last executing test programs: 4.444223436s ago: executing program 1 (id=402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 4.310052089s ago: executing program 1 (id=405): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 4.237910377s ago: executing program 1 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x2100, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) 4.183670172s ago: executing program 1 (id=408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_ordered}, {@grpquota}, {@orlov}, {@dioread_nolock}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x130) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_usb_connect(0x1, 0x1c2, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xbd, 0xbe, 0xb, 0x8, 0x46d, 0x8c5, 0x7f11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x1, 0xb7, 0x8, 0x90, 0x9, [{{0x9, 0x4, 0x60, 0x80, 0x4, 0xff, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x84, 0x0, 0x10, 0xc3, 0x6, 0x5, [@generic={0xd1, 0x5e824512872cd57, "5b7e7c9c114dbf6c6cfeab32442df4be39a3777aaf258d0d99447d1b305a71c1511289f9088ccd8ee8c6854dfd2e627c31f681500aa559ce763c046f1abae2529d954cb2241fcdb03ea2058f87309ceae34ed138f2643917a934fa906d5bf4e1a30e3fc5bee85f4bb29d09597bfc43fba65976cd3c2b0b4ce141f3f4aa5e2412be803979a35c58a8b50ab635fca3e2bafc4cec3da994cfdda45c268d6937545963bee221d81197c2f34fac602fa8416c84451698472313ca1f28d3c199ac284cd57dc777ce8fbf4a102382e200260e"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x3, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x5, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xcc, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xf6, 0x8, 0xf, [@generic={0x94, 0x6, "e91a8cb7150823abf18ad5ebab7c0f1475f48e46d663ee4ea4c94a9aee6c48f8d5704317859d3aee5aefb50a7404994d0be576852db9dbb5aec05f4d245a246a4f9f70a380301cadb402543aab33b54ef6aa2baf07b9d3a4a3fdb746b8ac65dbd77a303dc447389ced2b6b07473704a22475d9b9a32c7a0e8d02f918ae0fb518c04e5ae2945bcb18d5148bfb8f94c052fb83"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0xf9, 0x20, 0x7}, 0x35, &(0x7f00000002c0)={0x5, 0xf, 0x35, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x0, 0x4, 0x62}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "425cd84032abc25bd7da874c4f2fbe91"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x170, 0xab, 0x6, 0x9, 0xf9}]}, 0x7, [{0x8, &(0x7f0000000340)=@string={0x8, 0x3, "5185a3ff2bde"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "28f6709112fce2700c498a1d50af4686c0a4de51ec37887d6ba8b330c2d4e3014a41ff97de5b55f87123c336c6e2dbcea1b39930271161bd0441ce2fc1bbfa9621246db115b899e788587519f70fed4b91c7bbb7ce88477bd269e6cb61d9f5d475e021efdd081e56cf400360f452a36a1e3a08528f55803b45383b2fe8d9d7b42f36674a7e3308beee7643f1458e53e95faaca95c0f4c0454fffcad0825fd230c29de40f2e91b5ee46fa00830d9926bd15bfed7b0648bf502ea1cccd22669339"}}, {0x5e, &(0x7f0000000780)=@string={0x5e, 0x3, "548577d270ef731dcba82caf62f7822ecfbdab0002535c6599f8276a24040f026f327d4b904b399efdb854862037886b52eb9099d29bfa9667f66317d566b86931b22fb33c98b49891e19d41769938d14fee0b4932cdc89df1479407"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xb8d2ba15336508aa}}, {0x82, &(0x7f0000000800)=ANY=[@ANYBLOB="820600fa0b102644b4ef74d64cd0e5ccfe3912be52d8f8e5bd784009f845ca0ff27abbfdcac914117a6893c97818ddd93696b48331a6bb339db99adb060c66735ad68d85de6aae15e88b0651c3bc3961632c43bdd7afc49dd4d9ea1f0134bf56914f8880974a82ff693147481a5d21886fa13f1ee00f2c5fd7ca58321e27e1beb62c"]}]}) fallocate(r0, 0x0, 0xeffb, 0x9) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchdir(r6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r9, r9, 0x0, 0x80000000) 1.508869572s ago: executing program 2 (id=462): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) (fail_nth: 2) 1.505947123s ago: executing program 2 (id=464): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0xb) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @empty}], 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000ac0)={r8}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x5, 0x81}, &(0x7f0000000000)=0x90) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0x10000, 0x824f, 0x0}) 1.441352589s ago: executing program 2 (id=467): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 1.188943994s ago: executing program 3 (id=473): sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1.188688784s ago: executing program 3 (id=474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.140902678s ago: executing program 0 (id=475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)=r3}, 0x20) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000200)={0x0, 0xc89f, 0x40, 0x9, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x4, 0x6, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9) connect$unix(r4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) unlink(0x0) rmdir(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.12374506s ago: executing program 2 (id=476): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="a607cf8266ac819a180000f7000000f918110000", @ANYRESOCT=r0, @ANYRESDEC=0x0], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x104}}, 0x20) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x107) 1.108216872s ago: executing program 1 (id=477): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 980.746154ms ago: executing program 0 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x35) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) name_to_handle_at(r1, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)=@fuse={0xc, 0x81, {0x81, 0x4, 0x1}}, &(0x7f00000004c0), 0x1400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x702, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r8], 0x7c}}, 0x0) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x40800) ioctl$SIOCGSTAMP(r11, 0x8906, &(0x7f0000000280)) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 953.729117ms ago: executing program 1 (id=479): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000000cc0)="601dbfedd6aacf30190cbb22b0afbdea68c6107cc5bd2e49c0bc83f8234021e3ca2b67377ce450fef4e2cc61c272d1290084c7e3cdc7bfb545ba0c3cf2852e776d80b1a1bd73b2889ef99b7fc6062c370d9cb2050356679fc7fa4688e4b495fd9d4097c1e56556a78a27c65bfccfcec0736e3ecbb7f4a5c5235d04e2b27c1e3e7779c4b31a5b020a816a12f015c2c392a9cc18d30018a4e2477e75f5917aeaf47c3cf34d798c0f9e21cfadac2b22c98d5e752dc0ef62b4d179c6c5ed8d536268dd67b8b2fa5e3990b23a0dc68ea8f3becf8db1994f0e5680392c0f28a5efe3c1f00fbefd7767102a410d324e7e33ccc2b367818eaa2f059bc42d6972b83550c6edbc5b4c631105f1e6908a16a0832cd9b7874708b4ba5a7b4cfe6a2dd11cad0edc2c3d6abb539c1f2e24a3df31131d57ebd002a065210b54a67ffdd74239aafa2d2dae1a3c410ef5013b3a3e01d0e620992272816fc64dad266982c348637fe3c5f8b948f5b27df0cb7d5b57c1a5e3beaf975d85a43481d951a54528a127bf967f41510aeab8bd1e36a41268d39c4af079b669715dea89617c6ae0a498c6503c359bc4c2fde9c41d82ae089a01c21309753c5db3f24f50020240d93ee544a936cb16b6855a934edbb2b6f60eafe0f84c8f3ddbabfb37afa41f65b7df5b94dc0af854bf2accfaaa6db8ee796e155f53e7b56989808e1706a33025a410b14352f25d3498c6ab193b43004683bac449fd06a8cc0e4075980e76f8caef75e92e212d1836e0839d559ce45a5e5dbb1cbdd509726a44d7072465564048616df0d4b8f00fafee473fbc0303c1a1e86646e0d5f30e1021072e2ca24b41ebbe2807067c473e5910492b3ef666bae28b3272064de7a9d5747e0623fb3dac4e767f97e288aee916cfda69f53375bc1e06079a7350c01a47241fd1a96d03d842e004ee0214b8702b5727e41072285a17e9a6aac5fd5dd8e8a0c81965898b17c937ed4f96bfb04a0cfd421849f6da2ac89bd60eb4051ca40ae26d7900587238b699a98bcd1e70c553f1f506fe41300e3155cca11e2685d61128c04271dcf1ec2ee30be80053d023a9b6030c9eb52773ddd1cf327bd1b0678bf4872860ebb409c634110e27b1db6e617e099fae28c0b006917e1edcedf1bbcad03091f4d6d610698703ab007ec5183167bb3e184fa7637397dfa1bd966c57913d98774458c7302a14a19c97a7c3b06a5c8519341e89dccb015fab34e034cf8661c40386ba436524105d4f1f152a13e73f30d2a2432a62502ea892b53a737eecb734fb7449d9f4baf64841446e7eeec9616160df9e6e3f1381e1d5d422addae3adc6ed32be9991ddda320929a8c3569131957a965554097321f99232556e47a892a2779923488070f13dfecd4a855df514cc26371f8e164a1f6c46d6bd97262fc44edf905fbd9aeed5ee93f25a5c209bd326aa068e5fa0f4c9e5cdfc0ac90c815ca9535da0b7674d1cb714dbb19cc71d114f1b773b9d6b00d5e3f106734119490c7a404e53472567e5ec12fae7e5467af49c2b3c618fc489d79c62ffe7342fa2b1f6d245bb7fcd08834923f3aff4a0f058e9b2b287590eb4e5d9ea999e4f8fbfaad11d27aa1654cc41ea8ecd61f96aaf09fe1a9f6a14a1c2e02d1a2429879457bf465538f98472c4be1e7c4ba549236c34f6f1fe780b7bdd203c2917387d8f0fd1908e032adf59fe3b89e8521b6106eb2cd905e499787b1c104d3857115298cb1037b976d401a37ff2b8db1be03f851782fb98aa0fdf6786778cb14e8e65cc82", 0x4f2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x100, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x11, 0xe}, {0xe, 0x6}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x7fff, 0x770, 0x0, 0x1, 0x4f, 0x3}}, {0xa, 0x2, [0xcb, 0xff, 0x1]}}, {{0x1c, 0x1, {0x5, 0x5, 0x80, 0x800, 0x2, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x401, 0x0, 0x4]}}, {{0x1c, 0x1, {0x4, 0x8, 0xf, 0x5, 0x1, 0x40, 0x80000000, 0x1}}, {0x6, 0x2, [0xfff9]}}, {{0x1c, 0x1, {0x39, 0x4, 0x8, 0xb, 0x2, 0x81, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x80, 0xc9, 0x7fff, 0x8, 0x2, 0x5, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xff81, 0x8, 0x0, 0xfffffff9, 0x7fffffff}}, {0x4}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4081}, 0x4044814) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, &(0x7f0000000080)='\x00', 0x1}]) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r6 = inotify_init() r7 = syz_usbip_server_init(0x1) write$usbip_server(r7, &(0x7f0000001d80)=@ret_submit={{0x3, 0x3, 0x0, 0x0, 0xffff}, 0x5, 0x8, 0x7f6, 0x1b8, 0x0, 0x0, "8b7b41993427f4d9", [{0xf12, 0x8, 0x6, 0x3}, {0x3, 0x14358964, 0x3, 0x1}, {0x800, 0x7, 0x7, 0x2}, {0x6c3f, 0x7, 0x5, 0x1}, {0x400, 0x3, 0x0, 0x7ff}, {0xe, 0x800, 0x6, 0x10}, {0x1, 0x9000, 0x9, 0x40}, {0x0, 0x6, 0x200, 0x6}, {0x2, 0x7fffffff, 0x8, 0x80000000}, {0x8, 0x8, 0x9, 0xf}, {0x3, 0xecc, 0x1, 0x2}, {0xd0, 0x0, 0x3}, {0x400, 0x4, 0x1, 0xfffffff7}, {0xaa9e, 0xa2, 0x4, 0x6}, {0x80000000, 0x3a2, 0xfffffffa, 0x49}, {0x7, 0x1, 0x0, 0x5}, {0x81, 0xc5, 0x8, 0x3}, {0xfffffffa, 0x4, 0x3, 0x7}, {0x7, 0x1000, 0x8, 0x40}, {0x5, 0x80000000, 0x2, 0x449}, {0x80000001, 0xfffffff7, 0x5, 0xfd}, {0x400, 0x9, 0x0, 0x5}, {0x7fff, 0x2, 0x5, 0x10000}, {0x8, 0x200, 0x1, 0x3}, {0x0, 0x10, 0xfff, 0xfff}, {0x3, 0x4, 0xffffffff, 0x8}, {0x8, 0x6, 0xe0000, 0x32}, {0xffff6aa3, 0x7f, 0x6, 0x4}, {0xffffff7d, 0xfffffffe, 0x0, 0xd55}, {0x7, 0x8, 0xf, 0x9}, {0xffc0000, 0xa, 0x0, 0x5}, {0x4, 0xfffffffb, 0x5, 0x9}, {0x2, 0x7c, 0x4, 0x6}, {0x14, 0x7, 0xe0000000}, {0x6, 0xe, 0x5, 0x5}, {0xa, 0x81, 0x3, 0x4}, {0x7, 0x0, 0x2a, 0x4}, {0x800, 0xffffff5e, 0x1ff}, {0xffffffff, 0x5, 0x8, 0x7}, {0x3, 0x1, 0x4, 0xfffffffd}, {0x200, 0x10001, 0x80, 0x8}, {0x5, 0x1, 0xd8, 0x8001}, {0x0, 0x5, 0xae5, 0x1}, {0x1b, 0x3800, 0xe, 0xfbb}, {0x5, 0x15a, 0x1430, 0x7}, {0x3ff, 0x4, 0x6, 0xc}, {0x0, 0x3, 0xff, 0x6}, {0xfffffff5, 0xe, 0x0, 0x2}, {0xffff8000, 0x1, 0x3d8, 0x80000001}, {0xa12, 0x800, 0x1000, 0x81}, {0x3, 0xe, 0x0, 0x1}, {0x2, 0xd0000, 0x53a4, 0x3}, {0xf3c6, 0x6, 0x6, 0x3}, {0x5, 0x7, 0x967, 0x9}, {0xd, 0x5ee543eb, 0xffffff52, 0x7}, {0x10, 0x4, 0xffffffff, 0x1}, {0xf7, 0x4, 0x4, 0x3}, {0x9, 0x7, 0x9, 0xb}, {0x95ef, 0x1, 0x2, 0x4}, {0x4, 0x8000, 0x3, 0x787}, {0x5a, 0x1, 0x6, 0xff}, {0x80, 0x1, 0x200, 0x9}, {0x100, 0x800, 0x9, 0x4}, {0x7ff, 0x0, 0xde3, 0x5}, {0xc, 0xee, 0xa99, 0xfdb}, {0x4, 0x80, 0xffffffde, 0xd}, {0xd4d0, 0x0, 0x4a7, 0x5}, {0xa421, 0x5d, 0x20000000, 0x80000001}, {0x6, 0x5, 0x8, 0x1}, {0x7, 0x0, 0x1, 0x59}, {0x3, 0x4, 0x7, 0x3}, {0x7, 0x6, 0x8, 0x4}, {0x9, 0x80000001, 0xfffffff6, 0x8}, {0x81, 0x1ef, 0x1, 0x4}, {0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0x9, 0xffff}, {0x2, 0x0, 0xffffffff, 0x3}, {0x2, 0x10, 0x5, 0x1}, {0x1000, 0x1a17, 0x9, 0x6}, {0x8, 0x3, 0xffff, 0x7}, {0x8001, 0x7, 0x1, 0x2}, {0x5, 0x2, 0xd, 0x7}, {0xff, 0xf, 0x7954}, {0xfffffff3, 0xfffffffd, 0x9, 0xfff}, {0x5, 0x41, 0x5, 0xb77}, {0x200, 0x4, 0x2, 0x8}, {0xfffff800, 0x0, 0xfffffffe, 0xffffffff}, {0x0, 0x7, 0x4, 0x8000}, {0x7ff, 0x0, 0x0, 0xb12e}, {0xa7, 0x0, 0x101, 0xa}, {0x5, 0x4, 0x2, 0x1}, {0xf754, 0x43040491, 0x3, 0xf00e}, {0x690c, 0x4, 0x3}, {0x4da2, 0x800, 0x8000, 0x5}, {0x0, 0x9979, 0x3, 0x24}, {0x1, 0x7, 0x5, 0x6}, {0x7f, 0x10, 0x5, 0x4}, {0x64f, 0x9497, 0x8c, 0x7}, {0x4, 0x80000001, 0x4f, 0x9}, {0xca, 0x4d, 0xbaa8, 0x97}, {0x4, 0xcdc3, 0x1, 0x3}, {0xff, 0x0, 0x9, 0x7}, {0x10, 0xf, 0x3, 0x6}, {0x6cd, 0xe, 0x1, 0x1}, {0x1, 0xb, 0x9b5, 0x1}, {0x83, 0x7, 0x8, 0xffff}, {0x1, 0x6, 0x7ff, 0x100}, {0x9, 0x8, 0x2, 0x6}, {0x80000001, 0x3, 0x60, 0xfffffffb}, {0x9, 0x8, 0xc68, 0x9}, {0x7fffffff, 0x4, 0x0, 0x8}, {0x2, 0x8, 0x10000, 0x9}, {0xbda, 0x3, 0x0, 0x9}, {0xa, 0xff, 0x94bb, 0xab6}, {0x7, 0xfffffffc, 0x4, 0x7}, {0xfffffffa, 0x5, 0x6, 0x9}, {0x1, 0xff, 0x7, 0xff}, {0xfffffb64, 0xe, 0x10001, 0x3}, {0x2, 0x5, 0x4, 0x7fffffff}, {0xa5af, 0x80000001, 0x9, 0x8}, {0xddd1, 0x80, 0x8, 0xffffffff}, {0x0, 0xe, 0xf4e7, 0x6099}, {0x8, 0x7fffffff, 0x7, 0x9}, {0x8, 0xd6d, 0x0, 0xe}, {0x7, 0x6, 0x1, 0x1dd}, {0xea7, 0x7ff, 0xffff, 0x6d25}, {0x3, 0x5, 0x9, 0xfffffc01}, {0xc6, 0x2, 0x1, 0x9}, {0x9, 0x7, 0x8fee, 0xc}, {0x69, 0x1ff, 0xd35e, 0x800}, {0x9, 0x59, 0x199e, 0x81}, {0xc9cc, 0xfffffff9, 0x81, 0xc}, {0x2, 0x4e8, 0x7fffffff, 0x8}, {0x6, 0x45, 0x1, 0x8}, {0x8, 0x4c2, 0x1fb, 0x9}, {0x2ea, 0x1ff, 0x3, 0x4}, {0x6e5eb903, 0x3, 0xfffffff5, 0x3}, {0xbb8c, 0xa, 0x1000, 0x4}, {0x3ff, 0x3, 0x0, 0xffff7d96}, {0x5, 0x9, 0xa}, {0x81, 0x1, 0x3, 0xffffffff}, {0x6, 0x0, 0x400, 0x7}, {0xfffffffc, 0xfffff202, 0x3}, {0x1, 0x1ff, 0xc, 0xfffffeff}, {0x9f, 0x8, 0x8, 0x4}, {0x1ff, 0x3fc0, 0xffffffff, 0x2}, {0x10001, 0x8, 0x8}, {0x2, 0x80, 0xa, 0x40}, {0x8, 0x1000, 0x9, 0x7fffffff}, {0xfffff001, 0xc6, 0x4, 0x3}, {0x6, 0xe, 0x3, 0x54635929}, {0x9, 0x3, 0x8, 0x1}, {0x0, 0xf3f9, 0x147, 0x800}, {0x4d, 0x1ff, 0x8, 0x4}, {0xe, 0x0, 0xb9d34562, 0x5}, {0xfffffffb, 0x4, 0x9, 0x5}, {0x8, 0x0, 0x9, 0xfff}, {0x5, 0x2, 0xc4}, {0x10, 0x8, 0x80, 0x1}, {0x7, 0x6, 0x3, 0x10000}, {0x5, 0x2, 0x9, 0x8}, {0x100, 0xf7, 0x7, 0x2}, {0x9, 0x5, 0x3aec, 0x9}, {0x1, 0x3, 0x8, 0x4}, {0x1, 0x6, 0x9, 0x8001}, {0x1, 0x5, 0x7, 0x3}, {0x0, 0x7fffffff, 0x200, 0xa}, {0x6, 0x5, 0x0, 0x4}, {0x0, 0xfffffffa, 0xf9d, 0xff}, {0xb201, 0x584, 0xb87e, 0x2}, {0x4, 0x0, 0x8, 0x5}, {0x0, 0xbf, 0x200, 0x2b}, {0xfffffff7, 0x3, 0x7, 0x7}, {0x0, 0x2, 0x400, 0x9}, {0x1, 0xfffffffa, 0xfffffffd, 0x800}, {0x5, 0x4, 0x600, 0x68ed}, {0x6, 0x70eeff78, 0x7ff, 0x9}, {0x0, 0x3d7, 0x2, 0x4}, {0x6, 0x9, 0x5, 0x2}, {0x6, 0xffff, 0xffffffff}, {0x6, 0x93b, 0x62, 0x6}, {0x9, 0xc9, 0xc78}, {0x0, 0x6, 0x10, 0x9}, {0x0, 0x1, 0xfffffffe, 0x8}, {0xffffffff, 0xa0, 0xfffffffa, 0x9}, {0x9b, 0x8, 0xbb4}, {0x7ffffffd, 0x1, 0x4, 0x1}, {0x80000000, 0x4, 0x7, 0x9}, {0x6, 0x5, 0x7, 0x6}, {0x40, 0x6, 0x8, 0x5}, {0x6, 0x1ff, 0x8}, {0x1f92, 0x6, 0x1, 0x10}, {0xffffff55, 0x9, 0x5}, {0xffffff5d, 0x400, 0x2, 0x7f}, {0x9, 0x3, 0x1000, 0xd}, {0x2, 0x6, 0x6, 0x4}, {0x4, 0xffffff00, 0x1, 0x7}, {0x400, 0x6, 0xb39e, 0x59}, {0x1, 0x7, 0x8cfc, 0x1}, {0xca, 0x7f, 0x8f5, 0xdcc}, {0xffffffd5, 0x2, 0x6833, 0x74e}, {0x80000001, 0xfffffeff, 0x308, 0x7}, {0x8, 0x10000, 0x771, 0xffff7fff}, {0xff, 0x623, 0x6}, {0x4, 0xffffffff, 0x8}, {0x9, 0x4, 0x2, 0x5}, {0x40, 0x80, 0xff, 0x3}, {0xf8, 0x83, 0xfff}, {0x553, 0x9, 0x9}, {0x4, 0x2, 0x2, 0x100}, {0x80000000, 0x4, 0x9, 0x5}, {0x33, 0x1, 0x5d, 0x10000}, {0xffff8000, 0x10001, 0x3, 0xfffffff5}, {0xb, 0x6, 0x1, 0x8}, {0x3, 0x4, 0x5, 0x3}, {0x1, 0xd, 0x8001, 0x2}, {0x101, 0x10000, 0x3, 0x1}, {0xfffffae2, 0x9, 0x8, 0xb3}, {0x5, 0x3, 0xfffffff7, 0x5}, {0x3, 0x468, 0xe, 0x1}, {0x90d8, 0x3, 0xffff, 0xff}, {0x95, 0x9, 0x9, 0x400}, {0x0, 0xfffffff9, 0xffff, 0x2}, {0x0, 0xffff8001, 0xbe9e, 0x3}, {0x6, 0x10, 0xf, 0x5}, {0x43, 0x14, 0x8000}, {0x1ff, 0x6, 0x8001, 0xffffffff}, {0x1, 0x7, 0x3ff, 0xfd1b}, {0x6430073a, 0x12000000, 0x8, 0xbca5}, {0xd9ec0000, 0x5}, {0x5, 0x0, 0xa8, 0x1}, {0x6, 0x7, 0x3, 0x4c7e}, {0xb00000, 0x4, 0x2, 0x101}, {0x101, 0x2, 0x2, 0x40}, {0x2c3a, 0xe6, 0x7, 0x8}, {0x8, 0xffffb256, 0x8, 0x9}, {0x8, 0x8001, 0x0, 0x7}, {0x1, 0xe59, 0x8, 0x80000000}, {0x4, 0x3, 0xd0e1, 0x5}, {0x1, 0x401, 0x100, 0x800}, {0x68a0, 0x1, 0xc0000, 0xc}, {0x1, 0xe8, 0x46, 0xa}, {0xfcc, 0x5, 0x2}, {0x2f, 0x8, 0x10, 0x7e97}, {0x100, 0xfffffeff, 0x3}, {0x4, 0x9, 0x4, 0x9}, {0x5, 0x8, 0x6, 0xd6e}, {0x2, 0xe0000000, 0x50, 0x6}, {0xf, 0xf, 0x1855, 0x3ff}, {0x3, 0x1, 0x4, 0x38}, {0x81, 0x9, 0xffffff01, 0x5}, {0x3, 0x5e856031, 0x7, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x3, 0x4, 0x6}, {0x80000000, 0x9cfc, 0x4, 0x10}, {0x3ff, 0x7, 0xfffffbff, 0x8001}, {0x200, 0x10001, 0x3, 0x57f3}, {0x3, 0xe, 0x3, 0x9}, {0x1, 0x7, 0x3, 0x5}, {0x2bb, 0x7, 0xd1, 0x7}, {0xffff, 0x6, 0x1, 0x70}, {0x1, 0xfffffff8, 0x9, 0x9}, {0x7, 0x2, 0x51c, 0xfffffff9}, {0x0, 0x3, 0xf734, 0x7}, {0x9, 0x5, 0x80000001, 0x118}, {0x0, 0x2, 0x6, 0x4}, {0x81, 0x983, 0x5, 0xfffffffa}, {0xdc5, 0x8, 0x7}, {0xffffff7f, 0x328, 0x3, 0x2}, {0x8, 0x9, 0xbffc, 0x3}, {0x5d5d, 0x3, 0x4, 0x9}, {0x0, 0x3, 0x10000, 0x1}, {0x8, 0x63, 0xfffff487, 0x37a1}, {0x200, 0x0, 0xc1f, 0x9}, {0x5, 0xc5, 0xdfc8, 0x3}, {0x4, 0xd3d6, 0x6, 0xf2a}, {0x3, 0x7, 0x0, 0x8}, {0x1, 0x1, 0x400, 0x5}, {0x9e, 0x0, 0x5, 0x1}, {0x1, 0x7, 0x7ff, 0x4}, {0xfffffff7, 0x0, 0x2, 0x5}, {0x8, 0x3, 0x2, 0xf}, {0x8, 0xffffffff, 0x2, 0x2}, {0x1ff, 0x3, 0x6, 0x3}, {0x2, 0x3, 0x1, 0x4}, {0xf, 0x4, 0x0, 0x1}, {0x1, 0x9, 0x9, 0x2}, {0xf, 0x7, 0x8, 0x1}, {0x81, 0xfffffff7, 0x9, 0xfffffffe}, {0x1, 0xffffffff, 0x8001}, {0x295, 0x72, 0x4, 0x6}, {0x5, 0x7, 0x9956, 0x8}, {0x6, 0x5, 0x0, 0x2}, {0x0, 0xb, 0x1d, 0x7}, {0x3, 0xb, 0xb962, 0x10f}, {0xffffffff, 0x0, 0xc95, 0x5c3bab2}, {0x3, 0x921, 0x5, 0x9}, {0x3, 0x5, 0x8000, 0xd0}, {0x8e, 0x6, 0x9, 0x2}, {0x7, 0x9447, 0x6, 0xb}, {0x0, 0x0, 0x4, 0x2}, {0x40, 0x1, 0x1ff, 0xffff}, {0x401, 0x80, 0x8, 0x7}, {0x5, 0x6, 0xfffffffc, 0x7}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x9, 0x9, 0x3}, {0x5, 0x8, 0x9, 0x1}, {0x3, 0x80000001, 0xd7, 0x40bae578}, {0x40, 0xffff, 0x4, 0x49}, {0x4, 0x8, 0xdbf, 0x80}, {0x2, 0x10001, 0xfff, 0xa}, {0xf42c, 0x5, 0xfff, 0xfffffffb}, {0x169f, 0x5, 0x1, 0xfffffd3d}, {0x5, 0x42, 0x9, 0x3}, {0xfffffff7, 0x9, 0xd, 0x80}, {0xf, 0xa6, 0x0, 0xda1f}, {0x0, 0x5, 0x10001, 0x9}, {0x8, 0x200, 0x1, 0x101}, {0x10000, 0x7fffffff, 0x5, 0x7}, {0x10, 0xb, 0x5, 0x9}, {0x3, 0x1, 0xae, 0x7}, {0x6, 0x4f8, 0xfffffffe, 0xe}, {0x3, 0x6, 0x101, 0x5}, {0x4, 0xea8, 0x5, 0x5}, {0x65, 0x1, 0x2, 0x5}, {0x1840, 0x5, 0x1, 0x400000}, {0x7f, 0x8, 0xfffffffc, 0x5474661b}, {0x1, 0xfb8, 0x6, 0x6}, {0x8, 0x9, 0x9, 0x5b}, {0x7, 0x45, 0x2, 0xffffffff}, {0x7, 0x6, 0x2, 0x1}, {0x6, 0xa8d, 0x3, 0x1}, {0x8, 0x7, 0x0, 0x1}, {0x7fff, 0xaa, 0x8, 0x66a}, {0x9, 0xed, 0x4, 0x3ff}, {0xae07, 0x7f, 0x3, 0xa9}, {0x2, 0x6, 0x7fffffff}, {0x8, 0x1000, 0x9, 0xee7}, {0xd85c, 0x5, 0x35676c52, 0x80}, {0x5, 0xe, 0x7, 0xc0}, {0x1, 0x3f6, 0x2, 0x7}, {0x2, 0x9, 0x6, 0x3}, {0x80, 0x4, 0x5, 0x800}, {0x7f, 0x0, 0x1, 0x100}, {0x6, 0x6, 0x8, 0x3}, {0x6, 0x8841, 0x10, 0x3}, {0x8, 0x7ff, 0xd232, 0xb6b}, {0x1000, 0xfffffff7, 0x5, 0xa}, {0x7fff, 0x6, 0x7, 0x4}, {0x8, 0x9, 0x1, 0x1}, {0xff, 0x3, 0x1, 0x4c}, {0x4, 0x1, 0x9578, 0x53e0}, {0x6, 0x0, 0x0, 0x410}, {0x3, 0x63, 0x6, 0x2}, {0x0, 0x5, 0x6, 0x200}, {0x3, 0x5, 0x800, 0x10000}, {0x5, 0x8, 0x2, 0xfffff50e}, {0x1, 0x7b0, 0x84, 0x4}, {0xc0, 0x5, 0x309f, 0x1}, {0x5, 0x3, 0x3, 0x100}, {0x0, 0x8, 0x5, 0x40}, {0x79, 0x3, 0x8, 0x7}, {0x55, 0x4, 0x101, 0x1}, {0xa0000, 0x0, 0x8, 0x8}, {0x8, 0x5, 0x5}, {0x8, 0x4, 0x8, 0x8}, {0xe, 0x3, 0x5, 0x45}, {0xa, 0x10f, 0x8, 0x5c9}, {0x4, 0x3, 0x6, 0xb9}, {0x400, 0x81, 0x1, 0xfffffffd}, {0x3, 0x7c7, 0x1, 0x6}, {0x6e, 0xffffffff, 0x8, 0x8}, {0x6e018cf3, 0xfffff001, 0x500, 0x80}, {0x7a332cb2, 0x3, 0x8, 0x6}, {0x1, 0x1, 0x7, 0x1}, {0x9, 0x80, 0x4, 0x10001}, {0x8, 0x4, 0x3, 0x3}, {0x9d9e, 0x10, 0x3ff, 0x6}, {0x4, 0x570f, 0x7, 0x6}, {0x7a6, 0x8, 0x5, 0x7}, {0x9, 0x654, 0x8, 0x1}, {0x8001, 0x8, 0xdc, 0x769}, {0x8000, 0xc6ef, 0x68b, 0x1}, {0x90, 0x0, 0x7fffffff, 0x7}, {0xde5f, 0xffffff6b, 0x8, 0x6}, {0xe2, 0x6, 0x1, 0x9}, {0x6, 0x4, 0x4}, {0x7, 0x0, 0x0, 0x7fffffff}, {0x4, 0x80, 0xe00, 0x7}, {0x2, 0x1ff, 0x0, 0x10001}, {0x4, 0xfcc, 0x9, 0x8d68}, {0xffffffff, 0x627c, 0xbd, 0x2}, {0x5, 0x3ab, 0x6, 0x100}, {0x10, 0x8000, 0x5d9ab35, 0x9}, {0x6, 0x4, 0x2, 0x3}, {0x4, 0x0, 0x800, 0x8}, {0xfff, 0x5, 0x3, 0x9}, {0x5, 0x0, 0x3bea, 0x2}, {0x0, 0x800, 0x4c8, 0xff}, {0x1, 0x4, 0x8, 0x5}, {0x56c, 0x3, 0x3ff, 0x8}, {0x7, 0x1, 0x6, 0x8a000000}, {0x933, 0x9, 0x0, 0x9}, {0x0, 0x4, 0x4, 0xe}, {0x8, 0x4, 0x21c, 0x7}, {0xfd, 0x3, 0x3}, {0x3f, 0x401, 0x4, 0xba}, {0x9, 0x1000, 0xc, 0x9}, {0x401, 0x80000000, 0x4}, {0xe00000, 0x8, 0x104, 0x9}, {0x81, 0x9, 0x9, 0x10001}, {0x3, 0x9, 0x3, 0x5}, {0x3, 0xc1, 0xe, 0xfffffff7}, {0xf, 0x6, 0x0, 0x7}, {0x6, 0x4, 0x0, 0xfffffff9}, {0x2, 0x2, 0x8, 0x1}, {0x1, 0xb, 0x10000, 0x2}, {0xb1, 0x120, 0x7, 0xe27}, {0x3ff, 0x163, 0x7, 0x5}, {0x5, 0x96fc, 0x7, 0x7f3a}, {0x5, 0x3, 0x6, 0x6}, {0x100, 0x9, 0x3, 0x7}, {0x1, 0xffff, 0x400, 0x6}, {0x4, 0x4, 0xfffffffb, 0x80000000}, {0x1, 0x401, 0x101, 0x80000000}, {0x2, 0x7, 0xb2, 0x5}, {0xd, 0xfffffff8, 0x0, 0x4}, {0x6, 0xffffffff, 0x400, 0x5}, {0xe20e, 0x0, 0x3ff, 0x5}, {0x0, 0x400, 0x8, 0x2}, {0xf5, 0x48, 0x400, 0x4}, {0xd03d, 0x9, 0x8000, 0x3}, {0x0, 0x9, 0x5, 0xffffff80}, {0x9, 0x2, 0x6, 0x80000001}, {0x841, 0x10001, 0x9, 0xd}, {0x3, 0x3, 0x67bc, 0xfffffff8}, {0x400, 0x5, 0x5, 0x10000}, {0x8, 0x9, 0x6, 0x5}, {0xffff0000, 0xfffffffe, 0x5, 0x1ff}, {0x3, 0x800, 0x9ec, 0xc9}]}, 0x1bb8) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, [{0x5, 0x2, "c84800000500e4c408501af78df6"}]}}}}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) fcntl$notify(r5, 0x402, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents64(r9, 0x0, 0x0) 924.015729ms ago: executing program 2 (id=480): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000000cc0)="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", 0x4f2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x100, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x11, 0xe}, {0xe, 0x6}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x7fff, 0x770, 0x0, 0x1, 0x4f, 0x3}}, {0xa, 0x2, [0xcb, 0xff, 0x1]}}, {{0x1c, 0x1, {0x5, 0x5, 0x80, 0x800, 0x2, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x401, 0x0, 0x4]}}, {{0x1c, 0x1, {0x4, 0x8, 0xf, 0x5, 0x1, 0x40, 0x80000000, 0x1}}, {0x6, 0x2, [0xfff9]}}, {{0x1c, 0x1, {0x39, 0x4, 0x8, 0xb, 0x2, 0x81, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x80, 0xc9, 0x7fff, 0x8, 0x2, 0x5, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xff81, 0x8, 0x0, 0xfffffff9, 0x7fffffff}}, {0x4}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4081}, 0x4044814) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, &(0x7f0000000080)='\x00', 0x1}]) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r6 = inotify_init() r7 = syz_usbip_server_init(0x1) write$usbip_server(r7, &(0x7f0000001d80)=@ret_submit={{0x3, 0x3, 0x0, 0x0, 0xffff}, 0x5, 0x8, 0x7f6, 0x1b8, 0x0, 0x0, "8b7b41993427f4d9", [{0xf12, 0x8, 0x6, 0x3}, {0x3, 0x14358964, 0x3, 0x1}, {0x800, 0x7, 0x7, 0x2}, {0x6c3f, 0x7, 0x5, 0x1}, {0x400, 0x3, 0x0, 0x7ff}, {0xe, 0x800, 0x6, 0x10}, {0x1, 0x9000, 0x9, 0x40}, {0x0, 0x6, 0x200, 0x6}, {0x2, 0x7fffffff, 0x8, 0x80000000}, {0x8, 0x8, 0x9, 0xf}, {0x3, 0xecc, 0x1, 0x2}, {0xd0, 0x0, 0x3}, {0x400, 0x4, 0x1, 0xfffffff7}, {0xaa9e, 0xa2, 0x4, 0x6}, {0x80000000, 0x3a2, 0xfffffffa, 0x49}, {0x7, 0x1, 0x0, 0x5}, {0x81, 0xc5, 0x8, 0x3}, {0xfffffffa, 0x4, 0x3, 0x7}, {0x7, 0x1000, 0x8, 0x40}, {0x5, 0x80000000, 0x2, 0x449}, {0x80000001, 0xfffffff7, 0x5, 0xfd}, {0x400, 0x9, 0x0, 0x5}, {0x7fff, 0x2, 0x5, 0x10000}, {0x8, 0x200, 0x1, 0x3}, {0x0, 0x10, 0xfff, 0xfff}, {0x3, 0x4, 0xffffffff, 0x8}, {0x8, 0x6, 0xe0000, 0x32}, {0xffff6aa3, 0x7f, 0x6, 0x4}, {0xffffff7d, 0xfffffffe, 0x0, 0xd55}, {0x7, 0x8, 0xf, 0x9}, {0xffc0000, 0xa, 0x0, 0x5}, {0x4, 0xfffffffb, 0x5, 0x9}, {0x2, 0x7c, 0x4, 0x6}, {0x14, 0x7, 0xe0000000}, {0x6, 0xe, 0x5, 0x5}, {0xa, 0x81, 0x3, 0x4}, {0x7, 0x0, 0x2a, 0x4}, {0x800, 0xffffff5e, 0x1ff}, {0xffffffff, 0x5, 0x8, 0x7}, {0x3, 0x1, 0x4, 0xfffffffd}, {0x200, 0x10001, 0x80, 0x8}, {0x5, 0x1, 0xd8, 0x8001}, {0x0, 0x5, 0xae5, 0x1}, {0x1b, 0x3800, 0xe, 0xfbb}, {0x5, 0x15a, 0x1430, 0x7}, {0x3ff, 0x4, 0x6, 0xc}, {0x0, 0x3, 0xff, 0x6}, {0xfffffff5, 0xe, 0x0, 0x2}, {0xffff8000, 0x1, 0x3d8, 0x80000001}, {0xa12, 0x800, 0x1000, 0x81}, {0x3, 0xe, 0x0, 0x1}, {0x2, 0xd0000, 0x53a4, 0x3}, {0xf3c6, 0x6, 0x6, 0x3}, {0x5, 0x7, 0x967, 0x9}, {0xd, 0x5ee543eb, 0xffffff52, 0x7}, {0x10, 0x4, 0xffffffff, 0x1}, {0xf7, 0x4, 0x4, 0x3}, {0x9, 0x7, 0x9, 0xb}, {0x95ef, 0x1, 0x2, 0x4}, {0x4, 0x8000, 0x3, 0x787}, {0x5a, 0x1, 0x6, 0xff}, {0x80, 0x1, 0x200, 0x9}, {0x100, 0x800, 0x9, 0x4}, {0x7ff, 0x0, 0xde3, 0x5}, {0xc, 0xee, 0xa99, 0xfdb}, {0x4, 0x80, 0xffffffde, 0xd}, {0xd4d0, 0x0, 0x4a7, 0x5}, {0xa421, 0x5d, 0x20000000, 0x80000001}, {0x6, 0x5, 0x8, 0x1}, {0x7, 0x0, 0x1, 0x59}, {0x3, 0x4, 0x7, 0x3}, {0x7, 0x6, 0x8, 0x4}, {0x9, 0x80000001, 0xfffffff6, 0x8}, {0x81, 0x1ef, 0x1, 0x4}, {0x2, 0x2, 0x8, 0x6}, {0x0, 0x1, 0x9, 0xffff}, {0x2, 0x0, 0xffffffff, 0x3}, {0x2, 0x10, 0x5, 0x1}, {0x1000, 0x1a17, 0x9, 0x6}, {0x8, 0x3, 0xffff, 0x7}, {0x8001, 0x7, 0x1, 0x2}, {0x5, 0x2, 0xd, 0x7}, {0xff, 0xf, 0x7954}, {0xfffffff3, 0xfffffffd, 0x9, 0xfff}, {0x5, 0x41, 0x5, 0xb77}, {0x200, 0x4, 0x2, 0x8}, {0xfffff800, 0x0, 0xfffffffe, 0xffffffff}, {0x0, 0x7, 0x4, 0x8000}, {0x7ff, 0x0, 0x0, 0xb12e}, {0xa7, 0x0, 0x101, 0xa}, {0x5, 0x4, 0x2, 0x1}, {0xf754, 0x43040491, 0x3, 0xf00e}, {0x690c, 0x4, 0x3}, {0x4da2, 0x800, 0x8000, 0x5}, {0x0, 0x9979, 0x3, 0x24}, {0x1, 0x7, 0x5, 0x6}, {0x7f, 0x10, 0x5, 0x4}, {0x64f, 0x9497, 0x8c, 0x7}, {0x4, 0x80000001, 0x4f, 0x9}, {0xca, 0x4d, 0xbaa8, 0x97}, {0x4, 0xcdc3, 0x1, 0x3}, {0xff, 0x0, 0x9, 0x7}, {0x10, 0xf, 0x3, 0x6}, {0x6cd, 0xe, 0x1, 0x1}, {0x1, 0xb, 0x9b5, 0x1}, {0x83, 0x7, 0x8, 0xffff}, {0x1, 0x6, 0x7ff, 0x100}, {0x9, 0x8, 0x2, 0x6}, {0x80000001, 0x3, 0x60, 0xfffffffb}, {0x9, 0x8, 0xc68, 0x9}, {0x7fffffff, 0x4, 0x0, 0x8}, {0x2, 0x8, 0x10000, 0x9}, {0xbda, 0x3, 0x0, 0x9}, {0xa, 0xff, 0x94bb, 0xab6}, {0x7, 0xfffffffc, 0x4, 0x7}, {0xfffffffa, 0x5, 0x6, 0x9}, {0x1, 0xff, 0x7, 0xff}, {0xfffffb64, 0xe, 0x10001, 0x3}, {0x2, 0x5, 0x4, 0x7fffffff}, {0xa5af, 0x80000001, 0x9, 0x8}, {0xddd1, 0x80, 0x8, 0xffffffff}, {0x0, 0xe, 0xf4e7, 0x6099}, {0x8, 0x7fffffff, 0x7, 0x9}, {0x8, 0xd6d, 0x0, 0xe}, {0x7, 0x6, 0x1, 0x1dd}, {0xea7, 0x7ff, 0xffff, 0x6d25}, {0x3, 0x5, 0x9, 0xfffffc01}, {0xc6, 0x2, 0x1, 0x9}, {0x9, 0x7, 0x8fee, 0xc}, {0x69, 0x1ff, 0xd35e, 0x800}, {0x9, 0x59, 0x199e, 0x81}, {0xc9cc, 0xfffffff9, 0x81, 0xc}, {0x2, 0x4e8, 0x7fffffff, 0x8}, {0x6, 0x45, 0x1, 0x8}, {0x8, 0x4c2, 0x1fb, 0x9}, {0x2ea, 0x1ff, 0x3, 0x4}, {0x6e5eb903, 0x3, 0xfffffff5, 0x3}, {0xbb8c, 0xa, 0x1000, 0x4}, {0x3ff, 0x3, 0x0, 0xffff7d96}, {0x5, 0x9, 0xa}, {0x81, 0x1, 0x3, 0xffffffff}, {0x6, 0x0, 0x400, 0x7}, {0xfffffffc, 0xfffff202, 0x3}, {0x1, 0x1ff, 0xc, 0xfffffeff}, {0x9f, 0x8, 0x8, 0x4}, {0x1ff, 0x3fc0, 0xffffffff, 0x2}, {0x10001, 0x8, 0x8}, {0x2, 0x80, 0xa, 0x40}, {0x8, 0x1000, 0x9, 0x7fffffff}, {0xfffff001, 0xc6, 0x4, 0x3}, {0x6, 0xe, 0x3, 0x54635929}, {0x9, 0x3, 0x8, 0x1}, {0x0, 0xf3f9, 0x147, 0x800}, {0x4d, 0x1ff, 0x8, 0x4}, {0xe, 0x0, 0xb9d34562, 0x5}, {0xfffffffb, 0x4, 0x9, 0x5}, {0x8, 0x0, 0x9, 0xfff}, {0x5, 0x2, 0xc4}, {0x10, 0x8, 0x80, 0x1}, {0x7, 0x6, 0x3, 0x10000}, {0x5, 0x2, 0x9, 0x8}, {0x100, 0xf7, 0x7, 0x2}, {0x9, 0x5, 0x3aec, 0x9}, {0x1, 0x3, 0x8, 0x4}, {0x1, 0x6, 0x9, 0x8001}, {0x1, 0x5, 0x7, 0x3}, {0x0, 0x7fffffff, 0x200, 0xa}, {0x6, 0x5, 0x0, 0x4}, {0x0, 0xfffffffa, 0xf9d, 0xff}, {0xb201, 0x584, 0xb87e, 0x2}, {0x4, 0x0, 0x8, 0x5}, {0x0, 0xbf, 0x200, 0x2b}, {0xfffffff7, 0x3, 0x7, 0x7}, {0x0, 0x2, 0x400, 0x9}, {0x1, 0xfffffffa, 0xfffffffd, 0x800}, {0x5, 0x4, 0x600, 0x68ed}, {0x6, 0x70eeff78, 0x7ff, 0x9}, {0x0, 0x3d7, 0x2, 0x4}, {0x6, 0x9, 0x5, 0x2}, {0x6, 0xffff, 0xffffffff}, {0x6, 0x93b, 0x62, 0x6}, {0x9, 0xc9, 0xc78}, {0x0, 0x6, 0x10, 0x9}, {0x0, 0x1, 0xfffffffe, 0x8}, {0xffffffff, 0xa0, 0xfffffffa, 0x9}, {0x9b, 0x8, 0xbb4}, {0x7ffffffd, 0x1, 0x4, 0x1}, {0x80000000, 0x4, 0x7, 0x9}, {0x6, 0x5, 0x7, 0x6}, {0x40, 0x6, 0x8, 0x5}, {0x6, 0x1ff, 0x8}, {0x1f92, 0x6, 0x1, 0x10}, {0xffffff55, 0x9, 0x5}, {0xffffff5d, 0x400, 0x2, 0x7f}, {0x9, 0x3, 0x1000, 0xd}, {0x2, 0x6, 0x6, 0x4}, {0x4, 0xffffff00, 0x1, 0x7}, {0x400, 0x6, 0xb39e, 0x59}, {0x1, 0x7, 0x8cfc, 0x1}, {0xca, 0x7f, 0x8f5, 0xdcc}, {0xffffffd5, 0x2, 0x6833, 0x74e}, {0x80000001, 0xfffffeff, 0x308, 0x7}, {0x8, 0x10000, 0x771, 0xffff7fff}, {0xff, 0x623, 0x6}, {0x4, 0xffffffff, 0x8}, {0x9, 0x4, 0x2, 0x5}, {0x40, 0x80, 0xff, 0x3}, {0xf8, 0x83, 0xfff}, {0x553, 0x9, 0x9}, {0x4, 0x2, 0x2, 0x100}, {0x80000000, 0x4, 0x9, 0x5}, {0x33, 0x1, 0x5d, 0x10000}, {0xffff8000, 0x10001, 0x3, 0xfffffff5}, {0xb, 0x6, 0x1, 0x8}, {0x3, 0x4, 0x5, 0x3}, {0x1, 0xd, 0x8001, 0x2}, {0x101, 0x10000, 0x3, 0x1}, {0xfffffae2, 0x9, 0x8, 0xb3}, {0x5, 0x3, 0xfffffff7, 0x5}, {0x3, 0x468, 0xe, 0x1}, {0x90d8, 0x3, 0xffff, 0xff}, {0x95, 0x9, 0x9, 0x400}, {0x0, 0xfffffff9, 0xffff, 0x2}, {0x0, 0xffff8001, 0xbe9e, 0x3}, {0x6, 0x10, 0xf, 0x5}, {0x43, 0x14, 0x8000}, {0x1ff, 0x6, 0x8001, 0xffffffff}, {0x1, 0x7, 0x3ff, 0xfd1b}, {0x6430073a, 0x12000000, 0x8, 0xbca5}, {0xd9ec0000, 0x5}, {0x5, 0x0, 0xa8, 0x1}, {0x6, 0x7, 0x3, 0x4c7e}, {0xb00000, 0x4, 0x2, 0x101}, {0x101, 0x2, 0x2, 0x40}, {0x2c3a, 0xe6, 0x7, 0x8}, {0x8, 0xffffb256, 0x8, 0x9}, {0x8, 0x8001, 0x0, 0x7}, {0x1, 0xe59, 0x8, 0x80000000}, {0x4, 0x3, 0xd0e1, 0x5}, {0x1, 0x401, 0x100, 0x800}, {0x68a0, 0x1, 0xc0000, 0xc}, {0x1, 0xe8, 0x46, 0xa}, {0xfcc, 0x5, 0x2}, {0x2f, 0x8, 0x10, 0x7e97}, {0x100, 0xfffffeff, 0x3}, {0x4, 0x9, 0x4, 0x9}, {0x5, 0x8, 0x6, 0xd6e}, {0x2, 0xe0000000, 0x50, 0x6}, {0xf, 0xf, 0x1855, 0x3ff}, {0x3, 0x1, 0x4, 0x38}, {0x81, 0x9, 0xffffff01, 0x5}, {0x3, 0x5e856031, 0x7, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x3, 0x4, 0x6}, {0x80000000, 0x9cfc, 0x4, 0x10}, {0x3ff, 0x7, 0xfffffbff, 0x8001}, {0x200, 0x10001, 0x3, 0x57f3}, {0x3, 0xe, 0x3, 0x9}, {0x1, 0x7, 0x3, 0x5}, {0x2bb, 0x7, 0xd1, 0x7}, {0xffff, 0x6, 0x1, 0x70}, {0x1, 0xfffffff8, 0x9, 0x9}, {0x7, 0x2, 0x51c, 0xfffffff9}, {0x0, 0x3, 0xf734, 0x7}, {0x9, 0x5, 0x80000001, 0x118}, {0x0, 0x2, 0x6, 0x4}, {0x81, 0x983, 0x5, 0xfffffffa}, {0xdc5, 0x8, 0x7}, {0xffffff7f, 0x328, 0x3, 0x2}, {0x8, 0x9, 0xbffc, 0x3}, {0x5d5d, 0x3, 0x4, 0x9}, {0x0, 0x3, 0x10000, 0x1}, {0x8, 0x63, 0xfffff487, 0x37a1}, {0x200, 0x0, 0xc1f, 0x9}, {0x5, 0xc5, 0xdfc8, 0x3}, {0x4, 0xd3d6, 0x6, 0xf2a}, {0x3, 0x7, 0x0, 0x8}, {0x1, 0x1, 0x400, 0x5}, {0x9e, 0x0, 0x5, 0x1}, {0x1, 0x7, 0x7ff, 0x4}, {0xfffffff7, 0x0, 0x2, 0x5}, {0x8, 0x3, 0x2, 0xf}, {0x8, 0xffffffff, 0x2, 0x2}, {0x1ff, 0x3, 0x6, 0x3}, {0x2, 0x3, 0x1, 0x4}, {0xf, 0x4, 0x0, 0x1}, {0x1, 0x9, 0x9, 0x2}, {0xf, 0x7, 0x8, 0x1}, {0x81, 0xfffffff7, 0x9, 0xfffffffe}, {0x1, 0xffffffff, 0x8001}, {0x295, 0x72, 0x4, 0x6}, {0x5, 0x7, 0x9956, 0x8}, {0x6, 0x5, 0x0, 0x2}, {0x0, 0xb, 0x1d, 0x7}, {0x3, 0xb, 0xb962, 0x10f}, {0xffffffff, 0x0, 0xc95, 0x5c3bab2}, {0x3, 0x921, 0x5, 0x9}, {0x3, 0x5, 0x8000, 0xd0}, {0x8e, 0x6, 0x9, 0x2}, {0x7, 0x9447, 0x6, 0xb}, {0x0, 0x0, 0x4, 0x2}, {0x40, 0x1, 0x1ff, 0xffff}, {0x401, 0x80, 0x8, 0x7}, {0x5, 0x6, 0xfffffffc, 0x7}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x9, 0x9, 0x3}, {0x5, 0x8, 0x9, 0x1}, {0x3, 0x80000001, 0xd7, 0x40bae578}, {0x40, 0xffff, 0x4, 0x49}, {0x4, 0x8, 0xdbf, 0x80}, {0x2, 0x10001, 0xfff, 0xa}, {0xf42c, 0x5, 0xfff, 0xfffffffb}, {0x169f, 0x5, 0x1, 0xfffffd3d}, {0x5, 0x42, 0x9, 0x3}, {0xfffffff7, 0x9, 0xd, 0x80}, {0xf, 0xa6, 0x0, 0xda1f}, {0x0, 0x5, 0x10001, 0x9}, {0x8, 0x200, 0x1, 0x101}, {0x10000, 0x7fffffff, 0x5, 0x7}, {0x10, 0xb, 0x5, 0x9}, {0x3, 0x1, 0xae, 0x7}, {0x6, 0x4f8, 0xfffffffe, 0xe}, {0x3, 0x6, 0x101, 0x5}, {0x4, 0xea8, 0x5, 0x5}, {0x65, 0x1, 0x2, 0x5}, {0x1840, 0x5, 0x1, 0x400000}, {0x7f, 0x8, 0xfffffffc, 0x5474661b}, {0x1, 0xfb8, 0x6, 0x6}, {0x8, 0x9, 0x9, 0x5b}, {0x7, 0x45, 0x2, 0xffffffff}, {0x7, 0x6, 0x2, 0x1}, {0x6, 0xa8d, 0x3, 0x1}, {0x8, 0x7, 0x0, 0x1}, {0x7fff, 0xaa, 0x8, 0x66a}, {0x9, 0xed, 0x4, 0x3ff}, {0xae07, 0x7f, 0x3, 0xa9}, {0x2, 0x6, 0x7fffffff}, {0x8, 0x1000, 0x9, 0xee7}, {0xd85c, 0x5, 0x35676c52, 0x80}, {0x5, 0xe, 0x7, 0xc0}, {0x1, 0x3f6, 0x2, 0x7}, {0x2, 0x9, 0x6, 0x3}, {0x80, 0x4, 0x5, 0x800}, {0x7f, 0x0, 0x1, 0x100}, {0x6, 0x6, 0x8, 0x3}, {0x6, 0x8841, 0x10, 0x3}, {0x8, 0x7ff, 0xd232, 0xb6b}, {0x1000, 0xfffffff7, 0x5, 0xa}, {0x7fff, 0x6, 0x7, 0x4}, {0x8, 0x9, 0x1, 0x1}, {0xff, 0x3, 0x1, 0x4c}, {0x4, 0x1, 0x9578, 0x53e0}, {0x6, 0x0, 0x0, 0x410}, {0x3, 0x63, 0x6, 0x2}, {0x0, 0x5, 0x6, 0x200}, {0x3, 0x5, 0x800, 0x10000}, {0x5, 0x8, 0x2, 0xfffff50e}, {0x1, 0x7b0, 0x84, 0x4}, {0xc0, 0x5, 0x309f, 0x1}, {0x5, 0x3, 0x3, 0x100}, {0x0, 0x8, 0x5, 0x40}, {0x79, 0x3, 0x8, 0x7}, {0x55, 0x4, 0x101, 0x1}, {0xa0000, 0x0, 0x8, 0x8}, {0x8, 0x5, 0x5}, {0x8, 0x4, 0x8, 0x8}, {0xe, 0x3, 0x5, 0x45}, {0xa, 0x10f, 0x8, 0x5c9}, {0x4, 0x3, 0x6, 0xb9}, {0x4, 0x81, 0xa59d, 0x8}, {0x3, 0x7c7, 0x1, 0x6}, {0x6e, 0xffffffff, 0x8, 0x8}, {0x6e018cf3, 0xfffff001, 0x500, 0x80}, {0x7a332cb2, 0x3, 0x8, 0x6}, {0x1, 0x1, 0x7, 0x1}, {0x9, 0x80, 0x4, 0x10001}, {0x8, 0x4, 0x3, 0x3}, {0x9d9e, 0x10, 0x3ff, 0x6}, {0x4, 0x570f, 0x7, 0x6}, {0x7a6, 0x8, 0x5, 0x7}, {0x9, 0x654, 0x8, 0x1}, {0x8001, 0x8, 0xdc, 0x769}, {0x8000, 0xc6ef, 0x68b, 0x1}, {0x90, 0x0, 0x7fffffff, 0x7}, {0xde5f, 0xffffff6b, 0x8, 0x6}, {0xe2, 0x6, 0x1, 0x9}, {0x6, 0x4, 0x4}, {0x7, 0x0, 0x0, 0x7fffffff}, {0x4, 0x80, 0xe00, 0x7}, {0x2, 0x1ff, 0x0, 0x10001}, {0x4, 0xfcc, 0x9, 0x8d68}, {0xffffffff, 0x627c, 0xbd, 0x2}, {0x5, 0x3ab, 0x6, 0x100}, {0x10, 0x8000, 0x5d9ab35, 0x9}, {0x6, 0x4, 0x2, 0x3}, {0x4, 0x0, 0x800, 0x8}, {0xfff, 0x5, 0x3, 0x9}, {0x5, 0x0, 0x3bea, 0x2}, {0x0, 0x800, 0x4c8, 0xff}, {0x1, 0x4, 0x8, 0x5}, {0x56c, 0x3, 0x3ff, 0x8}, {0x7, 0x1, 0x6, 0x8a000000}, {0x933, 0x9, 0x0, 0x9}, {0x0, 0x4, 0x4, 0xe}, {0x8, 0x4, 0x21c, 0x7}, {0xfd, 0x3, 0x3}, {0x3f, 0x401, 0x4, 0xba}, {0x9, 0x1000, 0xc, 0x9}, {0x401, 0x80000000, 0x4}, {0xe00000, 0x8, 0x104, 0x9}, {0x81, 0x9, 0x9, 0x10001}, {0x3, 0x9, 0x3, 0x5}, {0x3, 0xc1, 0xe, 0xfffffff7}, {0xf, 0x6, 0x0, 0x7}, {0x6, 0x4, 0x0, 0xfffffff9}, {0x2, 0x2, 0x8, 0x1}, {0x1, 0xb, 0x10000, 0x2}, {0xb1, 0x120, 0x7, 0xe27}, {0x3ff, 0x163, 0x7, 0x5}, {0x5, 0x96fc, 0x7, 0x7f3a}, {0x5, 0x3, 0x6, 0x6}, {0x100, 0x9, 0x3, 0x7}, {0x1, 0xffff, 0x400, 0x6}, {0x4, 0x4, 0xfffffffb, 0x80000000}, {0x1, 0x401, 0x101, 0x80000000}, {0x2, 0x7, 0xb2, 0x5}, {0xd, 0xfffffff8, 0x0, 0x4}, {0x6, 0xffffffff, 0x400, 0x5}, {0xe20e, 0x0, 0x3ff, 0x5}, {0x0, 0x400, 0x8, 0x2}, {0xf5, 0x48, 0x400, 0x4}, {0xd03d, 0x9, 0x8000, 0x3}, {0x0, 0x9, 0x5, 0xffffff80}, {0x9, 0x2, 0x6, 0x80000001}, {0x841, 0x10001, 0x9, 0xd}, {0x3, 0x3, 0x67bc, 0xfffffff8}, {0x400, 0x5, 0x5, 0x10000}, {0x8, 0x9, 0x6, 0x5}, {0xffff0000, 0xfffffffe, 0x5, 0x1ff}, {0x3, 0x800, 0x9ec, 0xc9}]}, 0x1bb8) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, [{0x5, 0x2, "c84800000500e4c408501af78df6"}]}}}}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) fcntl$notify(r5, 0x402, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents64(r9, 0x0, 0x0) 816.99979ms ago: executing program 3 (id=481): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 695.102512ms ago: executing program 3 (id=482): request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9\x8eustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 598.900461ms ago: executing program 3 (id=483): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 569.106754ms ago: executing program 3 (id=484): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x21d540, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300030000000000"], 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@usrjquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r7, 0x5, 0x4) 407.2152ms ago: executing program 0 (id=485): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x58, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "038709ba72789c2a8b0819"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0x256, &(0x7f0000000bc0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)="d7bb33", 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4058040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0, 0xccf}, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) rename(&(0x7f0000000000)='./file1\x00', 0x0) 370.335714ms ago: executing program 0 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r2, 0x0, 0xbf5, 0x2000402) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/67, 0x0, 0x43, 0x0, 0x100}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='netfs_sreq\x00', r9, 0x0, 0x1}, 0x18) 156.248844ms ago: executing program 0 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000edffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000954c4eaad031d6d4a1b88469e7074b2aceda0ffb8d1d01b1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a200) dup3(r3, r4, 0x80000) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 154.829145ms ago: executing program 4 (id=491): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_bond\x00', {0x2}, 0x11}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @remote}}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x66c9, 0x10000) syz_io_uring_setup(0x413b, &(0x7f0000000140)={0x0, 0xadf9, 0x4, 0x0, 0x26a, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000001400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000002c0)={0x10cc, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xb3, 0x45, "1f67d2b6fdfe10fec5ea1d8af0b72c578c0bcfdb6a6e68b3cee192228534b34cb6ce4b90f714831b03589bee78a9134f244c34e02fed8064eea177b3c9757b0039384ea7a04173b6a9163987e5f530504d54de12e5ea267d863bd668e8c50fba0595377d53c0e281b51d3790a6c177722fb96650ee1d6ca5647fd651e1f673167001ff23301d16bdf51d193e690e44089c7034754dfcc0daacd2ebb192212fbe459648c928e4e17dc14bbda47fe4a5"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004881) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[r0]}, 0x1) r5 = syz_io_uring_setup(0x6ac1, &(0x7f00000014c0)={0x0, 0x558c, 0x4, 0x3, 0x5b}, &(0x7f0000001540), &(0x7f0000001580)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r5, 0x1a, &(0x7f00000015c0), 0x1) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000001600), &(0x7f0000001640)=0x4) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000001680)={0x0, 0xd1c6, 0x20000, 0x1, 0x25e, 0x0, r5}, 0x1) inotify_init1(0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001780)={0x0, 0x64, &(0x7f0000001700)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0xee32}, @in6={0xa, 0x4e21, 0x0, @mcast1}, @in6={0xa, 0x4e24, 0x0, @remote, 0x5d5}]}, &(0x7f00000017c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001800)={r6, 0x5}, 0x8) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x158, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000001a80)={@loopback, @loopback, @remote}, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001ac0)={r6, 0xff81, 0xd, 0x15, 0x15, 0x9}, &(0x7f0000001b00)=0x14) getrandom(&(0x7f0000001b40)=""/150, 0x96, 0x2) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d80)={0x0, 0x3, 0x3c}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001dc0)={&(0x7f0000001c00)="36db97b8b540", &(0x7f0000001c40)=""/36, &(0x7f0000001c80)="215d6a47e2cfad9e428209a3f3ca9249f7017a2ffff45741b87b80b925315b6108812768edcd2e6875cc5a7b3ed8eff4164361f779b9e1cdb6eb5b8345e34434c3b7df37c8774929cc9cbd8efa39de2be3a1deeed86694f8a2f4d2f349117f342f38fa4d512c18deb1febd0e1ef82f9a88780dffa20c56841b0407708c7d07347b8677c725f52b51d95ad2126a98cef05543790ffa61e12bc0e8772ca32ee4e21a130096269dd4f611f0929ffd2131fdb467f0", &(0x7f0000001d40)="d1a55497c9741448ae49e40d8f26bb2ee1a2f974", 0xffffffff, r7, 0x4}, 0x38) openat$cgroup_subtree(r3, &(0x7f0000001e00), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, r9, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000002000), r2) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x7c, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x13, 0x17, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x0, 0x1, 0x7, 0xfffffffffffffff4, 0x1}, @ringbuf_query, @generic={0x7, 0xe, 0x7, 0x7, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='GPL\x00', 0x100, 0x81, &(0x7f0000002300)=""/129, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f0000002480)={0x811d, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x1, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000002700)=[r7, r7, r7, r3], &(0x7f0000002740)=[{0x0, 0x3, 0xc, 0x5}, {0x2, 0x4, 0x3}, {0x3, 0x4, 0x4, 0x8}, {0x6, 0x3, 0x3, 0x3}, {0x0, 0x5, 0x2, 0x5}, {0x1, 0x5, 0x3, 0x9}, {0x5, 0x3, 0x1, 0x2}, {0x4, 0x4, 0x4, 0xa}, {0x2, 0x5, 0x1, 0x8}], 0x10, 0x6e28}, 0x94) 107.919299ms ago: executing program 4 (id=492): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 107.143369ms ago: executing program 4 (id=493): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 76.663972ms ago: executing program 4 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 60.871804ms ago: executing program 4 (id=495): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x120) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22.737478ms ago: executing program 4 (id=496): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001380)={0x46, "c44c86d62349ed8f2a50097897ecd3a7865d138ea00a94395783a66e70993b51127bff68b74eb82b3f8d5c007fb29bde875f92fb7e45ce15c3c4f769964e252430444754f577c27fd49efb22b24816f94a081f186c409ef2fba8e11390f33015cac4660b6c408ed422edaec244d7f8585ebdd0019b9d1cc3d8b96f6021f524efc45a25de669470e7d133f3ad6b1dff52087a4f1da29d2f31bd997a7cdc6557fa41b3aa3bf2d561eaa24a4ba0535765ca9c3871dbd7a52623647a2d3c79b7db7d2dc364f6f1b379998afe56760b234f1ec1a307d1907afba7a33aa7036ec07ec4ae7e1246fd46635f0a84be80c8d3628485bd272442429bba79e988291f46ec45e5d3e55f33ad580fa3031caab9ca2238e202152f7b9dc03393ae3dfafeb626fe2358183731b1be0d3a8b128d1f469b6fb392d57a701443436de9753585d5f6a0ec6b8bf03b08581377508aa6aaac6d13b606af5fda77986e4079d9fa61f14465ae4371349e02b467b79b75c0d2d5f6b29a0360a88a4bdc3eaad7b5a1aa46c5700a93ef584bb683f247108dbdc3496da21c51449072fdc7999b03f688e6ade02585d12bde56d0bf70f86e9d65c196d4844e19b449457f0d61dec511cc3b8897bc5e9a5ec769aea5704fcc08b0726e92c512b9aebe38829b55938ac7e78a0fa08fc0416feafc9ff42b0454900f6a86e94c778dac2ddec39e79b84bf85ba4cbcf36"}) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xf}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5, @perf_bp={0x0, 0xf}, 0x10c0, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r7 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x8, 0x0, 0x2cf}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r7, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r14, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xe, r13, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) 22.138087ms ago: executing program 0 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto, @func_proto={0x0, 0x1}]}}, &(0x7f0000000f40)=""/4104, 0x3a, 0x1008, 0x1}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0xfffffffffffffd84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) r2 = syz_io_uring_setup(0x7638, &(0x7f00000002c0)={0x0, 0x79af, 0x10, 0x2, 0x40034e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)=ANY=[]) r5 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) symlink(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 0s ago: executing program 2 (id=498): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 26.740965][ T29] audit: type=1400 audit(1761487639.588:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.764080][ T29] audit: type=1400 audit(1761487639.608:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.765063][ T3299] cgroup: Unknown subsys name 'net' [ 26.791928][ T29] audit: type=1400 audit(1761487639.638:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.909924][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.916397][ T3299] cgroup: Unknown subsys name 'rlimit' [ 27.048545][ T29] audit: type=1400 audit(1761487639.888:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.071848][ T29] audit: type=1400 audit(1761487639.898:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.092673][ T29] audit: type=1400 audit(1761487639.898:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.101918][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.113794][ T29] audit: type=1400 audit(1761487639.898:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.142930][ T29] audit: type=1400 audit(1761487639.908:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.167825][ T29] audit: type=1400 audit(1761487639.908:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.174115][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.191365][ T29] audit: type=1400 audit(1761487639.968:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.251055][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 29.276695][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.338290][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.366603][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.384179][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.391587][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.398795][ T3312] bridge_slave_0: entered allmulticast mode [ 29.405345][ T3312] bridge_slave_0: entered promiscuous mode [ 29.429777][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.436934][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.444191][ T3312] bridge_slave_1: entered allmulticast mode [ 29.450754][ T3312] bridge_slave_1: entered promiscuous mode [ 29.457081][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.464558][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.471859][ T3311] bridge_slave_0: entered allmulticast mode [ 29.478444][ T3311] bridge_slave_0: entered promiscuous mode [ 29.506271][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.513482][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.520900][ T3311] bridge_slave_1: entered allmulticast mode [ 29.527289][ T3311] bridge_slave_1: entered promiscuous mode [ 29.543389][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.567980][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.603728][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.610849][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.618037][ T3317] bridge_slave_0: entered allmulticast mode [ 29.624716][ T3317] bridge_slave_0: entered promiscuous mode [ 29.632375][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.646842][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.654173][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.661408][ T3320] bridge_slave_0: entered allmulticast mode [ 29.667931][ T3320] bridge_slave_0: entered promiscuous mode [ 29.684157][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.691284][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.698594][ T3317] bridge_slave_1: entered allmulticast mode [ 29.705060][ T3317] bridge_slave_1: entered promiscuous mode [ 29.712454][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.721697][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.729008][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.736285][ T3320] bridge_slave_1: entered allmulticast mode [ 29.742965][ T3320] bridge_slave_1: entered promiscuous mode [ 29.749908][ T3312] team0: Port device team_slave_0 added [ 29.758203][ T3312] team0: Port device team_slave_1 added [ 29.795985][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.810932][ T3311] team0: Port device team_slave_0 added [ 29.823179][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.835272][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.844874][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.851963][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.877957][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.889885][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.899841][ T3311] team0: Port device team_slave_1 added [ 29.905651][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.924560][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.931615][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.957870][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.988770][ T3317] team0: Port device team_slave_0 added [ 29.995483][ T3317] team0: Port device team_slave_1 added [ 30.010265][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.017377][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.043624][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.055234][ T3320] team0: Port device team_slave_0 added [ 30.062583][ T3320] team0: Port device team_slave_1 added [ 30.083959][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.090975][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.117103][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.145817][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.152952][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.179131][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.197312][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.204359][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.230571][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.244117][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.251330][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.277597][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.295255][ T3312] hsr_slave_0: entered promiscuous mode [ 30.301381][ T3312] hsr_slave_1: entered promiscuous mode [ 30.314692][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.321797][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.348071][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.376186][ T3317] hsr_slave_0: entered promiscuous mode [ 30.382253][ T3317] hsr_slave_1: entered promiscuous mode [ 30.388095][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.393853][ T3317] Cannot create hsr debugfs directory [ 30.422453][ T3311] hsr_slave_0: entered promiscuous mode [ 30.428627][ T3311] hsr_slave_1: entered promiscuous mode [ 30.434774][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 30.440685][ T3311] Cannot create hsr debugfs directory [ 30.470211][ T3320] hsr_slave_0: entered promiscuous mode [ 30.476432][ T3320] hsr_slave_1: entered promiscuous mode [ 30.482427][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.488258][ T3320] Cannot create hsr debugfs directory [ 30.499649][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.506769][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.514202][ T3316] bridge_slave_0: entered allmulticast mode [ 30.520782][ T3316] bridge_slave_0: entered promiscuous mode [ 30.546873][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.554178][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.561426][ T3316] bridge_slave_1: entered allmulticast mode [ 30.567983][ T3316] bridge_slave_1: entered promiscuous mode [ 30.616124][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.638248][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.688882][ T3316] team0: Port device team_slave_0 added [ 30.715697][ T3316] team0: Port device team_slave_1 added [ 30.743208][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.750364][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.776481][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.802636][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.809680][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.835809][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.881043][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.891755][ T3316] hsr_slave_0: entered promiscuous mode [ 30.897895][ T3316] hsr_slave_1: entered promiscuous mode [ 30.903941][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.909741][ T3316] Cannot create hsr debugfs directory [ 30.915403][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.924464][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.940524][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.980158][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.989320][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.015383][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.038097][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.063180][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.081313][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.095371][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.104837][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.132074][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.143480][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.157889][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.166970][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.189832][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.211702][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.218784][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.228303][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.238272][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.247598][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.260053][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.267183][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.282968][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.290092][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.342318][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.364704][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.377915][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.392721][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.412349][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.423705][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.434168][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.452695][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.459905][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.469064][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.476312][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.497066][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.504207][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.513442][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.520679][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.529621][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536703][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.549759][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.556846][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.573910][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.597135][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.616757][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.631884][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.639063][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.650595][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.657807][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.754239][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.791683][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.845933][ T3312] veth0_vlan: entered promiscuous mode [ 31.865946][ T3312] veth1_vlan: entered promiscuous mode [ 31.895653][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.907070][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.918508][ T3312] veth0_macvtap: entered promiscuous mode [ 31.952121][ T3312] veth1_macvtap: entered promiscuous mode [ 31.985034][ T3311] veth0_vlan: entered promiscuous mode [ 32.005003][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.023640][ T3311] veth1_vlan: entered promiscuous mode [ 32.051017][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.070806][ T3311] veth0_macvtap: entered promiscuous mode [ 32.081772][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101636][ T170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.120961][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130317][ T3311] veth1_macvtap: entered promiscuous mode [ 32.145115][ T3320] veth0_vlan: entered promiscuous mode [ 32.152047][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.161404][ T3316] veth0_vlan: entered promiscuous mode [ 32.168611][ T3317] veth0_vlan: entered promiscuous mode [ 32.181042][ T3316] veth1_vlan: entered promiscuous mode [ 32.187853][ T3317] veth1_vlan: entered promiscuous mode [ 32.194578][ T3320] veth1_vlan: entered promiscuous mode [ 32.214138][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.214155][ T29] audit: type=1400 audit(1761487645.058:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.3oMuL3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.228264][ T3316] veth0_macvtap: entered promiscuous mode [ 32.250803][ T29] audit: type=1400 audit(1761487645.058:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.257753][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.273277][ T29] audit: type=1400 audit(1761487645.058:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.3oMuL3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.284626][ T3317] veth0_macvtap: entered promiscuous mode [ 32.305963][ T29] audit: type=1400 audit(1761487645.058:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.333924][ T29] audit: type=1400 audit(1761487645.058:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.3oMuL3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.335104][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.360708][ T29] audit: type=1400 audit(1761487645.058:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.3oMuL3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.360748][ T29] audit: type=1400 audit(1761487645.058:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.378657][ T3320] veth0_macvtap: entered promiscuous mode [ 32.419537][ T29] audit: type=1400 audit(1761487645.098:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.429313][ T3317] veth1_macvtap: entered promiscuous mode [ 32.443848][ T29] audit: type=1400 audit(1761487645.098:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=3891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.459473][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.481571][ T3316] veth1_macvtap: entered promiscuous mode [ 32.491536][ T3320] veth1_macvtap: entered promiscuous mode [ 32.501512][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.519811][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528580][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.539501][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.548368][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.558772][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.574999][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.590600][ T29] audit: type=1400 audit(1761487645.418:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.626989][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.641004][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.667069][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677639][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.685788][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.703565][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.726093][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.753379][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.776860][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.814240][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.824886][ T3492] loop0: detected capacity change from 0 to 512 [ 32.836630][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.850895][ T3492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.864096][ T3492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.888358][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.927720][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.948979][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.967766][ T3492] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.981250][ T170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.001564][ T3492] EXT4-fs (loop0): 1 truncate cleaned up [ 33.008713][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 33.022688][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.035266][ T3510] team0: Port device team_slave_1 removed [ 33.086425][ T3518] SELinux: policydb version 0 does not match my version range 15-35 [ 33.096225][ T3518] SELinux: failed to load policy [ 33.258171][ T3492] EXT4-fs (loop0): shut down requested (2) [ 33.295582][ T3492] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.304760][ T3492] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 33.325469][ T3492] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 33.356115][ T3537] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 33.363839][ T3537] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13'. [ 33.376092][ T3492] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 33.389093][ T3537] .`: renamed from bond0 (while UP) [ 33.465185][ T3543] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 33.482295][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.627330][ C0] hrtimer: interrupt took 27864 ns [ 33.661851][ T3558] loop1: detected capacity change from 0 to 1024 [ 33.668677][ T3558] ======================================================= [ 33.668677][ T3558] WARNING: The mand mount option has been deprecated and [ 33.668677][ T3558] and is ignored by this kernel. Remove the mand [ 33.668677][ T3558] option from the mount to silence this warning. [ 33.668677][ T3558] ======================================================= [ 33.733579][ T3558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.768571][ T3558] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.23: iget: bogus i_mode (1) [ 33.818279][ T3558] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.23: couldn't read orphan inode 11 (err -117) [ 33.830194][ T3567] loop0: detected capacity change from 0 to 4096 [ 33.832276][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.850310][ T3567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.853029][ T3558] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.23: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 33.882424][ T3558] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.23: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 33.918080][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.945607][ T3571] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 33.966302][ T111] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.966366][ T111] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.966479][ T111] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.966519][ T111] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.011982][ T3573] ip6t_srh: unknown srh match flags 4000 [ 34.048769][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.070880][ T3571] GUP no longer grows the stack in syz.3.27 (3571): 200000004000-20000000a000 (200000002000) [ 34.070935][ T3571] CPU: 0 UID: 0 PID: 3571 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.070983][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.070995][ T3571] Call Trace: [ 34.071001][ T3571] [ 34.071008][ T3571] __dump_stack+0x1d/0x30 [ 34.071042][ T3571] dump_stack_lvl+0xe8/0x140 [ 34.071063][ T3571] dump_stack+0x15/0x1b [ 34.071126][ T3571] __get_user_pages+0x1968/0x1ed0 [ 34.071175][ T3571] get_user_pages_remote+0x1d5/0x6c0 [ 34.071205][ T3571] __access_remote_vm+0x15c/0x590 [ 34.071269][ T3571] access_remote_vm+0x32/0x40 [ 34.071302][ T3571] proc_pid_cmdline_read+0x32b/0x6c0 [ 34.071334][ T3571] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 34.071401][ T3571] vfs_readv+0x3fb/0x690 [ 34.071446][ T3571] __x64_sys_preadv+0xfd/0x1c0 [ 34.071592][ T3571] x64_sys_call+0x282e/0x3000 [ 34.071668][ T3571] do_syscall_64+0xd2/0x200 [ 34.071724][ T3571] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.071754][ T3571] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.071843][ T3571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.071872][ T3571] RIP: 0033:0x7f63bb8defc9 [ 34.071894][ T3571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.071917][ T3571] RSP: 002b:00007f63ba347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 34.072060][ T3571] RAX: ffffffffffffffda RBX: 00007f63bbb35fa0 RCX: 00007f63bb8defc9 [ 34.072078][ T3571] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b [ 34.072094][ T3571] RBP: 00007f63bb961f91 R08: 0000000000000000 R09: 0000000000000000 [ 34.072110][ T3571] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 34.072127][ T3571] R13: 00007f63bbb36038 R14: 00007f63bbb35fa0 R15: 00007fff64a4e718 [ 34.072146][ T3571] [ 34.102804][ T3581] loop3: detected capacity change from 0 to 512 [ 34.118098][ T3582] loop2: detected capacity change from 0 to 256 [ 34.151089][ T3581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.492221][ T3593] FAULT_INJECTION: forcing a failure. [ 34.492221][ T3593] name failslab, interval 1, probability 0, space 0, times 1 [ 34.505061][ T3593] CPU: 1 UID: 0 PID: 3593 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.505091][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.505106][ T3593] Call Trace: [ 34.505115][ T3593] [ 34.505122][ T3593] __dump_stack+0x1d/0x30 [ 34.505243][ T3593] dump_stack_lvl+0xe8/0x140 [ 34.505269][ T3593] dump_stack+0x15/0x1b [ 34.505286][ T3593] should_fail_ex+0x265/0x280 [ 34.505382][ T3593] should_failslab+0x8c/0xb0 [ 34.505419][ T3593] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 34.505505][ T3593] ? __alloc_skb+0x101/0x320 [ 34.505537][ T3593] __alloc_skb+0x101/0x320 [ 34.505562][ T3593] ? audit_log_start+0x342/0x720 [ 34.505651][ T3593] audit_log_start+0x3a0/0x720 [ 34.505673][ T3593] audit_seccomp+0x48/0x100 [ 34.505706][ T3593] ? __seccomp_filter+0x82d/0x1250 [ 34.505734][ T3593] __seccomp_filter+0x83e/0x1250 [ 34.505774][ T3593] ? _raw_spin_unlock+0x26/0x50 [ 34.505809][ T3593] __secure_computing+0x82/0x150 [ 34.505879][ T3593] syscall_trace_enter+0xcf/0x1e0 [ 34.505983][ T3593] do_syscall_64+0xac/0x200 [ 34.506031][ T3593] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.506136][ T3593] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.506167][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.506187][ T3593] RIP: 0033:0x7f127595d9dc [ 34.506201][ T3593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 34.506222][ T3593] RSP: 002b:00007f12743bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.506285][ T3593] RAX: ffffffffffffffda RBX: 00007f1275bb5fa0 RCX: 00007f127595d9dc [ 34.506301][ T3593] RDX: 000000000000000f RSI: 00007f12743bf0a0 RDI: 0000000000000003 [ 34.506316][ T3593] RBP: 00007f12743bf090 R08: 0000000000000000 R09: 0000000000000000 [ 34.506332][ T3593] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 34.506347][ T3593] R13: 00007f1275bb6038 R14: 00007f1275bb5fa0 R15: 00007ffc21e8dd78 [ 34.506404][ T3593] [ 34.900853][ T3607] netlink: 'syz.2.40': attribute type 6 has an invalid length. [ 34.968186][ T3607] loop2: detected capacity change from 0 to 512 [ 34.975563][ T3607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.997675][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.007305][ T3607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.015848][ T3607] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.054017][ T3607] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.40: Allocating blocks 41-42 which overlap fs metadata [ 35.099912][ T3607] EXT4-fs (loop2): Remounting filesystem read-only [ 35.117235][ T3607] EXT4-fs (loop2): 1 truncate cleaned up [ 35.123430][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.138017][ T3619] Illegal XDP return value 28094520 on prog (id 30) dev N/A, expect packet loss! [ 35.169358][ T3607] Zero length message leads to an empty skb [ 35.188386][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.206929][ T3607] syz.2.40 (3607) used greatest stack depth: 9952 bytes left [ 35.240970][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.248104][ T3624] SELinux: policydb version 0 does not match my version range 15-35 [ 35.268290][ T3624] SELinux: failed to load policy [ 35.338987][ T3631] loop3: detected capacity change from 0 to 512 [ 35.388122][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.389756][ T3637] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 35.408540][ T3642] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 35.421775][ T3631] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.438235][ T3631] EXT4-fs (loop3): shut down requested (0) [ 35.457126][ T3631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 35.467029][ T3637] batman_adv: batadv0: Adding interface: veth3 [ 35.473325][ T3637] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.498545][ T3637] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 35.551444][ T3648] loop2: detected capacity change from 0 to 512 [ 35.560456][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.575956][ T3648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.626303][ T3642] batman_adv: batadv0: Adding interface: veth5 [ 35.632585][ T3642] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.658138][ T3642] batman_adv: batadv0: Not using interface veth5 (retrying later): interface not active [ 35.702940][ T3648] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 35.744540][ T3651] xt_CT: No such helper "snmp_trap" [ 35.758699][ T3648] EXT4-fs (loop2): 1 truncate cleaned up [ 35.775390][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.924835][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.003942][ T3678] loop2: detected capacity change from 0 to 512 [ 36.030425][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.038369][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.046257][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.054150][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.062038][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.070099][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.077890][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.085856][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.093773][ T3687] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 36.120770][ T3678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.137708][ T3678] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.154249][ T3678] EXT4-fs (loop2): shut down requested (0) [ 36.162856][ T3678] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.210201][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.258221][ T3703] loop2: detected capacity change from 0 to 512 [ 36.282667][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.299097][ T3703] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.313883][ T3697] loop0: detected capacity change from 0 to 8192 [ 36.331037][ T3703] EXT4-fs (loop2): shut down requested (0) [ 36.339957][ T3703] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.360336][ T3697] loop0: p1 p2 p3 p4 [ 36.364571][ T3697] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 36.381004][ T3697] loop0: p2 start 4293394688 is beyond EOD, truncated [ 36.387910][ T3697] loop0: p3 start 150994944 is beyond EOD, truncated [ 36.394702][ T3697] loop0: p4 size 50331648 extends beyond EOD, truncated [ 36.402609][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.416849][ T3702] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 36.493909][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 36.506583][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 36.530663][ T3713] loop0: detected capacity change from 0 to 8192 [ 36.555198][ T3718] loop4: detected capacity change from 0 to 512 [ 36.603259][ T3718] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.606899][ T3724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 36.649572][ T3718] EXT4-fs (loop4): mount failed [ 36.831291][ T3739] SELinux: policydb version 0 does not match my version range 15-35 [ 36.840389][ T3739] SELinux: failed to load policy [ 36.882924][ T3743] loop4: detected capacity change from 0 to 512 [ 36.908591][ T3743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.921623][ T3743] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.936458][ T3743] EXT4-fs (loop4): shut down requested (0) [ 36.948409][ T3743] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 37.015676][ T3750] loop3: detected capacity change from 0 to 512 [ 37.022786][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.047730][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.052271][ T3754] loop4: detected capacity change from 0 to 1024 [ 37.066794][ T3750] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.068942][ T3754] EXT4-fs: inline encryption not supported [ 37.083395][ T3754] EXT4-fs: Ignoring removed i_version option [ 37.085468][ T3750] EXT4-fs (loop3): shut down requested (0) [ 37.096636][ T3754] EXT4-fs: Ignoring removed orlov option [ 37.117209][ T3750] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 37.127041][ T3754] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 37.139637][ T3756] binfmt_misc: register: failed to install interpreter file ./file0 [ 37.156740][ T3754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.175880][ T3754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.186952][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.311618][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 37.311646][ T29] audit: type=1326 audit(1761487650.158:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.96" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5effa6efc9 code=0x0 [ 37.331126][ T3771] FAULT_INJECTION: forcing a failure. [ 37.331126][ T3771] name failslab, interval 1, probability 0, space 0, times 0 [ 37.354115][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.354146][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.354158][ T3771] Call Trace: [ 37.354164][ T3771] [ 37.354171][ T3771] __dump_stack+0x1d/0x30 [ 37.354193][ T3771] dump_stack_lvl+0xe8/0x140 [ 37.354212][ T3771] dump_stack+0x15/0x1b [ 37.354234][ T3771] should_fail_ex+0x265/0x280 [ 37.354257][ T3771] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 37.354284][ T3771] should_failslab+0x8c/0xb0 [ 37.354316][ T3771] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 37.354350][ T3771] ? shmem_alloc_inode+0x34/0x50 [ 37.354377][ T3771] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 37.354403][ T3771] shmem_alloc_inode+0x34/0x50 [ 37.354422][ T3771] alloc_inode+0x40/0x170 [ 37.354447][ T3771] new_inode+0x1d/0xe0 [ 37.354478][ T3771] shmem_get_inode+0x244/0x750 [ 37.354505][ T3771] __shmem_file_setup+0x158/0x210 [ 37.354523][ T3771] shmem_zero_setup+0x63/0xd0 [ 37.354541][ T3771] mmap_region+0xf54/0x1620 [ 37.354620][ T3771] do_mmap+0x9b3/0xbe0 [ 37.354647][ T3771] vm_mmap_pgoff+0x17a/0x2e0 [ 37.354685][ T3771] ksys_mmap_pgoff+0xc2/0x310 [ 37.354701][ T3771] ? __x64_sys_mmap+0x49/0x70 [ 37.354724][ T3771] x64_sys_call+0x14a3/0x3000 [ 37.354749][ T3771] do_syscall_64+0xd2/0x200 [ 37.354771][ T3771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.354797][ T3771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.354829][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.354854][ T3771] RIP: 0033:0x7f9544b9efc9 [ 37.354880][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.354902][ T3771] RSP: 002b:00007f95435ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 37.354924][ T3771] RAX: ffffffffffffffda RBX: 00007f9544df5fa0 RCX: 00007f9544b9efc9 [ 37.354939][ T3771] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 37.354953][ T3771] RBP: 00007f95435ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 37.354964][ T3771] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 37.354978][ T3771] R13: 00007f9544df6038 R14: 00007f9544df5fa0 R15: 00007ffd6716fc48 [ 37.355001][ T3771] [ 37.610371][ T3773] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 37.616961][ T3773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 37.625392][ T3773] vhci_hcd vhci_hcd.0: Device attached [ 37.651741][ T29] audit: type=1326 audit(1761487650.498:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.737341][ T29] audit: type=1326 audit(1761487650.518:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.760800][ T29] audit: type=1326 audit(1761487650.518:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.784182][ T29] audit: type=1326 audit(1761487650.558:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.807630][ T29] audit: type=1326 audit(1761487650.558:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.831320][ T29] audit: type=1326 audit(1761487650.558:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.855000][ T29] audit: type=1326 audit(1761487650.558:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.878342][ T29] audit: type=1326 audit(1761487650.558:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 37.901970][ T29] audit: type=1326 audit(1761487650.558:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 38.264456][ T3796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 38.465127][ T3804] loop0: detected capacity change from 0 to 128 [ 38.478559][ T3803] loop1: detected capacity change from 0 to 256 [ 38.491052][ T3804] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.563910][ T3804] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.619614][ T3806] loop1: detected capacity change from 0 to 1024 [ 38.651030][ T3806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.674783][ T3806] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.705937][ T3806] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.116: inode has both inline data and extents flags [ 38.733562][ T3806] EXT4-fs (loop1): Remounting filesystem read-only [ 38.783309][ T3806] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 38.791132][ T3806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.116'. [ 38.817458][ T3786] loop2: detected capacity change from 0 to 4096 [ 38.867944][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.910325][ T147] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.939163][ T36] usb 6-1: SetAddress Request (2) to port 0 [ 38.945172][ T36] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 39.019496][ T3818] FAULT_INJECTION: forcing a failure. [ 39.019496][ T3818] name failslab, interval 1, probability 0, space 0, times 0 [ 39.032449][ T3818] CPU: 1 UID: 0 PID: 3818 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.032479][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.032495][ T3818] Call Trace: [ 39.032503][ T3818] [ 39.032511][ T3818] __dump_stack+0x1d/0x30 [ 39.032590][ T3818] dump_stack_lvl+0xe8/0x140 [ 39.032618][ T3818] dump_stack+0x15/0x1b [ 39.032640][ T3818] should_fail_ex+0x265/0x280 [ 39.032659][ T3818] should_failslab+0x8c/0xb0 [ 39.032687][ T3818] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 39.032803][ T3818] ? sidtab_sid2str_get+0xa0/0x130 [ 39.032843][ T3818] ? skb_put+0xa9/0xf0 [ 39.032942][ T3818] kmemdup_noprof+0x2b/0x70 [ 39.032977][ T3818] sidtab_sid2str_get+0xa0/0x130 [ 39.033029][ T3818] security_sid_to_context_core+0x1eb/0x2e0 [ 39.033071][ T3818] security_sid_to_context+0x27/0x40 [ 39.033110][ T3818] avc_audit_post_callback+0x9d/0x520 [ 39.033183][ T3818] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 39.033287][ T3818] common_lsm_audit+0x1bb/0x230 [ 39.033378][ T3818] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 39.033426][ T3818] slow_avc_audit+0x104/0x140 [ 39.033474][ T3818] avc_has_perm+0x13a/0x180 [ 39.033569][ T3818] selinux_socket_sendmsg+0x175/0x1b0 [ 39.033658][ T3818] security_socket_sendmsg+0x48/0x80 [ 39.033691][ T3818] __sock_sendmsg+0x30/0x180 [ 39.033723][ T3818] ____sys_sendmsg+0x345/0x4e0 [ 39.033790][ T3818] ___sys_sendmsg+0x17b/0x1d0 [ 39.033905][ T3818] __sys_sendmmsg+0x178/0x300 [ 39.033964][ T3818] __x64_sys_sendmmsg+0x57/0x70 [ 39.033991][ T3818] x64_sys_call+0x1c4a/0x3000 [ 39.034016][ T3818] do_syscall_64+0xd2/0x200 [ 39.034041][ T3818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.034078][ T3818] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.034143][ T3818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.034171][ T3818] RIP: 0033:0x7f127595efc9 [ 39.034188][ T3818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.034234][ T3818] RSP: 002b:00007f12743bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 39.034323][ T3818] RAX: ffffffffffffffda RBX: 00007f1275bb5fa0 RCX: 00007f127595efc9 [ 39.034340][ T3818] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 39.034356][ T3818] RBP: 00007f12743bf090 R08: 0000000000000000 R09: 0000000000000000 [ 39.034367][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.034379][ T3818] R13: 00007f1275bb6038 R14: 00007f1275bb5fa0 R15: 00007ffc21e8dd78 [ 39.034417][ T3818] [ 39.369476][ T3786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.495387][ T3834] loop1: detected capacity change from 0 to 256 [ 39.540631][ T3775] vhci_hcd: connection reset by peer [ 39.546372][ T170] vhci_hcd: stop threads [ 39.547784][ T3839] loop0: detected capacity change from 0 to 512 [ 39.550785][ T170] vhci_hcd: release socket [ 39.550801][ T170] vhci_hcd: disconnect device [ 39.569415][ T3839] EXT4-fs (loop0): Invalid log block size: 7 [ 39.617362][ T3843] loop3: detected capacity change from 0 to 512 [ 39.642078][ T3845] FAULT_INJECTION: forcing a failure. [ 39.642078][ T3845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.655496][ T3845] CPU: 0 UID: 0 PID: 3845 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.655539][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.655551][ T3845] Call Trace: [ 39.655586][ T3845] [ 39.655596][ T3845] __dump_stack+0x1d/0x30 [ 39.655688][ T3845] dump_stack_lvl+0xe8/0x140 [ 39.655714][ T3845] dump_stack+0x15/0x1b [ 39.655736][ T3845] should_fail_ex+0x265/0x280 [ 39.655760][ T3845] should_fail+0xb/0x20 [ 39.655775][ T3845] should_fail_usercopy+0x1a/0x20 [ 39.655812][ T3845] _copy_to_user+0x20/0xa0 [ 39.655844][ T3845] simple_read_from_buffer+0xb5/0x130 [ 39.655877][ T3845] proc_fail_nth_read+0x10e/0x150 [ 39.655917][ T3845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 39.656027][ T3845] vfs_read+0x1a8/0x770 [ 39.656055][ T3845] ? __rcu_read_unlock+0x4f/0x70 [ 39.656122][ T3845] ? __fget_files+0x184/0x1c0 [ 39.656160][ T3845] ksys_read+0xda/0x1a0 [ 39.656192][ T3845] __x64_sys_read+0x40/0x50 [ 39.656264][ T3845] x64_sys_call+0x27c0/0x3000 [ 39.656285][ T3845] do_syscall_64+0xd2/0x200 [ 39.656307][ T3845] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.656341][ T3845] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.656453][ T3845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.656474][ T3845] RIP: 0033:0x7f127595d9dc [ 39.656489][ T3845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 39.656511][ T3845] RSP: 002b:00007f12743bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.656574][ T3845] RAX: ffffffffffffffda RBX: 00007f1275bb5fa0 RCX: 00007f127595d9dc [ 39.656586][ T3845] RDX: 000000000000000f RSI: 00007f12743bf0a0 RDI: 0000000000000004 [ 39.656641][ T3845] RBP: 00007f12743bf090 R08: 0000000000000000 R09: 0000000000000000 [ 39.656656][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.656671][ T3845] R13: 00007f1275bb6038 R14: 00007f1275bb5fa0 R15: 00007ffc21e8dd78 [ 39.656703][ T3845] [ 39.859020][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.873909][ T3843] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.891239][ T3849] loop0: detected capacity change from 0 to 512 [ 39.900675][ T3843] EXT4-fs (loop3): shut down requested (0) [ 39.917300][ T3843] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 39.923030][ T3849] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.941359][ T3849] EXT4-fs (loop0): mount failed [ 39.946829][ T3854] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 39.954646][ T3854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.133'. [ 39.984488][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.077637][ T3868] SELinux: policydb version 0 does not match my version range 15-35 [ 40.086255][ T3868] SELinux: failed to load policy [ 40.180097][ T3879] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.143'. [ 40.216074][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.283697][ T3888] loop3: detected capacity change from 0 to 4096 [ 40.319399][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.343625][ T3897] loop2: detected capacity change from 0 to 512 [ 40.371469][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.388581][ T3897] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.417857][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.473905][ T3897] EXT4-fs (loop2): shut down requested (0) [ 40.488370][ T3916] loop0: detected capacity change from 0 to 512 [ 40.502550][ T3897] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 40.520568][ T3916] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.536300][ T3916] EXT4-fs (loop0): mount failed [ 40.556593][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.709734][ T3932] loop3: detected capacity change from 0 to 512 [ 40.735252][ T3932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.755681][ T3936] loop2: detected capacity change from 0 to 128 [ 40.764530][ T3929] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 40.776585][ T3936] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.789629][ T3932] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.837181][ T3936] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.899987][ T170] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.928782][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.957392][ T3948] FAULT_INJECTION: forcing a failure. [ 40.957392][ T3948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.957428][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.957452][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.957464][ T3948] Call Trace: [ 40.957470][ T3948] [ 40.957542][ T3948] __dump_stack+0x1d/0x30 [ 40.957570][ T3948] dump_stack_lvl+0xe8/0x140 [ 40.957626][ T3948] dump_stack+0x15/0x1b [ 40.957652][ T3948] should_fail_ex+0x265/0x280 [ 40.957670][ T3948] should_fail+0xb/0x20 [ 40.957685][ T3948] should_fail_usercopy+0x1a/0x20 [ 40.957709][ T3948] _copy_from_iter+0xd2/0xe80 [ 40.957814][ T3948] ? __build_skb_around+0x1ab/0x200 [ 40.957847][ T3948] ? __alloc_skb+0x223/0x320 [ 40.957885][ T3948] netlink_sendmsg+0x471/0x6b0 [ 40.957915][ T3948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.957939][ T3948] __sock_sendmsg+0x145/0x180 [ 40.958005][ T3948] ____sys_sendmsg+0x31e/0x4e0 [ 40.958047][ T3948] ___sys_sendmsg+0x17b/0x1d0 [ 40.958105][ T3948] __x64_sys_sendmsg+0xd4/0x160 [ 40.958228][ T3948] x64_sys_call+0x191e/0x3000 [ 40.958257][ T3948] do_syscall_64+0xd2/0x200 [ 40.958279][ T3948] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.958367][ T3948] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.958399][ T3948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.958430][ T3948] RIP: 0033:0x7f127595efc9 [ 40.958445][ T3948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.958466][ T3948] RSP: 002b:00007f127439e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.958487][ T3948] RAX: ffffffffffffffda RBX: 00007f1275bb6090 RCX: 00007f127595efc9 [ 40.958550][ T3948] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 40.958563][ T3948] RBP: 00007f127439e090 R08: 0000000000000000 R09: 0000000000000000 [ 40.958579][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.958593][ T3948] R13: 00007f1275bb6128 R14: 00007f1275bb6090 R15: 00007ffc21e8dd78 [ 40.958617][ T3948] [ 40.966820][ T3943] syzkaller0: entered promiscuous mode [ 41.060079][ T3951] loop0: detected capacity change from 0 to 1024 [ 41.062820][ T3943] syzkaller0: entered allmulticast mode [ 41.068926][ T3951] EXT4-fs: inline encryption not supported [ 41.074900][ T3953] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 41.077190][ T3951] EXT4-fs: Ignoring removed i_version option [ 41.081881][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 41.093006][ T3949] loop2: detected capacity change from 0 to 128 [ 41.233470][ T3951] EXT4-fs: Ignoring removed orlov option [ 41.254908][ T3949] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.267872][ T3949] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.270455][ T3951] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 41.307888][ T3947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 41.314514][ T3947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.322175][ T3947] vhci_hcd vhci_hcd.0: Device attached [ 41.333557][ T3958] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 41.340783][ T170] vhci_hcd: stop threads [ 41.345149][ T170] vhci_hcd: release socket [ 41.349605][ T170] vhci_hcd: disconnect device [ 41.377743][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.404869][ T3963] SELinux: policydb version 0 does not match my version range 15-35 [ 41.412781][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.421124][ T3963] SELinux: failed to load policy [ 41.432516][ T3965] loop3: detected capacity change from 0 to 512 [ 41.449600][ T3965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.463037][ T3965] EXT4-fs (loop3): 1 truncate cleaned up [ 41.469608][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.491375][ T3965] ieee802154 phy0 wpan0: encryption failed: -22 [ 41.514223][ T3965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 41.573403][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.643043][ T3980] loop4: detected capacity change from 0 to 128 [ 41.650233][ T3980] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.665574][ T3980] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.711161][ T111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.761749][ T3986] sctp: [Deprecated]: syz.4.179 (pid 3986) Use of int in maxseg socket option. [ 41.761749][ T3986] Use struct sctp_assoc_value instead [ 41.798383][ T3990] loop4: detected capacity change from 0 to 512 [ 41.807013][ T3990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 41.821272][ T3990] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 41.830599][ T3990] EXT4-fs (loop4): 2 truncates cleaned up [ 41.836929][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.852662][ T3990] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm +}[@: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 42.011590][ T3990] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm +}[@: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 42.040908][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.085455][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.117902][ T3999] loop2: detected capacity change from 0 to 128 [ 42.167376][ T4003] loop2: detected capacity change from 0 to 128 [ 42.350585][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 42.350602][ T29] audit: type=1326 audit(1761487655.198:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.381603][ T29] audit: type=1326 audit(1761487655.228:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.405019][ T29] audit: type=1326 audit(1761487655.228:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.430955][ T29] audit: type=1326 audit(1761487655.248:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.454471][ T29] audit: type=1326 audit(1761487655.248:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 42.456587][ T4003] IPVS: set_ctl: invalid protocol: 64 0.32.0.0:65535 [ 42.478082][ T29] audit: type=1326 audit(1761487655.248:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.478191][ T29] audit: type=1326 audit(1761487655.248:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.531783][ T29] audit: type=1326 audit(1761487655.248:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.531820][ T29] audit: type=1326 audit(1761487655.248:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.531870][ T29] audit: type=1326 audit(1761487655.248:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f033fefc9 code=0x7ffc0000 [ 42.555756][ T4008] loop4: detected capacity change from 0 to 1024 [ 42.556102][ T4008] EXT4-fs: Ignoring removed orlov option [ 42.608135][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.660143][ T4014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.697923][ T4020] lo speed is unknown, defaulting to 1000 [ 42.707826][ T4020] lo speed is unknown, defaulting to 1000 [ 42.719475][ T4020] lo speed is unknown, defaulting to 1000 [ 42.725392][ T4022] loop2: detected capacity change from 0 to 512 [ 42.752854][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.787245][ T4020] infiniband sz1: set active [ 42.792165][ T4020] infiniband sz1: added lo [ 42.796896][ T3399] lo speed is unknown, defaulting to 1000 [ 42.828222][ T4020] RDS/IB: sz1: added [ 42.832658][ T4020] smc: adding ib device sz1 with port count 1 [ 42.839048][ T4020] smc: ib device sz1 port 1 has no pnetid [ 42.845197][ T3399] lo speed is unknown, defaulting to 1000 [ 42.859523][ T4020] lo speed is unknown, defaulting to 1000 [ 42.869490][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.878765][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.892011][ T4014] loop3: detected capacity change from 0 to 1024 [ 42.909670][ T4020] lo speed is unknown, defaulting to 1000 [ 42.926042][ T4014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.948613][ T4014] can: request_module (can-proto-0) failed. [ 42.955312][ T4020] lo speed is unknown, defaulting to 1000 [ 42.994437][ T4020] lo speed is unknown, defaulting to 1000 [ 43.048200][ T4020] lo speed is unknown, defaulting to 1000 [ 43.068901][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.081153][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.154780][ T4037] loop4: detected capacity change from 0 to 256 [ 43.200342][ T4040] SELinux: policydb version 0 does not match my version range 15-35 [ 43.208683][ T4040] SELinux: failed to load policy [ 43.243428][ T4042] loop1: detected capacity change from 0 to 512 [ 43.280241][ T4043] loop3: detected capacity change from 0 to 512 [ 43.297802][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.335795][ T4042] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.350257][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.366653][ T4043] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.379953][ T4042] EXT4-fs (loop1): shut down requested (0) [ 43.388095][ T4042] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 43.457387][ T4053] loop4: detected capacity change from 0 to 512 [ 43.481009][ T4043] EXT4-fs (loop3): shut down requested (0) [ 43.488289][ T4053] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.513917][ T4043] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.523395][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.532772][ T4053] EXT4-fs (loop4): mount failed [ 43.567034][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.595721][ T4057] : renamed from vlan0 (while UP) [ 43.622320][ T4059] loop4: detected capacity change from 0 to 512 [ 43.675172][ T4057] lo speed is unknown, defaulting to 1000 [ 43.685180][ T4059] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.714194][ T4059] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.770276][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.201: corrupted inode contents [ 43.790230][ T4059] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.201: mark_inode_dirty error [ 43.812896][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.201: corrupted inode contents [ 43.855475][ T4059] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.201: mark_inode_dirty error [ 43.871425][ T4059] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.201: mark inode dirty (error -117) [ 43.884754][ T4059] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 43.893935][ T4059] EXT4-fs (loop4): 1 orphan inode deleted [ 43.894436][ T4068] loop1: detected capacity change from 0 to 128 [ 43.919973][ T4068] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.939244][ T4059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.955406][ T4068] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.005726][ T147] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.049527][ T36] usb 6-1: device descriptor read/8, error -110 [ 44.088267][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.133730][ T4074] loop0: detected capacity change from 0 to 1024 [ 44.141599][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.159265][ T36] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 44.168854][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.181637][ T36] usb 6-1: enqueue for inactive port 0 [ 44.187279][ T36] usb 6-1: enqueue for inactive port 0 [ 44.192976][ T36] usb 6-1: enqueue for inactive port 0 [ 44.238652][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.306921][ T4090] loop4: detected capacity change from 0 to 512 [ 44.330659][ T4090] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.347413][ T4090] EXT4-fs (loop4): mount failed [ 44.383629][ T4100] loop0: detected capacity change from 0 to 128 [ 44.394499][ T4100] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.407914][ T4100] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.460422][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.591396][ T4119] loop4: detected capacity change from 0 to 512 [ 44.653537][ T4123] loop0: detected capacity change from 0 to 128 [ 44.661399][ T4120] loop1: detected capacity change from 0 to 1024 [ 44.678812][ T4123] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.693398][ T4125] ip6t_srh: unknown srh match flags 4000 [ 44.698693][ T4120] EXT4-fs: Ignoring removed nobh option [ 44.728130][ T4120] EXT4-fs: dax option not supported [ 44.735499][ T4123] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.809963][ T147] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.096682][ T4153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.233'. [ 45.111201][ T4156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 45.142101][ T4158] loop1: detected capacity change from 0 to 256 [ 45.155349][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 45.205486][ T4166] SELinux: policydb version 0 does not match my version range 15-35 [ 45.209494][ T36] usb usb6-port1: attempt power cycle [ 45.213939][ T4166] SELinux: failed to load policy [ 45.245676][ T4168] SELinux: policydb version 0 does not match my version range 15-35 [ 45.257973][ T4168] SELinux: failed to load policy [ 45.267327][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 45.422647][ T4185] loop4: detected capacity change from 0 to 128 [ 45.450759][ T4190] loop0: detected capacity change from 0 to 256 [ 45.471875][ T4185] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 45.728269][ T4194] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 45.740161][ T4194] bond1 (unregistering): Released all slaves [ 45.838040][ T4197] lo speed is unknown, defaulting to 1000 [ 46.518120][ T4204] usb usb1: usbfs: process 4204 (syz.1.251) did not claim interface 4 before use [ 46.528181][ T4202] SELinux: policydb version 0 does not match my version range 15-35 [ 46.545443][ T4210] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 46.553325][ T4210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.250'. [ 46.578397][ T4202] SELinux: failed to load policy [ 46.583647][ T4207] SELinux: policydb version 0 does not match my version range 15-35 [ 46.598045][ T4207] SELinux: failed to load policy [ 46.696276][ T4212] FAULT_INJECTION: forcing a failure. [ 46.696276][ T4212] name failslab, interval 1, probability 0, space 0, times 0 [ 46.709055][ T4212] CPU: 1 UID: 0 PID: 4212 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.709167][ T4212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.709184][ T4212] Call Trace: [ 46.709192][ T4212] [ 46.709199][ T4212] __dump_stack+0x1d/0x30 [ 46.709222][ T4212] dump_stack_lvl+0xe8/0x140 [ 46.709320][ T4212] dump_stack+0x15/0x1b [ 46.709340][ T4212] should_fail_ex+0x265/0x280 [ 46.709360][ T4212] should_failslab+0x8c/0xb0 [ 46.709432][ T4212] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 46.709469][ T4212] ? __alloc_skb+0x101/0x320 [ 46.709497][ T4212] __alloc_skb+0x101/0x320 [ 46.709536][ T4212] xfrm_send_acquire+0xb3/0x840 [ 46.709645][ T4212] km_query+0x60/0xc0 [ 46.709677][ T4212] xfrm_state_find+0x24c7/0x2fa0 [ 46.709704][ T4212] ? __find_rr_leaf+0x32e/0x470 [ 46.709733][ T4212] xfrm_resolve_and_create_bundle+0x575/0x1f30 [ 46.709875][ T4212] ? ip6_pol_route_output+0x40/0x50 [ 46.709910][ T4212] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 46.709947][ T4212] ? xfrm_expand_policies+0x24a/0x2b0 [ 46.709997][ T4212] xfrm_lookup_with_ifid+0x1da/0x1360 [ 46.710089][ T4212] ? xas_load+0x413/0x430 [ 46.710166][ T4212] xfrm_lookup_route+0x3a/0x110 [ 46.710258][ T4212] ip6_dst_lookup_flow+0x97/0xc0 [ 46.710284][ T4212] rawv6_sendmsg+0xa29/0xf70 [ 46.710328][ T4212] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 46.710366][ T4212] inet_sendmsg+0xc5/0xd0 [ 46.710429][ T4212] __sock_sendmsg+0x102/0x180 [ 46.710528][ T4212] ____sys_sendmsg+0x345/0x4e0 [ 46.710615][ T4212] ___sys_sendmsg+0x17b/0x1d0 [ 46.710658][ T4212] __sys_sendmmsg+0x178/0x300 [ 46.710686][ T4212] __x64_sys_sendmmsg+0x57/0x70 [ 46.710711][ T4212] x64_sys_call+0x1c4a/0x3000 [ 46.710768][ T4212] do_syscall_64+0xd2/0x200 [ 46.710784][ T4212] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.710854][ T4212] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.710894][ T4212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.710915][ T4212] RIP: 0033:0x7f127595efc9 [ 46.711014][ T4212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.711092][ T4212] RSP: 002b:00007f12743bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.711169][ T4212] RAX: ffffffffffffffda RBX: 00007f1275bb5fa0 RCX: 00007f127595efc9 [ 46.711181][ T4212] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000b [ 46.711195][ T4212] RBP: 00007f12743bf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.711210][ T4212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.711226][ T4212] R13: 00007f1275bb6038 R14: 00007f1275bb5fa0 R15: 00007ffc21e8dd78 [ 46.711320][ T4212] [ 46.984609][ T4210] dummy0: entered promiscuous mode [ 46.998377][ T4210] bridge0: port 3(dummy0) entered blocking state [ 47.004931][ T4210] bridge0: port 3(dummy0) entered disabled state [ 47.048666][ T4210] dummy0: entered allmulticast mode [ 47.056292][ T4210] bridge0: port 3(dummy0) entered blocking state [ 47.062719][ T4210] bridge0: port 3(dummy0) entered forwarding state [ 47.093420][ T4212] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 47.101274][ T4212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'. [ 47.114452][ T4223] loop3: detected capacity change from 0 to 164 [ 47.174863][ T4223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 47.199378][ T4212] dummy0: entered promiscuous mode [ 47.216764][ T4212] bridge0: port 3(dummy0) entered blocking state [ 47.223232][ T4212] bridge0: port 3(dummy0) entered disabled state [ 47.244407][ T4212] dummy0: entered allmulticast mode [ 47.264090][ T4212] bridge0: port 3(dummy0) entered blocking state [ 47.270536][ T4212] bridge0: port 3(dummy0) entered forwarding state [ 47.353869][ T4229] lo speed is unknown, defaulting to 1000 [ 47.360175][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 47.360190][ T29] audit: type=1326 audit(1761487660.198:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.397415][ T4231] loop1: detected capacity change from 0 to 512 [ 47.404150][ T4229] lo speed is unknown, defaulting to 1000 [ 47.412225][ T4229] lo speed is unknown, defaulting to 1000 [ 47.421678][ T4229] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.434625][ T4231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.452029][ T4231] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.464796][ T29] audit: type=1326 audit(1761487660.238:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.486584][ T4229] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.488731][ T29] audit: type=1326 audit(1761487660.238:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.501763][ T4229] lo speed is unknown, defaulting to 1000 [ 47.519139][ T29] audit: type=1326 audit(1761487660.238:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.525423][ T4229] lo speed is unknown, defaulting to 1000 [ 47.548356][ T29] audit: type=1326 audit(1761487660.238:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.554554][ T4229] lo speed is unknown, defaulting to 1000 [ 47.577646][ T29] audit: type=1326 audit(1761487660.238:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.583825][ T4229] lo speed is unknown, defaulting to 1000 [ 47.606915][ T29] audit: type=1326 audit(1761487660.238:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.625231][ T4229] lo speed is unknown, defaulting to 1000 [ 47.636482][ T29] audit: type=1326 audit(1761487660.238:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.636511][ T29] audit: type=1326 audit(1761487660.238:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.689227][ T29] audit: type=1326 audit(1761487660.238:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127595efc9 code=0x7ffc0000 [ 47.713947][ T36] usb usb6-port1: unable to enumerate USB device [ 47.718088][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.743199][ T4229] loop9: detected capacity change from 0 to 7 [ 47.751769][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.760471][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.760852][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.768777][ T3585] loop9: unable to read partition table [ 47.784056][ T4229] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.792148][ T4229] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.800078][ T4229] loop9: unable to read partition table [ 47.808668][ T4229] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.808668][ T4229] ) failed (rc=-5) [ 47.825217][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.839825][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.851605][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.875935][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.908884][ T3585] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.909425][ T4247] SELinux: policydb version 0 does not match my version range 15-35 [ 47.944534][ T4247] SELinux: failed to load policy [ 48.027384][ T4255] ip6t_srh: unknown srh match flags 4000 [ 48.041936][ T4251] tipc: Started in network mode [ 48.046887][ T4251] tipc: Node identity ac14140f, cluster identity 4711 [ 48.091427][ T4251] tipc: New replicast peer: 255.255.255.83 [ 48.097512][ T4251] tipc: Enabled bearer , priority 10 [ 48.185275][ T3399] kernel write not supported for file bpf-prog (pid: 3399 comm: kworker/0:4) [ 48.204593][ T4229] lo speed is unknown, defaulting to 1000 [ 48.237443][ T4266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 48.314853][ T4269] loop1: detected capacity change from 0 to 2048 [ 48.334447][ T4271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.366241][ T4229] lo speed is unknown, defaulting to 1000 [ 48.391928][ T4271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.423861][ T4235] loop0: detected capacity change from 0 to 512 [ 48.437752][ T4273] loop3: detected capacity change from 0 to 1024 [ 48.455472][ T4273] EXT4-fs: inline encryption not supported [ 48.461473][ T4273] EXT4-fs: Ignoring removed i_version option [ 48.468649][ T4273] EXT4-fs: Ignoring removed orlov option [ 48.497008][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.514697][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.552557][ T4284] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 48.580938][ T4284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.588287][ T4235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.606013][ T4271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.646922][ T4276] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 48.662386][ T4271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.731018][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.740475][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.749034][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.758071][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.772302][ T4296] loop1: detected capacity change from 0 to 128 [ 48.780722][ T4296] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.809253][ T4297] loop2: detected capacity change from 0 to 128 [ 48.816520][ T4296] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.841922][ T4297] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.857958][ T4297] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.880419][ T4299] tipc: Started in network mode [ 48.885357][ T4299] tipc: Node identity ac14140f, cluster identity 4711 [ 48.893647][ T4299] tipc: New replicast peer: 255.255.255.83 [ 48.899594][ T4299] tipc: Enabled bearer , priority 10 [ 48.941201][ T111] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.962424][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.993863][ T4302] loop1: detected capacity change from 0 to 1024 [ 49.005134][ T4303] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 49.010203][ T4302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.013003][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 49.020035][ T4302] EXT4-fs: inline encryption not supported [ 49.035076][ T4302] EXT4-fs: Ignoring removed i_version option [ 49.040831][ T4303] loop0: detected capacity change from 0 to 128 [ 49.056482][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.086928][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.098306][ T4303] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.116380][ T4303] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.159665][ T4305] loop2: detected capacity change from 0 to 512 [ 49.177184][ T4303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 49.183855][ T4303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.183976][ T4303] vhci_hcd vhci_hcd.0: Device attached [ 49.192919][ T4311] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 49.199612][ T12] vhci_hcd: stop threads [ 49.199624][ T12] vhci_hcd: release socket [ 49.199633][ T12] vhci_hcd: disconnect device [ 49.200625][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.219301][ T3399] tipc: Node number set to 2886997007 [ 49.221281][ T4305] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.288: bad orphan inode 11862016 [ 49.232441][ T4305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.232529][ T4305] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.233945][ T4305] FAULT_INJECTION: forcing a failure. [ 49.233945][ T4305] name failslab, interval 1, probability 0, space 0, times 0 [ 49.233979][ T4305] CPU: 0 UID: 0 PID: 4305 Comm: syz.2.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.234047][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.234060][ T4305] Call Trace: [ 49.234067][ T4305] [ 49.234077][ T4305] __dump_stack+0x1d/0x30 [ 49.234105][ T4305] dump_stack_lvl+0xe8/0x140 [ 49.234140][ T4305] dump_stack+0x15/0x1b [ 49.234159][ T4305] should_fail_ex+0x265/0x280 [ 49.234199][ T4305] should_failslab+0x8c/0xb0 [ 49.234230][ T4305] __kmalloc_noprof+0xa5/0x570 [ 49.234257][ T4305] ? ext4_find_extent+0x16b/0x7a0 [ 49.234288][ T4305] ext4_find_extent+0x16b/0x7a0 [ 49.234317][ T4305] ? __account_obj_stock+0x211/0x350 [ 49.234353][ T4305] ext4_ext_map_blocks+0x11f/0x38a0 [ 49.234419][ T4305] ? xas_load+0x413/0x430 [ 49.234452][ T4305] ? xas_load+0x413/0x430 [ 49.234492][ T4305] ? __xa_set_mark+0x160/0x1a0 [ 49.234679][ T4305] ? folio_mark_accessed+0x240/0x3a0 [ 49.234705][ T4305] ext4_map_query_blocks+0xa8/0x480 [ 49.234771][ T4305] ext4_map_blocks+0x330/0xd00 [ 49.234849][ T4305] ? __ext4_journal_start_sb+0x131/0x300 [ 49.234880][ T4305] ? __rcu_read_unlock+0x4f/0x70 [ 49.234914][ T4305] ext4_iomap_begin+0x88d/0xe00 [ 49.234944][ T4305] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 49.234969][ T4305] iomap_iter+0x332/0x730 [ 49.234998][ T4305] ? should_failslab+0x8c/0xb0 [ 49.235034][ T4305] __iomap_dio_rw+0x705/0x1240 [ 49.235075][ T4305] ? ext4_journal_check_start+0x11a/0x1b0 [ 49.235100][ T4305] iomap_dio_rw+0x40/0x90 [ 49.235133][ T4305] ext4_file_write_iter+0xb3a/0xf60 [ 49.235168][ T4305] do_iter_readv_writev+0x4a1/0x540 [ 49.235222][ T4305] vfs_writev+0x2df/0x8b0 [ 49.235261][ T4305] ? mutex_lock+0xd/0x30 [ 49.235297][ T4305] do_writev+0xe7/0x210 [ 49.235336][ T4305] __x64_sys_writev+0x45/0x50 [ 49.235400][ T4305] x64_sys_call+0x1e9a/0x3000 [ 49.235426][ T4305] do_syscall_64+0xd2/0x200 [ 49.235447][ T4305] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.235560][ T4305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.235610][ T4305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.235648][ T4305] RIP: 0033:0x7f1f033fefc9 [ 49.235694][ T4305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.235759][ T4305] RSP: 002b:00007f1f01e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 49.235785][ T4305] RAX: ffffffffffffffda RBX: 00007f1f03655fa0 RCX: 00007f1f033fefc9 [ 49.235803][ T4305] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 49.235820][ T4305] RBP: 00007f1f01e67090 R08: 0000000000000000 R09: 0000000000000000 [ 49.235835][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.235851][ T4305] R13: 00007f1f03656038 R14: 00007f1f03655fa0 R15: 00007fff538acba8 [ 49.235877][ T4305] [ 49.304175][ T4319] SELinux: policydb version 0 does not match my version range 15-35 [ 49.304224][ T4319] SELinux: failed to load policy [ 49.335178][ T4321] loop3: detected capacity change from 0 to 512 [ 49.367183][ T4321] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.449925][ T4329] SELinux: policydb version 0 does not match my version range 15-35 [ 49.457024][ T4321] EXT4-fs (loop3): mount failed [ 49.470204][ T4329] SELinux: failed to load policy [ 49.485239][ T4327] loop1: detected capacity change from 0 to 512 [ 49.523298][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.712432][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.743747][ T4339] loop4: detected capacity change from 0 to 128 [ 49.750961][ T4339] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.763632][ T4339] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.804669][ T4335] loop2: detected capacity change from 0 to 512 [ 49.848516][ T4335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.862173][ T4335] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.875633][ T4343] tmpfs: Unknown parameter 'mLave' [ 49.877431][ T4335] EXT4-fs (loop2): shut down requested (0) [ 49.890533][ T4335] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 49.918596][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.959982][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.019328][ T3478] tipc: Node number set to 2886997007 [ 50.080725][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 50.104955][ T4360] ip6t_srh: unknown srh match flags 4000 [ 50.282489][ T4349] loop4: detected capacity change from 0 to 512 [ 50.307682][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.347823][ T4349] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.301: bad orphan inode 11862016 [ 50.386736][ T4349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.404960][ T4377] loop2: detected capacity change from 0 to 128 [ 50.411871][ T4349] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.423761][ T4377] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.480129][ T4377] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.541479][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.569660][ T4379] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 50.610289][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.612357][ T4379] loop2: detected capacity change from 0 to 512 [ 50.647799][ T4379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm +}[@: error while reading EA inode 32 err=-116 [ 50.665316][ T4381] loop0: detected capacity change from 0 to 512 [ 50.679980][ T4379] EXT4-fs (loop2): Remounting filesystem read-only [ 50.697073][ T4379] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.705848][ T4381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.710394][ T4379] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 50.733506][ T4379] EXT4-fs (loop2): 1 orphan inode deleted [ 50.740254][ T4379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.752551][ T4381] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.759606][ T4379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.814063][ T4381] EXT4-fs (loop0): shut down requested (0) [ 50.839997][ T4381] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 50.855419][ T4379] loop2: detected capacity change from 0 to 2048 [ 50.901249][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.911708][ T4379] loop2: p1 < > p4 < > [ 50.922970][ T3004] loop2: p1 < > p4 < > [ 50.936866][ T4392] ip6t_srh: unknown srh match flags 4000 [ 50.956417][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 50.967505][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.999460][ T4395] FAULT_INJECTION: forcing a failure. [ 50.999460][ T4395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.000051][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.012654][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.012683][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.012698][ T4395] Call Trace: [ 51.012707][ T4395] [ 51.012718][ T4395] __dump_stack+0x1d/0x30 [ 51.012749][ T4395] dump_stack_lvl+0xe8/0x140 [ 51.012779][ T4395] dump_stack+0x15/0x1b [ 51.012826][ T4395] should_fail_ex+0x265/0x280 [ 51.012854][ T4395] should_fail+0xb/0x20 [ 51.012876][ T4395] should_fail_usercopy+0x1a/0x20 [ 51.012904][ T4395] _copy_from_iter+0xd2/0xe80 [ 51.012937][ T4395] ? alloc_pages_mpol+0x217/0x260 [ 51.012996][ T4395] ? alloc_pages_noprof+0x61/0x130 [ 51.013027][ T4395] copy_page_from_iter+0x178/0x2a0 [ 51.013061][ T4395] tun_get_user+0x679/0x26e0 [ 51.013107][ T4395] ? ref_tracker_alloc+0x1f2/0x2f0 [ 51.013161][ T4395] tun_chr_write_iter+0x15e/0x210 [ 51.013199][ T4395] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 51.013308][ T4395] vfs_write+0x52a/0x960 [ 51.013387][ T4395] ksys_write+0xda/0x1a0 [ 51.013431][ T4395] __x64_sys_write+0x40/0x50 [ 51.013542][ T4395] x64_sys_call+0x2802/0x3000 [ 51.013589][ T4395] do_syscall_64+0xd2/0x200 [ 51.013615][ T4395] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.013653][ T4395] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.013718][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.013747][ T4395] RIP: 0033:0x7f1f033fda7f [ 51.013767][ T4395] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 51.013792][ T4395] RSP: 002b:00007f1f01e67000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 51.013858][ T4395] RAX: ffffffffffffffda RBX: 00007f1f03655fa0 RCX: 00007f1f033fda7f [ 51.013873][ T4395] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 51.013890][ T4395] RBP: 00007f1f01e67090 R08: 0000000000000000 R09: 0000000000000000 [ 51.013907][ T4395] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 51.013924][ T4395] R13: 00007f1f03656038 R14: 00007f1f03655fa0 R15: 00007fff538acba8 [ 51.013948][ T4395] [ 51.086158][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 51.100691][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.117288][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.182624][ T4397] wireguard0: entered promiscuous mode [ 51.296942][ T4405] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 51.304827][ T4405] netlink: 156 bytes leftover after parsing attributes in process `syz.3.322'. [ 51.371741][ T4403] SELinux: policydb version 0 does not match my version range 15-35 [ 51.380922][ T4403] SELinux: failed to load policy [ 51.405732][ T4419] loop2: detected capacity change from 0 to 512 [ 51.414234][ T4417] loop3: detected capacity change from 0 to 512 [ 51.435841][ T4419] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.455457][ T4419] EXT4-fs (loop2): mount failed [ 51.469525][ T4426] loop4: detected capacity change from 0 to 512 [ 51.483262][ T4417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.527072][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.578216][ T4417] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.597854][ T4439] SELinux: policydb version 0 does not match my version range 15-35 [ 51.669441][ T4439] SELinux: failed to load policy [ 51.729263][ T4417] EXT4-fs (loop3): shut down requested (0) [ 51.748758][ T4417] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.896577][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.977947][ T4462] loop3: detected capacity change from 0 to 164 [ 52.028462][ T4462] netlink: 176 bytes leftover after parsing attributes in process `syz.3.336'. [ 52.192345][ T4471] SELinux: policydb version 0 does not match my version range 15-35 [ 52.236080][ T4471] SELinux: failed to load policy [ 52.250636][ T4473] ip6t_srh: unknown srh match flags 4000 [ 52.418160][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 52.418178][ T29] audit: type=1326 audit(1761487665.258:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.457305][ T4482] loop0: detected capacity change from 0 to 512 [ 52.471480][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.476462][ T29] audit: type=1326 audit(1761487665.258:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.484394][ T4482] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.507370][ T29] audit: type=1326 audit(1761487665.258:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.507407][ T29] audit: type=1326 audit(1761487665.258:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.564821][ T29] audit: type=1326 audit(1761487665.258:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.588201][ T29] audit: type=1326 audit(1761487665.258:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.611652][ T29] audit: type=1326 audit(1761487665.258:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.634995][ T29] audit: type=1326 audit(1761487665.258:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.658361][ T29] audit: type=1326 audit(1761487665.258:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.681817][ T29] audit: type=1326 audit(1761487665.258:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 52.716904][ T4482] EXT4-fs (loop0): shut down requested (0) [ 52.747778][ T4482] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 52.851276][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.895026][ T4490] SELinux: policydb version 0 does not match my version range 15-35 [ 52.932968][ T4490] SELinux: failed to load policy [ 52.974585][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 52.989812][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.099446][ T4504] ip6t_srh: unknown srh match flags 4000 [ 53.206677][ T4516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 53.216010][ T4511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 53.257027][ T4518] loop3: detected capacity change from 0 to 512 [ 53.288012][ T4518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.397104][ T4530] loop1: detected capacity change from 0 to 512 [ 53.417344][ T4530] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.433645][ T4530] EXT4-fs (loop1): mount failed [ 53.442134][ T4538] ip6t_srh: unknown srh match flags 4000 [ 53.509520][ T4544] SELinux: policydb version 0 does not match my version range 15-35 [ 53.541575][ T4547] process 'syz.0.371' launched './file0' with NULL argv: empty string added [ 53.550962][ T4542] loop1: detected capacity change from 0 to 4096 [ 53.558076][ T4544] SELinux: failed to load policy [ 53.570308][ T4542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.615472][ T4542] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 53.705163][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.706252][ T4558] loop4: detected capacity change from 0 to 512 [ 53.749569][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.776945][ T4558] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.796006][ T4558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.375: bg 0: block 104: invalid block bitmap [ 53.929343][ T4558] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 53.966863][ T4558] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.375: invalid indirect mapped block 1 (level 1) [ 54.013357][ T4558] EXT4-fs (loop4): 1 truncate cleaned up [ 54.028362][ T4558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.121564][ T4579] ip6t_srh: unknown srh match flags 4000 [ 54.364905][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 54.583959][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 54.593514][ T4590] netlink: 312 bytes leftover after parsing attributes in process `syz.3.385'. [ 54.884787][ T4596] loop3: detected capacity change from 0 to 128 [ 54.895084][ T4596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 54.903313][ T4596] System zones: 1-3, 19-19, 35-36 [ 54.909343][ T4596] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.164585][ T4617] loop4: detected capacity change from 0 to 128 [ 55.257584][ T4629] ip6t_srh: unknown srh match flags 4000 [ 55.271178][ T4631] loop1: detected capacity change from 0 to 512 [ 55.289367][ T4616] loop3: detected capacity change from 0 to 4096 [ 55.296533][ T4616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.325046][ T4631] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.359318][ T4631] EXT4-fs (loop1): mount failed [ 55.384569][ T4639] loop4: detected capacity change from 0 to 1024 [ 55.391892][ T4639] EXT4-fs: inline encryption not supported [ 55.397762][ T4639] EXT4-fs: Ignoring removed i_version option [ 55.407817][ T4639] EXT4-fs: Ignoring removed orlov option [ 55.436907][ T4639] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 55.478783][ T4639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.508614][ T4639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.560955][ T4646] loop1: detected capacity change from 0 to 1024 [ 55.570182][ T4646] EXT4-fs: inline encryption not supported [ 55.576050][ T4646] EXT4-fs: Ignoring removed i_version option [ 55.586522][ T4646] EXT4-fs: Ignoring removed orlov option [ 55.609865][ T4651] __nla_validate_parse: 2 callbacks suppressed [ 55.609880][ T4651] netlink: 124 bytes leftover after parsing attributes in process `syz.0.409'. [ 55.629541][ T4646] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 55.673842][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.682993][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.741069][ T4658] SELinux: policydb version 0 does not match my version range 15-35 [ 55.749347][ T4658] SELinux: failed to load policy [ 55.803312][ T4663] loop0: detected capacity change from 0 to 1024 [ 55.810574][ T4663] EXT4-fs: Ignoring removed bh option [ 55.816594][ T4663] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.870830][ T4663] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.880632][ T4663] SELinux: failed to load policy [ 55.880883][ T36] usb usb6-port1: attempt power cycle [ 55.911964][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.919589][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.927114][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.934698][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.095144][ T4679] SELinux: policydb version 0 does not match my version range 15-35 [ 56.103648][ T4679] SELinux: failed to load policy [ 56.151336][ T4681] tipc: New replicast peer: 255.255.255.255 [ 56.157678][ T4681] tipc: Enabled bearer , priority 10 [ 56.169581][ T4683] FAULT_INJECTION: forcing a failure. [ 56.169581][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.182831][ T4683] CPU: 1 UID: 0 PID: 4683 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.182866][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.182895][ T4683] Call Trace: [ 56.182903][ T4683] [ 56.182912][ T4683] __dump_stack+0x1d/0x30 [ 56.182941][ T4683] dump_stack_lvl+0xe8/0x140 [ 56.182968][ T4683] dump_stack+0x15/0x1b [ 56.182991][ T4683] should_fail_ex+0x265/0x280 [ 56.183015][ T4683] should_fail+0xb/0x20 [ 56.183078][ T4683] should_fail_usercopy+0x1a/0x20 [ 56.183144][ T4683] _copy_from_user+0x1c/0xb0 [ 56.183176][ T4683] ___sys_sendmsg+0xc1/0x1d0 [ 56.183235][ T4683] __x64_sys_sendmsg+0xd4/0x160 [ 56.183352][ T4683] x64_sys_call+0x191e/0x3000 [ 56.183381][ T4683] do_syscall_64+0xd2/0x200 [ 56.183403][ T4683] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.183459][ T4683] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.183499][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.183526][ T4683] RIP: 0033:0x7f63bb8defc9 [ 56.183612][ T4683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.183635][ T4683] RSP: 002b:00007f63ba347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.183667][ T4683] RAX: ffffffffffffffda RBX: 00007f63bbb35fa0 RCX: 00007f63bb8defc9 [ 56.183683][ T4683] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 56.183699][ T4683] RBP: 00007f63ba347090 R08: 0000000000000000 R09: 0000000000000000 [ 56.183730][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.183746][ T4683] R13: 00007f63bbb36038 R14: 00007f63bbb35fa0 R15: 00007fff64a4e718 [ 56.183771][ T4683] [ 56.465638][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 56.510794][ T4706] smc: removing ib device sz1 [ 56.539452][ T4705] netlink: 'syz.0.430': attribute type 21 has an invalid length. [ 56.547396][ T4705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.430'. [ 56.576869][ T4708] SELinux: policydb version 0 does not match my version range 15-35 [ 56.586068][ T4708] SELinux: failed to load policy [ 57.042377][ T4747] SELinux: policydb version 0 does not match my version range 15-35 [ 57.050890][ T4747] SELinux: failed to load policy [ 57.073019][ T4749] SELinux: policydb version 0 does not match my version range 15-35 [ 57.081217][ T4749] SELinux: failed to load policy [ 57.681324][ T4760] loop3: detected capacity change from 0 to 128 [ 57.688085][ T4760] msdos: Unknown parameter 'usefrs' [ 57.710072][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 57.710090][ T29] audit: type=1326 audit(1761487670.558:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.710679][ T36] usb usb6-port1: unable to enumerate USB device [ 57.752086][ T29] audit: type=1326 audit(1761487670.558:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.775557][ T29] audit: type=1326 audit(1761487670.558:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.798910][ T29] audit: type=1326 audit(1761487670.558:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.822654][ T29] audit: type=1326 audit(1761487670.598:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.846288][ T29] audit: type=1326 audit(1761487670.598:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.869698][ T29] audit: type=1326 audit(1761487670.598:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.893553][ T29] audit: type=1326 audit(1761487670.598:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.899592][ T4761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=4761 comm=syz.3.452 [ 57.917086][ T29] audit: type=1326 audit(1761487670.598:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 57.952928][ T29] audit: type=1326 audit(1761487670.598:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb8defc9 code=0x7ffc0000 [ 58.050192][ T4770] ip6t_srh: unknown srh match flags 4000 [ 58.058356][ T4773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.453'. [ 58.067565][ T4766] netlink: 60 bytes leftover after parsing attributes in process `syz.2.453'. [ 58.105831][ T4777] loop2: detected capacity change from 0 to 256 [ 58.112758][ T4775] ip6t_srh: unknown srh match flags 4000 [ 58.184476][ T4783] SELinux: policydb version 0 does not match my version range 15-35 [ 58.205659][ T4783] SELinux: failed to load policy [ 58.248496][ T4789] usb usb1: usbfs: process 4789 (syz.2.464) did not claim interface 0 before use [ 58.286495][ T4791] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 58.296550][ T4791] bridge0: port 3(dummy0) entered disabled state [ 58.303600][ T4791] dummy0: left allmulticast mode [ 58.308654][ T4791] dummy0: left promiscuous mode [ 58.313770][ T4791] bridge0: port 3(dummy0) entered disabled state [ 58.341481][ T4791] team0: Port device dummy0 added [ 58.381462][ T4800] ip6t_srh: unknown srh match flags 4000 [ 58.626466][ T4820] loop2: detected capacity change from 0 to 512 [ 58.651579][ T4820] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.667146][ T4820] EXT4-fs (loop2): shut down requested (0) [ 58.677329][ T4820] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.699075][ T4828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.477'. [ 58.727579][ T4823] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.477'. [ 58.826411][ T4833] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 58.834214][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 58.845268][ T4833] loop2: detected capacity change from 0 to 128 [ 58.870326][ T4833] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.921357][ T4834] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 58.929180][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 58.941468][ T4833] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 58.948023][ T4833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.955684][ T4833] vhci_hcd vhci_hcd.0: Device attached [ 58.962206][ T4839] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.478'. [ 58.969369][ T4830] netlink: 'syz.0.478': attribute type 12 has an invalid length. [ 58.971431][ T4839] net_ratelimit: 46 callbacks suppressed [ 58.971443][ T4839] netlink: zone id is out of range [ 58.971450][ T4839] netlink: zone id is out of range [ 58.971488][ T4839] netlink: zone id is out of range [ 58.985074][ T4842] loop1: detected capacity change from 0 to 128 [ 58.990282][ T4839] netlink: zone id is out of range [ 58.990292][ T4839] netlink: zone id is out of range [ 59.009186][ T4839] netlink: zone id is out of range [ 59.022682][ T4839] netlink: zone id is out of range [ 59.027854][ T4839] netlink: zone id is out of range [ 59.038459][ T4839] netlink: zone id is out of range [ 59.039064][ T4837] vhci_hcd: connection closed [ 59.044211][ T170] vhci_hcd: stop threads [ 59.053343][ T170] vhci_hcd: release socket [ 59.055339][ T4839] netlink: zone id is out of range [ 59.057948][ T170] vhci_hcd: disconnect device [ 59.079822][ T4842] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.127541][ T4834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 59.134281][ T4834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.141955][ T4834] vhci_hcd vhci_hcd.0: Device attached [ 59.161147][ T4847] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 59.169813][ T147] vhci_hcd: stop threads [ 59.174155][ T147] vhci_hcd: release socket [ 59.178587][ T147] vhci_hcd: disconnect device [ 59.328226][ T4855] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.402646][ T4860] loop4: detected capacity change from 0 to 128 [ 59.449964][ T4861] netlink: 'syz.0.486': attribute type 83 has an invalid length. [ 59.469348][ T4860] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.621745][ T4875] SELinux: policydb version 0 does not match my version range 15-35 [ 59.630466][ T4875] SELinux: failed to load policy [ 59.669702][ T4879] loop4: detected capacity change from 0 to 256 [ 59.726493][ T3316] ================================================================== [ 59.734630][ T3316] BUG: KCSAN: data-race in blkdev_open / queue_limits_commit_update [ 59.742618][ T3316] [ 59.744945][ T3316] read to 0xffff8881023b0108 of 4 bytes by task 3004 on cpu 1: [ 59.752571][ T3316] blkdev_open+0x161/0x290 [ 59.757032][ T3316] do_dentry_open+0x649/0xa20 [ 59.761734][ T3316] vfs_open+0x37/0x1e0 [ 59.765898][ T3316] path_openat+0x1c5e/0x2170 [ 59.770491][ T3316] do_filp_open+0x109/0x230 [ 59.774999][ T3316] do_sys_openat2+0xa6/0x110 [ 59.779604][ T3316] __x64_sys_openat+0xf2/0x120 [ 59.784376][ T3316] x64_sys_call+0x2eab/0x3000 [ 59.789160][ T3316] do_syscall_64+0xd2/0x200 [ 59.793692][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.799619][ T3316] [ 59.801977][ T3316] write to 0xffff8881023b0078 of 192 bytes by task 3316 on cpu 0: [ 59.809797][ T3316] queue_limits_commit_update+0x4b/0x160 [ 59.815469][ T3316] lo_release+0x1e9/0x400 [ 59.819930][ T3316] bdev_release+0x373/0x3d0 [ 59.824532][ T3316] blkdev_release+0x15/0x20 [ 59.829043][ T3316] __fput+0x29b/0x650 [ 59.833114][ T3316] fput_close_sync+0x6e/0x120 [ 59.837810][ T3316] __x64_sys_close+0x56/0xf0 [ 59.842405][ T3316] x64_sys_call+0x273c/0x3000 [ 59.847086][ T3316] do_syscall_64+0xd2/0x200 [ 59.851592][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.857491][ T3316] [ 59.859829][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 59.865979][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.875975][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.886033][ T3316] ==================================================================