last executing test programs: 1.879406555s ago: executing program 2 (id=3177): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000010c0)={0x184, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x97ec}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x108}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x113, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @random="3645c2b5c2b7", {0x9, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x3c}, @void, @void, [{0xdd, 0x1d, "9fc7aa293fefb6f1facc9727d4c63067d0c5bfca16addd1e85e0c5337d"}, {0xdd, 0x9, "08df0d6c2f684944b2"}, {0xdd, 0xc0, "819ecac6ac1ad1b8c12abf19d9f735f21ea3c1a2ac22a79e52e730e71623a4d53e17e62d418ad536b8c14a4035bce644d56e8cfb152ae24a4d430b829dd7f743280793160472a17da70a917a6cf71a0bf910f062453440b49220f35dc8d5fad92f550fd762eef55f72753d7471c800d46d4b14d73fa52c56f7518b45f9bbf481ad6a8479cc2ef667994d8c9cfad9737cdc96afc62ae424f0683f3caf32fe6c8feecb30135b47f4de3d05ebfe8a88b602cbaaf59a6a8e4339766834f9fbdff1bf"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000040)={0xf6c447fee59251f4}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000043c0)={0x0, 0x0, 0x0}, &(0x7f0000004400)=0xc) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004440), 0x480, 0x0) sendmmsg$unix(r5, &(0x7f0000004500)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000400)="ce7c1d2900065130b70a26da0af4e7e1bda7f6975a30073a28fb6717d886b1de80053f89de8a522933926fb8983372b1f672482bb76dfc24f10e3d86337b335624722d964a9e6621d339c08472dfded12b34d78c44bddacfa65292c3fbcf7415d856c204a5aff2a484949df98255c3a7c2dded985673b588c5afec79a6779bfa44730cb3884ea115d71c4b0b51bbcd4d653edc4916f16023d7729988c698c9137faa489151d730077eff8099eab4dd3aac15f4ca37c644ae", 0xb8}, {&(0x7f0000000600)="91c23e62d8f30cb287148b6aa6fe4e11c341dff4c9d28685e32d2c8c694bd6da4d24c347eabe6f480be66dc7dddd56d42a7609399f69d19cd289094e19b94e758a51d384800c13c4195c3828eb13c31957f3f232807728a962b1fdc6bcd7db210f87a6a384868dcfb0e67a", 0x6b}, {&(0x7f0000000740)="2f32477fb677a7b73757a1068b141c111b17c82dc6799028570253a5ef0048a91f6ac52dac45b7cbee44f1a066e9e46ecfdd92c1d9690ff414e4d1c4fe32449ad9e80f97df90dccfd49f73a2354831ff18de5d963d70ed3d47cf37fa2b453f2579f985fc0dacb9e2caf4b508b6b113055181730d04472223c0e7972b988e4ce7212cf110e5f9947a391c6584e40f0674517cc1782074295949a973a6329fe88eaa01a8d2aa80913b61d9e72cbd301db547968c310eeafc7f093a469f23625c7a66a44dbad9ad71722f462183b135bf16765b7eb8979ea35781853b50442697bb02780706cd4dae8e6e97a3f249b3cf1d", 0xf0}], 0x4, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r3, r5, r2, r9]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r9, r4]}}], 0x130, 0x1}}, {{&(0x7f0000002440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000001080)}], 0x1, &(0x7f0000002d80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r9, r2, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r5, r0, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r9, r5, r0, r8, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x38, 0x1, 0x1, [r9, r2, r1, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1, r5, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0x170, 0x1}}, {{&(0x7f0000002f00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000002f80)="8f07788daf7b9c6addd559387d53ba28e635c713570f556757b73d03ee91d7688c953ee4d4791f37ce0d7d53f10381a7309a42229aa0c0160bb9b5991cfef1ad9d56fa48838250cef649e668999e9e12fc4dbd6e75d83a434683c653d661d8560187d5a6bd242a3103778052da574e1e2ba7088e41647c65", 0x78}, {&(0x7f0000003000)="d3bac6eed8125258d3b30ab44230f30b616796c2f5b50db4a695fa3677a49ca7c0fc9a50ae22fbe018a429a4ba9780cafadd9049d2d0d6044dd9909fb6b8", 0x3e}, {&(0x7f0000003040)="ed73fea6831fc0528f8b82d671987384457dff2bd8acdcf76492914be5be12d808e115c0a2f58fe4574305dba637735c0a9d8ec20b23b2b301a514d66d62c13eba561afc66e80b1dc2ac1396a4a18cca6a2aeff5ecaf9171ecdfaa27c0dde87fdb9906db1f5ed5a993832033f00fd778d65b0f0bddddf00075e384e1e94b0ac5ab9d6a84ba319c48f29bb18ec65827dd9772902f2c63a2ab9bd37d124e6117ddee55eac673e2bece9e005b944263f877afee2db13f5035e27761923d10dbdcd09092896c9ce8c8e2d5838f31e55e331f7af0f214d89475c5284049c8bebb04308f", 0xe1}, {&(0x7f0000003140)="8bda96a8db203b239997192a7fcf10944f7279d0f4bb89e978fe8e0291881ca12e591ace4d33d70ec557c12a4961d3107dc3af5064e4afd68c125e044fd46dcad99d00992fd12e2d82ad8003c0b1545cfc77de84fb9734812043d2135503dbbd12f7b287397e77e1b021ef910706ed1669678f68d62547f8fbc5ce18d9fd8c1c04957660a7824a7ef03b6f842af728eaccf1dbec200e6f8e6853f896fcaeb018b9bfe6d8d1d0", 0xa6}, {&(0x7f0000003200)="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", 0x1000}], 0x5, &(0x7f0000004480)=[@rights={{0x20, 0x1, 0x1, [r5, r1, r8, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, r9, r8, r1]}}], 0x60, 0x80c4}}], 0x3, 0x14) gettid() pipe(0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) rt_sigaction(0xf, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f00000004c0), 0x208e24b) 1.720023027s ago: executing program 4 (id=3178): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 1.718974807s ago: executing program 2 (id=3179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.50943347s ago: executing program 0 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000000)={[{@user_xattr}, {@nobh}, {@nogrpid}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) 1.256630083s ago: executing program 4 (id=3184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000080080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.238069563s ago: executing program 0 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 1.139632315s ago: executing program 2 (id=3188): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fc1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x804fe, 0x2004, 0x7fc}) 1.119703385s ago: executing program 2 (id=3189): r0 = syz_io_uring_setup(0x121d, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) lsm_set_self_attr(0x65, &(0x7f0000000400)={0x64, 0x4, 0x2c, 0xc, "4ae60808c98a2132c7102327"}, 0x2c, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r8, 0x0, 0x0) sendmsg$key(r8, 0x0, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.061901356s ago: executing program 0 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.061131386s ago: executing program 1 (id=3191): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)="2d01ccf928a370dddd03e8dbb62ede", 0xf, 0x11, 0x1, {0x0, r1}}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x800) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x8ffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') times(&(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 999.474477ms ago: executing program 0 (id=3192): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x48093) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 998.688357ms ago: executing program 3 (id=3193): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 940.508578ms ago: executing program 4 (id=3194): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x846441, &(0x7f0000000240)=ANY=[@ANYRES32=r6]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b70400000000000085000100010000009529dfba93682cb975eb25ea8aaaffefb6ec7ec11a7ff229fce3a95501638ad947c3d201a472b0fe627d7b502675f95928f4af2870da79b1769da1af979b794a5bc25a3497566b31c7f956c9eb79aa6b1ee4014c370fef44526d91e2", @ANYRESOCT=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r8, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x6) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) write$UHID_CREATE(r5, &(0x7f00000017c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xc}}, 0x120) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 934.168597ms ago: executing program 3 (id=3195): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x2) 892.141598ms ago: executing program 3 (id=3196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00'/13, @ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5402, 0x0, 0x2) r4 = open(0x0, 0x2d0400, 0x0) pwritev2(r4, 0x0, 0x0, 0x5, 0x1, 0xf) bind$inet6(0xffffffffffffffff, 0x0, 0x0) futex(0xfffffffffffffffd, 0x8, 0x1, 0x0, 0x0, 0x1) syz_emit_ethernet(0x64, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f0000000900)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@data_err_ignore}]}, 0x0, 0x5e9, &(0x7f0000000f00)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) 351.277275ms ago: executing program 3 (id=3197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @private}, &(0x7f0000000280)=0xc) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='F']) 323.957465ms ago: executing program 4 (id=3198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0xf6c447fee59251f4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004280)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000004380)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000043c0), &(0x7f0000004400)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000004440), 0x480, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) rt_sigaction(0xf, 0x0, 0x0, 0x0, 0x0) 273.550076ms ago: executing program 3 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) close(r9) 214.976667ms ago: executing program 1 (id=3200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000718e9435fa79773d38cffa120a0102000000000000b804020000000900020073797a310000000008000440000000000900010073797a300000000008000340", @ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="00ecafc314cbc6a6a8201190a329aa9eae2620390adeac443879511cc6cabe19a6542f73c5850122ec835cc0ded7470163600b4945ab2d0b13d418c55bc349de08c27d0d2e1815e75e29759f03044d7c82bdcb431f4a126b1cf478a20044d027057d5be56803bbf304ebac66e691ee7ac3146d5978fce53dd70af25c01039c3dc364c009fa680a9385b7491cda4b7b830332b01bacf8d313c53fc019c3d21de23db345d2e57cb1f697f5871cca28c782362fa104f0f1"], 0x64}}, 0x24000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 214.653097ms ago: executing program 1 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 213.913317ms ago: executing program 4 (id=3202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) close(r9) 179.413897ms ago: executing program 1 (id=3203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x4, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) 177.997937ms ago: executing program 1 (id=3204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') read$hiddev(r1, &(0x7f0000000100)=""/145, 0x91) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703100008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='%-\x10*\x00\xdbQ\x8d\xc2,\x9d', &(0x7f0000000380)='$\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000580)=""/147, 0x93, 0x0, &(0x7f00000004c0)=""/112, 0x70}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES64=r5, @ANYRES32=r3, @ANYRES16=r2, @ANYRES64=r5, @ANYRESDEC=r5, @ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) io_setup(0x8, &(0x7f0000004200)=0x0) io_destroy(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 163.221278ms ago: executing program 2 (id=3205): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000080080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 134.443458ms ago: executing program 0 (id=3206): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 109.275408ms ago: executing program 0 (id=3207): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0xffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000000901010000000000000000000000001000048008000140007e2c157e0002000c000280050001000000001214000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) 61.433059ms ago: executing program 1 (id=3208): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000140)=""/89) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x18583, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xfffffffffffffff1, 0x5) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x80000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000380012800e000100697036677265746170000000240002800400120014000700ff0200000000000000000000000000010800150015e5040008000a00", @ANYRES16], 0x60}}, 0x0) 52.889699ms ago: executing program 3 (id=3209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000010c0)={0x184, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x97ec}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x108}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x113, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @random="3645c2b5c2b7", {0x9, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x3c}, @void, @void, [{0xdd, 0x1d, "9fc7aa293fefb6f1facc9727d4c63067d0c5bfca16addd1e85e0c5337d"}, {0xdd, 0x9, "08df0d6c2f684944b2"}, {0xdd, 0xc0, "819ecac6ac1ad1b8c12abf19d9f735f21ea3c1a2ac22a79e52e730e71623a4d53e17e62d418ad536b8c14a4035bce644d56e8cfb152ae24a4d430b829dd7f743280793160472a17da70a917a6cf71a0bf910f062453440b49220f35dc8d5fad92f550fd762eef55f72753d7471c800d46d4b14d73fa52c56f7518b45f9bbf481ad6a8479cc2ef667994d8c9cfad9737cdc96afc62ae424f0683f3caf32fe6c8feecb30135b47f4de3d05ebfe8a88b602cbaaf59a6a8e4339766834f9fbdff1bf"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) epoll_create(0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000043c0), &(0x7f0000004400)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000004440), 0x480, 0x0) gettid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) 17.529749ms ago: executing program 2 (id=3210): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)="2d01ccf928a370dddd03e8dbb62ede", 0xf, 0x11, 0x1, {0x0, r1}}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x800) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x8ffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') times(&(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 0s ago: executing program 4 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @private}, &(0x7f0000000280)=0xc) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x12, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffd6b}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000001c0)='syzkaller\x00', 0x70a847d4, 0xe2, &(0x7f0000000740)=""/226, 0x41000, 0x10, '\x00', r4, @sk_skb=0x4, r5, 0x8, &(0x7f0000000840)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x9, 0x8001, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000008c0)=[r0, r1, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000900)=[{0x5, 0x3, 0x4, 0x7}, {0x1, 0x5, 0x5}, {0x3, 0x1, 0x10, 0x2}, {0x1, 0x3, 0x5, 0x7}, {0x0, 0x1, 0x6, 0x4}, {0x0, 0x1, 0x10, 0x3}, {0x3, 0x1, 0x10, 0x7}, {0x2, 0x1, 0x7, 0x4}, {0x0, 0x5, 0x7, 0x7}, {0x4, 0x3, 0xf, 0x6}], 0x10, 0x2, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 0:1.0: 8 ports detected [ 170.229351][ T29] audit: type=1400 audit(1747345139.710:4811): avc: denied { getopt } for pid=10305 comm="syz.3.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.276427][T10314] loop3: detected capacity change from 0 to 2048 [ 170.334025][ T3527] loop3: p2 p3 p7 [ 170.347897][T10314] loop3: p2 p3 p7 [ 170.452324][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 170.454824][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 170.466663][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 170.517550][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 170.528869][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 170.551669][T10329] loop1: detected capacity change from 0 to 1024 [ 170.580956][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 170.611544][T10329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.632539][T10326] lo speed is unknown, defaulting to 1000 [ 170.651092][ T29] audit: type=1400 audit(1747345140.140:4812): avc: denied { remove_name } for pid=10328 comm="syz.1.2399" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.673961][ T29] audit: type=1400 audit(1747345140.140:4813): avc: denied { unlink } for pid=10328 comm="syz.1.2399" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.699517][ T29] audit: type=1400 audit(1747345140.180:4814): avc: denied { bind } for pid=10333 comm="syz.2.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 170.753541][T10329] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 170.779053][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.062627][T10350] hub 2-0:1.0: USB hub found [ 171.068760][T10350] hub 2-0:1.0: 8 ports detected [ 171.082967][T10354] loop4: detected capacity change from 0 to 2048 [ 171.130234][ T3527] loop4: p2 p3 p7 [ 171.147935][T10354] loop4: p2 p3 p7 [ 171.186742][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 171.200129][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 171.213131][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 171.243350][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 171.360798][T10356] lo speed is unknown, defaulting to 1000 [ 171.531086][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 171.793380][T10377] FAULT_INJECTION: forcing a failure. [ 171.793380][T10377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.806543][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.1.2416 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 171.806623][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.806640][T10377] Call Trace: [ 171.806648][T10377] [ 171.806657][T10377] __dump_stack+0x1d/0x30 [ 171.806685][T10377] dump_stack_lvl+0xe8/0x140 [ 171.806710][T10377] dump_stack+0x15/0x1b [ 171.806730][T10377] should_fail_ex+0x265/0x280 [ 171.806801][T10377] should_fail+0xb/0x20 [ 171.806837][T10377] should_fail_usercopy+0x1a/0x20 [ 171.806917][T10377] _copy_from_user+0x1c/0xb0 [ 171.806988][T10377] get_nodes+0x104/0x290 [ 171.807021][T10377] __se_sys_migrate_pages+0x75/0x310 [ 171.807102][T10377] __x64_sys_migrate_pages+0x55/0x70 [ 171.807129][T10377] x64_sys_call+0x2b5c/0x2fb0 [ 171.807155][T10377] do_syscall_64+0xd0/0x1a0 [ 171.807180][T10377] ? clear_bhb_loop+0x40/0x90 [ 171.807207][T10377] ? clear_bhb_loop+0x40/0x90 [ 171.807293][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.807315][T10377] RIP: 0033:0x7f912c67e969 [ 171.807333][T10377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.807362][T10377] RSP: 002b:00007f912ace7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 171.807457][T10377] RAX: ffffffffffffffda RBX: 00007f912c8a5fa0 RCX: 00007f912c67e969 [ 171.807470][T10377] RDX: 0000000000000000 RSI: 0000000000004421 RDI: 0000000000000000 [ 171.807485][T10377] RBP: 00007f912ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.807501][T10377] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 171.807515][T10377] R13: 0000000000000000 R14: 00007f912c8a5fa0 R15: 00007ffd52bff068 [ 171.807535][T10377] [ 172.032486][T10380] loop2: detected capacity change from 0 to 2048 [ 172.085068][ T4384] loop2: p2 p3 p7 [ 172.100480][T10380] loop2: p2 p3 p7 [ 172.373232][T10397] loop2: detected capacity change from 0 to 512 [ 172.415046][T10397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.428714][T10397] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.725631][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.912912][T10407] hub 2-0:1.0: USB hub found [ 172.918554][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 172.922749][T10407] hub 2-0:1.0: 8 ports detected [ 172.928166][T10415] netem: change failed [ 172.937858][T10415] serio: Serial port ptm0 [ 173.122966][T10419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2432'. [ 173.132191][T10419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 173.334702][T10427] loop3: detected capacity change from 0 to 512 [ 173.352655][T10427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.365445][T10427] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.387351][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.758869][T10455] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2446'. [ 173.797495][T10461] FAULT_INJECTION: forcing a failure. [ 173.797495][T10461] name failslab, interval 1, probability 0, space 0, times 0 [ 173.810213][T10461] CPU: 1 UID: 0 PID: 10461 Comm: syz.4.2449 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 173.810322][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 173.810337][T10461] Call Trace: [ 173.810344][T10461] [ 173.810351][T10461] __dump_stack+0x1d/0x30 [ 173.810375][T10461] dump_stack_lvl+0xe8/0x140 [ 173.810399][T10461] dump_stack+0x15/0x1b [ 173.810438][T10461] should_fail_ex+0x265/0x280 [ 173.810478][T10461] ? alloc_pipe_info+0xae/0x350 [ 173.810532][T10461] should_failslab+0x8c/0xb0 [ 173.810561][T10461] __kmalloc_cache_noprof+0x4c/0x320 [ 173.810661][T10461] alloc_pipe_info+0xae/0x350 [ 173.810693][T10461] splice_direct_to_actor+0x592/0x680 [ 173.810715][T10461] ? file_has_perm+0x324/0x370 [ 173.810748][T10461] ? __pfx_direct_splice_actor+0x10/0x10 [ 173.810847][T10461] do_splice_direct+0xda/0x150 [ 173.810875][T10461] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 173.810911][T10461] do_sendfile+0x380/0x640 [ 173.810935][T10461] __x64_sys_sendfile64+0x105/0x150 [ 173.811033][T10461] x64_sys_call+0xb39/0x2fb0 [ 173.811054][T10461] do_syscall_64+0xd0/0x1a0 [ 173.811147][T10461] ? clear_bhb_loop+0x40/0x90 [ 173.811167][T10461] ? clear_bhb_loop+0x40/0x90 [ 173.811196][T10461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.811223][T10461] RIP: 0033:0x7fdeeef6e969 [ 173.811242][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.811407][T10461] RSP: 002b:00007fdeed5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 173.811432][T10461] RAX: ffffffffffffffda RBX: 00007fdeef195fa0 RCX: 00007fdeeef6e969 [ 173.811447][T10461] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 173.811462][T10461] RBP: 00007fdeed5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.811477][T10461] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 173.811493][T10461] R13: 0000000000000000 R14: 00007fdeef195fa0 R15: 00007ffe645de1f8 [ 173.811514][T10461] [ 174.078969][T10468] loop1: detected capacity change from 0 to 2048 [ 174.143362][T10480] netem: change failed [ 174.151350][T10480] serio: Serial port ptm0 [ 174.158946][ T3527] loop1: p2 p3 p7 [ 174.171931][T10468] loop1: p2 p3 p7 [ 174.267803][T10491] __nla_validate_parse: 4 callbacks suppressed [ 174.267870][T10491] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2463'. [ 174.342418][T10495] SELinux: syz.2.2465 (10495) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 174.440601][T10503] loop3: detected capacity change from 0 to 256 [ 174.448457][T10505] loop1: detected capacity change from 0 to 2048 [ 174.458710][T10505] ext4: Unknown parameter 'smackfsfloor' [ 174.468905][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 174.468919][ T29] audit: type=1400 audit(1747345143.960:5058): avc: denied { mount } for pid=10502 comm="syz.3.2469" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.513462][T10510] loop2: detected capacity change from 0 to 512 [ 174.521620][T10510] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 174.539992][T10510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 174.549710][T10510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.557296][T10510] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2471: attempt to clear invalid blocks 1024 len 1 [ 174.566712][ T29] audit: type=1326 audit(1747345143.990:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 174.593941][ T29] audit: type=1326 audit(1747345143.990:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 174.609381][T10510] EXT4-fs (loop2): Remounting filesystem read-only [ 174.617470][ T29] audit: type=1326 audit(1747345143.990:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 174.645259][T10510] EXT4-fs (loop2): 1 truncate cleaned up [ 174.647442][ T29] audit: type=1326 audit(1747345143.990:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 174.668006][T10510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 174.676534][ T29] audit: type=1326 audit(1747345143.990:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.3.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 174.703955][T10514] loop3: detected capacity change from 0 to 8192 [ 174.711986][ T29] audit: type=1400 audit(1747345144.000:5064): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.757586][T10507] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.2471: dx entry: limit 0 != root limit 125 [ 174.769406][T10507] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2471: Corrupt directory, running e2fsck is recommended [ 174.782809][ T29] audit: type=1400 audit(1747345144.080:5065): avc: denied { execute } for pid=10504 comm="syz.1.2470" name="file1" dev="tmpfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.805288][ T29] audit: type=1400 audit(1747345144.080:5066): avc: denied { execute_no_trans } for pid=10504 comm="syz.1.2470" path="/519/file1" dev="tmpfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.809887][ T3527] loop3: p1 p2[DM] p4 [ 174.828872][ T29] audit: type=1400 audit(1747345144.230:5067): avc: denied { create } for pid=10506 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.834624][T10510] SELinux: syz.2.2471 (10510) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 174.852614][T10507] EXT4-fs warning (device loop2): dx_probe:863: inode #2: comm syz.2.2471: dx entry: limit 0 != root limit 125 [ 174.869517][ T3527] loop3: p1 size 196608 extends beyond EOD, [ 174.878035][T10507] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.2471: Corrupt directory, running e2fsck is recommended [ 174.884109][ T3527] truncated [ 174.906287][ T3527] loop3: p2 start 4292936063 is beyond EOD, truncated [ 174.913233][ T3527] loop3: p4 size 50331648 extends beyond EOD, truncated [ 174.940866][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 174.963866][T10514] loop3: p1 p2[DM] p4 [ 174.968208][T10514] loop3: p1 size 196608 extends beyond EOD, truncated [ 174.980899][T10514] loop3: p2 start 4292936063 is beyond EOD, truncated [ 174.987746][T10514] loop3: p4 size 50331648 extends beyond EOD, truncated [ 175.176238][T10535] validate_nla: 4 callbacks suppressed [ 175.176252][T10535] netlink: 'syz.2.2481': attribute type 29 has an invalid length. [ 175.195888][T10535] netlink: 'syz.2.2481': attribute type 29 has an invalid length. [ 175.204512][T10535] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2481'. [ 175.212454][T10538] loop1: detected capacity change from 0 to 2048 [ 175.261686][ T3527] Alternate GPT is invalid, using primary GPT. [ 175.268030][ T3527] loop1: p2 p3 p7 [ 175.278253][T10538] Alternate GPT is invalid, using primary GPT. [ 175.284783][T10538] loop1: p2 p3 p7 [ 175.404522][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2488'. [ 175.415886][T10551] netem: change failed [ 175.428696][T10551] serio: Serial port ptm0 [ 175.441331][T10555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2489'. [ 175.454583][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2489'. [ 175.494019][T10561] netlink: 'syz.3.2493': attribute type 29 has an invalid length. [ 175.506788][T10561] netlink: 'syz.3.2493': attribute type 29 has an invalid length. [ 175.508753][T10563] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 175.515566][T10561] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2493'. [ 175.602470][T10566] loop3: detected capacity change from 0 to 2048 [ 175.662368][ T3527] Alternate GPT is invalid, using primary GPT. [ 175.668891][ T3527] loop3: p2 p3 p7 [ 175.683557][T10566] Alternate GPT is invalid, using primary GPT. [ 175.689999][T10566] loop3: p2 p3 p7 [ 175.793362][ T3445] IPVS: starting estimator thread 0... [ 175.801597][T10573] IPv6: Can't replace route, no match found [ 175.889205][T10574] IPVS: using max 2352 ests per chain, 117600 per kthread [ 176.018327][T10591] netlink: 'syz.0.2505': attribute type 29 has an invalid length. [ 176.028048][T10591] netlink: 'syz.0.2505': attribute type 29 has an invalid length. [ 176.044557][T10591] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2505'. [ 176.055288][T10586] loop4: detected capacity change from 0 to 512 [ 176.072325][T10586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.094323][T10587] loop3: detected capacity change from 0 to 8192 [ 176.121520][T10586] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.142366][T10597] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 176.171035][ T4384] loop3: p1 p2[DM] p4 [ 176.175221][ T4384] loop3: p1 size 196608 extends beyond EOD, truncated [ 176.185862][ T4384] loop3: p2 start 4292936063 is beyond EOD, truncated [ 176.192799][ T4384] loop3: p4 size 50331648 extends beyond EOD, truncated [ 176.221100][T10587] loop3: p1 p2[DM] p4 [ 176.278928][T10587] loop3: p1 size 196608 extends beyond EOD, truncated [ 176.294005][T10587] loop3: p2 start 4292936063 is beyond EOD, truncated [ 176.300903][T10587] loop3: p4 size 50331648 extends beyond EOD, truncated [ 176.492696][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.711734][T10626] loop2: detected capacity change from 0 to 736 [ 176.784851][T10623] lo speed is unknown, defaulting to 1000 [ 176.799758][T10632] serio: Serial port ptm0 [ 176.846762][T10636] siw: device registration error -23 [ 176.872441][T10634] loop1: detected capacity change from 0 to 2048 [ 176.930655][T10642] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 176.932826][ T3527] Alternate GPT is invalid, using primary GPT. [ 176.945428][ T3527] loop1: p2 p3 p7 [ 176.965786][T10634] Alternate GPT is invalid, using primary GPT. [ 176.972299][T10634] loop1: p2 p3 p7 [ 177.226239][T10666] serio: Serial port ptm0 [ 177.328372][T10676] loop3: detected capacity change from 0 to 2048 [ 177.414988][T10676] loop3: p2 p3 p7 [ 177.479642][T10684] lo speed is unknown, defaulting to 1000 [ 177.893273][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 177.906674][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 177.910658][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 177.951878][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 177.963042][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 177.974065][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 178.305695][T10735] loop1: detected capacity change from 0 to 512 [ 178.358992][T10735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.378063][T10735] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.472704][T10747] loop2: detected capacity change from 0 to 1024 [ 178.497680][T10737] lo speed is unknown, defaulting to 1000 [ 178.616152][T10747] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 178.625905][T10747] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 178.636023][T10747] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 179.018984][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.341129][T10763] __nla_validate_parse: 9 callbacks suppressed [ 179.341157][T10763] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2558'. [ 179.394459][T10760] lo speed is unknown, defaulting to 1000 [ 179.581071][T10772] loop3: detected capacity change from 0 to 2048 [ 179.652049][T10772] Alternate GPT is invalid, using primary GPT. [ 179.658480][T10772] loop3: p2 p3 p7 [ 179.876755][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 180.004689][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 180.004704][ T29] audit: type=1326 audit(1747345149.490:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.075434][ T29] audit: type=1326 audit(1747345149.500:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.099199][ T29] audit: type=1326 audit(1747345149.500:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.119872][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2572'. [ 180.123175][ T29] audit: type=1326 audit(1747345149.500:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.134085][T10794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2572'. [ 180.155379][ T29] audit: type=1326 audit(1747345149.500:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.187718][ T29] audit: type=1326 audit(1747345149.500:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.211410][ T29] audit: type=1326 audit(1747345149.500:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.234907][ T29] audit: type=1326 audit(1747345149.550:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.236606][T10793] loop3: detected capacity change from 0 to 512 [ 180.258434][ T29] audit: type=1326 audit(1747345149.550:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 180.288221][ T29] audit: type=1326 audit(1747345149.550:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.3.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffac0b30887 code=0x7ffc0000 [ 180.323704][T10793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.336524][T10797] loop2: detected capacity change from 0 to 512 [ 180.337160][T10793] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.363074][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a5e8000: rx timeout, send abort [ 180.371569][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811a5e8000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 180.406229][T10806] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 180.417985][T10797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.436896][T10797] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.500965][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.536846][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.584893][T10824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2583'. [ 180.617776][T10829] loop2: detected capacity change from 0 to 512 [ 180.624932][T10829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.651090][T10829] EXT4-fs (loop2): 1 truncate cleaned up [ 180.657720][T10829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.762583][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.873534][T10847] loop1: detected capacity change from 0 to 2048 [ 180.964197][ T3527] loop1: p2 p3 p7 [ 180.990698][T10847] loop1: p2 p3 p7 [ 181.310844][T10866] loop3: detected capacity change from 0 to 512 [ 181.392625][T10866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.421468][T10866] EXT4-fs (loop3): 1 truncate cleaned up [ 181.438980][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 181.450979][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 181.463804][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 181.470222][T10866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.590733][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.650780][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 181.660148][T10898] netem: change failed [ 181.665644][T10898] serio: Serial port ptm0 [ 181.727569][T10905] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 181.820750][T10920] loop2: detected capacity change from 0 to 512 [ 181.829773][T10920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.853767][T10920] EXT4-fs (loop2): 1 truncate cleaned up [ 181.863458][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.995316][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.380717][T10962] loop2: detected capacity change from 0 to 736 [ 182.455268][T10965] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 182.549915][T10968] siw: device registration error -23 [ 182.581053][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 182.590192][T10965] bridge_slave_1: left allmulticast mode [ 182.596007][T10965] bridge_slave_1: left promiscuous mode [ 182.601865][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.619464][T10965] bridge_slave_0: left allmulticast mode [ 182.625189][T10965] bridge_slave_0: left promiscuous mode [ 182.631012][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.759060][T10974] loop3: detected capacity change from 0 to 8192 [ 182.809681][ T3527] loop3: p1 p2[DM] p4 [ 182.815689][ T3527] loop3: p1 size 196608 extends beyond EOD, truncated [ 182.818115][T10976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2643'. [ 182.834806][ T3527] loop3: p2 start 4292936063 is beyond EOD, truncated [ 182.835122][T10976] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2643'. [ 182.841676][ T3527] loop3: p4 size 50331648 extends beyond EOD, truncated [ 182.869931][T10974] loop3: p1 p2[DM] p4 [ 182.874297][T10974] loop3: p1 size 196608 extends beyond EOD, truncated [ 182.890067][T10974] loop3: p2 start 4292936063 is beyond EOD, truncated [ 182.896933][T10974] loop3: p4 size 50331648 extends beyond EOD, truncated [ 183.074581][T10987] lo speed is unknown, defaulting to 1000 [ 183.295035][T11004] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.563789][T11020] loop3: detected capacity change from 0 to 256 [ 183.636443][T11023] loop3: detected capacity change from 0 to 512 [ 183.663554][T11023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.690320][T11023] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.846701][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.894168][T11043] netem: change failed [ 183.899104][T11038] netem: change failed [ 183.906568][T11043] serio: Serial port ptm0 [ 183.911299][T11041] loop4: detected capacity change from 0 to 2048 [ 183.912241][T11038] serio: Serial port ptm1 [ 184.013496][T11047] loop1: detected capacity change from 0 to 8192 [ 184.015303][T11041] loop4: p2 p3 p7 [ 184.059718][ T4384] loop1: p1 p2[DM] p4 [ 184.063966][ T4384] loop1: p1 size 196608 extends beyond EOD, truncated [ 184.156479][ T4384] loop1: p2 start 4292936063 is beyond EOD, truncated [ 184.163549][ T4384] loop1: p4 size 50331648 extends beyond EOD, truncated [ 184.173978][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 184.187845][ T6998] udevd[6998]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 184.189389][T11063] loop2: detected capacity change from 0 to 512 [ 184.200421][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 184.221494][T11047] loop1: p1 p2[DM] p4 [ 184.225861][T11047] loop1: p1 size 196608 extends beyond EOD, truncated [ 184.235668][T11047] loop1: p2 start 4292936063 is beyond EOD, truncated [ 184.242610][T11047] loop1: p4 size 50331648 extends beyond EOD, truncated [ 184.270887][T11063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.293235][ T3006] loop1: p1 p2[DM] p4 [ 184.301161][ T3006] loop1: p1 size 196608 extends beyond EOD, truncated [ 184.310755][ T3006] loop1: p2 start 4292936063 is beyond EOD, truncated [ 184.310771][T11063] EXT4-fs (loop2): 1 truncate cleaned up [ 184.311215][T11063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.317610][ T3006] loop1: p4 size 50331648 extends beyond EOD, truncated [ 184.477911][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.507044][T11092] __nla_validate_parse: 2 callbacks suppressed [ 184.507064][T11092] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 184.608063][T11100] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2689'. [ 184.628745][T11104] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2691'. [ 184.643353][T11104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2691'. [ 184.755486][T11108] x_tables: duplicate underflow at hook 1 [ 184.825558][T11120] loop2: detected capacity change from 0 to 512 [ 184.854897][T11120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.877005][T11120] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.928689][T11128] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 184.940774][T11126] loop1: detected capacity change from 0 to 2048 [ 184.961202][T11126] ext4: Unknown parameter 'smackfsfloor' [ 185.034709][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 185.034727][ T29] audit: type=1326 audit(1747345154.520:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06730ae969 code=0x7ffc0000 [ 185.064620][ T29] audit: type=1326 audit(1747345154.520:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06730ae969 code=0x7ffc0000 [ 185.136626][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.147942][T11135] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2702'. [ 185.168397][ T29] audit: type=1326 audit(1747345154.650:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.192230][ T29] audit: type=1326 audit(1747345154.650:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.215702][ T29] audit: type=1326 audit(1747345154.650:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.217709][T11140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2706'. [ 185.245766][ T29] audit: type=1326 audit(1747345154.650:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.267794][T11140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2706'. [ 185.271808][ T29] audit: type=1326 audit(1747345154.650:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.271837][ T29] audit: type=1326 audit(1747345154.650:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.271863][ T29] audit: type=1326 audit(1747345154.650:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 185.351676][ T29] audit: type=1326 audit(1747345154.650:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac0b2e969 code=0x7ffc0000 [ 185.410091][T11149] 9pnet_fd: Insufficient options for proto=fd [ 185.460604][T11158] netlink: 32 bytes leftover after parsing attributes in process `kfree'. [ 185.492579][T11164] loop3: detected capacity change from 0 to 512 [ 185.506436][T11164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.516437][T11152] loop1: detected capacity change from 0 to 2048 [ 185.526015][T11164] EXT4-fs (loop3): 1 truncate cleaned up [ 185.533066][T11164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.561440][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.562975][ T3527] Alternate GPT is invalid, using primary GPT. [ 185.577021][ T3527] loop1: p2 p3 p7 [ 185.596137][T11170] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2717'. [ 185.606614][T11152] Alternate GPT is invalid, using primary GPT. [ 185.613145][T11152] loop1: p2 p3 p7 [ 185.693640][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.694518][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 185.705894][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 185.730022][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 185.741936][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 185.743164][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.786671][T11177] lo speed is unknown, defaulting to 1000 [ 185.899945][T11190] 9pnet_fd: Insufficient options for proto=fd [ 185.954456][T11192] loop3: detected capacity change from 0 to 512 [ 185.972212][T11192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.985131][T11192] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.098170][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.245465][T11208] loop2: detected capacity change from 0 to 1024 [ 186.252878][T11208] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 186.262743][T11208] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 186.272505][T11208] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 186.282963][T11208] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.2731: unexpected bad inode w/o EXT4_IGET_BAD [ 186.296342][T11208] EXT4-fs (loop2): no journal found [ 186.301647][T11208] EXT4-fs (loop2): can't get journal size [ 186.309576][T11208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.372769][T11215] 9pnet_fd: Insufficient options for proto=fd [ 186.441128][T11220] loop4: detected capacity change from 0 to 2048 [ 186.496459][T11220] loop4: p2 p3 p7 [ 186.512994][T11218] lo speed is unknown, defaulting to 1000 [ 186.581838][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 186.648193][T11230] lo speed is unknown, defaulting to 1000 [ 186.977787][T11265] FAULT_INJECTION: forcing a failure. [ 186.977787][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 186.990529][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.3.2751 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 186.990560][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.990623][T11265] Call Trace: [ 186.990631][T11265] [ 186.990640][T11265] __dump_stack+0x1d/0x30 [ 186.990666][T11265] dump_stack_lvl+0xe8/0x140 [ 186.990690][T11265] dump_stack+0x15/0x1b [ 186.990711][T11265] should_fail_ex+0x265/0x280 [ 186.990749][T11265] should_failslab+0x8c/0xb0 [ 186.990788][T11265] __kmalloc_noprof+0xa5/0x3e0 [ 186.990839][T11265] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 186.990876][T11265] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 186.990960][T11265] genl_family_rcv_msg_doit+0x48/0x1b0 [ 186.991031][T11265] ? security_capable+0x83/0x90 [ 186.991070][T11265] ? ns_capable+0x7d/0xb0 [ 186.991121][T11265] genl_rcv_msg+0x422/0x460 [ 186.991165][T11265] ? __pfx_batadv_pre_doit+0x10/0x10 [ 186.991241][T11265] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 186.991280][T11265] ? __pfx_batadv_post_doit+0x10/0x10 [ 186.991342][T11265] netlink_rcv_skb+0x120/0x220 [ 186.991439][T11265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.991478][T11265] genl_rcv+0x28/0x40 [ 186.991507][T11265] netlink_unicast+0x5a1/0x670 [ 186.991547][T11265] netlink_sendmsg+0x58b/0x6b0 [ 186.991568][T11265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.991588][T11265] __sock_sendmsg+0x142/0x180 [ 186.991615][T11265] ____sys_sendmsg+0x31e/0x4e0 [ 186.991645][T11265] ___sys_sendmsg+0x17b/0x1d0 [ 186.991692][T11265] __x64_sys_sendmsg+0xd4/0x160 [ 186.991780][T11265] x64_sys_call+0x2999/0x2fb0 [ 186.991803][T11265] do_syscall_64+0xd0/0x1a0 [ 186.991826][T11265] ? clear_bhb_loop+0x40/0x90 [ 186.991852][T11265] ? clear_bhb_loop+0x40/0x90 [ 186.991893][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.991928][T11265] RIP: 0033:0x7ffac0b2e969 [ 186.991947][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.991970][T11265] RSP: 002b:00007ffabf197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.991988][T11265] RAX: ffffffffffffffda RBX: 00007ffac0d55fa0 RCX: 00007ffac0b2e969 [ 186.992005][T11265] RDX: 0000000000000000 RSI: 0000200000006880 RDI: 0000000000000004 [ 186.992097][T11265] RBP: 00007ffabf197090 R08: 0000000000000000 R09: 0000000000000000 [ 186.992112][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.992128][T11265] R13: 0000000000000000 R14: 00007ffac0d55fa0 R15: 00007ffd2eb82988 [ 186.992151][T11265] [ 187.276738][T11267] loop1: detected capacity change from 0 to 2048 [ 187.311562][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.348613][ T3006] loop1: p2 p3 p7 [ 187.364386][ T3006] loop1: p2 p3 p7 [ 187.377084][T11267] loop1: p2 p3 p7 [ 187.421476][T11276] loop2: detected capacity change from 0 to 512 [ 187.455298][T11276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.488774][T11276] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.511985][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.541900][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.553784][T11285] loop1: detected capacity change from 0 to 256 [ 187.642292][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.677003][T11292] netem: change failed [ 187.682851][T11292] serio: Serial port ptm0 [ 188.246090][T11308] loop1: detected capacity change from 0 to 2048 [ 188.294394][ T3527] loop1: p2 p3 p7 [ 188.308210][T11308] loop1: p2 p3 p7 [ 188.488139][T11326] FAULT_INJECTION: forcing a failure. [ 188.488139][T11326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.501513][T11326] CPU: 1 UID: 0 PID: 11326 Comm: syz.4.2775 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 188.501619][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.501643][T11326] Call Trace: [ 188.501651][T11326] [ 188.501661][T11326] __dump_stack+0x1d/0x30 [ 188.501687][T11326] dump_stack_lvl+0xe8/0x140 [ 188.501712][T11326] dump_stack+0x15/0x1b [ 188.501733][T11326] should_fail_ex+0x265/0x280 [ 188.501828][T11326] should_fail+0xb/0x20 [ 188.501857][T11326] should_fail_usercopy+0x1a/0x20 [ 188.501927][T11326] _copy_from_iter+0xcf/0xdd0 [ 188.501968][T11326] ? __build_skb_around+0x1a0/0x200 [ 188.502012][T11326] ? __alloc_skb+0x223/0x320 [ 188.502056][T11326] netlink_sendmsg+0x471/0x6b0 [ 188.502078][T11326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.502137][T11326] __sock_sendmsg+0x142/0x180 [ 188.502164][T11326] ____sys_sendmsg+0x31e/0x4e0 [ 188.502205][T11326] ___sys_sendmsg+0x17b/0x1d0 [ 188.502253][T11326] __x64_sys_sendmsg+0xd4/0x160 [ 188.502286][T11326] x64_sys_call+0x2999/0x2fb0 [ 188.502313][T11326] do_syscall_64+0xd0/0x1a0 [ 188.502342][T11326] ? clear_bhb_loop+0x40/0x90 [ 188.502365][T11326] ? clear_bhb_loop+0x40/0x90 [ 188.502401][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.502427][T11326] RIP: 0033:0x7fdeeef6e969 [ 188.502444][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.502466][T11326] RSP: 002b:00007fdeed5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.502489][T11326] RAX: ffffffffffffffda RBX: 00007fdeef195fa0 RCX: 00007fdeeef6e969 [ 188.502505][T11326] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 188.502611][T11326] RBP: 00007fdeed5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.502623][T11326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.502642][T11326] R13: 0000000000000000 R14: 00007fdeef195fa0 R15: 00007ffe645de1f8 [ 188.502668][T11326] [ 188.717077][T11321] loop3: detected capacity change from 0 to 2048 [ 188.762805][ T3527] Alternate GPT is invalid, using primary GPT. [ 188.769277][ T3527] loop3: p2 p3 p7 [ 188.789104][T11321] Alternate GPT is invalid, using primary GPT. [ 188.795526][T11321] loop3: p2 p3 p7 [ 188.862641][T11335] netem: change failed [ 188.872444][T11335] serio: Serial port ptm0 [ 188.937713][T11339] loop2: detected capacity change from 0 to 512 [ 188.960564][T11339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.974228][T11339] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.047909][T11347] lo speed is unknown, defaulting to 1000 [ 189.057369][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.137190][T11358] loop2: detected capacity change from 0 to 2048 [ 189.162072][T11358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.388993][T11370] loop3: detected capacity change from 0 to 256 [ 189.527042][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.581419][T11383] loop2: detected capacity change from 0 to 2048 [ 189.633838][T11390] loop3: detected capacity change from 0 to 2048 [ 189.638950][T11387] loop1: detected capacity change from 0 to 8192 [ 189.642332][T11390] ext4: Unknown parameter 'smackfsfloor' [ 189.665041][T11383] loop2: p2 p3 p7 [ 189.680261][T11388] loop4: detected capacity change from 0 to 512 [ 189.701321][ T4384] loop1: p1 p2[DM] p4 [ 189.705556][ T4384] loop1: p1 size 196608 extends beyond EOD, truncated [ 189.736059][T11388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.750989][T11388] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.762183][ T4384] loop1: p2 start 4292936063 is beyond EOD, truncated [ 189.769006][ T4384] loop1: p4 size 50331648 extends beyond EOD, truncated [ 189.790391][T11387] loop1: p1 p2[DM] p4 [ 189.794561][T11387] loop1: p1 size 196608 extends beyond EOD, truncated [ 189.814417][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 189.816733][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 189.842272][T11387] loop1: p2 start 4292936063 is beyond EOD, truncated [ 189.849169][T11387] loop1: p4 size 50331648 extends beyond EOD, truncated [ 189.892375][T11394] lo speed is unknown, defaulting to 1000 [ 189.963063][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.077581][T11409] lo speed is unknown, defaulting to 1000 [ 190.124714][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 190.124807][ T29] audit: type=1326 audit(1747345159.610:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.157113][ T29] audit: type=1326 audit(1747345159.640:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.180765][ T29] audit: type=1326 audit(1747345159.640:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.204285][ T29] audit: type=1326 audit(1747345159.640:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.227817][ T29] audit: type=1326 audit(1747345159.640:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.251649][ T29] audit: type=1326 audit(1747345159.640:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.275233][ T29] audit: type=1326 audit(1747345159.640:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.277093][T11427] loop4: detected capacity change from 0 to 512 [ 190.298660][ T29] audit: type=1326 audit(1747345159.640:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.298700][ T29] audit: type=1326 audit(1747345159.640:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.298739][ T29] audit: type=1326 audit(1747345159.640:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.4.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 190.365895][T11429] loop3: detected capacity change from 0 to 2048 [ 190.385893][T11429] ext4: Unknown parameter 'smackfsfloor' [ 190.413304][T11427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.452258][T11427] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.468617][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.508416][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.578709][T11442] loop3: detected capacity change from 0 to 2048 [ 190.626132][ T3527] Alternate GPT is invalid, using primary GPT. [ 190.632566][ T3527] loop3: p2 p3 p7 [ 190.658374][T11439] loop2: detected capacity change from 0 to 8192 [ 190.675496][T11442] Alternate GPT is invalid, using primary GPT. [ 190.682021][T11442] loop3: p2 p3 p7 [ 190.713782][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.747587][ T3006] Alternate GPT is invalid, using primary GPT. [ 190.754019][ T3006] loop3: p2 p3 p7 [ 190.758841][T11439] loop2: p1 p2[DM] p4 [ 190.784349][T11439] loop2: p1 size 196608 extends beyond EOD, truncated [ 190.824745][T11439] loop2: p2 start 4292936063 is beyond EOD, truncated [ 190.831689][T11439] loop2: p4 size 50331648 extends beyond EOD, truncated [ 190.868200][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 190.870485][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 190.885470][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 190.952731][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 190.960768][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 190.971484][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 190.994596][T11457] lo speed is unknown, defaulting to 1000 [ 191.014771][T11468] __nla_validate_parse: 15 callbacks suppressed [ 191.014789][T11468] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 191.020444][ T6998] udevd[6998]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 191.021119][T11468] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 191.031365][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 191.072913][T11451] lo speed is unknown, defaulting to 1000 [ 191.582154][T11499] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2833'. [ 191.687959][T11500] lo speed is unknown, defaulting to 1000 [ 191.791605][T11520] loop3: detected capacity change from 0 to 2048 [ 191.798595][T11520] ext4: Unknown parameter 'smackfsfloor' [ 191.850839][T11500] chnl_net:caif_netlink_parms(): no params data found [ 191.928822][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.936027][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.946443][T11500] bridge_slave_0: entered allmulticast mode [ 191.954047][T11500] bridge_slave_0: entered promiscuous mode [ 191.962540][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.969673][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.977254][T11500] bridge_slave_1: entered allmulticast mode [ 191.978939][T11535] loop4: detected capacity change from 0 to 256 [ 191.985237][T11500] bridge_slave_1: entered promiscuous mode [ 192.015207][T11526] lo speed is unknown, defaulting to 1000 [ 192.044923][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.071975][T11538] loop4: detected capacity change from 0 to 2048 [ 192.074042][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.112817][ T3527] Alternate GPT is invalid, using primary GPT. [ 192.119499][ T3527] loop4: p2 p3 p7 [ 192.124766][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.143714][T11538] Alternate GPT is invalid, using primary GPT. [ 192.145095][T11500] team0: Port device team_slave_0 added [ 192.150183][T11538] loop4: p2 p3 p7 [ 192.157006][T11500] team0: Port device team_slave_1 added [ 192.236854][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.298511][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.305611][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.331627][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.348188][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.355249][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.381231][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.404335][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.423141][T11546] loop4: detected capacity change from 0 to 512 [ 192.470775][T11546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.484333][T11555] loop2: detected capacity change from 0 to 736 [ 192.491618][T11546] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.507448][T11553] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2847'. [ 192.519638][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.627463][T11500] hsr_slave_0: entered promiscuous mode [ 192.633841][T11500] hsr_slave_1: entered promiscuous mode [ 192.639900][T11500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.647473][T11500] Cannot create hsr debugfs directory [ 192.664056][T11565] siw: device registration error -23 [ 192.701747][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.779377][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 192.815704][ T37] bridge_slave_1: left allmulticast mode [ 192.821462][ T37] bridge_slave_1: left promiscuous mode [ 192.827114][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.838165][ T37] bridge_slave_0: left allmulticast mode [ 192.844077][ T37] bridge_slave_0: left promiscuous mode [ 192.849979][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.874403][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2855'. [ 192.885922][T11578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2855'. [ 193.041370][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.051362][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.061010][ T37] bond0 (unregistering): Released all slaves [ 193.070035][ T37] bond1 (unregistering): Released all slaves [ 193.137346][ T37] hsr_slave_0: left promiscuous mode [ 193.147926][ T37] hsr_slave_1: left promiscuous mode [ 193.155294][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.162876][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.184246][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.191773][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.214926][ T37] veth1_macvtap: left promiscuous mode [ 193.221027][ T37] veth1_vlan: left promiscuous mode [ 193.227998][ T37] veth0_vlan: left promiscuous mode [ 193.346677][ T37] team0 (unregistering): Port device team_slave_1 removed [ 193.370366][ T37] team0 (unregistering): Port device team_slave_0 removed [ 193.473253][T11638] lo speed is unknown, defaulting to 1000 [ 193.473560][T11627] loop4: detected capacity change from 0 to 512 [ 193.553217][T11656] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2869'. [ 193.564625][T11627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.585978][T11656] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2869'. [ 193.595898][T11627] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.620767][T11653] loop3: detected capacity change from 0 to 512 [ 193.694560][T11653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.711382][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.725990][T11653] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.740650][T11500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.760001][T11500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.776990][T11500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.798332][T11500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.810352][ T37] IPVS: stop unused estimator thread 0... [ 193.850561][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.873840][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.910251][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.917356][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.946998][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 193.980082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.987188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.047710][T11500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.138270][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.203820][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.306762][T11718] loop2: detected capacity change from 0 to 8192 [ 194.336273][T11717] loop3: detected capacity change from 0 to 2048 [ 194.354111][T11717] ext4: Unknown parameter 'smackfsfloor' [ 194.372299][T11718] loop2: p1 p2[DM] p4 [ 194.376550][T11718] loop2: p1 size 196608 extends beyond EOD, truncated [ 194.831606][T11718] loop2: p2 start 4292936063 is beyond EOD, truncated [ 194.838459][T11718] loop2: p4 size 50331648 extends beyond EOD, truncated [ 194.957073][T11500] veth0_vlan: entered promiscuous mode [ 194.991753][T11500] veth1_vlan: entered promiscuous mode [ 195.014955][T11500] veth0_macvtap: entered promiscuous mode [ 195.022333][T11500] veth1_macvtap: entered promiscuous mode [ 195.033252][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.043890][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.107495][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.117483][T11739] lo speed is unknown, defaulting to 1000 [ 195.118169][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.133844][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.143799][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.154347][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.189067][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.227794][T11500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.236698][T11500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.245468][T11500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.254346][T11500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.267600][T11763] loop4: detected capacity change from 0 to 2048 [ 195.344633][ T3527] loop4: p2 p3 p7 [ 195.347239][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 195.347258][ T29] audit: type=1400 audit(1747345164.830:6933): avc: denied { mounton } for pid=11500 comm="syz-executor" path="/root/syzkaller.x2t58c/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 195.383604][ T29] audit: type=1400 audit(1747345164.870:6934): avc: denied { mount } for pid=11500 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.405978][ T29] audit: type=1400 audit(1747345164.870:6935): avc: denied { mounton } for pid=11500 comm="syz-executor" path="/root/syzkaller.x2t58c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 195.416406][T11763] loop4: p2 p3 p7 [ 195.432925][ T29] audit: type=1400 audit(1747345164.870:6936): avc: denied { mounton } for pid=11500 comm="syz-executor" path="/root/syzkaller.x2t58c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 195.482385][ T29] audit: type=1400 audit(1747345164.960:6937): avc: denied { mounton } for pid=11500 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 195.568954][ T3006] loop4: p2 p3 p7 [ 195.623330][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 195.623899][ T29] audit: type=1326 audit(1747345165.110:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d948e969 code=0x7ffc0000 [ 195.641165][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 195.656670][ T29] audit: type=1326 audit(1747345165.110:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d948e969 code=0x7ffc0000 [ 195.691210][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 195.739992][ T29] audit: type=1326 audit(1747345165.190:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2d948e969 code=0x7ffc0000 [ 195.763709][ T29] audit: type=1326 audit(1747345165.190:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d948e969 code=0x7ffc0000 [ 195.787379][ T29] audit: type=1326 audit(1747345165.190:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.0.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d948e969 code=0x7ffc0000 [ 195.857560][T11809] loop1: detected capacity change from 0 to 2048 [ 195.903229][T11809] ext4: Unknown parameter 'smackfsfloor' [ 195.945061][T11803] loop4: detected capacity change from 0 to 512 [ 195.959435][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 195.970305][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 195.982171][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 195.993396][T11803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.043705][T11803] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.058338][T11830] loop2: detected capacity change from 0 to 512 [ 196.060925][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 196.077494][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 196.089170][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 196.158097][T11810] lo speed is unknown, defaulting to 1000 [ 196.270466][T11830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.301733][T11692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.334283][T11830] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.357836][T11858] loop1: detected capacity change from 0 to 2048 [ 196.364777][T11858] ext4: Unknown parameter 'smackfsfloor' [ 196.394137][T11692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.396582][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.474261][T11692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.559387][T11692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.586249][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 196.595607][T11874] netem: change failed [ 196.601157][T11874] serio: Serial port ptm0 [ 196.607558][T11876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2913'. [ 196.617955][T11810] chnl_net:caif_netlink_parms(): no params data found [ 196.635055][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.638580][T11876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2913'. [ 196.709028][T11884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2914'. [ 196.725989][T11884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2914'. [ 196.740826][T11888] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 196.749363][T11888] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 196.758117][T11888] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 196.782589][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.789846][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.798299][T11810] bridge_slave_0: entered allmulticast mode [ 196.812382][T11810] bridge_slave_0: entered promiscuous mode [ 196.830409][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.837520][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.853697][T11810] bridge_slave_1: entered allmulticast mode [ 196.960211][T11810] bridge_slave_1: entered promiscuous mode [ 197.181982][T11692] bond0 (unregistering): Released all slaves [ 197.327965][T11923] lo speed is unknown, defaulting to 1000 [ 197.347022][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.425005][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.456235][T11692] hsr_slave_0: left promiscuous mode [ 197.470627][T11692] hsr_slave_1: left promiscuous mode [ 197.483551][T11692] veth1_macvtap: left promiscuous mode [ 197.492388][T11692] veth1_vlan: left promiscuous mode [ 197.497918][T11692] veth0_vlan: left promiscuous mode [ 197.620869][T11933] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2923'. [ 197.647384][T11810] team0: Port device team_slave_0 added [ 197.672116][T11810] team0: Port device team_slave_1 added [ 197.697415][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.704493][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.730673][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.814591][T11950] loop2: detected capacity change from 0 to 2048 [ 197.822063][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.829049][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.855129][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.884346][ T3527] Alternate GPT is invalid, using primary GPT. [ 197.890939][ T3527] loop2: p2 p3 p7 [ 197.912919][T11950] Alternate GPT is invalid, using primary GPT. [ 197.919383][T11950] loop2: p2 p3 p7 [ 197.919864][T11955] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2929'. [ 197.929077][T11958] serio: Serial port ptm0 [ 197.950357][ T3006] Alternate GPT is invalid, using primary GPT. [ 197.956673][ T3006] loop2: p2 p3 p7 [ 197.966286][T11810] hsr_slave_0: entered promiscuous mode [ 198.031671][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 198.054916][T11810] hsr_slave_1: entered promiscuous mode [ 198.071198][T11810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.085660][T11810] Cannot create hsr debugfs directory [ 198.095424][T11970] netem: change failed [ 198.100626][T11980] serio: Serial port ptm0 [ 198.265699][T11996] loop2: detected capacity change from 0 to 8192 [ 198.299400][ T3527] loop2: p1 p2[DM] p4 [ 198.303711][ T3527] loop2: p1 size 196608 extends beyond EOD, truncated [ 198.312070][ T3527] loop2: p2 start 4292936063 is beyond EOD, truncated [ 198.318920][ T3527] loop2: p4 size 50331648 extends beyond EOD, truncated [ 198.329240][T11996] loop2: p1 p2[DM] p4 [ 198.333688][T11996] loop2: p1 size 196608 extends beyond EOD, truncated [ 198.348860][T11996] loop2: p2 start 4292936063 is beyond EOD, truncated [ 198.355806][T11996] loop2: p4 size 50331648 extends beyond EOD, truncated [ 198.569571][T11810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.578548][T11810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.588126][T11810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.597789][T11810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.638245][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.652444][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.663043][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.670149][T11692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.682976][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.690139][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.707413][T11810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.717909][T11810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.785205][T12001] loop4: detected capacity change from 0 to 2048 [ 198.801516][T12001] ext4: Unknown parameter 'smackfsfloor' [ 198.839934][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.956800][T11810] veth0_vlan: entered promiscuous mode [ 198.964709][T11810] veth1_vlan: entered promiscuous mode [ 198.981536][T11810] veth0_macvtap: entered promiscuous mode [ 198.990631][T11810] veth1_macvtap: entered promiscuous mode [ 199.002539][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.013101][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.023049][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.033538][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.061026][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.110657][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.121360][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.131292][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.141827][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.151738][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.162300][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.173583][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.184608][T11810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.193085][T12026] siw: device registration error -23 [ 199.193411][T11810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.207572][T11810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.216481][T11810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.270007][T12034] loop3: detected capacity change from 0 to 2048 [ 199.278805][T12034] ext4: Unknown parameter 'smackfsfloor' [ 199.388664][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.450756][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.531259][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.711562][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.774700][T12044] lo speed is unknown, defaulting to 1000 [ 199.935146][ T12] bridge_slave_1: left allmulticast mode [ 199.940986][ T12] bridge_slave_1: left promiscuous mode [ 199.946780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.984090][T12083] loop1: detected capacity change from 0 to 2048 [ 200.035735][ T12] bridge_slave_0: left promiscuous mode [ 200.041533][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.054583][ T3527] Alternate GPT is invalid, using primary GPT. [ 200.060996][ T3527] loop1: p2 p3 p7 [ 200.243848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.293316][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.343667][ T12] bond0 (unregistering): Released all slaves [ 200.368912][T12083] Alternate GPT is invalid, using primary GPT. [ 200.375454][T12083] loop1: p2 p3 p7 [ 200.481576][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 200.481594][ T29] audit: type=1326 audit(1747345169.970:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.526395][ T29] audit: type=1326 audit(1747345169.970:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.550044][ T29] audit: type=1326 audit(1747345169.970:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.573790][ T29] audit: type=1326 audit(1747345169.970:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.597320][ T29] audit: type=1326 audit(1747345169.970:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.620985][ T29] audit: type=1326 audit(1747345169.970:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.644774][ T29] audit: type=1326 audit(1747345169.970:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.668367][ T29] audit: type=1326 audit(1747345169.970:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.3.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.692866][ T12] hsr_slave_1: left promiscuous mode [ 200.698602][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.706155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.727303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.734785][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.781396][ T29] audit: type=1326 audit(1747345170.260:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.3.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.805151][ T29] audit: type=1326 audit(1747345170.260:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.3.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 200.831496][ T12] veth1_macvtap: left promiscuous mode [ 200.898504][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.908535][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.941865][T12136] loop3: detected capacity change from 0 to 512 [ 200.957414][T12138] loop4: detected capacity change from 0 to 512 [ 201.013426][T12136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.013772][T12138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.034089][T12136] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.047357][T12138] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.063761][T12134] syz.0.2976: attempt to access beyond end of device [ 201.063761][T12134] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 201.085672][T12150] loop1: detected capacity change from 0 to 2048 [ 201.143080][ T3527] Alternate GPT is invalid, using primary GPT. [ 201.143522][T12044] chnl_net:caif_netlink_parms(): no params data found [ 201.149564][ T3527] loop1: p2 p3 p7 [ 201.194974][T12150] Alternate GPT is invalid, using primary GPT. [ 201.201374][T12150] loop1: p2 p3 p7 [ 201.235800][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.341803][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.348934][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.358287][T12044] bridge_slave_0: entered allmulticast mode [ 201.365924][T12044] bridge_slave_0: entered promiscuous mode [ 201.373242][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.380529][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.387804][T12044] bridge_slave_1: entered allmulticast mode [ 201.394694][T12044] bridge_slave_1: entered promiscuous mode [ 201.412539][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 201.412727][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 201.427125][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 201.456556][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.471317][T12044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.504681][T12184] loop4: detected capacity change from 0 to 512 [ 201.505789][T12044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.521859][T12184] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 201.532779][T12184] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 201.542887][T12184] EXT4-fs (loop4): group descriptors corrupted! [ 201.607534][T12044] team0: Port device team_slave_0 added [ 201.625230][T12044] team0: Port device team_slave_1 added [ 201.710361][T12044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.717377][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.743505][T12044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.809316][T12044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.816489][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.842515][T12044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.862851][T12212] loop1: detected capacity change from 0 to 512 [ 201.894198][T12212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.914845][T12215] loop3: detected capacity change from 0 to 512 [ 201.930783][T12212] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.948533][T12044] hsr_slave_0: entered promiscuous mode [ 201.964405][T12215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.979757][T12044] hsr_slave_1: entered promiscuous mode [ 201.986543][T12215] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.110117][T11500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.208369][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.210776][T12241] lo speed is unknown, defaulting to 1000 [ 202.350336][T12265] __nla_validate_parse: 5 callbacks suppressed [ 202.350357][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.365072][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.375443][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.385061][T12044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.395436][T12044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.402636][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.411086][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.420052][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.430720][T12044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.439798][T12044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.468667][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.477138][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.549974][T12265] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 202.671650][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.700738][T12297] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2997'. [ 202.743429][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.761626][T12044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.772072][T12044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.802090][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.809247][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.828088][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.835288][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.863336][T12319] serio: Serial port ptm0 [ 202.965876][T12313] lo speed is unknown, defaulting to 1000 [ 203.105680][T12044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.293532][T12044] veth0_vlan: entered promiscuous mode [ 203.362336][T12044] veth1_vlan: entered promiscuous mode [ 203.381132][T12044] veth0_macvtap: entered promiscuous mode [ 203.395498][T12044] veth1_macvtap: entered promiscuous mode [ 203.419706][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.430220][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.440151][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.450609][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.461785][T12044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.473537][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.484140][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.494099][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.504677][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.514574][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.525162][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.538919][T12044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.547442][T12044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.556424][T12044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.565223][T12044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.574025][T12044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.604790][T12379] loop3: detected capacity change from 0 to 8192 [ 203.659888][ T3527] loop3: p1 p2[DM] p4 [ 203.672258][ T3527] loop3: p1 size 196608 extends beyond EOD, truncated [ 203.680958][ T3527] loop3: p2 start 4292936063 is beyond EOD, truncated [ 203.687859][ T3527] loop3: p4 size 50331648 extends beyond EOD, truncated [ 203.706798][T12379] loop3: p1 p2[DM] p4 [ 203.711304][T12379] loop3: p1 size 196608 extends beyond EOD, truncated [ 203.744235][T12379] loop3: p2 start 4292936063 is beyond EOD, truncated [ 203.751133][T12379] loop3: p4 size 50331648 extends beyond EOD, truncated [ 203.795979][T12396] lo speed is unknown, defaulting to 1000 [ 203.850635][T12413] loop1: detected capacity change from 0 to 2048 [ 203.902565][ T3504] Alternate GPT is invalid, using primary GPT. [ 203.909028][ T3504] loop1: p2 p3 p7 [ 203.941418][T12413] Alternate GPT is invalid, using primary GPT. [ 203.947961][T12413] loop1: p2 p3 p7 [ 203.985727][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 203.985776][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 203.997288][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 204.027018][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 204.037878][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 204.042610][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 204.125962][T12427] lo speed is unknown, defaulting to 1000 [ 204.329881][T12444] loop3: detected capacity change from 0 to 512 [ 204.343449][T12444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.356490][T12444] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.442660][T12448] lo speed is unknown, defaulting to 1000 [ 204.607005][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.654721][T12464] loop1: detected capacity change from 0 to 736 [ 204.678241][T12470] loop3: detected capacity change from 0 to 2048 [ 204.742108][ T4384] Alternate GPT is invalid, using primary GPT. [ 204.742341][T12458] lo speed is unknown, defaulting to 1000 [ 204.748483][ T4384] loop3: p2 p3 p7 [ 204.766829][T12470] Alternate GPT is invalid, using primary GPT. [ 204.773347][T12470] loop3: p2 p3 p7 [ 204.820062][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 204.864736][T12475] siw: device registration error -23 [ 204.948768][T12483] lo speed is unknown, defaulting to 1000 [ 204.999100][T11692] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.055431][T12458] chnl_net:caif_netlink_parms(): no params data found [ 205.120552][T11692] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.132051][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.139300][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.146678][T12458] bridge_slave_0: entered allmulticast mode [ 205.153596][T12458] bridge_slave_0: entered promiscuous mode [ 205.161142][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.168239][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.175630][T12458] bridge_slave_1: entered allmulticast mode [ 205.182158][T12458] bridge_slave_1: entered promiscuous mode [ 205.192516][T11692] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.216434][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.228242][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.242045][T11692] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.270193][T12507] lo speed is unknown, defaulting to 1000 [ 205.271295][T12458] team0: Port device team_slave_0 added [ 205.283095][T12458] team0: Port device team_slave_1 added [ 205.304866][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.311918][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.337971][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.352366][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.359458][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.385510][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.433440][T12458] hsr_slave_0: entered promiscuous mode [ 205.439976][T12458] hsr_slave_1: entered promiscuous mode [ 205.445866][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.453575][T12458] Cannot create hsr debugfs directory [ 205.494203][T11692] bridge_slave_1: left allmulticast mode [ 205.500005][T11692] bridge_slave_1: left promiscuous mode [ 205.505739][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.513981][T11692] bridge_slave_0: left promiscuous mode [ 205.519770][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.521143][T12519] loop3: detected capacity change from 0 to 512 [ 205.528316][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 205.528333][ T29] audit: type=1326 audit(1747345175.010:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.563020][ T29] audit: type=1326 audit(1747345175.010:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.608514][T12519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.622977][T12519] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.656915][T11692] team0: Port device geneve1 removed [ 205.657023][ T29] audit: type=1326 audit(1747345175.130:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.685844][ T29] audit: type=1326 audit(1747345175.140:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.709405][ T29] audit: type=1326 audit(1747345175.140:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.733086][ T29] audit: type=1326 audit(1747345175.140:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe32519e969 code=0x7ffc0000 [ 205.782044][T11692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.796541][T11692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.814128][ T29] audit: type=1326 audit(1747345175.300:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 205.816370][T11692] bond0 (unregistering): Released all slaves [ 205.837753][ T29] audit: type=1326 audit(1747345175.300:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 205.847632][T11692] bond1 (unregistering): Released all slaves [ 205.884953][ T29] audit: type=1326 audit(1747345175.360:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 205.908631][ T29] audit: type=1326 audit(1747345175.360:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.4.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 205.992676][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.053109][T11692] hsr_slave_0: left promiscuous mode [ 206.077512][T11692] hsr_slave_1: left promiscuous mode [ 206.089416][T11692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.106454][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.113991][T11692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.137843][T11692] veth1_macvtap: left promiscuous mode [ 206.148677][T11692] veth1_vlan: left promiscuous mode [ 206.156800][T11692] veth0_vlan: left promiscuous mode [ 206.224059][T11692] team0 (unregistering): Port device team_slave_1 removed [ 206.235505][T11692] team0 (unregistering): Port device team_slave_0 removed [ 206.327827][T12563] loop2: detected capacity change from 0 to 736 [ 206.366556][T12558] loop3: detected capacity change from 0 to 512 [ 206.404754][T12561] lo speed is unknown, defaulting to 1000 [ 206.422092][T12558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.454181][T12558] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.488355][T12581] siw: device registration error -23 [ 206.562415][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.673730][T12458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.693107][T12595] lo speed is unknown, defaulting to 1000 [ 206.699151][T12458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.708100][T12458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.723154][T12458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.784716][T12613] ip6t_rpfilter: unknown options [ 206.793571][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 206.810094][T12613] loop1: detected capacity change from 0 to 1024 [ 206.819888][ T3391] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.831660][T12613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.839004][T12613] EXT4-fs: Mount option(s) incompatible with ext2 [ 206.892223][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.905964][T12616] fido_id[12616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.984012][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.012322][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.019523][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.052769][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.059942][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.073378][T12632] loop4: detected capacity change from 0 to 2048 [ 207.137119][ T3527] Alternate GPT is invalid, using primary GPT. [ 207.143830][ T3527] loop4: p2 p3 p7 [ 207.178587][T12632] Alternate GPT is invalid, using primary GPT. [ 207.185201][T12632] loop4: p2 p3 p7 [ 207.267010][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.316219][T12657] loop2: detected capacity change from 0 to 2048 [ 207.369473][T12665] serio: Serial port ptm0 [ 207.384199][ T3527] Alternate GPT is invalid, using primary GPT. [ 207.390850][ T3527] loop2: p2 p3 p7 [ 207.423164][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 207.424940][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 207.443579][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 207.447187][T12657] Alternate GPT is invalid, using primary GPT. [ 207.459844][T12657] loop2: p2 p3 p7 [ 207.475403][T12669] loop3: detected capacity change from 0 to 512 [ 207.531087][ T3006] Alternate GPT is invalid, using primary GPT. [ 207.537498][ T3006] loop2: p2 p3 p7 [ 207.548871][T12669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.609416][T12669] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.637210][T12458] veth0_vlan: entered promiscuous mode [ 207.657111][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 207.668722][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 207.680686][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 207.688725][T12678] lo speed is unknown, defaulting to 1000 [ 207.698046][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 207.709726][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 207.718850][T12458] veth1_vlan: entered promiscuous mode [ 207.721298][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 207.744022][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 207.770085][T12458] veth0_macvtap: entered promiscuous mode [ 207.783202][T12458] veth1_macvtap: entered promiscuous mode [ 207.797681][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.808306][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.818202][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.828735][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.838683][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.849218][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.873284][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.904408][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.915020][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.925154][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.935706][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.945576][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.956055][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.970429][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.985863][T12458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.994700][T12458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.003638][T12458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.012498][T12458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.023374][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.034853][T12717] __nla_validate_parse: 26 callbacks suppressed [ 208.034871][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.049681][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.058582][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.093202][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.101664][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.110288][T12717] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.932360][T12735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3084'. [ 208.944580][T12735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3084'. [ 209.087149][T12742] loop2: detected capacity change from 0 to 2048 [ 209.182049][ T3527] Alternate GPT is invalid, using primary GPT. [ 209.188737][ T3527] loop2: p2 p3 p7 [ 209.195621][T12749] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 209.199341][T12742] Alternate GPT is invalid, using primary GPT. [ 209.204269][T12749] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 209.210469][T12742] loop2: p2 p3 p7 [ 209.588276][T12773] lo speed is unknown, defaulting to 1000 [ 209.658945][T12777] loop3: detected capacity change from 0 to 512 [ 209.738786][T12777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.809281][T12777] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.893253][T12791] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.906258][T12785] loop2: detected capacity change from 0 to 512 [ 209.961664][T12785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.991353][T12798] loop4: detected capacity change from 0 to 512 [ 209.995461][T12785] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.033843][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.044399][T12798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.069506][T12798] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.143680][T12044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.198069][T12808] loop1: detected capacity change from 0 to 512 [ 210.246171][T12808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.263143][T12808] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.338665][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.472918][T12832] lo speed is unknown, defaulting to 1000 [ 210.482222][T11500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.801261][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 210.801275][ T29] audit: type=1326 audit(1747345180.290:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 210.915904][T12850] loop1: detected capacity change from 0 to 2048 [ 210.932399][ T29] audit: type=1326 audit(1747345180.370:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 210.956161][ T29] audit: type=1326 audit(1747345180.370:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 210.979689][ T29] audit: type=1326 audit(1747345180.370:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.003324][ T29] audit: type=1326 audit(1747345180.370:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.026897][ T29] audit: type=1326 audit(1747345180.370:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.050451][ T29] audit: type=1326 audit(1747345180.370:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.074014][ T29] audit: type=1326 audit(1747345180.370:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.097525][ T29] audit: type=1326 audit(1747345180.370:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.121103][ T29] audit: type=1326 audit(1747345180.410:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeef6e969 code=0x7ffc0000 [ 211.166169][ T3527] Alternate GPT is invalid, using primary GPT. [ 211.172715][ T3527] loop1: p2 p3 p7 [ 211.251521][T12850] Alternate GPT is invalid, using primary GPT. [ 211.257916][T12850] loop1: p2 p3 p7 [ 211.285482][T12861] netlink: 'syz.4.3129': attribute type 2 has an invalid length. [ 211.295143][ T3006] Alternate GPT is invalid, using primary GPT. [ 211.301688][ T3006] loop1: p2 p3 p7 [ 211.490220][T12876] lo speed is unknown, defaulting to 1000 [ 211.580531][T12895] loop4: detected capacity change from 0 to 2048 [ 211.587900][T12897] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 211.629271][ T3527] Alternate GPT is invalid, using primary GPT. [ 211.635884][ T3527] loop4: p2 p3 p7 [ 211.653063][T12895] Alternate GPT is invalid, using primary GPT. [ 211.659584][T12895] loop4: p2 p3 p7 [ 211.682063][ T3006] Alternate GPT is invalid, using primary GPT. [ 211.688708][ T3006] loop4: p2 p3 p7 [ 211.886182][T12922] loop2: detected capacity change from 0 to 512 [ 211.927711][T12922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.012837][T12922] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.073266][T12044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.153762][T12938] loop2: detected capacity change from 0 to 2048 [ 212.201656][ T3527] Alternate GPT is invalid, using primary GPT. [ 212.208042][ T3527] loop2: p2 p3 p7 [ 212.217892][T12938] Alternate GPT is invalid, using primary GPT. [ 212.224363][T12938] loop2: p2 p3 p7 [ 212.352002][T12944] lo speed is unknown, defaulting to 1000 [ 212.595440][T12952] serio: Serial port ptm0 [ 212.821879][T12962] loop2: detected capacity change from 0 to 512 [ 212.843295][T12962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.855974][T12962] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.936072][T12044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.993910][T12979] loop4: detected capacity change from 0 to 512 [ 213.004312][T12979] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 213.013383][T12979] EXT4-fs (loop4): invalid journal inode [ 213.019085][T12979] EXT4-fs (loop4): can't get journal size [ 213.025791][T12979] EXT4-fs (loop4): 1 truncate cleaned up [ 213.032059][T12979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.075167][T12983] loop2: detected capacity change from 0 to 512 [ 213.091181][T12983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.105239][T12983] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.167663][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.185303][T12044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.188325][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.202193][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.210053][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.217801][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.225583][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.233384][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.241254][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.249011][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.256812][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.264612][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.272404][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.280269][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.288035][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.295892][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.298710][T12991] __nla_validate_parse: 18 callbacks suppressed [ 213.298792][T12991] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3180'. [ 213.303657][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.303687][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.334472][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.342333][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.350236][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.358051][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.365895][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.373778][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.381565][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.389342][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.397094][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.404919][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.412703][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.420582][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.428348][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.436153][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.444566][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.452688][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.460519][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.468271][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.476066][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.483943][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.491762][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.499546][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.507329][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.515110][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.522959][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.530841][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.538725][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 213.547902][T12989] FAULT_INJECTION: forcing a failure. [ 213.547902][T12989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.548245][ T3393] hid-generic 0000:007F:FFFFFFFE.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.561065][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.4.3178 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 213.561104][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.561120][T12989] Call Trace: [ 213.561148][T12989] [ 213.561160][T12989] __dump_stack+0x1d/0x30 [ 213.561188][T12989] dump_stack_lvl+0xe8/0x140 [ 213.561238][T12989] dump_stack+0x15/0x1b [ 213.561260][T12989] should_fail_ex+0x265/0x280 [ 213.561351][T12989] should_fail+0xb/0x20 [ 213.561390][T12989] should_fail_usercopy+0x1a/0x20 [ 213.561416][T12989] _copy_to_user+0x20/0xa0 [ 213.561446][T12989] simple_read_from_buffer+0xb5/0x130 [ 213.561485][T12989] proc_fail_nth_read+0x100/0x140 [ 213.561522][T12989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.561564][T12989] vfs_read+0x19d/0x6f0 [ 213.561671][T12989] ? __rcu_read_unlock+0x4f/0x70 [ 213.561700][T12989] ? __fget_files+0x184/0x1c0 [ 213.561740][T12989] ksys_read+0xda/0x1a0 [ 213.561792][T12989] __x64_sys_read+0x40/0x50 [ 213.561825][T12989] x64_sys_call+0x2d77/0x2fb0 [ 213.561902][T12989] do_syscall_64+0xd0/0x1a0 [ 213.561933][T12989] ? clear_bhb_loop+0x40/0x90 [ 213.562006][T12989] ? clear_bhb_loop+0x40/0x90 [ 213.562034][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.562062][T12989] RIP: 0033:0x7fdeeef6d37c [ 213.562083][T12989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.562106][T12989] RSP: 002b:00007fdeed5d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.562150][T12989] RAX: ffffffffffffffda RBX: 00007fdeef195fa0 RCX: 00007fdeeef6d37c [ 213.562166][T12989] RDX: 000000000000000f RSI: 00007fdeed5d70a0 RDI: 0000000000000004 [ 213.562181][T12989] RBP: 00007fdeed5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.562197][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.562213][T12989] R13: 0000000000000000 R14: 00007fdeef195fa0 R15: 00007ffe645de1f8 [ 213.562238][T12989] [ 213.588157][T12997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3183'. [ 213.624915][T12998] fido_id[12998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.666253][T12997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3183'. [ 213.720870][T13005] loop4: detected capacity change from 0 to 2048 [ 213.844738][T13011] loop2: detected capacity change from 0 to 736 [ 213.882625][T13005] Alternate GPT is invalid, using primary GPT. [ 213.889004][T13005] loop4: p2 p3 p7 [ 213.927559][T13021] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3193'. [ 213.943684][ T3006] Alternate GPT is invalid, using primary GPT. [ 213.950316][ T3006] loop4: p2 p3 p7 [ 213.966074][T13022] siw: device registration error -23 [ 213.988392][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 214.013984][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 214.030067][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 214.047635][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 214.059387][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 214.070616][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 214.090723][T13026] loop4: detected capacity change from 0 to 512 [ 214.098474][T13028] ip6t_rpfilter: unknown options [ 214.104942][T13026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.110418][ T3393] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 214.122039][ T3393] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.127278][T13026] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3194: invalid indirect mapped block 4294967295 (level 1) [ 214.153991][T13028] loop3: detected capacity change from 0 to 1024 [ 214.169928][T13028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.179722][T13026] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3194: invalid indirect mapped block 4294967295 (level 1) [ 214.195997][T13028] EXT4-fs: Mount option(s) incompatible with ext2 [ 214.209750][T13026] EXT4-fs (loop4): 2 truncates cleaned up [ 214.216143][T13026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.239658][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.247233][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.254716][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.262234][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.269716][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x4 [ 214.277191][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.284663][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.292241][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.299700][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x2 [ 214.307103][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.314555][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.322105][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.329710][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.337118][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.344541][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.352033][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.359585][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.367048][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.374505][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.381926][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.389394][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.396820][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.404247][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.411773][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.419274][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.426670][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.434102][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.441555][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.449001][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.456507][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.463997][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.471434][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.478889][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.486312][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.493870][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.501332][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.508734][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.516167][ T3391] hid-generic 0000:007F:000C.0016: unknown main item tag 0x0 [ 214.524303][ T3391] hid-generic 0000:007F:000C.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.550660][T13033] fido_id[13033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.573907][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.584623][T13035] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 214.654440][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'. [ 214.755242][T13055] loop2: detected capacity change from 0 to 2048 [ 214.770339][T13058] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3206'. [ 214.791967][ T3527] Alternate GPT is invalid, using primary GPT. [ 214.798470][ T3527] loop2: p2 p3 p7 [ 214.813277][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.823949][T13055] Alternate GPT is invalid, using primary GPT. [ 214.830450][T13055] loop2: p2 p3 p7 [ 214.844484][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.911659][ T3504] ================================================================== [ 214.912102][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 214.919782][ T3504] BUG: KCSAN: data-race in touch_atime / touch_atime [ 214.931396][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 214.936192][ T3504] [ 214.936201][ T3504] write to 0xffff88811b049b18 of 4 bytes by task 4384 on cpu 0: [ 214.955900][ T3504] touch_atime+0x1e8/0x330 [ 214.960362][ T3504] shmem_file_read_iter+0x459/0x520 [ 214.965614][ T3504] vfs_read+0x5ca/0x6f0 [ 214.969799][ T3504] ksys_read+0xda/0x1a0 [ 214.973989][ T3504] __x64_sys_read+0x40/0x50 [ 214.978517][ T3504] x64_sys_call+0x2d77/0x2fb0 [ 214.983222][ T3504] do_syscall_64+0xd0/0x1a0 [ 214.987748][ T3504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.993676][ T3504] [ 214.996021][ T3504] read to 0xffff88811b049b18 of 4 bytes by task 3504 on cpu 1: [ 215.003584][ T3504] touch_atime+0x194/0x330 [ 215.008041][ T3504] shmem_file_read_iter+0x459/0x520 [ 215.013277][ T3504] vfs_read+0x5ca/0x6f0 [ 215.017460][ T3504] ksys_read+0xda/0x1a0 [ 215.021637][ T3504] __x64_sys_read+0x40/0x50 [ 215.026171][ T3504] x64_sys_call+0x2d77/0x2fb0 [ 215.030867][ T3504] do_syscall_64+0xd0/0x1a0 [ 215.035408][ T3504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.041336][ T3504] [ 215.043681][ T3504] value changed: 0x17263814 -> 0x1806af01 [ 215.049413][ T3504] [ 215.051745][ T3504] Reported by Kernel Concurrency Sanitizer on: [ 215.057905][ T3504] CPU: 1 UID: 0 PID: 3504 Comm: udevd Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 215.069913][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.079993][ T3504] ================================================================== [ 215.094789][T13070] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.106373][T13063] ip6gretap1: entered allmulticast mode [ 215.117870][T13065] loop3: detected capacity change from 0 to 512 [ 215.144629][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 215.167600][T13069] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 215.174890][ T6998] udevd[6998]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 215.175515][T13069] netlink: 'syz.0.3207': attribute type 2 has an invalid length. [ 215.198407][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 215.222599][T13065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.258946][T13065] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.340536][T11810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.