous mode [ 213.853576][T11545] bond0: entered promiscuous mode [ 213.858683][T11545] bond_slave_0: entered promiscuous mode [ 213.864458][T11545] bond_slave_1: entered promiscuous mode [ 213.870274][T11545] team0: entered promiscuous mode [ 213.879831][T11545] team_slave_0: entered promiscuous mode [ 213.885751][T11545] team_slave_1: entered promiscuous mode [ 213.891699][T11545] dummy0: entered promiscuous mode [ 213.897307][T11545] nlmon0: entered promiscuous mode [ 213.902618][T11545] caif0: entered promiscuous mode [ 213.907782][T11545] vxcan0: entered promiscuous mode [ 213.912951][T11545] vxcan1: entered promiscuous mode [ 213.918145][T11545] veth0: entered promiscuous mode [ 213.923260][T11545] veth1: entered promiscuous mode [ 213.928460][T11545] wg0: entered promiscuous mode [ 213.933484][T11545] wg1: entered promiscuous mode [ 213.938427][T11545] wg2: entered promiscuous mode [ 213.943372][T11545] veth0_to_bridge: entered promiscuous mode [ 213.949551][T11545] veth1_to_bridge: entered promiscuous mode [ 213.955603][T11545] veth0_to_bond: entered promiscuous mode [ 213.961495][T11545] veth1_to_bond: entered promiscuous mode [ 213.967448][T11545] veth0_to_team: entered promiscuous mode [ 213.973523][T11545] veth1_to_team: entered promiscuous mode [ 213.979373][T11545] veth0_to_batadv: entered promiscuous mode [ 213.985473][T11545] batadv_slave_0: entered promiscuous mode [ 213.991403][T11545] veth1_to_batadv: entered promiscuous mode [ 213.997404][T11545] batadv_slave_1: entered promiscuous mode [ 214.003365][T11545] xfrm0: entered promiscuous mode [ 214.008516][T11545] veth0_to_hsr: entered promiscuous mode [ 214.014304][T11545] veth1_to_hsr: entered promiscuous mode [ 214.020205][T11545] hsr0: entered promiscuous mode [ 214.025288][T11545] veth1_virt_wifi: entered promiscuous mode [ 214.031515][T11545] veth0_virt_wifi: entered promiscuous mode [ 214.037634][T11545] vlan0: entered promiscuous mode [ 214.042867][T11545] vlan1: entered promiscuous mode [ 214.048098][T11545] macvlan0: entered promiscuous mode [ 214.053473][T11545] macvlan1: entered promiscuous mode [ 214.058898][T11545] ipvlan0: entered promiscuous mode [ 214.064334][T11545] ipvlan1: entered promiscuous mode [ 214.069715][T11545] macvtap0: entered promiscuous mode [ 214.075183][T11545] macsec0: entered promiscuous mode [ 214.080459][T11545] geneve0: entered promiscuous mode [ 214.085993][T11545] geneve1: entered promiscuous mode [ 214.091415][T11545] macsec1: entered promiscuous mode [ 214.096739][T11545] syztnl1: entered promiscuous mode [ 214.102212][T11545] ipvlan2: entered promiscuous mode [ 214.107594][T11545] netdevsim netdevsim4 eth0: entered promiscuous mode [ 214.114651][T11545] netdevsim netdevsim4 eth1: entered promiscuous mode [ 214.122589][T11545] netdevsim netdevsim4 eth2: entered promiscuous mode [ 214.129626][T11545] netdevsim netdevsim4 eth3: entered promiscuous mode [ 214.185247][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2600'. [ 214.203847][T11571] loop4: detected capacity change from 0 to 1024 [ 214.213659][T11569] bond1: entered promiscuous mode [ 214.218803][T11569] bond1: entered allmulticast mode [ 214.237820][T11571] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.254672][T11569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.255201][T11582] loop1: detected capacity change from 0 to 256 [ 214.297565][T11571] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 214.338859][T11571] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 214.351566][T11571] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.351566][T11571] [ 214.361447][T11571] EXT4-fs (loop4): Total free blocks count 0 [ 214.367660][T11571] EXT4-fs (loop4): Free/Dirty block details [ 214.374566][T11571] EXT4-fs (loop4): free_blocks=4293918720 [ 214.380600][T11571] EXT4-fs (loop4): dirty_blocks=48 [ 214.386339][T11571] EXT4-fs (loop4): Block reservation details [ 214.390713][ T29] audit: type=1326 audit(1753304617.488:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.393312][T11571] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 214.470690][ T29] audit: type=1326 audit(1753304617.518:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.494513][ T29] audit: type=1326 audit(1753304617.518:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.518437][ T29] audit: type=1326 audit(1753304617.518:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.542005][ T29] audit: type=1326 audit(1753304617.518:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.565683][ T29] audit: type=1326 audit(1753304617.518:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.589784][ T29] audit: type=1326 audit(1753304617.528:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.594205][T11592] syzkaller0: entered promiscuous mode [ 214.613955][ T29] audit: type=1326 audit(1753304617.538:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.1.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fb1011de9a9 code=0x7ffc0000 [ 214.619562][T11592] syzkaller0: entered allmulticast mode [ 214.676764][T11600] loop3: detected capacity change from 0 to 512 [ 214.711866][T11600] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 214.732688][T11605] netlink: 'syz.2.2610': attribute type 13 has an invalid length. [ 214.747244][T11606] loop4: detected capacity change from 0 to 512 [ 214.751111][T11600] EXT4-fs (loop3): mount failed [ 214.778446][T11600] loop3: detected capacity change from 0 to 1024 [ 214.786341][T11606] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 214.794868][T11600] EXT4-fs: Ignoring removed nobh option [ 214.800548][T11600] EXT4-fs: Ignoring removed bh option [ 214.806335][T11606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.813213][T11600] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 214.823576][T11606] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2612: corrupted inode contents [ 214.863033][T11606] EXT4-fs (loop4): Remounting filesystem read-only [ 214.879689][T11606] EXT4-fs (loop4): 1 truncate cleaned up [ 214.890070][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.901022][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.911808][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 214.965820][T11619] loop4: detected capacity change from 0 to 256 [ 215.018023][T11623] netlink: 'syz.3.2617': attribute type 13 has an invalid length. [ 215.047657][T11625] loop4: detected capacity change from 0 to 1024 [ 215.078803][T11625] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.093142][T11625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.109450][T11625] EXT4-fs (loop4): Remounting filesystem read-only [ 215.116728][ T31] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 215.160432][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 215.184728][T11640] loop5: detected capacity change from 0 to 512 [ 215.210589][T11644] loop4: detected capacity change from 0 to 1024 [ 215.222737][T11640] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.242850][T11649] loop3: detected capacity change from 0 to 512 [ 215.247155][T11648] loop1: detected capacity change from 0 to 1024 [ 215.257250][T11649] EXT4-fs: Ignoring removed i_version option [ 215.265171][T11640] EXT4-fs (loop5): mount failed [ 215.270541][T11649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.281926][T11644] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.293663][T11649] EXT4-fs (loop3): 1 truncate cleaned up [ 215.294750][T11644] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.300954][T11648] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.334831][T11644] EXT4-fs (loop4): Remounting filesystem read-only [ 215.348128][T11640] loop5: detected capacity change from 0 to 1024 [ 215.355013][T11640] EXT4-fs: Ignoring removed nobh option [ 215.357360][T11648] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.360859][ T7413] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 215.375877][T11648] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 215.396190][T11640] EXT4-fs: Ignoring removed bh option [ 215.403813][T11648] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.403813][T11648] [ 215.403864][T11648] EXT4-fs (loop1): Total free blocks count 0 [ 215.403876][T11648] EXT4-fs (loop1): Free/Dirty block details [ 215.429345][T11640] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 215.433604][T11648] EXT4-fs (loop1): free_blocks=4293918720 [ 215.450062][T11648] EXT4-fs (loop1): dirty_blocks=48 [ 215.455292][T11648] EXT4-fs (loop1): Block reservation details [ 215.461311][T11648] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 215.486456][T11658] loop4: detected capacity change from 0 to 512 [ 215.498954][T11640] ip6tnl1: entered promiscuous mode [ 215.506026][T11640] bond1: left allmulticast mode [ 215.524322][T11658] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.537753][T11658] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.549441][T11658] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2626: corrupted inode contents [ 215.567863][T11658] EXT4-fs (loop4): Remounting filesystem read-only [ 215.576247][T11658] EXT4-fs (loop4): 1 truncate cleaned up [ 215.582227][ T7413] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 215.592888][ T7413] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 215.604668][ T7413] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 215.641773][T11666] syzkaller0: entered promiscuous mode [ 215.647307][T11666] syzkaller0: entered allmulticast mode [ 215.686316][T11668] netlink: 'syz.4.2629': attribute type 13 has an invalid length. [ 215.810913][T11672] netlink: 'syz.5.2630': attribute type 10 has an invalid length. [ 215.819163][T11672] dummy0: left allmulticast mode [ 215.825295][T11672] dummy0: left promiscuous mode [ 215.830285][T11672] bridge0: port 3(dummy0) entered disabled state [ 215.839122][T11672] dummy0: entered promiscuous mode [ 215.845067][T11672] team0: Port device dummy0 added [ 215.880695][T11678] loop4: detected capacity change from 0 to 1024 [ 215.889426][T11680] netlink: 'syz.1.2633': attribute type 13 has an invalid length. [ 215.937751][T11678] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.956627][T11690] netlink: 'syz.5.2634': attribute type 13 has an invalid length. [ 215.965039][T11687] loop2: detected capacity change from 0 to 1024 [ 215.967932][T11678] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.987766][T11678] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 216.000244][T11678] EXT4-fs (loop4): This should not happen!! Data will be lost [ 216.000244][T11678] [ 216.009967][T11678] EXT4-fs (loop4): Total free blocks count 0 [ 216.016356][T11678] EXT4-fs (loop4): Free/Dirty block details [ 216.022335][T11678] EXT4-fs (loop4): free_blocks=4293918720 [ 216.028104][T11678] EXT4-fs (loop4): dirty_blocks=48 [ 216.030379][T11687] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.033205][T11678] EXT4-fs (loop4): Block reservation details [ 216.047540][T11687] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 216.049908][T11678] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 216.058223][T11687] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 216.085912][T11687] EXT4-fs (loop2): Remounting filesystem read-only [ 216.100058][ T3433] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 216.130153][T11701] loop3: detected capacity change from 0 to 1024 [ 216.143688][T11698] 9pnet_fd: Insufficient options for proto=fd [ 216.200368][T11701] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.223439][T11712] loop4: detected capacity change from 0 to 1024 [ 216.237431][T11701] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 216.256429][T11701] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 216.268927][T11701] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.268927][T11701] [ 216.278966][T11701] EXT4-fs (loop3): Total free blocks count 0 [ 216.284997][T11701] EXT4-fs (loop3): Free/Dirty block details [ 216.290988][T11701] EXT4-fs (loop3): free_blocks=4293918720 [ 216.296860][T11701] EXT4-fs (loop3): dirty_blocks=48 [ 216.301980][T11701] EXT4-fs (loop3): Block reservation details [ 216.308147][T11701] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 216.340958][T11719] loop1: detected capacity change from 0 to 512 [ 216.383044][T11719] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.409026][T11719] EXT4-fs (loop1): mount failed [ 216.412069][T11723] ALSA: seq fatal error: cannot create timer (-19) [ 216.441574][T11721] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 216.497346][T11731] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 216.516040][T11719] loop1: detected capacity change from 0 to 1024 [ 216.525800][T11719] EXT4-fs: Ignoring removed nobh option [ 216.531512][T11719] EXT4-fs: Ignoring removed bh option [ 216.563797][T11719] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 216.602121][T11737] syzkaller0: entered promiscuous mode [ 216.607607][T11737] syzkaller0: entered allmulticast mode [ 216.632259][T11738] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 216.664175][T11746] loop2: detected capacity change from 0 to 1024 [ 216.691500][T11746] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.703516][T11746] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 216.718869][T11746] EXT4-fs (loop2): Remounting filesystem read-only [ 216.728628][ T41] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 216.768413][T11754] validate_nla: 2 callbacks suppressed [ 216.768428][T11754] netlink: 'syz.2.2655': attribute type 13 has an invalid length. [ 216.809166][T11757] loop1: detected capacity change from 0 to 128 [ 216.815925][T11757] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 216.850661][T11759] loop3: detected capacity change from 0 to 1024 [ 216.877624][T11764] netlink: 'syz.2.2658': attribute type 10 has an invalid length. [ 216.908140][T11769] loop2: detected capacity change from 0 to 1024 [ 217.016200][T11776] loop2: detected capacity change from 0 to 512 [ 217.025234][T11776] ext2: Unknown parameter 'dont_hash' [ 217.036547][T11772] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 217.243371][T11786] netlink: 'syz.2.2662': attribute type 10 has an invalid length. [ 217.251337][T11786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2662'. [ 217.367621][T11786] team0: Port device dummy0 removed [ 217.373228][T11786] bridge0: port 3(dummy0) entered blocking state [ 217.380242][T11786] bridge0: port 3(dummy0) entered disabled state [ 217.389298][T11786] dummy0: entered allmulticast mode [ 217.622072][T11793] loop1: detected capacity change from 0 to 256 [ 217.644270][T11795] netlink: 'syz.4.2669': attribute type 13 has an invalid length. [ 217.720233][T11801] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 217.728371][T11801] dummy0: left allmulticast mode [ 217.733362][T11801] dummy0: left promiscuous mode [ 217.738324][T11801] bridge0: port 1(dummy0) entered disabled state [ 217.746451][T11801] dummy0: entered promiscuous mode [ 217.752299][T11801] team0: Port device dummy0 added [ 217.823049][T11808] ALSA: seq fatal error: cannot create timer (-19) [ 217.831169][T11806] syzkaller0: entered promiscuous mode [ 217.836917][T11806] syzkaller0: entered allmulticast mode [ 217.998730][T11820] netlink: 'syz.4.2678': attribute type 13 has an invalid length. [ 218.088040][T11829] netlink: 'syz.2.2682': attribute type 13 has an invalid length. [ 218.297716][T11845] loop2: detected capacity change from 0 to 512 [ 218.310672][T11845] ext2: Unknown parameter 'dont_hash' [ 218.347158][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 218.347177][ T29] audit: type=1400 audit(1753828909.375:2545): avc: denied { create } for pid=11833 comm="syz.4.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.373157][ T29] audit: type=1400 audit(1753828909.375:2546): avc: denied { create } for pid=11833 comm="syz.4.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.425152][T11854] netlink: 'syz.3.2692': attribute type 13 has an invalid length. [ 218.512016][ T29] audit: type=1400 audit(1753828909.540:2547): avc: denied { read } for pid=11860 comm="syz.3.2694" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.536828][ T29] audit: type=1400 audit(1753828909.540:2548): avc: denied { open } for pid=11860 comm="syz.3.2694" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.548592][T11861] loop3: detected capacity change from 0 to 512 [ 218.568793][ T29] audit: type=1400 audit(1753828909.569:2549): avc: denied { create } for pid=11860 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.588709][ T29] audit: type=1400 audit(1753828909.569:2550): avc: denied { connect } for pid=11860 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.610134][T11861] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 218.618655][T11861] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.2694: iget: bad i_size value: 12154757448730 [ 218.631741][T11861] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2694: couldn't read orphan inode 13 (err -117) [ 218.645318][T11861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 218.661830][ T29] audit: type=1400 audit(1753828909.666:2551): avc: denied { mac_admin } for pid=11860 comm="syz.3.2694" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.683310][ T29] audit: type=1400 audit(1753828909.666:2552): avc: denied { relabelto } for pid=11860 comm="syz.3.2694" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 218.712888][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 218.723695][ T29] audit: type=1400 audit(1753828909.744:2553): avc: denied { create } for pid=11860 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.744492][ T29] audit: type=1400 audit(1753828909.764:2554): avc: denied { write } for pid=11860 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.744496][T11864] netlink: 'syz.2.2688': attribute type 10 has an invalid length. [ 218.775249][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'. [ 218.935055][T11872] FAULT_INJECTION: forcing a failure. [ 218.935055][T11872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 218.948333][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.3.2697 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 218.948412][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.948424][T11872] Call Trace: [ 218.948431][T11872] [ 218.948438][T11872] __dump_stack+0x1d/0x30 [ 218.948458][T11872] dump_stack_lvl+0xe8/0x140 [ 218.948478][T11872] dump_stack+0x15/0x1b [ 218.948495][T11872] should_fail_ex+0x265/0x280 [ 218.948533][T11872] should_fail_alloc_page+0xf2/0x100 [ 218.948557][T11872] __alloc_frozen_pages_noprof+0xff/0x360 [ 218.948583][T11872] alloc_pages_mpol+0xb3/0x250 [ 218.948655][T11872] vma_alloc_folio_noprof+0x1aa/0x300 [ 218.948684][T11872] handle_mm_fault+0xec2/0x2be0 [ 218.948706][T11872] ? mas_walk+0xf2/0x120 [ 218.948807][T11872] do_user_addr_fault+0x636/0x1090 [ 218.948835][T11872] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 218.948919][T11872] exc_page_fault+0x62/0xa0 [ 218.948943][T11872] asm_exc_page_fault+0x26/0x30 [ 218.948964][T11872] RIP: 0033:0x7f1b4b84bfbb [ 218.948979][T11872] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 218.948997][T11872] RSP: 002b:00007f1b49f04e10 EFLAGS: 00010246 [ 218.949059][T11872] RAX: 00007f1b49f06f30 RBX: 00007f1b4ba96620 RCX: 0000000000000000 [ 218.949144][T11872] RDX: 00007f1b49f06f78 RSI: 00007f1b4b8fdbf8 RDI: 00007f1b49f04e30 [ 218.949157][T11872] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 218.949167][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.949239][T11872] R13: 0000000000000000 R14: 00007f1b4bac5fa0 R15: 00007ffed2aea5f8 [ 218.949257][T11872] [ 218.949281][T11872] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 219.212287][T11882] Invalid ELF header magic: != ELF [ 219.246787][T11886] loop3: detected capacity change from 0 to 1024 [ 219.266516][T11886] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.301847][T11888] syzkaller0: entered promiscuous mode [ 219.307542][T11888] syzkaller0: entered allmulticast mode [ 219.315873][T11886] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 219.373762][T11886] EXT4-fs (loop3): Remounting filesystem read-only [ 219.402104][ T7413] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 219.504550][T11910] loop4: detected capacity change from 0 to 1024 [ 219.525553][T11910] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.538148][T11910] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 219.553450][T11910] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 219.565943][T11910] EXT4-fs (loop4): This should not happen!! Data will be lost [ 219.565943][T11910] [ 219.575612][T11910] EXT4-fs (loop4): Total free blocks count 0 [ 219.581757][T11910] EXT4-fs (loop4): Free/Dirty block details [ 219.588521][T11910] EXT4-fs (loop4): free_blocks=4293918720 [ 219.594359][T11910] EXT4-fs (loop4): dirty_blocks=48 [ 219.599481][T11910] EXT4-fs (loop4): Block reservation details [ 219.606089][T11910] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 219.692633][T11916] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 219.781764][T11920] loop5: detected capacity change from 0 to 512 [ 219.788504][T11920] ext2: Unknown parameter 'dont_hash' [ 219.975764][T11922] netlink: 'syz.5.2714': attribute type 10 has an invalid length. [ 219.983649][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2714'. [ 219.996526][T11922] team0: Port device dummy0 removed [ 220.002056][T11922] bridge0: port 3(dummy0) entered blocking state [ 220.008546][T11922] bridge0: port 3(dummy0) entered disabled state [ 220.015513][T11922] dummy0: entered allmulticast mode [ 220.259123][T11932] loop1: detected capacity change from 0 to 2048 [ 220.270725][T11932] EXT4-fs: Ignoring removed nobh option [ 220.406361][T11940] loop2: detected capacity change from 0 to 1024 [ 220.433219][T11940] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.450486][T11941] syzkaller0: entered promiscuous mode [ 220.456078][T11941] syzkaller0: entered allmulticast mode [ 220.466907][T11940] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 220.487247][T11940] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 220.500185][T11940] EXT4-fs (loop2): This should not happen!! Data will be lost [ 220.500185][T11940] [ 220.509907][T11940] EXT4-fs (loop2): Total free blocks count 0 [ 220.515905][T11940] EXT4-fs (loop2): Free/Dirty block details [ 220.521982][T11940] EXT4-fs (loop2): free_blocks=4293918720 [ 220.528711][T11940] EXT4-fs (loop2): dirty_blocks=48 [ 220.533915][T11940] EXT4-fs (loop2): Block reservation details [ 220.540072][T11940] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 220.910373][T11977] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 220.940183][T11979] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 220.980950][T11985] loop5: detected capacity change from 0 to 1024 [ 220.996113][T11987] loop4: detected capacity change from 0 to 256 [ 221.026757][T11989] loop4: detected capacity change from 0 to 1024 [ 221.044159][T11989] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.057353][T11989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 221.072561][T11989] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 221.085085][T11989] EXT4-fs (loop4): This should not happen!! Data will be lost [ 221.085085][T11989] [ 221.095085][T11989] EXT4-fs (loop4): Total free blocks count 0 [ 221.101257][T11989] EXT4-fs (loop4): Free/Dirty block details [ 221.107595][T11989] EXT4-fs (loop4): free_blocks=4293918720 [ 221.113388][T11989] EXT4-fs (loop4): dirty_blocks=48 [ 221.118685][T11989] EXT4-fs (loop4): Block reservation details [ 221.124923][T11989] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 221.180441][T12001] syzkaller0: entered promiscuous mode [ 221.186101][T12001] syzkaller0: entered allmulticast mode [ 221.295614][T12010] loop4: detected capacity change from 0 to 512 [ 221.302845][T12010] ext2: Unknown parameter 'dont_hash' [ 221.522247][T12015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2744'. [ 221.535522][T12015] team0: Port device dummy0 removed [ 221.541308][T12015] bridge0: port 3(dummy0) entered blocking state [ 221.547927][T12015] bridge0: port 3(dummy0) entered disabled state [ 221.561211][T12015] dummy0: entered allmulticast mode [ 221.705557][T12019] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 221.748994][T12022] loop3: detected capacity change from 0 to 256 [ 222.032166][T12025] FAULT_INJECTION: forcing a failure. [ 222.032166][T12025] name failslab, interval 1, probability 0, space 0, times 0 [ 222.047044][T12025] CPU: 0 UID: 0 PID: 12025 Comm: gtp Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 222.047067][T12025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.047078][T12025] Call Trace: [ 222.047084][T12025] [ 222.047091][T12025] __dump_stack+0x1d/0x30 [ 222.047121][T12025] dump_stack_lvl+0xe8/0x140 [ 222.047137][T12025] dump_stack+0x15/0x1b [ 222.047155][T12025] should_fail_ex+0x265/0x280 [ 222.047184][T12025] should_failslab+0x8c/0xb0 [ 222.047201][T12025] __kmalloc_node_noprof+0xa9/0x410 [ 222.047293][T12025] ? __kmalloc_noprof+0x1dd/0x3e0 [ 222.047382][T12025] ? tcp_sigpool_alloc_ahash+0x172/0x660 [ 222.047405][T12025] tcp_sigpool_alloc_ahash+0x172/0x660 [ 222.047429][T12025] tcp_md5_alloc_sigpool+0x1b/0x60 [ 222.047445][T12025] tcp_md5_do_add+0x7f/0x1c0 [ 222.047499][T12025] tcp_v6_parse_md5_keys+0x429/0x450 [ 222.047535][T12025] do_tcp_setsockopt+0xf21/0x1670 [ 222.047565][T12025] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 222.047591][T12025] tcp_setsockopt+0x51/0xb0 [ 222.047679][T12025] sock_common_setsockopt+0x69/0x80 [ 222.047705][T12025] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.047814][T12025] __sys_setsockopt+0x184/0x200 [ 222.047845][T12025] __x64_sys_setsockopt+0x64/0x80 [ 222.047900][T12025] x64_sys_call+0x2bd5/0x2fb0 [ 222.047917][T12025] do_syscall_64+0xd2/0x200 [ 222.047966][T12025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.048106][T12025] ? clear_bhb_loop+0x40/0x90 [ 222.048123][T12025] ? clear_bhb_loop+0x40/0x90 [ 222.048144][T12025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.048166][T12025] RIP: 0033:0x7fb1011de9a9 [ 222.048182][T12025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.048202][T12025] RSP: 002b:00007fb0ff847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.048228][T12025] RAX: ffffffffffffffda RBX: 00007fb101405fa0 RCX: 00007fb1011de9a9 [ 222.048239][T12025] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000005 [ 222.048307][T12025] RBP: 00007fb0ff847090 R08: 00000000000000d8 R09: 0000000000000000 [ 222.048366][T12025] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 222.048377][T12025] R13: 0000000000000000 R14: 00007fb101405fa0 R15: 00007ffd62e7eb48 [ 222.048392][T12025] [ 222.314109][T12027] Invalid ELF header magic: != ELF [ 222.436264][T12039] syzkaller0: entered promiscuous mode [ 222.441772][T12039] syzkaller0: entered allmulticast mode [ 222.473510][T12046] validate_nla: 2 callbacks suppressed [ 222.473525][T12046] netlink: 'syz.1.2759': attribute type 13 has an invalid length. [ 222.488187][T12044] loop5: detected capacity change from 0 to 1024 [ 222.517315][T12044] EXT4-fs mount: 74 callbacks suppressed [ 222.517349][T12044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.536068][T12044] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.571144][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.616468][T12060] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 222.624913][T12058] loop1: detected capacity change from 0 to 512 [ 222.649257][T12060] dummy0: left allmulticast mode [ 222.654555][T12062] loop5: detected capacity change from 0 to 256 [ 222.669409][T12060] dummy0: left promiscuous mode [ 222.674739][T12060] bridge0: port 3(dummy0) entered disabled state [ 222.690238][T12058] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 222.690422][T12058] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.702720][T12058] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2763: corrupted inode contents [ 222.706432][T12058] EXT4-fs (loop1): Remounting filesystem read-only [ 222.706558][T12058] EXT4-fs (loop1): 1 truncate cleaned up [ 222.710458][ T3433] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.710484][ T3433] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.710503][ T3433] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 222.710864][T12058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.733654][T12060] dummy0: entered promiscuous mode [ 222.734050][T12060] team0: Port device dummy0 added [ 222.772270][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.784473][T12070] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 222.798026][T12072] Invalid ELF header magic: != ELF [ 222.824649][T12074] loop2: detected capacity change from 0 to 512 [ 222.890702][T12081] netlink: 'syz.1.2767': attribute type 13 has an invalid length. [ 222.899378][T12074] ext2: Unknown parameter 'dont_hash' [ 222.921291][T12078] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 222.951198][T12082] loop3: detected capacity change from 0 to 1024 [ 222.983690][T12082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.033335][T12082] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.070228][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.133120][T12097] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 223.140994][T12097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2768'. [ 223.187575][T12097] team0: Port device dummy0 removed [ 223.193194][T12097] bridge0: port 3(dummy0) entered blocking state [ 223.199672][T12097] bridge0: port 3(dummy0) entered disabled state [ 223.206337][T12097] dummy0: entered allmulticast mode [ 223.238044][T12098] netlink: 'syz.5.2777': attribute type 10 has an invalid length. [ 223.255726][T12098] dummy0: left allmulticast mode [ 223.260958][T12098] dummy0: left promiscuous mode [ 223.266182][T12098] bridge0: port 3(dummy0) entered disabled state [ 223.275856][T12098] dummy0: entered promiscuous mode [ 223.281639][T12098] team0: Port device dummy0 added [ 223.538426][T12103] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 223.621399][T12110] Invalid ELF header magic: != ELF [ 223.635655][T12106] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 223.666747][T12114] ALSA: seq fatal error: cannot create timer (-19) [ 223.700365][T12117] loop5: detected capacity change from 0 to 1024 [ 223.724048][T12117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.752746][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.779824][T12124] loop5: detected capacity change from 0 to 1024 [ 223.795954][T12124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.811035][T12124] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.830638][T12129] loop2: detected capacity change from 0 to 512 [ 223.839291][T12129] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 223.842446][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.849421][T12129] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.2787: iget: bad i_size value: 12154757448730 [ 223.869781][T12129] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2787: couldn't read orphan inode 13 (err -117) [ 223.883083][T12129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.902023][T12132] loop5: detected capacity change from 0 to 1024 [ 223.904515][T12129] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 223.926619][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 223.928330][T12132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.958220][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.974928][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 223.974941][ T29] audit: type=1326 audit(1753828914.862:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.005656][ T29] audit: type=1326 audit(1753828914.872:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.029786][ T29] audit: type=1326 audit(1753828914.872:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.053369][ T29] audit: type=1326 audit(1753828914.872:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.077126][ T29] audit: type=1326 audit(1753828914.872:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.101182][ T29] audit: type=1326 audit(1753828914.872:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.124798][ T29] audit: type=1326 audit(1753828914.872:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.148385][ T29] audit: type=1326 audit(1753828914.872:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.171915][ T29] audit: type=1326 audit(1753828914.872:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.195417][ T29] audit: type=1326 audit(1753828914.872:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f1a4e9a9 code=0x7ffc0000 [ 224.201808][T12143] loop1: detected capacity change from 0 to 512 [ 224.228413][T12143] ext2: Unknown parameter 'dont_hash' [ 224.452506][T12154] netlink: 'syz.1.2791': attribute type 10 has an invalid length. [ 224.460735][T12154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2791'. [ 224.476215][T12154] team0: Port device dummy0 removed [ 224.481837][T12154] bridge0: port 1(dummy0) entered blocking state [ 224.488302][T12154] bridge0: port 1(dummy0) entered disabled state [ 224.494790][T12154] dummy0: entered allmulticast mode [ 224.513983][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.815373][T12165] loop5: detected capacity change from 0 to 512 [ 224.822202][T12165] ext2: Unknown parameter 'dont_hash' [ 224.926091][T12166] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 224.935008][T12169] loop3: detected capacity change from 0 to 512 [ 224.980093][T12169] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.995443][T12169] EXT4-fs (loop3): mount failed [ 225.015398][T12169] loop3: detected capacity change from 0 to 1024 [ 225.107711][T12169] EXT4-fs: Ignoring removed nobh option [ 225.113895][T12181] netlink: 'syz.5.2800': attribute type 10 has an invalid length. [ 225.121770][T12181] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2800'. [ 225.132609][T12169] EXT4-fs: Ignoring removed bh option [ 225.138846][T12169] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 225.145538][T12181] team0: Port device dummy0 removed [ 225.157390][T12180] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 225.234449][T12181] bridge0: port 3(dummy0) entered blocking state [ 225.240869][T12181] bridge0: port 3(dummy0) entered disabled state [ 225.247769][T12181] dummy0: entered allmulticast mode [ 225.255802][T12169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.300107][T12184] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 225.392098][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.657540][T12200] loop3: detected capacity change from 0 to 512 [ 225.675341][T12200] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 225.692186][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.700029][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.707748][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.715851][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.723784][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.724594][T12200] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.732423][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.747230][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.755091][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.763341][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.771111][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.779067][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.780394][T12208] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2813'. [ 225.786862][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.803748][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.804896][T12208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.811993][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.821060][T12200] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2810: corrupted inode contents [ 225.827083][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.840211][T12200] EXT4-fs (loop3): Remounting filesystem read-only [ 225.846656][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.853632][T12200] EXT4-fs (loop3): 1 truncate cleaned up [ 225.860866][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.874232][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.882137][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.889854][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.897700][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.905410][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.913625][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.914120][T12208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.921367][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.921393][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.932330][T12210] loop5: detected capacity change from 0 to 512 [ 225.936129][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.945665][T12210] EXT4-fs: Ignoring removed i_version option [ 225.950056][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.971605][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.979307][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.986970][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 225.994815][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 226.002534][ T1041] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 226.012045][T12210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.029682][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.040369][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.059644][ T1041] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 226.061754][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 226.081175][T12200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.102266][T12210] EXT4-fs (loop5): 1 truncate cleaned up [ 226.110274][T12210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.135615][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.149016][T12220] loop4: detected capacity change from 0 to 512 [ 226.168372][T12220] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.174592][T12216] fido_id[12216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.227318][T12220] EXT4-fs (loop4): mount failed [ 226.233478][ T1041] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 226.243877][ T1041] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.245103][T12222] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 226.282711][T12230] loop3: detected capacity change from 0 to 512 [ 226.289621][T12230] EXT4-fs: Ignoring removed i_version option [ 226.298516][T12220] loop4: detected capacity change from 0 to 1024 [ 226.298958][T12229] fido_id[12229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.332640][T12220] EXT4-fs: Ignoring removed nobh option [ 226.339957][T12230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.350292][T12220] EXT4-fs: Ignoring removed bh option [ 226.364706][T12220] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 226.364967][T12230] EXT4-fs (loop3): 1 truncate cleaned up [ 226.381795][T12230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.397178][T12220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.415702][T12220] ip6tnl1: entered promiscuous mode [ 226.474697][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.527765][T12244] Invalid ELF header magic: != ELF [ 226.654675][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.709568][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.717358][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.725180][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.733065][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.741146][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.749091][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.756907][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.764690][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.772538][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.780314][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.787985][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.795737][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.803441][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.811148][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.818898][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.826552][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.834272][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.841983][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.849781][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.857598][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.865378][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.873032][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.880799][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.888477][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.896224][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.903897][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.911607][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.919284][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.926956][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.934620][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.942321][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.950020][ T3586] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 226.958914][ T3586] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 226.979605][T12258] fido_id[12258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.996017][T12260] loop2: detected capacity change from 0 to 256 [ 227.009233][T12262] loop5: detected capacity change from 0 to 512 [ 227.023866][T12262] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 227.032410][T12262] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.2830: iget: bad i_size value: 12154757448730 [ 227.047494][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.057168][T12262] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2830: couldn't read orphan inode 13 (err -117) [ 227.069658][T12265] ALSA: seq fatal error: cannot create timer (-19) [ 227.076603][T12262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.090289][T12262] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 227.135258][T12268] loop3: detected capacity change from 0 to 512 [ 227.161464][T12268] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.162050][T12274] Invalid ELF header magic: != ELF [ 227.179061][T12268] EXT4-fs (loop3): mount failed [ 227.196522][T12268] loop3: detected capacity change from 0 to 1024 [ 227.212807][T12268] EXT4-fs: Ignoring removed nobh option [ 227.220525][T12268] EXT4-fs: Ignoring removed bh option [ 227.240899][T12280] loop1: detected capacity change from 0 to 1024 [ 227.248411][T12268] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 227.272698][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.283264][T12280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.296984][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.320179][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.375772][T12291] syzkaller0: entered promiscuous mode [ 227.381293][T12291] syzkaller0: entered allmulticast mode [ 227.388080][T12287] syzkaller0: entered promiscuous mode [ 227.393755][T12287] syzkaller0: entered allmulticast mode [ 227.467609][T12294] netlink: 'syz.4.2841': attribute type 13 has an invalid length. [ 227.508895][T12299] loop1: detected capacity change from 0 to 512 [ 227.515601][T12299] ext2: Unknown parameter 'dont_hash' [ 227.516323][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.649042][T12306] loop2: detected capacity change from 0 to 1024 [ 227.687090][T12312] loop5: detected capacity change from 0 to 512 [ 227.697027][T12312] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 227.706895][T12306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.720565][T12306] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.733450][T12312] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.2846: iget: bad i_size value: 12154757448730 [ 227.750963][T12306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 228.466699][T12299] netlink: 'syz.1.2842': attribute type 10 has an invalid length. [ 228.474933][T12299] __nla_validate_parse: 8 callbacks suppressed [ 228.474944][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2842'. [ 228.525078][T12312] EXT4-fs (loop5): Remounting filesystem read-only [ 228.543427][T12312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.558143][T12306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 228.570917][T12306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 228.570917][T12306] [ 228.581445][T12306] EXT4-fs (loop2): Total free blocks count 0 [ 228.587609][T12306] EXT4-fs (loop2): Free/Dirty block details [ 228.593879][T12306] EXT4-fs (loop2): free_blocks=4293918720 [ 228.599774][T12306] EXT4-fs (loop2): dirty_blocks=48 [ 228.604955][T12306] EXT4-fs (loop2): Block reservation details [ 228.611074][T12306] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 228.633169][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.686289][T12330] FAULT_INJECTION: forcing a failure. [ 228.686289][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 228.700391][T12330] CPU: 0 UID: 0 PID: 12330 Comm: syz.4.2854 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 228.700416][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.700426][T12330] Call Trace: [ 228.700434][T12330] [ 228.700485][T12330] __dump_stack+0x1d/0x30 [ 228.700507][T12330] dump_stack_lvl+0xe8/0x140 [ 228.700523][T12330] dump_stack+0x15/0x1b [ 228.700538][T12330] should_fail_ex+0x265/0x280 [ 228.700613][T12330] should_failslab+0x8c/0xb0 [ 228.700633][T12330] __kmalloc_node_noprof+0xa9/0x410 [ 228.700655][T12330] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 228.700684][T12330] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 228.700733][T12330] ? mntput_no_expire+0x6f/0x3c0 [ 228.700790][T12330] ? selinux_capable+0x1f9/0x270 [ 228.700821][T12330] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 228.700849][T12330] __vmalloc_noprof+0x83/0xc0 [ 228.700873][T12330] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 228.700899][T12330] bpf_prog_alloc_no_stats+0x47/0x390 [ 228.700921][T12330] ? bpf_prog_alloc+0x2a/0x150 [ 228.700944][T12330] bpf_prog_alloc+0x3c/0x150 [ 228.700967][T12330] bpf_prog_load+0x514/0x1070 [ 228.701054][T12330] ? security_bpf+0x2b/0x90 [ 228.701103][T12330] __sys_bpf+0x51d/0x790 [ 228.701200][T12330] __x64_sys_bpf+0x41/0x50 [ 228.701223][T12330] x64_sys_call+0x2478/0x2fb0 [ 228.701242][T12330] do_syscall_64+0xd2/0x200 [ 228.701272][T12330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.701400][T12330] ? clear_bhb_loop+0x40/0x90 [ 228.701433][T12330] ? clear_bhb_loop+0x40/0x90 [ 228.701451][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.701537][T12330] RIP: 0033:0x7fb52740e9a9 [ 228.701553][T12330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.701569][T12330] RSP: 002b:00007fb525a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.701645][T12330] RAX: ffffffffffffffda RBX: 00007fb527635fa0 RCX: 00007fb52740e9a9 [ 228.701659][T12330] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 228.701672][T12330] RBP: 00007fb525a77090 R08: 0000000000000000 R09: 0000000000000000 [ 228.701722][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.701734][T12330] R13: 0000000000000000 R14: 00007fb527635fa0 R15: 00007ffd9fa81af8 [ 228.701750][T12330] [ 228.701757][T12330] syz.4.2854: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 228.706927][T12332] loop3: detected capacity change from 0 to 512 [ 228.714828][T12330] ,cpuset= [ 228.746532][T12332] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 228.749137][T12330] /,mems_allowed=0 [ 228.749163][T12330] CPU: 0 UID: 0 PID: 12330 Comm: syz.4.2854 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 228.749320][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.749406][T12330] Call Trace: [ 228.749414][T12330] [ 228.749423][T12330] __dump_stack+0x1d/0x30 [ 228.749442][T12330] dump_stack_lvl+0xe8/0x140 [ 228.749461][T12330] dump_stack+0x15/0x1b [ 228.749477][T12330] warn_alloc+0x12b/0x1a0 [ 228.749504][T12330] ? should_failslab+0x8c/0xb0 [ 228.749561][T12330] __vmalloc_node_range_noprof+0x497/0xe00 [ 228.749663][T12330] ? selinux_capable+0x1f9/0x270 [ 228.749687][T12330] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 228.749727][T12330] __vmalloc_noprof+0x83/0xc0 [ 228.749753][T12330] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 228.749831][T12330] bpf_prog_alloc_no_stats+0x47/0x390 [ 228.749857][T12330] ? bpf_prog_alloc+0x2a/0x150 [ 228.749882][T12330] bpf_prog_alloc+0x3c/0x150 [ 228.749955][T12330] bpf_prog_load+0x514/0x1070 [ 228.750057][T12330] ? security_bpf+0x2b/0x90 [ 228.750075][T12330] __sys_bpf+0x51d/0x790 [ 228.750105][T12330] __x64_sys_bpf+0x41/0x50 [ 228.750129][T12330] x64_sys_call+0x2478/0x2fb0 [ 228.750160][T12330] do_syscall_64+0xd2/0x200 [ 228.750179][T12330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.750221][T12330] ? clear_bhb_loop+0x40/0x90 [ 228.750326][T12330] ? clear_bhb_loop+0x40/0x90 [ 228.750345][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.750416][T12330] RIP: 0033:0x7fb52740e9a9 [ 228.750432][T12330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.750449][T12330] RSP: 002b:00007fb525a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.750508][T12330] RAX: ffffffffffffffda RBX: 00007fb527635fa0 RCX: 00007fb52740e9a9 [ 228.750521][T12330] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 228.750533][T12330] RBP: 00007fb525a77090 R08: 0000000000000000 R09: 0000000000000000 [ 228.750545][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.750558][T12330] R13: 0000000000000000 R14: 00007fb527635fa0 R15: 00007ffd9fa81af8 [ 228.750575][T12330] [ 228.750638][T12330] Mem-Info: [ 228.754636][T12332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.759896][T12330] active_anon:6986 inactive_anon:47 isolated_anon:0 [ 228.759896][T12330] active_file:16696 inactive_file:2337 isolated_file:0 [ 228.759896][T12330] unevictable:0 dirty:55 writeback:0 [ 228.759896][T12330] slab_reclaimable:3232 slab_unreclaimable:94005 [ 228.759896][T12330] mapped:29534 shmem:1562 pagetables:1100 [ 228.759896][T12330] sec_pagetables:0 bounce:0 [ 228.759896][T12330] kernel_misc_reclaimable:0 [ 228.759896][T12330] free:1807096 free_pcp:13849 free_cma:0 [ 228.767756][T12332] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2850: corrupted inode contents [ 228.771711][T12330] Node 0 active_anon:27944kB inactive_anon:188kB active_file:66784kB inactive_file:9348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118136kB dirty:220kB writeback:0kB shmem:6248kB writeback_tmp:0kB kernel_stack:3472kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.777337][T12332] EXT4-fs (loop3): Remounting filesystem read-only [ 228.781595][T12330] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.787488][T12332] EXT4-fs (loop3): 1 truncate cleaned up [ 228.791946][T12330] lowmem_reserve[]: 0 [ 228.828922][T12339] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2856'. [ 228.831125][T12330] 2882 [ 228.914639][T12342] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 228.919304][T12330] 7860 7860 [ 228.919325][T12330] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 229.397555][T12330] lowmem_reserve[]: 0 0 4978 4978 [ 229.397599][T12330] Node 0 Normal free:4265200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28060kB inactive_anon:188kB active_file:66784kB inactive_file:9348kB unevictable:0kB writepending:220kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:51248kB local_pcp:27548kB free_cma:0kB [ 229.397696][T12340] ================================================================== [ 229.397703][T12330] lowmem_reserve[]: 0 0 0 0 [ 229.397731][T12330] Node 0 DMA: 0*4kB 0*8kB [ 229.397735][T12340] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 229.397774][T12340] [ 229.397780][T12340] write to 0xffffffff8686a768 of 8 bytes by task 12330 on cpu 0: [ 229.397758][T12330] 0*16kB 0*32kB 0*64kB [ 229.397794][T12340] prb_reserve_in_last+0x861/0xb80 [ 229.397811][T12330] 0*128kB 0*256kB [ 229.397822][T12340] vprintk_store+0x494/0x860 [ 229.397827][T12330] 0*512kB 1*1024kB (U) [ 229.397840][T12340] vprintk_emit+0x178/0x650 [ 229.397850][T12330] 1*2048kB (M) [ 229.397858][T12340] vprintk_default+0x26/0x30 [ 229.397863][T12330] 3*4096kB [ 229.397871][T12330] (M) = 15360kB [ 229.397885][T12330] Node 0 [ 229.397877][T12340] vprintk+0x1d/0x30 [ 229.397898][T12340] _printk+0x79/0xa0 [ 229.397911][T12330] DMA32: 4*4kB (M) 2*8kB [ 229.397922][T12340] __show_mem+0xd8b/0x14b0 [ 229.397938][T12330] (M) 3*16kB (M) 3*32kB [ 229.397951][T12340] warn_alloc+0x189/0x1a0 [ 229.397963][T12330] (M) [ 229.397976][T12340] __vmalloc_node_range_noprof+0x497/0xe00 [ 229.397998][T12340] __vmalloc_noprof+0x83/0xc0 [ 229.398019][T12340] bpf_prog_alloc_no_stats+0x47/0x390 [ 229.397968][T12330] 5*64kB (M) 4*128kB (M) 3*256kB [ 229.398044][T12340] bpf_prog_alloc+0x3c/0x150 [ 229.398061][T12330] (M) 4*512kB (M) 3*1024kB [ 229.398070][T12340] bpf_prog_load+0x514/0x1070 [ 229.398087][T12330] (M) 2*2048kB (M) 717*4096kB [ 229.398098][T12340] __sys_bpf+0x51d/0x790 [ 229.398113][T12330] (M) = 2947824kB [ 229.398126][T12330] Node 0 Normal: [ 229.398123][T12340] __x64_sys_bpf+0x41/0x50 [ 229.398145][T12340] x64_sys_call+0x2478/0x2fb0 [ 229.398162][T12340] do_syscall_64+0xd2/0x200 [ 229.398177][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.398193][T12340] [ 229.398198][T12340] read to 0xffffffff8686a760 of 16 bytes by task 12340 on cpu 1: [ 229.398202][T12330] 1609*4kB (UM) 1195*8kB (UME) [ 229.398215][T12340] _prb_read_valid+0x1bc/0x920 [ 229.398228][T12330] 999*16kB (UME) 312*32kB (UM) 107*64kB [ 229.398245][T12340] prb_read_valid+0x3c/0x60 [ 229.398270][T12340] printk_get_next_message+0xc8/0x510 [ 229.398287][T12340] console_flush_all+0x290/0x730 [ 229.398301][T12330] (UME) 53*128kB [ 229.398306][T12340] console_unlock+0xa1/0x330 [ 229.398327][T12330] (UME) [ 229.398321][T12340] con_shutdown+0x4b/0x60 [ 229.398332][T12330] 70*256kB (UME) 51*512kB (UM) 54*1024kB [ 229.398350][T12340] release_tty+0x85/0x4f0 [ 229.398374][T12340] tty_release_struct+0x96/0xb0 [ 229.398394][T12340] tty_release+0x856/0xb10 [ 229.398414][T12340] __fput+0x29b/0x650 [ 229.398367][T12330] (UM) [ 229.398431][T12340] ____fput+0x1c/0x30 [ 229.398438][T12330] 37*2048kB (UME) 985*4096kB (UM) [ 229.398453][T12340] task_work_run+0x131/0x1a0 [ 229.398464][T12330] = 4265260kB [ 229.398474][T12340] exit_to_user_mode_loop+0xe4/0x100 [ 229.398472][T12330] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 229.398496][T12330] 20585 total pagecache pages [ 229.398496][T12340] do_syscall_64+0x1d6/0x200 [ 229.398503][T12330] 48 pages in swap cache [ 229.398510][T12330] Free swap = 118660kB [ 229.398517][T12330] Total swap = 124996kB [ 229.398515][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.398534][T12340] [ 229.398533][T12330] 2097051 pages RAM [ 229.398538][T12340] Reported by Kernel Concurrency Sanitizer on: [ 229.398540][T12330] 0 pages HighMem/MovableOnly [ 229.398546][T12330] 80813 pages reserved [ 229.398550][T12340] CPU: 1 UID: 0 PID: 12340 Comm: syz.2.2857 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 229.398578][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.398588][T12340] ================================================================== [ 229.399055][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.832157][ T31] __quota_error: 147 callbacks suppressed [ 229.832165][ T31] Quota error (device loop3): write_blk: dquota write failed [ 229.845389][ T31] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 229.855383][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.865923][ T31] Quota error (device loop3): write_blk: dquota write failed [ 229.873474][ T31] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 229.883685][ T8987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.884012][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 229.902769][ T31] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 229.912010][ T31] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.922476][T12332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.965289][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.