last executing test programs: 3.307609719s ago: executing program 1 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x8, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 3.075980312s ago: executing program 1 (id=727): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) r0 = socket$tipc(0x1e, 0x92cef652538418a9, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x4, &(0x7f00000006c0)=[{0x7, 0xfc, 0x0, 0x3ff}, {0x200, 0xe7, 0xfe, 0x2}, {0x19f3, 0x3, 0xfc, 0x8}, {0xe, 0xe, 0x0, 0x3}]}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$binfmt_register(r3, &(0x7f0000000780)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8001, 0x3a, '<^\\\\\xd5/', 0x3a, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0xb8) 3.038201042s ago: executing program 1 (id=728): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x81) 2.936832264s ago: executing program 3 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 2.903560185s ago: executing program 3 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 2.663657748s ago: executing program 4 (id=745): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) 2.055630598s ago: executing program 1 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 1.841223011s ago: executing program 2 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x40) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) 1.829260801s ago: executing program 3 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000180)) 1.768403432s ago: executing program 2 (id=752): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1) 1.766564712s ago: executing program 4 (id=753): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpjquota}, {@commit={'commit', 0x3d, 0x100}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x7a4, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0xd0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x5000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r11, @ANYBLOB="000000070000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r11], 0x48}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x232442, 0x41) 1.677272903s ago: executing program 3 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fec010018000000000000000cf4f1ff0b0000000700000000005f3001000000"], 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x633e4e69e757599d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xa, 0xffff}, {0xe, 0xfff8}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec7, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.483483817s ago: executing program 2 (id=756): connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x4}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x57) 1.438791967s ago: executing program 2 (id=759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 1.403593288s ago: executing program 1 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b2008385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5bb6f5dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f0841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b158b41f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b00005e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a605608057228652010400006c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d82d6734b849304c27b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833c596c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e029efe0703615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712ea5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185daba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687fd1602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81da8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6687f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd848d7cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c86310e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13b5c1fa7cfaadba85c7248758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1271e0400", 0x1000}}, 0x1006) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r8, 0x25, 0xb, @val=@iter={&(0x7f0000000100)=@cgroup={0x1}, 0x10}}, 0x20) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r11, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r12 = openat$cgroup_devices(r10, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000280)=ANY=[@ANYBLOB='b \x00\x00\x00\x00\x00\x00\x00'], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.033167334s ago: executing program 0 (id=762): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x3, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x2], 0x80000001, 0x29, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@rand_addr, @local, 0x0}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000d00)={'gre0\x00', r2, 0x7800, 0x0, 0x40, 0x2, {{0x13, 0x4, 0x3, 0x3a, 0x4c, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0x8, "390fd6673f51"}, @lsrr={0x83, 0x17, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @broadcast]}, @lsrr={0x83, 0x17, 0x98, [@multicast2, @loopback, @private=0xa010100, @loopback, @empty]}, @end]}}}}}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x301080, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000a0000000b0000000000000c0500000000002e3000005f1e2e0090eea63bf31f41d1a656ffb8ead08db673899c23ba7beb16914ba080a67b62"], &(0x7f0000000e40)=""/73, 0x2e, 0xffffffffffffffaa, 0x0, 0x4}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file1\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)=ANY=[@ANYBLOB], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={&(0x7f0000000f00)='./file1\x00', 0x0, 0xc, r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0b00000003000000ff010000ebc70000008000", @ANYRES32=0x1, @ANYBLOB="ff0300"/18, @ANYRES32=r0, @ANYBLOB="03000000040000000100000000000000000000006b048325599effedaa95733d33cc6e217c9fcf3a605fc5231caa89f459956ebcd6d99ff042517bfb0af32afaa6aa87c0cac4a76c5540bac1966c749cf658bab684f05a68f184e7325a99adffaeec2c449c379bcafc0d4494568fd3dc0faff2e6b8310c4d59af6b41ba949310f2a6d844ce91cf", @ANYRES32=r4], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x50df, 0x0, 0x4, 0x0, 0xa, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, r6, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10000}, 0xff5a0594eed443e, 0xfffffffd, 0x200b, 0x7, 0x4, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf25010000000900e106bc1721ac854d00000900030073797a310000000005000400020000001400020070696d367265673100000000000000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x5800}, 0x4040894) 1.025181084s ago: executing program 2 (id=763): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000001c0)="5fd561c39fe8bc998a5f30fe0f6a554cc45635ecd408e41c7524d514b65f72a60263a72805527fd8e702904428c1becae980b2e416a589b2bfb0dba2ccee553d2d1c5e3fc77ad34e2a4042226efd768804c3337fb8384c814f15cbfeb31044e28bb8f5306f6cbb5399c6f16e348ac07fcbffb20fc0da3f1c088c7083cb16d897341766cfa22fa6ba6a04e28633f38501ab203b462e914ead18fb2b139b423db17a20981c26c3e6dd60e1d9827bd1e1545af7aeda10b8d169d0e36c70fdc9aac81b0fd21693b8eec8d9bce7db4727b29dfa171731a96743b0228a0b", 0xdb, 0x4000091, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) tkill(0x0, 0x13) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xfcffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}], 0x3, 0x400122a0, 0x0) tkill(0x0, 0x12) 929.687665ms ago: executing program 0 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r8, 0x25, 0xb, @val=@iter={&(0x7f0000000100)=@cgroup={0x1}, 0x10}}, 0x20) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r13, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r14 = openat$cgroup_devices(r12, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000000280)=ANY=[@ANYBLOB='b \x00\x00\x00\x00\x00\x00\x00'], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 854.981816ms ago: executing program 3 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x81) 719.748388ms ago: executing program 1 (id=766): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x38) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x60000480) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x1d, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0xaf}}, 0x0) 661.201389ms ago: executing program 4 (id=767): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x2d, 0x0, 0x1, 0xb9}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000"], 0xa8}}, 0x40080) rt_sigaction(0x11, &(0x7f00000002c0)={&(0x7f0000000180)="c402a18eb700000000420fc5c8e12ef30f5396a7b7eb4ec4c2e18cb300000000450f3a0f71000c67440f0d4100f20f59f0f0fe01460ff93a660f28ed", 0x50000006, 0x0, {[0x80000000]}}, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000ad0f00000000000000000000f7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x178}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) 586.81779ms ago: executing program 0 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 579.78247ms ago: executing program 4 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x8, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 541.577871ms ago: executing program 0 (id=770): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) open(0x0, 0x40, 0x81) 540.779841ms ago: executing program 0 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r8, 0x25, 0xb, @val=@iter={&(0x7f0000000100)=@cgroup={0x1}, 0x10}}, 0x20) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r13, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r14 = openat$cgroup_devices(r12, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000000280)=ANY=[@ANYBLOB='b \x00\x00\x00\x00\x00\x00\x00'], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 379.379014ms ago: executing program 4 (id=772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") unlink(&(0x7f0000000100)='./file1\x00') 223.598676ms ago: executing program 4 (id=773): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x1c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file1\x00', &(0x7f0000002e80), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0x2, @loopback, 0x9}, {0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x0, {[0xffff, 0x3, 0x5, 0x3, 0x3, 0x2, 0x7, 0x10001]}}, 0x5c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT, @ANYRES16], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x885) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000000095000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff1b, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) 75.416218ms ago: executing program 2 (id=774): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, 0x33, 0x0) (fail_nth: 2) 72.889168ms ago: executing program 0 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fec010018000000000000000cf4f1ff0b0000000700000000005f3001000000"], 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x633e4e69e757599d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xa, 0xffff}, {0xe, 0xfff8}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec7, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 0s ago: executing program 3 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fec010018000000000000000cf4f1ff0b0000000700000000005f3001000000"], 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x633e4e69e757599d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xa, 0xffff}, {0xe, 0xfff8}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec7, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.860660][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.868515][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.876313][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.884143][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.891983][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.899967][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.907775][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.915606][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.923365][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.931173][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.938962][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.946835][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.954630][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.962439][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.970308][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.978290][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.986078][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 45.993923][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.001726][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.009519][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.017314][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.025127][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.032938][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.040926][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.048740][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.056617][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.064618][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.072472][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 46.085689][ T3386] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.120806][ T3774] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.218144][ T3778] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.285815][ T3780] loop3: detected capacity change from 0 to 512 [ 46.294053][ T3780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.303865][ T3774] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 46.449505][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.567894][ T3780] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.687809][ T3793] netlink: 'syz.0.99': attribute type 64 has an invalid length. [ 46.695700][ T3780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 46.735587][ T3791] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 46.750569][ T3778] Zero length message leads to an empty skb [ 46.777784][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.813274][ T3805] 9pnet_fd: Insufficient options for proto=fd [ 46.830909][ T3791] syz.2.98 (3791) used greatest stack depth: 10056 bytes left [ 46.864386][ T3810] loop3: detected capacity change from 0 to 128 [ 46.890169][ T3812] 9pnet: Could not find request transport: fd0x0000000000000004 [ 46.998410][ T3827] loop1: detected capacity change from 0 to 512 [ 47.006331][ T3827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.020401][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.020606][ T3827] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.070006][ T3833] loop3: detected capacity change from 0 to 764 [ 47.082419][ T3833] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.124175][ T3827] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 47.159903][ T3840] 9pnet_fd: Insufficient options for proto=fd [ 47.163026][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.200492][ T3838] netlink: 'syz.2.115': attribute type 64 has an invalid length. [ 47.590634][ T3866] loop2: detected capacity change from 0 to 764 [ 47.910254][ T3877] loop4: detected capacity change from 0 to 128 [ 47.949095][ T3877] EXT4-fs: Ignoring removed nobh option [ 47.973910][ T3866] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.986197][ T3877] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.042045][ T3877] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.107263][ T3895] 9pnet_fd: Insufficient options for proto=fd [ 48.223543][ T3901] 9pnet: Could not find request transport: fd0x0000000000000004 [ 48.331373][ T3904] loop0: detected capacity change from 0 to 2048 [ 48.353634][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 48.353651][ T29] audit: type=1326 audit(1751254018.173:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa578ab19 code=0x7ffc0000 [ 48.390367][ T3904] loop0: p1 < > p4 [ 48.395844][ T29] audit: type=1326 audit(1751254018.213:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0123de929 code=0x7ffc0000 [ 48.419516][ T29] audit: type=1326 audit(1751254018.213:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0123de929 code=0x7ffc0000 [ 48.442908][ T29] audit: type=1326 audit(1751254018.213:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa57e58e7 code=0x7ffc0000 [ 48.466307][ T29] audit: type=1326 audit(1751254018.213:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa578ab19 code=0x7ffc0000 [ 48.489647][ T29] audit: type=1326 audit(1751254018.213:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa57e58e7 code=0x7ffc0000 [ 48.512991][ T29] audit: type=1326 audit(1751254018.213:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa578ab19 code=0x7ffc0000 [ 48.536281][ T29] audit: type=1326 audit(1751254018.223:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 48.560845][ T3904] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.595612][ T29] audit: type=1400 audit(1751254018.423:1054): avc: denied { create } for pid=3903 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.629698][ T29] audit: type=1400 audit(1751254018.453:1055): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.706884][ T3920] 9pnet_fd: Insufficient options for proto=fd [ 48.758218][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.768419][ T3924] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 48.877353][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.885220][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.893178][ T3924] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 48.893219][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.901057][ T3924] __nla_validate_parse: 17 callbacks suppressed [ 48.901075][ T3924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.150'. [ 48.908881][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.917692][ T3924] dummy0: entered promiscuous mode [ 48.924112][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.924144][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.933171][ T3924] bridge0: port 3(dummy0) entered blocking state [ 48.937057][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.937081][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.944875][ T3924] bridge0: port 3(dummy0) entered disabled state [ 48.952620][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.988860][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.996709][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.996738][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.996845][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.996872][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 48.996901][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.006012][ T3924] dummy0: entered allmulticast mode [ 49.012402][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.026788][ T3924] bridge0: port 3(dummy0) entered blocking state [ 49.027951][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.035693][ T3924] bridge0: port 3(dummy0) entered forwarding state [ 49.040862][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.077218][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.085096][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.092895][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.100957][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.108879][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.116691][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.124472][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.132248][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.140065][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.147870][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.155680][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.163479][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.171286][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.179189][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.187030][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.194822][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.202595][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.210436][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.218235][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.226056][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.233899][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.241676][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.249486][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.257305][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.265121][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 49.279971][ T3393] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.462161][ T3962] loop2: detected capacity change from 0 to 128 [ 49.476512][ T3962] EXT4-fs: Ignoring removed nobh option [ 49.497922][ T3962] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.511424][ T3962] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.538028][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 49.547090][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 49.718985][ T3969] netlink: 'syz.4.164': attribute type 64 has an invalid length. [ 49.737822][ T3973] loop1: detected capacity change from 0 to 512 [ 49.747306][ T3973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.777769][ T3973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.795788][ T3973] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.880591][ T3973] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.951176][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.506179][ T3988] loop3: detected capacity change from 0 to 764 [ 50.537324][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.545195][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.553055][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.560830][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.568632][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.576461][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.584310][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.584525][ T3988] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.592084][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.592108][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.615670][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.623562][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631334][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631371][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631399][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631425][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631452][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631556][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631582][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631628][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631655][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631690][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631717][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631775][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631802][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631829][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631855][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631881][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631908][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.631956][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632053][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632098][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632126][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632152][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632181][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632211][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632313][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632343][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632383][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632410][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632438][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632462][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632486][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.632584][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 50.701173][ T3393] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.731308][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.754425][ T3999] loop4: detected capacity change from 0 to 2048 [ 50.781347][ T3999] loop4: p1 < > p4 [ 50.790607][ T3999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.848443][ T4008] loop3: detected capacity change from 0 to 512 [ 50.849478][ T4008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.883700][ T4008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.883850][ T4008] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.887488][ T4008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 51.031183][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 51.037080][ T4008] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 51.045549][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 51.126108][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.196466][ T4025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 51.325948][ T4034] netlink: 'syz.1.186': attribute type 64 has an invalid length. [ 51.423118][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 51.574815][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 51.583743][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 51.625686][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 51.747904][ T4057] bpf: Bad value for 'uid' [ 51.900240][ T4067] loop1: detected capacity change from 0 to 2048 [ 51.934018][ T4067] loop1: p1 < > p4 [ 51.950323][ T4067] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.997293][ T4070] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 52.055707][ T4076] netlink: 'syz.0.202': attribute type 64 has an invalid length. [ 52.112245][ T4081] netlink: 'syz.4.204': attribute type 64 has an invalid length. [ 52.147390][ T4087] loop0: detected capacity change from 0 to 764 [ 52.176930][ T4087] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 52.201418][ T4091] loop4: detected capacity change from 0 to 2048 [ 52.274288][ T4091] loop4: p1 < > p4 [ 52.280280][ T4091] loop4: p4 size 8388608 extends beyond EOD, truncated [ 52.531501][ T4110] loop1: detected capacity change from 0 to 2048 [ 52.582002][ T4053] syz.2.192 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.593160][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.2.192 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 52.593187][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.593199][ T4053] Call Trace: [ 52.593205][ T4053] [ 52.593211][ T4053] __dump_stack+0x1d/0x30 [ 52.593234][ T4053] dump_stack_lvl+0xe8/0x140 [ 52.593313][ T4053] dump_stack+0x15/0x1b [ 52.593335][ T4053] dump_header+0x81/0x220 [ 52.593371][ T4053] oom_kill_process+0x334/0x3f0 [ 52.593541][ T4053] out_of_memory+0x979/0xb80 [ 52.593582][ T4053] try_charge_memcg+0x5e6/0x9e0 [ 52.593617][ T4053] charge_memcg+0x51/0xc0 [ 52.593659][ T4053] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.593744][ T4053] __read_swap_cache_async+0x1df/0x350 [ 52.593787][ T4053] swap_cluster_readahead+0x277/0x3e0 [ 52.593874][ T4053] swapin_readahead+0xde/0x6f0 [ 52.593905][ T4053] ? __filemap_get_folio+0x4f7/0x6b0 [ 52.593963][ T4053] ? __rcu_read_unlock+0x34/0x70 [ 52.593993][ T4053] ? swap_cache_get_folio+0x77/0x200 [ 52.594065][ T4053] do_swap_page+0x301/0x2430 [ 52.594119][ T4053] ? css_rstat_updated+0xcd/0x5b0 [ 52.594163][ T4053] ? __pfx_default_wake_function+0x10/0x10 [ 52.594197][ T4053] handle_mm_fault+0x9a5/0x2be0 [ 52.594222][ T4053] ? mas_walk+0xf2/0x120 [ 52.594326][ T4053] do_user_addr_fault+0x636/0x1090 [ 52.594369][ T4053] exc_page_fault+0x62/0xa0 [ 52.594406][ T4053] asm_exc_page_fault+0x26/0x30 [ 52.594426][ T4053] RIP: 0033:0x7fe0122b0c65 [ 52.594441][ T4053] Code: 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 80 3d 9b 13 35 00 00 <89> 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 c8 09 00 00 80 3d 65 [ 52.594485][ T4053] RSP: 002b:00007fffe3622140 EFLAGS: 00010246 [ 52.594504][ T4053] RAX: 00007fe012606080 RBX: 00007fe012606080 RCX: 0000000000000026 [ 52.594516][ T4053] RDX: 0000000000000001 RSI: 00007fe012606118 RDI: 0000000000000012 [ 52.594528][ T4053] RBP: 00007fe012607ba0 R08: 0000000000000001 R09: 0000000000000026 [ 52.594539][ T4053] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000ccbf [ 52.594551][ T4053] R13: 00007fe012605fa0 R14: ffffffffffffffff R15: 00007fffe36222c0 [ 52.594570][ T4053] [ 52.712416][ T4110] loop1: p1 < > p4 [ 52.715135][ T4053] memory: usage 38620kB, limit 307200kB, failcnt 359 [ 52.747307][ T4110] loop1: p4 size 8388608 extends beyond EOD, [ 52.757976][ T4053] memory+swap: usage 34684kB, limit 9007199254740988kB, failcnt 0 [ 52.764134][ T4110] truncated [ 52.835616][ T4053] kmem: usage 320kB, limit 9007199254740988kB, failcnt 0 [ 52.842891][ T4053] Memory cgroup stats for /syz2: [ 52.848635][ T4053] cache 0 [ 52.856750][ T4053] rss 20480 [ 52.859944][ T4053] shmem 0 [ 52.862934][ T4053] mapped_file 0 [ 52.866442][ T4053] dirty 0 [ 52.869393][ T4053] writeback 0 [ 52.872917][ T4053] workingset_refault_anon 29 [ 52.877660][ T4053] workingset_refault_file 1 [ 52.882339][ T4053] swap 208896 [ 52.885740][ T4053] swapcached 8192 [ 52.889417][ T4053] pgpgin 10439 [ 52.889404][ T4116] netlink: 'syz.4.217': attribute type 64 has an invalid length. [ 52.892817][ T4053] pgpgout 10434 [ 52.892827][ T4053] pgfault 12401 [ 52.892835][ T4053] pgmajfault 14 [ 52.892854][ T4053] inactive_anon 0 [ 52.914812][ T4053] active_anon 20480 [ 52.918638][ T4053] inactive_file 0 [ 52.922300][ T4053] active_file 0 [ 52.926059][ T4053] unevictable 0 [ 52.929655][ T4053] hierarchical_memory_limit 314572800 [ 52.936986][ T4053] hierarchical_memsw_limit 9223372036854771712 [ 52.943252][ T4053] total_cache 0 [ 52.947848][ T4053] total_rss 20480 [ 52.951592][ T4053] total_shmem 0 [ 52.955194][ T4053] total_mapped_file 0 [ 52.959201][ T4053] total_dirty 0 [ 52.962722][ T4053] total_writeback 0 [ 52.966639][ T4053] total_workingset_refault_anon 29 [ 52.971897][ T4053] total_workingset_refault_file 1 [ 52.977154][ T4053] total_swap 208896 [ 52.981049][ T4053] total_swapcached 8192 [ 52.982304][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 52.985323][ T4053] total_pgpgin 10439 [ 52.992996][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 52.996931][ T4053] total_pgpgout 10434 [ 53.004660][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.004691][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.008806][ T4053] total_pgfault 12401 [ 53.016470][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.024156][ T4053] total_pgmajfault 14 [ 53.028159][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.035884][ T4053] total_inactive_anon 0 [ 53.035898][ T4053] total_active_anon 20480 [ 53.039906][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.047616][ T4053] total_inactive_file 0 [ 53.051784][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.056121][ T4053] total_active_file 0 [ 53.063843][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.063873][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.068007][ T4053] total_unevictable 0 [ 53.075851][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.079794][ T4053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 53.087562][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.095328][ T4053] ,cpuset= [ 53.099296][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.107085][ T4053] / [ 53.113896][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.121619][ T4053] ,mems_allowed=0 [ 53.124639][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.124662][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.124685][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.132392][ T4053] ,oom_memcg=/syz2,task_memcg= [ 53.134849][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.142664][ T4053] /syz2 [ 53.146506][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.146535][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.154268][ T4053] ,task=syz.2.192,pid=4053,uid=0 [ 53.161984][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.169757][ T4053] Memory cgroup out of memory: Killed process 4053 (syz.2.192) total-vm:95800kB, anon-rss:936kB, file-rss:22700kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 53.174527][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.174561][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.230216][ T4114] 9pnet: Could not find request transport: fd0x0000000000000004 [ 53.237997][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.238027][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.262131][ T4055] syz.2.192 (4055) used greatest stack depth: 9816 bytes left [ 53.268891][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.268921][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.292475][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.300339][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.308208][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.316106][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.323895][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.331641][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.339454][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.347282][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.355245][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.363037][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.365810][ T4053] syz.2.192 (4053) used greatest stack depth: 9688 bytes left [ 53.370864][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.385825][ T4128] netlink: 'syz.1.218': attribute type 64 has an invalid length. [ 53.386072][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.401699][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.409600][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.417454][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.425238][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 53.436813][ T3393] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.460078][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 53.460093][ T29] audit: type=1400 audit(1751254023.283:1270): avc: denied { write } for pid=4132 comm="syz.2.224" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.460193][ T4136] loop1: detected capacity change from 0 to 764 [ 53.496994][ T4136] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.596235][ T29] audit: type=1326 audit(1751254023.423:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.623042][ T29] audit: type=1326 audit(1751254023.453:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.638160][ T4143] loop4: detected capacity change from 0 to 2048 [ 53.646591][ T29] audit: type=1326 audit(1751254023.453:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.646626][ T29] audit: type=1326 audit(1751254023.453:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.700124][ T29] audit: type=1326 audit(1751254023.453:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.723544][ T29] audit: type=1326 audit(1751254023.453:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.747075][ T29] audit: type=1326 audit(1751254023.453:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.758017][ T4148] loop2: detected capacity change from 0 to 512 [ 53.770441][ T29] audit: type=1326 audit(1751254023.453:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.800088][ T29] audit: type=1326 audit(1751254023.453:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 53.800267][ T4148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.839425][ T4148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.869511][ T4150] loop4: p1 < > p4 [ 53.874398][ T4148] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.885584][ T4150] loop4: p4 size 8388608 extends beyond EOD, truncated [ 53.897595][ T4143] loop4: p1 < > p4 [ 53.904444][ T4143] loop4: p4 size 8388608 extends beyond EOD, truncated [ 53.926357][ T4148] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 53.993178][ T4163] netlink: 'syz.4.233': attribute type 4 has an invalid length. [ 54.005029][ T4164] __nla_validate_parse: 10 callbacks suppressed [ 54.005048][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 54.020401][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 54.060142][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.098955][ T4169] loop4: detected capacity change from 0 to 764 [ 54.107744][ T4169] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 54.179781][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 54.188785][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 54.312062][ T4184] loop2: detected capacity change from 0 to 2048 [ 54.319382][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 54.328241][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 54.364446][ T4184] loop2: p1 < > p4 [ 54.369859][ T4184] loop2: p4 size 8388608 extends beyond EOD, truncated [ 54.445399][ T4189] loop2: detected capacity change from 0 to 512 [ 54.452737][ T4189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.480681][ T4189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.494722][ T4189] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.505654][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 54.507401][ T4189] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 54.559980][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.871120][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 54.879996][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 55.130374][ T4220] loop3: detected capacity change from 0 to 2048 [ 55.194173][ T4220] loop3: p1 < > p4 [ 55.212110][ T4220] loop3: p4 size 8388608 extends beyond EOD, truncated [ 55.261383][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 55.324569][ T4225] netlink: 'syz.3.258': attribute type 64 has an invalid length. [ 55.357011][ T4229] loop3: detected capacity change from 0 to 512 [ 55.365080][ T4229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.395475][ T4229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.408023][ T4229] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.420093][ T4229] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 55.449342][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.492907][ T4236] loop3: detected capacity change from 0 to 128 [ 55.501137][ T4236] EXT4-fs: Ignoring removed nobh option [ 55.510115][ T4236] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.522709][ T4236] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.658037][ T4247] loop2: detected capacity change from 0 to 128 [ 55.838172][ T4258] loop2: detected capacity change from 0 to 2048 [ 55.884102][ T4258] loop2: p1 < > p4 [ 55.892465][ T4258] loop2: p4 size 8388608 extends beyond EOD, truncated [ 56.187167][ T4265] loop2: detected capacity change from 0 to 512 [ 56.197774][ T4265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.217410][ T4265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.230124][ T4265] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.242522][ T4265] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 56.273469][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.296105][ T4269] 9pnet_fd: Insufficient options for proto=fd [ 56.434345][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.480506][ T4278] 9pnet: Could not find request transport: fd0x0000000000000004 [ 56.527601][ T4283] 9pnet: Could not find request transport: fd0x0000000000000004 [ 56.603943][ T4295] 9pnet_fd: Insufficient options for proto=fd [ 56.789990][ T4310] loop2: detected capacity change from 0 to 128 [ 57.106919][ T4329] loop2: detected capacity change from 0 to 2048 [ 57.128455][ T4331] 9pnet_fd: Insufficient options for proto=fd [ 57.154457][ T4329] loop2: p1 < > p4 [ 57.158895][ T4329] loop2: p4 size 8388608 extends beyond EOD, truncated [ 57.184231][ T4335] loop0: detected capacity change from 0 to 764 [ 57.192984][ T4335] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.230692][ T4340] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.250147][ T4341] netlink: 'syz.0.300': attribute type 64 has an invalid length. [ 57.294575][ T4348] loop0: detected capacity change from 0 to 128 [ 57.302083][ T4350] loop2: detected capacity change from 0 to 512 [ 57.309299][ T4350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.334465][ T4350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.355126][ T4350] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.376515][ T4350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 57.431414][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.459968][ T4361] 9pnet_fd: Insufficient options for proto=fd [ 57.484286][ T4365] loop0: detected capacity change from 0 to 764 [ 57.491547][ T4365] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.564670][ T4370] loop2: detected capacity change from 0 to 2048 [ 57.604150][ T4370] loop2: p1 < > p4 [ 57.608600][ T4370] loop2: p4 size 8388608 extends beyond EOD, truncated [ 57.615561][ T4374] netlink: 'syz.0.314': attribute type 64 has an invalid length. [ 57.704173][ T4386] 9pnet_fd: Insufficient options for proto=fd [ 57.720226][ T4387] 9pnet: Could not find request transport: fd0x0000000000000004 [ 57.799149][ T4400] loop2: detected capacity change from 0 to 764 [ 57.830184][ T4400] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.848342][ T4394] blktrace: Concurrent blktraces are not allowed on sg0 [ 57.903576][ T4410] netlink: 'syz.2.327': attribute type 64 has an invalid length. [ 58.404790][ T4435] 9pnet: Could not find request transport: fd0x0000000000000004 [ 58.470270][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 58.470289][ T29] audit: type=1326 audit(1751254028.293:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0624fa58e7 code=0x7ffc0000 [ 58.499946][ T29] audit: type=1326 audit(1751254028.293:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0624f4ab19 code=0x7ffc0000 [ 58.569326][ T29] audit: type=1326 audit(1751254028.293:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0624fae929 code=0x7ffc0000 [ 58.592847][ T29] audit: type=1326 audit(1751254028.303:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0624fa58e7 code=0x7ffc0000 [ 58.616152][ T29] audit: type=1326 audit(1751254028.313:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0624f4ab19 code=0x7ffc0000 [ 58.639641][ T29] audit: type=1326 audit(1751254028.313:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0624fae929 code=0x7ffc0000 [ 58.662934][ T29] audit: type=1326 audit(1751254028.313:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0624fa58e7 code=0x7ffc0000 [ 58.686268][ T29] audit: type=1326 audit(1751254028.323:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0624f4ab19 code=0x7ffc0000 [ 58.709705][ T29] audit: type=1326 audit(1751254028.323:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0624fa58e7 code=0x7ffc0000 [ 58.733016][ T29] audit: type=1326 audit(1751254028.333:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0624f4ab19 code=0x7ffc0000 [ 58.903831][ T4447] netlink: 'syz.1.339': attribute type 64 has an invalid length. [ 59.033150][ T4457] loop3: detected capacity change from 0 to 512 [ 59.067848][ T4457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.116566][ T4457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.175820][ T4457] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.236358][ T4457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.309343][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.321469][ T4473] netlink: 'syz.4.348': attribute type 64 has an invalid length. [ 59.340194][ T4478] __nla_validate_parse: 35 callbacks suppressed [ 59.340213][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 59.355436][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 59.384956][ T4481] netlink: 'syz.3.350': attribute type 64 has an invalid length. [ 59.426557][ T4485] loop4: detected capacity change from 0 to 512 [ 59.440050][ T4485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.472039][ T4485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.484873][ T4485] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.500698][ T4485] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.535049][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.550715][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 59.559587][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 59.691569][ T4510] loop3: detected capacity change from 0 to 128 [ 59.709869][ T4512] 9pnet: Could not find request transport: fd0x0000000000000004 [ 59.724255][ T4515] netlink: 'syz.2.363': attribute type 64 has an invalid length. [ 59.763241][ T4525] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.851574][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 59.860496][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 59.927335][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 59.985567][ T4547] netlink: 'syz.2.375': attribute type 64 has an invalid length. [ 60.064885][ T4553] 9pnet: Could not find request transport: fd0x0000000000000004 [ 60.147471][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 60.156524][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 60.176056][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 60.250487][ T4565] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.270792][ T4557] blktrace: Concurrent blktraces are not allowed on sg0 [ 60.346480][ T4568] loop1: detected capacity change from 0 to 128 [ 60.353367][ T4568] EXT4-fs: Ignoring removed nobh option [ 60.362415][ T4568] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.378410][ T4568] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.407963][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.619922][ T4579] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 60.717062][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.725030][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.732887][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.740684][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.748462][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.756241][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.764124][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.771992][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.779839][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.787733][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.795604][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.803469][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.811260][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.819082][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.826896][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.834687][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.842461][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.850250][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.858076][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.865926][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.873713][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.881598][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.889411][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.897199][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.904984][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.912746][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.920541][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.928355][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.936152][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.944023][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.946784][ T4593] loop0: detected capacity change from 0 to 764 [ 60.951869][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.965934][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.973755][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.981517][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.989356][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.990780][ T4593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 60.997121][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.997151][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.997176][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 60.997257][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 61.036505][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 61.044420][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 61.044445][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 61.044530][ T10] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 61.081414][ T4598] loop3: detected capacity change from 0 to 128 [ 61.088421][ T4598] EXT4-fs: Ignoring removed nobh option [ 61.096073][ T4598] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.108623][ T4598] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.119010][ T10] hid-generic 0000:007F:FFFFFFFE.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.143287][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.212429][ T4607] netlink: 'syz.3.399': attribute type 4 has an invalid length. [ 61.440818][ T4620] loop3: detected capacity change from 0 to 128 [ 61.574142][ T4626] loop0: detected capacity change from 0 to 128 [ 61.623384][ T4626] EXT4-fs: Ignoring removed nobh option [ 61.679712][ T4626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.723434][ T4631] loop1: detected capacity change from 0 to 764 [ 61.757168][ T4626] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.771741][ T4631] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.944560][ T4635] blktrace: Concurrent blktraces are not allowed on sg0 [ 62.122709][ T4651] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.352833][ T4663] loop1: detected capacity change from 0 to 512 [ 62.360700][ T4663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.377687][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.390322][ T4663] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.404129][ T4663] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 62.420391][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.443694][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.499787][ T4674] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.985606][ T4693] loop3: detected capacity change from 0 to 2048 [ 63.086331][ T4693] loop3: p1 < > p4 [ 63.087422][ T4693] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.370040][ T4711] loop3: detected capacity change from 0 to 1024 [ 63.389933][ T4711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.431102][ T4711] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.442562][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.458788][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.466619][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.474381][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.482290][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.490199][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.498192][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.506323][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.514179][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.521959][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.529806][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.537651][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.545435][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.553348][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.561152][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.565179][ T4723] loop4: detected capacity change from 0 to 128 [ 63.569118][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.583022][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.590823][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.598745][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.606543][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.614368][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.622177][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.630086][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.637916][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.645681][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.653473][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.661309][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.669068][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.676889][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.684658][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.692395][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.700366][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.708211][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.715959][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.723779][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.731625][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.739415][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.747318][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.755075][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.762851][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.770690][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.778469][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.786227][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.793983][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 63.803023][ T1034] hid-generic 0000:007F:FFFFFFFE.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.878132][ T4735] loop0: detected capacity change from 0 to 2048 [ 63.970125][ T4735] loop0: p1 < > p4 [ 63.974635][ T4735] loop0: p4 size 8388608 extends beyond EOD, truncated [ 64.063163][ T29] kauditd_printk_skb: 996 callbacks suppressed [ 64.063192][ T29] audit: type=1326 audit(1751254033.883:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.099237][ T29] audit: type=1326 audit(1751254033.923:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.122754][ T29] audit: type=1326 audit(1751254033.923:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.146144][ T29] audit: type=1326 audit(1751254033.923:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.169700][ T29] audit: type=1326 audit(1751254033.923:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.193078][ T29] audit: type=1326 audit(1751254033.923:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.216491][ T29] audit: type=1326 audit(1751254033.923:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.239918][ T29] audit: type=1326 audit(1751254033.923:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.263330][ T29] audit: type=1326 audit(1751254033.923:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.286722][ T29] audit: type=1326 audit(1751254033.923:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 64.313214][ T4753] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.402922][ T4754] __nla_validate_parse: 26 callbacks suppressed [ 64.402939][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 64.418096][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 64.486462][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.494372][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.502135][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.509934][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.517710][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.525559][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.533299][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.541097][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.548848][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.556620][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.564423][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.572248][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.580024][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.587856][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.595633][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.603444][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.611215][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.619033][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.626869][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.634640][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.642593][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.650344][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.658245][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.666004][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.673769][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.681584][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.689430][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.697277][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.705097][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.712870][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.720680][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.728655][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.736508][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.744385][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.752136][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.759919][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.767672][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.775437][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.783263][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.791067][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.798824][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.806697][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.814532][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 64.823092][ T1034] hid-generic 0000:007F:FFFFFFFE.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.851537][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 64.879023][ T4774] loop2: detected capacity change from 0 to 764 [ 64.887220][ T4774] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.922325][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 64.922586][ T4778] netem: change failed [ 64.938643][ T4778] SELinux: Context @ is not valid (left unmapped). [ 64.971476][ T4780] loop4: detected capacity change from 0 to 128 [ 65.080134][ T4793] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.182376][ T4799] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 65.194128][ T4799] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 65.480550][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 65.489526][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 65.576861][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 65.755775][ T4824] loop1: detected capacity change from 0 to 512 [ 65.763070][ T4824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.775809][ T4824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.789620][ T4824] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.803217][ T4824] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 65.836073][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.868228][ T4836] 9pnet: Could not find request transport: fd0x0000000000000004 [ 65.927166][ T4839] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 66.011065][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 66.019985][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 66.218230][ T4867] loop1: detected capacity change from 0 to 2048 [ 66.273818][ T4867] loop1: p1 < > p4 [ 66.274299][ T4870] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 66.278376][ T4867] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.317952][ T4870] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 66.427525][ T4885] FAULT_INJECTION: forcing a failure. [ 66.427525][ T4885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.440892][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.1.492 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 66.440934][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.440950][ T4885] Call Trace: [ 66.440956][ T4885] [ 66.440965][ T4885] __dump_stack+0x1d/0x30 [ 66.440986][ T4885] dump_stack_lvl+0xe8/0x140 [ 66.441054][ T4885] dump_stack+0x15/0x1b [ 66.441076][ T4885] should_fail_ex+0x265/0x280 [ 66.441108][ T4885] should_fail+0xb/0x20 [ 66.441140][ T4885] should_fail_usercopy+0x1a/0x20 [ 66.441178][ T4885] _copy_to_user+0x20/0xa0 [ 66.441244][ T4885] simple_read_from_buffer+0xb5/0x130 [ 66.441333][ T4885] proc_fail_nth_read+0x100/0x140 [ 66.441371][ T4885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.441413][ T4885] vfs_read+0x1a0/0x6f0 [ 66.441458][ T4885] ? __rcu_read_unlock+0x4f/0x70 [ 66.441481][ T4885] ? __fget_files+0x184/0x1c0 [ 66.441498][ T4885] ? __sys_setsockopt+0x18e/0x200 [ 66.441542][ T4885] ksys_read+0xda/0x1a0 [ 66.441631][ T4885] __x64_sys_read+0x40/0x50 [ 66.441667][ T4885] x64_sys_call+0x2d77/0x2fb0 [ 66.441690][ T4885] do_syscall_64+0xd2/0x200 [ 66.441709][ T4885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.441799][ T4885] ? clear_bhb_loop+0x40/0x90 [ 66.441899][ T4885] ? clear_bhb_loop+0x40/0x90 [ 66.441991][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.442011][ T4885] RIP: 0033:0x7f4aa57ed33c [ 66.442031][ T4885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.442051][ T4885] RSP: 002b:00007f4aa3e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.442128][ T4885] RAX: ffffffffffffffda RBX: 00007f4aa5a15fa0 RCX: 00007f4aa57ed33c [ 66.442141][ T4885] RDX: 000000000000000f RSI: 00007f4aa3e570a0 RDI: 0000000000000004 [ 66.442152][ T4885] RBP: 00007f4aa3e57090 R08: 0000000000000000 R09: 0000000000000000 [ 66.442163][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.442176][ T4885] R13: 0000000000000000 R14: 00007f4aa5a15fa0 R15: 00007ffef4601318 [ 66.442196][ T4885] [ 66.501250][ T4888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.493'. [ 66.592292][ T4892] loop1: detected capacity change from 0 to 764 [ 66.670716][ T4892] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 66.794124][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.801935][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.809736][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.817540][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.825383][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.833156][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.833187][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.833267][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.856611][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.864493][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.872278][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.880062][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.887876][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.895670][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.903466][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.911289][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.919127][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.926979][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.934762][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.942562][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.950392][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.958204][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.966056][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.973829][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.981591][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.989411][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 66.997274][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.005091][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.012849][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.021333][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.029578][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.037458][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.045315][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.053106][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.060937][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.068767][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.076550][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.084342][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.092110][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.099896][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.107708][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.115499][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.123348][ T36] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 67.131737][ T36] hid-generic 0000:007F:FFFFFFFE.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.196216][ T4905] loop2: detected capacity change from 0 to 764 [ 67.207584][ T4905] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.321005][ T4923] loop0: detected capacity change from 0 to 764 [ 67.331333][ T4923] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.489906][ T4935] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 67.568051][ T4935] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 67.606419][ T4944] 9pnet: Could not find request transport: fd0x0000000000000004 [ 67.635049][ T4949] FAULT_INJECTION: forcing a failure. [ 67.635049][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 67.647745][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.2.517 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 67.647842][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.647854][ T4949] Call Trace: [ 67.647860][ T4949] [ 67.647867][ T4949] __dump_stack+0x1d/0x30 [ 67.647887][ T4949] dump_stack_lvl+0xe8/0x140 [ 67.647923][ T4949] dump_stack+0x15/0x1b [ 67.647940][ T4949] should_fail_ex+0x265/0x280 [ 67.647980][ T4949] should_failslab+0x8c/0xb0 [ 67.648009][ T4949] kmem_cache_alloc_noprof+0x50/0x310 [ 67.648099][ T4949] ? getname_flags+0x80/0x3b0 [ 67.648184][ T4949] getname_flags+0x80/0x3b0 [ 67.648213][ T4949] do_sys_openat2+0x60/0x110 [ 67.648249][ T4949] __x64_sys_openat+0xf2/0x120 [ 67.648294][ T4949] x64_sys_call+0x1af/0x2fb0 [ 67.648322][ T4949] do_syscall_64+0xd2/0x200 [ 67.648345][ T4949] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.648429][ T4949] ? clear_bhb_loop+0x40/0x90 [ 67.648457][ T4949] ? clear_bhb_loop+0x40/0x90 [ 67.648546][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.648573][ T4949] RIP: 0033:0x7fe0123de929 [ 67.648590][ T4949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.648610][ T4949] RSP: 002b:00007fe010a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.648682][ T4949] RAX: ffffffffffffffda RBX: 00007fe012605fa0 RCX: 00007fe0123de929 [ 67.648697][ T4949] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 67.648710][ T4949] RBP: 00007fe010a47090 R08: 0000000000000000 R09: 0000000000000000 [ 67.648726][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.648742][ T4949] R13: 0000000000000000 R14: 00007fe012605fa0 R15: 00007fffe3622048 [ 67.648766][ T4949] [ 67.911735][ T4962] loop2: detected capacity change from 0 to 764 [ 67.919488][ T4962] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.043093][ T4972] loop2: detected capacity change from 0 to 512 [ 68.051223][ T4971] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.068873][ T4972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.087423][ T4972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.130416][ T4972] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.132178][ T4971] netlink: 'syz.4.526': attribute type 10 has an invalid length. [ 68.144847][ T4972] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 68.211918][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.245972][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.253794][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.261634][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.269414][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.277261][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.285116][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.292909][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.301767][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.310097][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.317949][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.325803][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.328335][ T4990] FAULT_INJECTION: forcing a failure. [ 68.328335][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.333567][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.346646][ T4990] CPU: 1 UID: 0 PID: 4990 Comm: syz.2.530 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 68.346735][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.346752][ T4990] Call Trace: [ 68.346761][ T4990] [ 68.346770][ T4990] __dump_stack+0x1d/0x30 [ 68.346798][ T4990] dump_stack_lvl+0xe8/0x140 [ 68.346825][ T4990] dump_stack+0x15/0x1b [ 68.346848][ T4990] should_fail_ex+0x265/0x280 [ 68.346956][ T4990] should_fail+0xb/0x20 [ 68.346994][ T4990] should_fail_usercopy+0x1a/0x20 [ 68.347040][ T4990] _copy_to_iter+0x24b/0xe30 [ 68.347099][ T4990] ? ptype_seq_stop+0xe/0x20 [ 68.347199][ T4990] seq_read_iter+0x76a/0x940 [ 68.347243][ T4990] seq_read+0x1f7/0x240 [ 68.347286][ T4990] ? __pfx_seq_read+0x10/0x10 [ 68.347379][ T4990] proc_reg_read+0x128/0x1c0 [ 68.347421][ T4990] ? __pfx_proc_reg_read+0x10/0x10 [ 68.347493][ T4990] vfs_readv+0x3f8/0x690 [ 68.347539][ T4990] __x64_sys_preadv+0xfd/0x1c0 [ 68.347570][ T4990] x64_sys_call+0x1503/0x2fb0 [ 68.347600][ T4990] do_syscall_64+0xd2/0x200 [ 68.347695][ T4990] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.347733][ T4990] ? clear_bhb_loop+0x40/0x90 [ 68.347764][ T4990] ? clear_bhb_loop+0x40/0x90 [ 68.347795][ T4990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.347825][ T4990] RIP: 0033:0x7fe0123de929 [ 68.347883][ T4990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.347909][ T4990] RSP: 002b:00007fe010a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 68.347936][ T4990] RAX: ffffffffffffffda RBX: 00007fe012606080 RCX: 00007fe0123de929 [ 68.347954][ T4990] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 68.347972][ T4990] RBP: 00007fe010a26090 R08: 0000000000000000 R09: 0000000000000000 [ 68.347989][ T4990] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 68.348007][ T4990] R13: 0000000000000000 R14: 00007fe012606080 R15: 00007fffe3622048 [ 68.348068][ T4990] [ 68.369025][ T4992] loop0: detected capacity change from 0 to 128 [ 68.375230][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.375284][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.560086][ T4999] xt_hashlimit: size too large, truncated to 1048576 [ 68.563492][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.563523][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.571222][ T4999] xt_hashlimit: invalid rate [ 68.605946][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.613735][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.621609][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.629525][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.637347][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.641098][ T5001] loop1: detected capacity change from 0 to 764 [ 68.645120][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.659154][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.659217][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.674765][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.676670][ T5001] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.682504][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.682532][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.698308][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.713758][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.713787][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.729256][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.729289][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.744777][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.744807][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.744828][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.744849][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.744873][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.783770][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.791565][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.799318][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.807223][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.815008][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.822763][ T10] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 68.841055][ T10] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.900781][ T5010] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.032806][ T5026] loop3: detected capacity change from 0 to 128 [ 69.041134][ T5026] FAT-fs (loop3): bogus number of reserved sectors [ 69.047777][ T5026] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 69.057232][ T5026] FAT-fs (loop3): Can't find a valid FAT filesystem [ 69.160707][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 69.160725][ T29] audit: type=1326 audit(1751254038.983:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 69.190456][ T29] audit: type=1326 audit(1751254038.983:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fe59e929 code=0x7ffc0000 [ 69.216932][ T29] audit: type=1326 audit(1751254039.043:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.240578][ T29] audit: type=1326 audit(1751254039.043:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.263941][ T29] audit: type=1326 audit(1751254039.043:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.287293][ T29] audit: type=1326 audit(1751254039.043:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.287392][ T29] audit: type=1326 audit(1751254039.043:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.287425][ T29] audit: type=1326 audit(1751254039.043:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.287461][ T29] audit: type=1326 audit(1751254039.043:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.287494][ T29] audit: type=1326 audit(1751254039.043:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f4aa57ee929 code=0x7ffc0000 [ 69.289785][ T5010] netlink: 'syz.4.539': attribute type 10 has an invalid length. [ 69.412684][ T5010] __nla_validate_parse: 24 callbacks suppressed [ 69.412700][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 69.457274][ T5039] loop2: detected capacity change from 0 to 764 [ 69.522935][ T5039] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.531438][ T5041] netlink: 'syz.0.550': attribute type 64 has an invalid length. [ 69.652604][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 69.661684][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 69.679397][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.687300][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.695160][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.702921][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.710912][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.718708][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.726494][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.734305][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.742115][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.750013][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.758082][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.765895][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.773834][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.781740][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.789546][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.797357][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.805229][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.813119][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.820968][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.828771][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.836655][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.839678][ T5067] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 69.844423][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.859574][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.867350][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.875157][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.882919][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.890878][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.898683][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.906627][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.914470][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.922248][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.930092][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.937892][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.945684][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.953487][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.961327][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.962931][ T5070] loop3: detected capacity change from 0 to 128 [ 69.969172][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.969203][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 69.988900][ T5070] EXT4-fs: Ignoring removed nobh option [ 69.991126][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 70.002775][ T5070] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.004468][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 70.018156][ T5070] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.024198][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 70.042423][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 70.050213][ T23] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 70.059137][ T23] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.084273][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.170525][ T5076] process 'syz.4.562' launched '/dev/fd/10' with NULL argv: empty string added [ 70.186761][ T5078] netlink: 'syz.0.563': attribute type 64 has an invalid length. [ 70.244034][ T5071] bridge0: port 3(dummy0) entered disabled state [ 70.250769][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.258059][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.309543][ T5090] loop4: detected capacity change from 0 to 764 [ 70.328663][ T5090] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.375913][ T5071] dummy0: left allmulticast mode [ 70.388956][ T5096] loop2: detected capacity change from 0 to 512 [ 70.395466][ T5071] dummy0: left promiscuous mode [ 70.400485][ T5071] bridge0: port 3(dummy0) entered disabled state [ 70.400602][ T5096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.426163][ T5096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.433645][ T5071] bridge_slave_0: left allmulticast mode [ 70.441508][ T5096] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.444847][ T5071] bridge_slave_0: left promiscuous mode [ 70.461007][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.472203][ T5071] bridge_slave_1: left allmulticast mode [ 70.477911][ T5071] bridge_slave_1: left promiscuous mode [ 70.483970][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.486061][ T5096] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 70.511282][ T5071] bond0: (slave bond_slave_0): Releasing backup interface [ 70.522185][ T5071] bond0: (slave bond_slave_1): Releasing backup interface [ 70.571180][ T5071] team0: Port device team_slave_0 removed [ 70.579643][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.595526][ T5071] team0: Port device team_slave_1 removed [ 70.608546][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.616397][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.616511][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.624398][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.634305][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.639566][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.654456][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.662384][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.670186][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.678025][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.685823][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.693634][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.701513][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.709396][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.717297][ T5108] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.727724][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.735497][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.743266][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.751045][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.758821][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.766602][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.774390][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.782164][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.789955][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.797789][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.805563][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.813304][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.821120][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.829090][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.836968][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.842155][ T5110] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 70.844744][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.844769][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.852537][ T5110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.571'. [ 70.860798][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.885387][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.893153][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.900943][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.908740][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.916525][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.924318][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.932065][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.939844][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.947626][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.955449][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.963259][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.971072][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.978850][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 70.988227][ T1034] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.989534][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.007329][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.029419][ T5113] Driver unsupported XDP return value 0 on prog (id 441) dev N/A, expect packet loss! [ 71.042753][ T5113] loop2: detected capacity change from 0 to 512 [ 71.049985][ T5113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.067249][ T5071] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.076263][ T5071] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.077120][ T5113] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.085273][ T5071] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.093492][ T5113] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.102095][ T5071] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.113256][ T5113] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.572: corrupted inode contents [ 71.129677][ T5113] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.572: mark_inode_dirty error [ 71.141610][ T5113] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.572: corrupted inode contents [ 71.153888][ T5113] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.572: mark_inode_dirty error [ 71.165548][ T5113] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.572: corrupted inode contents [ 71.177662][ T5113] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 71.186668][ T5113] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.572: corrupted inode contents [ 71.199079][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 71.207976][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 71.218293][ T5113] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.572: mark_inode_dirty error [ 71.232944][ T3371] srz1: Port: 1 Link DOWN [ 71.255095][ T5117] 9pnet: Could not find request transport: fd0x0000000000000004 [ 71.255453][ T5113] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 71.293887][ T5120] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.309917][ T5113] EXT4-fs (loop2): 1 truncate cleaned up [ 71.315937][ T406] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 71.338193][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.466696][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.545526][ T5120] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 71.553324][ T5120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.574'. [ 71.633924][ T5144] netlink: 'syz.2.583': attribute type 64 has an invalid length. [ 71.690650][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 71.699586][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 71.756583][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 71.785399][ T5157] loop2: detected capacity change from 0 to 2048 [ 71.874288][ T5157] loop2: p1 < > p4 [ 71.878679][ T5157] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.994574][ T5177] netlink: 'syz.1.595': attribute type 64 has an invalid length. [ 72.053246][ T5182] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 72.077677][ T5182] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 72.289354][ T5193] loop2: detected capacity change from 0 to 512 [ 72.414280][ T5198] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 72.431383][ T5198] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 72.482928][ T5200] loop0: detected capacity change from 0 to 128 [ 72.551170][ T5205] loop0: detected capacity change from 0 to 764 [ 72.559058][ T5205] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 72.747385][ T5218] loop4: detected capacity change from 0 to 764 [ 72.755231][ T5218] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 72.786799][ T5216] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 73.066327][ T5246] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 73.072244][ T5234] blktrace: Concurrent blktraces are not allowed on sg0 [ 73.165807][ T5254] SELinux: failed to load policy [ 73.196228][ T5260] loop2: detected capacity change from 0 to 764 [ 73.203589][ T5260] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.735273][ T5270] loop4: detected capacity change from 0 to 2048 [ 73.784264][ T5270] loop4: p1 < > p4 [ 73.789723][ T5270] loop4: p4 size 8388608 extends beyond EOD, truncated [ 74.170090][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 74.170107][ T29] audit: type=1326 audit(1751254043.993:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0123d58e7 code=0x7ffc0000 [ 74.251764][ T29] audit: type=1326 audit(1751254044.023:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe01237ab19 code=0x7ffc0000 [ 74.275135][ T29] audit: type=1326 audit(1751254044.033:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0123d58e7 code=0x7ffc0000 [ 74.298427][ T29] audit: type=1326 audit(1751254044.033:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe01237ab19 code=0x7ffc0000 [ 74.321758][ T29] audit: type=1326 audit(1751254044.033:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0123de929 code=0x7ffc0000 [ 74.345278][ T29] audit: type=1326 audit(1751254044.033:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0123de929 code=0x7ffc0000 [ 74.368667][ T29] audit: type=1326 audit(1751254044.033:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0123d58e7 code=0x7ffc0000 [ 74.392103][ T29] audit: type=1326 audit(1751254044.033:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe01237ab19 code=0x7ffc0000 [ 74.415469][ T29] audit: type=1326 audit(1751254044.053:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 74.438801][ T29] audit: type=1326 audit(1751254044.053:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 74.554103][ T5321] __nla_validate_parse: 13 callbacks suppressed [ 74.554134][ T5321] netlink: 96 bytes leftover after parsing attributes in process `syz.0.644'. [ 74.584029][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 74.592883][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 75.006430][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 75.082283][ T5359] loop1: detected capacity change from 0 to 764 [ 75.093312][ T5359] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.246099][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 75.255038][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 75.290614][ T5368] loop2: detected capacity change from 0 to 128 [ 75.306110][ T5365] validate_nla: 16 callbacks suppressed [ 75.306182][ T5365] netlink: 'syz.3.665': attribute type 4 has an invalid length. [ 75.360605][ T5365] netlink: 'syz.3.665': attribute type 4 has an invalid length. [ 75.425141][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 75.537047][ T5386] loop3: detected capacity change from 0 to 128 [ 75.667094][ T5396] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 75.833032][ T5403] loop0: detected capacity change from 0 to 512 [ 75.839773][ T5403] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.846335][ T5403] EXT4-fs: Ignoring removed bh option [ 75.854218][ T5403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.918224][ T5403] EXT4-fs (loop0): 1 truncate cleaned up [ 75.924707][ T5403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.105545][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 76.112863][ T5412] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 76.114409][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 76.207185][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 76.345405][ T5428] loop3: detected capacity change from 0 to 2048 [ 76.397350][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.407206][ T5428] loop3: p1 < > p4 [ 76.411678][ T5428] loop3: p4 size 8388608 extends beyond EOD, truncated [ 76.449114][ T5434] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 76.645643][ T5453] netlink: 'syz.4.694': attribute type 4 has an invalid length. [ 76.684991][ T5446] bridge0: port 3(dummy0) entered disabled state [ 76.691581][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.698822][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.710976][ T5461] netlink: 'syz.4.694': attribute type 4 has an invalid length. [ 76.729710][ T5446] dummy0: left allmulticast mode [ 76.735162][ T5446] dummy0: left promiscuous mode [ 76.740385][ T5446] bridge0: port 3(dummy0) entered disabled state [ 76.778657][ T5446] bridge_slave_0: left allmulticast mode [ 76.784558][ T5446] bridge_slave_0: left promiscuous mode [ 76.790364][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.803901][ T5446] bridge_slave_1: left allmulticast mode [ 76.809653][ T5446] bridge_slave_1: left promiscuous mode [ 76.815351][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.861279][ T5446] bond0: (slave bond_slave_0): Releasing backup interface [ 76.879345][ T5446] bond0: (slave bond_slave_1): Releasing backup interface [ 76.918297][ T5446] team0: Port device team_slave_0 removed [ 76.928830][ T5446] team0: Port device team_slave_1 removed [ 76.936924][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.946087][ T5446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.958221][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.967193][ T5446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.035764][ T5446] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.044939][ T5446] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.054082][ T5446] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.063043][ T5446] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.138739][ T5478] loop1: detected capacity change from 0 to 512 [ 77.145515][ T5478] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.152039][ T5478] EXT4-fs: Ignoring removed bh option [ 77.158153][ T5478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.171735][ T5478] EXT4-fs (loop1): 1 truncate cleaned up [ 77.178466][ T5478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.287484][ T5482] loop3: detected capacity change from 0 to 2048 [ 77.343928][ T5482] loop3: p1 < > p4 [ 77.349767][ T5482] loop3: p4 size 8388608 extends beyond EOD, truncated [ 77.487872][ T5486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.725250][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.859171][ T5525] loop2: detected capacity change from 0 to 2048 [ 77.866400][ T5525] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.888956][ T5525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.965678][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 234: padding at end of block bitmap is not set [ 77.981534][ T37] EXT4-fs (loop2): Remounting filesystem read-only [ 77.990424][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.006392][ T5539] FAULT_INJECTION: forcing a failure. [ 78.006392][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.019539][ T5539] CPU: 0 UID: 0 PID: 5539 Comm: syz.4.725 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 78.019576][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.019588][ T5539] Call Trace: [ 78.019670][ T5539] [ 78.019677][ T5539] __dump_stack+0x1d/0x30 [ 78.019698][ T5539] dump_stack_lvl+0xe8/0x140 [ 78.019720][ T5539] dump_stack+0x15/0x1b [ 78.019741][ T5539] should_fail_ex+0x265/0x280 [ 78.019902][ T5539] should_fail+0xb/0x20 [ 78.019939][ T5539] should_fail_usercopy+0x1a/0x20 [ 78.019980][ T5539] _copy_from_iter+0xcf/0xe40 [ 78.020018][ T5539] ? alloc_pages_mpol+0x201/0x250 [ 78.020075][ T5539] copy_page_from_iter+0x178/0x2a0 [ 78.020101][ T5539] tun_get_user+0x5f0/0x2500 [ 78.020177][ T5539] ? ref_tracker_alloc+0x1f2/0x2f0 [ 78.020293][ T5539] tun_chr_write_iter+0x15e/0x210 [ 78.020325][ T5539] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 78.020386][ T5539] vfs_write+0x4a0/0x8e0 [ 78.020562][ T5539] ksys_write+0xda/0x1a0 [ 78.020605][ T5539] __x64_sys_write+0x40/0x50 [ 78.020648][ T5539] x64_sys_call+0x2cdd/0x2fb0 [ 78.020701][ T5539] do_syscall_64+0xd2/0x200 [ 78.020725][ T5539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.020759][ T5539] ? clear_bhb_loop+0x40/0x90 [ 78.020786][ T5539] ? clear_bhb_loop+0x40/0x90 [ 78.020815][ T5539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.020878][ T5539] RIP: 0033:0x7f0624fad3df [ 78.020897][ T5539] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 78.020919][ T5539] RSP: 002b:00007f0623617000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 78.020977][ T5539] RAX: ffffffffffffffda RBX: 00007f06251d5fa0 RCX: 00007f0624fad3df [ 78.020993][ T5539] RDX: 000000000000003e RSI: 0000200000000640 RDI: 00000000000000c8 [ 78.021008][ T5539] RBP: 00007f0623617090 R08: 0000000000000000 R09: 0000000000000000 [ 78.021104][ T5539] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 78.021119][ T5539] R13: 0000000000000000 R14: 00007f06251d5fa0 R15: 00007ffc2b1c2e48 [ 78.021142][ T5539] [ 78.360182][ T5562] loop4: detected capacity change from 0 to 1024 [ 78.361542][ T5564] usb usb8: usbfs: process 5564 (syz.3.735) did not claim interface 0 before use [ 78.367809][ T5562] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.388204][ T5564] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 78.396574][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.733: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.415182][ T5562] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.733: Failed to acquire dquot type 0 [ 78.433892][ T5562] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.733: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.451588][ T5562] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.733: Invalid inode bitmap blk 0 in block_group 0 [ 78.467280][ T5562] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 78.484231][ T3441] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.512541][ T5562] EXT4-fs (loop4): 1 orphan inode deleted [ 78.522501][ T5562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.549581][ T3441] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 78.577432][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.994012][ T5594] loop4: detected capacity change from 0 to 512 [ 79.000801][ T5594] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.007349][ T5594] EXT4-fs: Ignoring removed bh option [ 79.014715][ T5594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.085356][ T5594] EXT4-fs (loop4): 1 truncate cleaned up [ 79.092220][ T5594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.182783][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 79.182799][ T29] audit: type=1326 audit(1751254049.003:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c10ab19 code=0x7ffc0000 [ 79.290431][ T29] audit: type=1326 audit(1751254049.043:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c1658e7 code=0x7ffc0000 [ 79.313769][ T29] audit: type=1326 audit(1751254049.053:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c10ab19 code=0x7ffc0000 [ 79.337120][ T29] audit: type=1326 audit(1751254049.053:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c1658e7 code=0x7ffc0000 [ 79.360421][ T29] audit: type=1326 audit(1751254049.053:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c10ab19 code=0x7ffc0000 [ 79.383915][ T29] audit: type=1326 audit(1751254049.053:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c16e929 code=0x7ffc0000 [ 79.407368][ T29] audit: type=1326 audit(1751254049.073:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c1658e7 code=0x7ffc0000 [ 79.430654][ T29] audit: type=1326 audit(1751254049.073:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c10ab19 code=0x7ffc0000 [ 79.453940][ T29] audit: type=1326 audit(1751254049.073:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c1658e7 code=0x7ffc0000 [ 79.477290][ T29] audit: type=1326 audit(1751254049.083:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c10ab19 code=0x7ffc0000 [ 79.513901][ T5601] usb usb8: usbfs: process 5601 (syz.3.750) did not claim interface 0 before use [ 79.523259][ T5601] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 79.565810][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.577944][ T5605] FAULT_INJECTION: forcing a failure. [ 79.577944][ T5605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.591190][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz.2.752 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 79.591225][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.591241][ T5605] Call Trace: [ 79.591248][ T5605] [ 79.591257][ T5605] __dump_stack+0x1d/0x30 [ 79.591335][ T5605] dump_stack_lvl+0xe8/0x140 [ 79.591408][ T5605] dump_stack+0x15/0x1b [ 79.591474][ T5605] should_fail_ex+0x265/0x280 [ 79.591517][ T5605] should_fail+0xb/0x20 [ 79.591548][ T5605] should_fail_usercopy+0x1a/0x20 [ 79.591591][ T5605] _copy_to_user+0x20/0xa0 [ 79.591748][ T5605] simple_read_from_buffer+0xb5/0x130 [ 79.591859][ T5605] proc_fail_nth_read+0x100/0x140 [ 79.591941][ T5605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.591980][ T5605] vfs_read+0x1a0/0x6f0 [ 79.592083][ T5605] ? __rcu_read_unlock+0x4f/0x70 [ 79.592111][ T5605] ? __fget_files+0x184/0x1c0 [ 79.592140][ T5605] ksys_read+0xda/0x1a0 [ 79.592182][ T5605] __x64_sys_read+0x40/0x50 [ 79.592246][ T5605] x64_sys_call+0x2d77/0x2fb0 [ 79.592267][ T5605] do_syscall_64+0xd2/0x200 [ 79.592287][ T5605] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.592364][ T5605] ? clear_bhb_loop+0x40/0x90 [ 79.592392][ T5605] ? clear_bhb_loop+0x40/0x90 [ 79.592435][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.592462][ T5605] RIP: 0033:0x7fe0123dd33c [ 79.592481][ T5605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.592504][ T5605] RSP: 002b:00007fe010a47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.592522][ T5605] RAX: ffffffffffffffda RBX: 00007fe012605fa0 RCX: 00007fe0123dd33c [ 79.592560][ T5605] RDX: 000000000000000f RSI: 00007fe010a470a0 RDI: 0000000000000004 [ 79.592589][ T5605] RBP: 00007fe010a47090 R08: 0000000000000000 R09: 0000000000000000 [ 79.592604][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.592619][ T5605] R13: 0000000000000000 R14: 00007fe012605fa0 R15: 00007fffe3622048 [ 79.592642][ T5605] [ 79.802402][ T5604] usb usb8: usbfs: process 5604 (syz.1.747) did not claim interface 0 before use [ 79.828856][ T5604] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 79.852994][ T5614] loop4: detected capacity change from 0 to 2048 [ 79.894718][ T5614] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 79.920980][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.928844][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.936757][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.944545][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.952309][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.960111][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.967949][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.975836][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.983624][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.991994][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 79.999778][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.007593][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.015415][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.023181][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.031050][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.038933][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.046765][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.054552][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.062399][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.070272][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.074474][ T5632] loop0: detected capacity change from 0 to 764 [ 80.078065][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.092100][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.092134][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.092166][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.109552][ T5632] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.115450][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.115485][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.131319][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.146862][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.146894][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.162385][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.162418][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.177917][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.177965][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.193579][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.201464][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.209309][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.217106][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.224938][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.232698][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.240489][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.248242][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.256035][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.264006][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 80.272461][ T3393] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.309974][ T5630] __nla_validate_parse: 20 callbacks suppressed [ 80.309995][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 80.332076][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 80.340949][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 80.343288][ T5614] infiniband syz!: set active [ 80.354610][ T5614] infiniband syz!: added team_slave_0 [ 80.375205][ T5614] RDS/IB: syz!: added [ 80.375238][ T5614] smc: adding ib device syz! with port count 1 [ 80.395580][ T5614] smc: ib device syz! port 1 has pnetid [ 80.632453][ T5655] loop4: detected capacity change from 0 to 128 [ 80.984501][ T5670] loop4: detected capacity change from 0 to 512 [ 81.013778][ T5670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.052985][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.053195][ T5670] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.056424][ T5670] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 81.103345][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.241166][ T5677] loop4: detected capacity change from 0 to 764 [ 81.248657][ T5677] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 81.257752][ T5679] FAULT_INJECTION: forcing a failure. [ 81.257752][ T5679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.270942][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: syz.2.774 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 81.271015][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.271033][ T5679] Call Trace: [ 81.271041][ T5679] [ 81.271049][ T5679] __dump_stack+0x1d/0x30 [ 81.271122][ T5679] dump_stack_lvl+0xe8/0x140 [ 81.271202][ T5679] dump_stack+0x15/0x1b [ 81.271223][ T5679] should_fail_ex+0x265/0x280 [ 81.271268][ T5679] should_fail+0xb/0x20 [ 81.271300][ T5679] should_fail_usercopy+0x1a/0x20 [ 81.271465][ T5679] _copy_to_iter+0x24b/0xe30 [ 81.271506][ T5679] ? ptype_seq_stop+0xe/0x20 [ 81.271680][ T5679] ================================================================== [ 81.271724][ T5679] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 81.271783][ T5679] [ 81.271788][ T5679] write to 0xffffffff88e2f5e8 of 48 bytes by task 5677 on cpu 1: [ 81.271811][ T5679] vsnprintf+0x2ce/0x890 [ 81.271841][ T5679] vscnprintf+0x41/0x90 [ 81.271872][ T5679] printk_sprint+0x30/0x2d0 [ 81.271895][ T5679] vprintk_store+0x599/0x860 [ 81.271917][ T5679] vprintk_emit+0x178/0x650 [ 81.271942][ T5679] vprintk_default+0x26/0x30 [ 81.271965][ T5679] vprintk+0x1d/0x30 [ 81.271996][ T5679] _printk+0x79/0xa0 [ 81.272034][ T5679] __isofs_iget+0xe63/0x1090 [ 81.272060][ T5679] isofs_get_blocks+0x185/0x490 [ 81.272086][ T5679] isofs_bread+0x5b/0x100 [ 81.272111][ T5679] isofs_lookup+0x1a8/0x930 [ 81.272136][ T5679] __lookup_slow+0x190/0x250 [ 81.272169][ T5679] lookup_slow+0x3c/0x60 [ 81.272203][ T5679] walk_component+0x1ec/0x220 [ 81.272240][ T5679] path_lookupat+0xfe/0x2a0 [ 81.272271][ T5679] filename_lookup+0x147/0x340 [ 81.272303][ T5679] filename_setxattr+0x56/0x400 [ 81.272326][ T5679] path_setxattrat+0x2c9/0x310 [ 81.272356][ T5679] __x64_sys_lsetxattr+0x71/0x90 [ 81.272382][ T5679] x64_sys_call+0x1e36/0x2fb0 [ 81.272411][ T5679] do_syscall_64+0xd2/0x200 [ 81.272434][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.272463][ T5679] [ 81.272468][ T5679] read to 0xffffffff88e2f600 of 8 bytes by task 5679 on cpu 0: [ 81.272490][ T5679] data_push_tail+0xfd/0x420 [ 81.272532][ T5679] data_alloc+0xbf/0x2b0 [ 81.272572][ T5679] prb_reserve+0x808/0xaf0 [ 81.272611][ T5679] vprintk_store+0x56d/0x860 [ 81.272633][ T5679] vprintk_emit+0x178/0x650 [ 81.272657][ T5679] vprintk_default+0x26/0x30 [ 81.272680][ T5679] vprintk+0x1d/0x30 [ 81.272713][ T5679] _printk+0x79/0xa0 [ 81.272748][ T5679] show_trace_log_lvl+0x4e3/0x560 [ 81.272780][ T5679] __dump_stack+0x1d/0x30 [ 81.272802][ T5679] dump_stack_lvl+0xe8/0x140 [ 81.272824][ T5679] dump_stack+0x15/0x1b [ 81.272846][ T5679] should_fail_ex+0x265/0x280 [ 81.272884][ T5679] should_fail+0xb/0x20 [ 81.272921][ T5679] should_fail_usercopy+0x1a/0x20 [ 81.272965][ T5679] _copy_to_iter+0x24b/0xe30 [ 81.273007][ T5679] seq_read_iter+0x76a/0x940 [ 81.273039][ T5679] seq_read+0x1f7/0x240 [ 81.273072][ T5679] proc_reg_read+0x128/0x1c0 [ 81.273104][ T5679] vfs_readv+0x3f8/0x690 [ 81.273132][ T5679] __x64_sys_preadv+0xfd/0x1c0 [ 81.273158][ T5679] x64_sys_call+0x1503/0x2fb0 [ 81.273188][ T5679] do_syscall_64+0xd2/0x200 [ 81.273210][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.273244][ T5679] [ 81.273248][ T5679] value changed: 0x00000000ffffe060 -> 0x65792820746f6e20 [ 81.273263][ T5679] [ 81.273266][ T5679] Reported by Kernel Concurrency Sanitizer on: [ 81.273279][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: syz.2.774 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 81.273314][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.273331][ T5679] ================================================================== [ 81.273465][ T5679] seq_read_iter+0x76a/0x940 [ 81.273556][ T5679] seq_read+0x1f7/0x240 [ 81.273597][ T5679] ? __pfx_seq_read+0x10/0x10 [ 81.273700][ T5679] proc_reg_read+0x128/0x1c0 [ 81.273733][ T5679] ? __pfx_proc_reg_read+0x10/0x10 [ 81.273765][ T5679] vfs_readv+0x3f8/0x690 [ 81.273809][ T5679] __x64_sys_preadv+0xfd/0x1c0 [ 81.273928][ T5679] x64_sys_call+0x1503/0x2fb0 [ 81.273958][ T5679] do_syscall_64+0xd2/0x200 [ 81.273981][ T5679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.274089][ T5679] ? clear_bhb_loop+0x40/0x90 [ 81.274116][ T5679] ? clear_bhb_loop+0x40/0x90 [ 81.274141][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.274185][ T5679] RIP: 0033:0x7fe0123de929 [ 81.274205][ T5679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.274232][ T5679] RSP: 002b:00007fe010a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 81.274264][ T5679] RAX: ffffffffffffffda RBX: 00007fe012605fa0 RCX: 00007fe0123de929 [ 81.274282][ T5679] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 81.274335][ T5679] RBP: 00007fe010a47090 R08: 0000000000000000 R09: 0000000000000000 [ 81.274352][ T5679] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 81.274368][ T5679] R13: 0000000000000000 R14: 00007fe012605fa0 R15: 00007fffe3622048 [ 81.274394][ T5679] [ 81.420509][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 81.431711][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 81.952504][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 81.961398][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'.