last executing test programs: 4.135283635s ago: executing program 2 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.062022111s ago: executing program 3 (id=1488): socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000002000000000000000800000018120000", @ANYRES32=r2, @ANYBLOB="000003000000000000850000000c000000b7000000000000009500000000000000000f6e0000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) unlink(&(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0xc83ddc9efb2da4f7, 0xb}, {0x6, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2100002000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703f0ff000a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x76) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x20f}) 3.990488407s ago: executing program 3 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) inotify_init1(0x800) 3.989899717s ago: executing program 3 (id=1490): syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a601a8000000000000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741255362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a78753"], 0x0) 3.983080847s ago: executing program 3 (id=1492): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000004ec0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x5ebe}, {0x0}, &(0x7f0000004e40)=[{&(0x7f0000004bc0)=""/244, 0xf4}], 0x1, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0xfffff800}, {&(0x7f00000004c0)=""/123, 0x7b}, &(0x7f00000027c0)=[{&(0x7f0000000580)=""/14, 0xe}], 0x1, 0x42, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x80000000}, {0x0}, 0x0, 0x0, 0x60, 0x8885}}, @mask_cswp={0x58, 0x114, 0x9, {{0x100, 0xfffffff9}, 0x0, 0x0, 0x5, 0xc, 0x7, 0x5, 0x0, 0x3}}], 0x130}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x12, 0xa6, &(0x7f0000001140)="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"}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 3.536330634s ago: executing program 3 (id=1497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 3.243203997s ago: executing program 2 (id=1499): socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000002000000000000000800000018120000", @ANYRES32=r2, @ANYBLOB="000003000000000000850000000c000000b7000000000000009500000000000000000f6e0000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) unlink(&(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0xc83ddc9efb2da4f7, 0xb}, {0x6, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2100002000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703f0ff000a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x76) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x20f}) 3.08992964s ago: executing program 2 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) inotify_init1(0x800) 3.08953524s ago: executing program 2 (id=1502): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 3.08906167s ago: executing program 2 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140)=0xff, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000440)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x20020000) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc4000100) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x4, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=r1, @ANYRES64=r4, @ANYBLOB="56e7f28e06499ffe2e223b79ec5bda9ef15d392e88102752a2f0777a1e5f0918a95cc17e0e995387b62ebf2e8b922b62e0d375444a7d9edb3f6cd12bef5d09c02f96b5a0384973d11a3e904ba8950163bf14a620012e4f0926aeeee96f57d9595c07bb29a5403905a0131960d49c589be4a53923baf2e3029b4279ffbe44ac63480ef8c8ef88daf39ded9127cba4823b50853d2b138cee00febdf0310936925a5572167bb4ace07dac43f575abc9de2369579c55a932000000000000", @ANYRESHEX=r3, @ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x2804c411}, 0x8006000) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002500fddb006755a2008d010000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000000)=[{r1, 0x40c0}, {r2, 0x468}], 0x2, &(0x7f0000000040), &(0x7f0000000100)={[0x3]}, 0x8) 2.654481095s ago: executing program 0 (id=1520): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 2.59529609s ago: executing program 0 (id=1523): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x464, &(0x7f0000000a40)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x12, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) listen(r2, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000200)='net/snmp\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e5022cbd70000000161307000000", @ANYRES32, @ANYBLOB="120001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2.240881878s ago: executing program 2 (id=1528): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xa86, 0x0) 2.059921903s ago: executing program 1 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.919294124s ago: executing program 0 (id=1533): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x464, &(0x7f0000000a40)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x12, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) listen(r1, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000045c33f08ac05470223b00000000109021200ca5ecb29c3078810010000000009a5f58d877ff0ffe0d2f722d1b0decf21750f408f19acbce8ba9d7f2dd1ccf8fc9098e7d42aef4be10c98c0673afaa76d6ae2ac558296848dfcc304aff10a7c0928e6910183be59ea29525c71c4034bc020c573440660b6f313ca209e7282e5023e845351e492a108afc16d15f8825eedc89fde7719a57d509c23ad45887043a928"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000200)='net/snmp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 1.164240805s ago: executing program 1 (id=1539): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1cc12, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a00)={0x6, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}}, 0x1, 0x9, [{{0xa, 0x4e24, 0x70, @empty, 0x3ff}}, {{0xa, 0x4e22, 0x4546, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x372}}, {{0xa, 0x4e20, 0x9, @mcast2, 0x1ff}}, {{0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {{0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300}}, {{0xa, 0x4e23, 0x18000000, @local, 0x6}}, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffff8}}, {{0xa, 0x4e22, 0x3, @local, 0x6}}]}, 0x510) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 1.10818192s ago: executing program 1 (id=1540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000380)="17f03a59003d9e66", 0x8}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007000000721c02181537b0fa6226fee9395399133c653bfedf34efb4eb1d0b35d358f064f9817b96d596de4247c1143b1a273634edc05e53b68130713a2b22fe94b3f9c439fd8ae6ab86237379d764b1eb1c17014df86c74744d90"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r6 = epoll_create1(0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0xa002a008}) syz_socket_connect_nvme_tcp() 918.789865ms ago: executing program 0 (id=1541): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x14}}, 0x0) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) syz_open_dev$vcsn(&(0x7f0000000000), 0xf, 0x42180) getpriority(0x1, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x10000000000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x2}, 0x0, 0x4000000010000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001340)={0x67, @local, 0x4e24, 0x2, 'none\x00', 0x10, 0x800101, 0x7d}, 0x2c) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000d500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 902.193287ms ago: executing program 1 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x800) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="040793976c2eadc0aa3dbc776aabd8c6466148a8816462300b4f131d11ebad3257ba76dd6f77916a476b4545117dc2025fb393042a29c408491603a077db70", @ANYRES32=r1, @ANYRESHEX, @ANYRESHEX=r2, @ANYRES64, @ANYRESDEC=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 866.291309ms ago: executing program 1 (id=1543): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000004ec0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x5ebe}, {0x0}, &(0x7f0000004e40)=[{&(0x7f0000004bc0)=""/244, 0xf4}], 0x1, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0xfffff800}, {&(0x7f00000004c0)=""/123, 0x7b}, &(0x7f00000027c0)=[{&(0x7f0000000580)=""/14, 0xe}], 0x1, 0x42, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x80000000}, {0x0}, 0x0, 0x0, 0x60, 0x8885}}, @mask_cswp={0x58, 0x114, 0x9, {{0x100, 0xfffffff9}, 0x0, 0x0, 0x5, 0xc, 0x7, 0x5, 0x0, 0x3}}], 0x130}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 773.499337ms ago: executing program 1 (id=1544): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x20, 0x1, 0x5, 0x9, {{0x23, 0x4, 0x1, 0x0, 0x8c, 0x64, 0x0, 0xb3, 0x29, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x24, 0x66, 0x0, 0x1, [0x400, 0xfffffff8, 0x1, 0xbe, 0x5, 0x8, 0x7, 0x0]}, @timestamp_addr={0x44, 0x54, 0x43, 0x1, 0x6, [{@empty, 0xfd7a}, {@loopback, 0x5d87}, {@empty, 0xffff}, {@empty, 0x7}, {@local, 0x101}, {@multicast1, 0x4}, {@loopback, 0xf7}, {@local, 0x80}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', r0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000005000000000000fffeffffc99de48f7948", @ANYBLOB="92861640df1b037a80b30f8081221b0929477e6fda93917130c434800ba8c24eb7c16b28c1ed46db6e0023e98e8f1f59608362aca72fd09a6f13fcc84a8a8a26f7b17178e3342d8d486458582916860aa331c56f4b2a6b151a52e20c3122721821ec2926a6ae0c9a18987a48", @ANYBLOB="d0a6b29f7d5a06249e4591e30cea71ca65f52725a9c6f9f7236ec7", @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r4}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffe00, r4, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000940)="d8000000180081064e81f782db4cb904021d0800ff007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00feffffff035c3b61c1d67f6f94007134cf6efb8000a007a25ee4ce1b14d6d9307c9f8775730d16a4683f5ae24e25ccca9e00360db79824835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4f5d5e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00000000000000000000000000000000000000cdb600", 0xd8}], 0x1}, 0x40408c0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r6 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) close(0x3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) 509.165058ms ago: executing program 4 (id=1546): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='ext4_sync_fs\x00', r1}, 0x18) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 495.698779ms ago: executing program 4 (id=1547): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='map=off,hide\x00utf8,overriderockperm,map=off,map=formalAcheck=relaxed,showassoc,unhide,overriderockperm,map=off,iocharset=koi8-u,check=relaxed,\x00'], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZKFaAaqqKm1PW1ZKRXFtZ5sqKhJrxuNkwPZYMw5KJKRV2Sarqk4X2iLR3JTc8CAtbwBxwwVc8CKQuN53wQ0CaQV3SMuFV/Pk2PFT3XXb3fb7iXY9nvOfc/4z4/qvSTzHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsuxqsViyVHebO7tmPLvqe41k+f/d4fa4t0VdixeuTR1XssL/lM/rXLzq3LdOms+G/7ui1fjZqvLhQ15Hb519+/Y3s5l0+wkJPw/N2uGjJ0f373Q6+w+fIXZBM3f/KimTLi0n52RE0JbTdAPPbVS2HOMGntnc2Cje2K4FpubWnWAvaDsNY/tOpu35Zs2+Zkqbm+vGKex5O82taqXupCtvfbdcLG6YHy7FJ1pSIbC33XrdbW5FMWFzGHPLfPyTOMCpNIw5uNfZX5+2J2FQ6VmCytOCysVyuVQql0sbNzdv3ioWs/0rMpKyxZBV7NHQJnN/0eIrZj5v3MAcZML6/w9Lqiuvpna0KzPyx1ZVvjw1xrQn0vr/zg1n4rj99T+t8uek7yfN5xXV/4vxs4vj6v+YXIxMtMGoFmvM+tl+FqOMjB7piY50X3fUUUf7ejiHvo3Mpbn08hJ+tuSoKVeBPLlqqKIt/fnrStYYbWpDGyrqfW2rpkBGNbmqy1GgPQVqy4leUbZ8OaqoLU++jNZk65qMStrUptZl5KigPXnaUVNbqqqi/3W73QPdi477+oQclQaVxgQs9QeVJ/Q0WMz/qLT+//SppFzy0i32o/6/WeKXwFL88MmkGOBLoJtc//fLTN/s0ovLCAAAAAAAzJsV/fbdiv52f0FSVzW37hRfdVoAAAAAAGCOLHWXtCorvP6XdEEW1/8AAAAAALxurOgeO0vSSvShfuvkTqhn+SXAwktIEQAAAAAAfEHRnf8Xc1I3mrTikqyZrv8BAAAAAMBXwG/75tjPpnPsdtM/62ckBa0l62//WZK/aB23dr9tHVbClsphEvPZ6R7btfPWmWSi3ughJyl6Zjur1mo8OWYyCWZv3sFPD6bN9W/5pxLILfR3MCYBKxx5I5s808e6HG9yOZln/u5RRlFLPMpKza07Bdur3y6pUjmTaTu77V88uPdLye990uHgXme/8MFHnbtRLsfhquPDsNOnA+lkRh+Mk1weR/MtRPdcjNrjZdXSIX/XbKxY0bjFdP8XVDnM9A806QScjPlrXVH0qY0rK3HsylFvxv1w//Ph/pcK0Skb2Ht/0TrJonR6z0ediDFZ5KMsrsYxV9euqvzPeLl3FjJW/jsLUrkwfA4Gsij3ZzH9WFj/HToWfVlED2lL37FYD7P4e9jRmCzWZ8ti6IwAwKtyoAvKaiGsQk/VX4XySd1Ny0P6pvZcdWd6dX9vsLo//kO3G22wIGWTv01MHCWv8B19zYrqUE7RG2v2/Ih39GJSV/Ia845e/ALVLRzrryffgZSkPZTFZ91u93YpGvf3p6rqnwaGGxo3qJcXwkN44/Hhz6IJ8EMf7n+4/6BcXt8ovlss3ixrMdqN5GFB1B4AwJDp37EzNcJ6V5fjiMt3//1OvDRQ8b7R+0hBQR/oI3V0V9fTrxC4NLrXlb6PIVyPr1rVd9Vqzr59O/peusHYkq6PvaqLamlfbLkXu6h0k8FKfRK7/oLPAgAAL9eVKXV4dP3PD9T/61qLI9bOj7zuHqzlydVx75J+XGxpevLvzftoAADwZnD8T62V9m8s33db75c2N0uV9rZjfM/+kfHd6pZj3Gbb8e3tSnPLMS3fa3u2VzctX0tu1QlMsNNqeX7b1DzftLzA3Y2++d0kX/0eOI1Ks+3aQavuVALH2F6zXbHbpuoGtmnt/KDuBtuOH20ctBzbrbl2pe16TRN4O77tFIwJHKcv0K06zbZbc8PFpmn5bqPi75kfe/WdhmOqTmD7bqvtxR2mY7nNmuc3om4L2e6ozwsAAPDGefTk6P6dTmf/4emF5fDSPF5zrDExwws5PXoSXpWHa7JJE3MEAQDwJXNSwGfYKP8CEwIAAAAAAAAAAAAAAAAAAAAAAEOm39I348LiqJsFpd6an59J1uhXOrnFcKgfS/NObJaFzKxbpbdEHN3/ZFxMTneWe2vSw98fc/zSdvBfX5PeitYoXpOd/1jLE07ui1j43kF8RMfGhI0jm5Z65yL7HP8ccpoa8+AvY5q63W538hBLg8cwN7CDmUmDZiU9zM18CnJDL1EAr6vPAwAA//9FkjLH") sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x202, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404}, 0x40091) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 458.349432ms ago: executing program 4 (id=1548): syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x4, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) 428.024765ms ago: executing program 4 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) 416.313256ms ago: executing program 4 (id=1550): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1cc12, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a00)={0x6, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}}, 0x1, 0x9, [{{0xa, 0x4e24, 0x70, @empty, 0x3ff}}, {{0xa, 0x4e22, 0x4546, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x372}}, {{0xa, 0x4e20, 0x9, @mcast2, 0x1ff}}, {{0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {{0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x300}}, {{0xa, 0x4e23, 0x18000000, @local, 0x6}}, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffff8}}, {{0xa, 0x4e22, 0x3, @local, 0x6}}]}, 0x510) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 403.202497ms ago: executing program 4 (id=1551): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x464, &(0x7f0000000a40)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x12, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) listen(r1, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000045c33f08ac05470223b00000000109021200ca5ecb29c3078810010000000009a5f58d877ff0ffe0d2f722d1b0decf21750f408f19acbce8ba9d7f2dd1ccf8fc9098e7d42aef4be10c98c0673afaa76d6ae2ac558296848dfcc304aff10a7c0928e6910183be59ea29525c71c4034bc020c573440660b6f313ca209e7282e5023e845351e492a108afc16d15f8825eedc89fde7719a57d509c23ad45887043a928"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000200)='net/snmp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 254.394809ms ago: executing program 3 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 254.184098ms ago: executing program 32 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 21.940487ms ago: executing program 0 (id=1554): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 0s ago: executing program 0 (id=1555): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) kernel console output (not intermixed with test programs): h. [ 54.191963][ T36] hid_parser_main: 100 callbacks suppressed [ 54.191983][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 54.205319][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.212759][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.220195][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.227565][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.235141][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.403669][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.411178][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.418638][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 54.426050][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.558626][ T36] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.634307][ T36] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.836898][ T4410] loop1: detected capacity change from 0 to 8192 [ 54.889432][ T4414] netlink: 'syz.4.348': attribute type 39 has an invalid length. [ 55.391264][ T4457] loop0: detected capacity change from 0 to 1024 [ 55.414998][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.428587][ T4457] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.543658][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.597843][ T29] kauditd_printk_skb: 3195 callbacks suppressed [ 55.597858][ T29] audit: type=1326 audit(1754952218.022:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.629540][ T29] audit: type=1326 audit(1754952218.052:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.653007][ T29] audit: type=1326 audit(1754952218.052:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.653518][ T4477] loop4: detected capacity change from 0 to 8192 [ 55.676408][ T29] audit: type=1326 audit(1754952218.052:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.676434][ T29] audit: type=1326 audit(1754952218.052:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.730000][ T29] audit: type=1326 audit(1754952218.052:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.753473][ T29] audit: type=1326 audit(1754952218.052:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.776898][ T29] audit: type=1326 audit(1754952218.052:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.800347][ T29] audit: type=1326 audit(1754952218.052:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 55.824018][ T29] audit: type=1326 audit(1754952218.172:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 55.882078][ T4487] loop4: detected capacity change from 0 to 8192 [ 55.889663][ T4487] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.446372][ T4537] sd 0:0:1:0: device reset [ 56.565070][ T3376] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz1] on syz0 [ 56.610372][ T4555] loop0: detected capacity change from 0 to 4096 [ 56.622342][ T4555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.639188][ T4555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.387: corrupted inode contents [ 56.651249][ T4555] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.387: mark_inode_dirty error [ 56.662957][ T4555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.387: corrupted inode contents [ 56.676162][ T4555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.387: mark_inode_dirty error [ 56.687750][ T4555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.387: corrupted inode contents [ 56.700604][ T4555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.387: mark_inode_dirty error [ 56.712125][ T4555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.387: corrupted inode contents [ 56.724222][ T4555] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.387: mark_inode_dirty error [ 56.739245][ T4555] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 56.763082][ T4564] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.387: corrupted inode contents [ 56.776397][ T4569] loop2: detected capacity change from 0 to 164 [ 56.800610][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.811738][ T4577] loop4: detected capacity change from 0 to 512 [ 56.820363][ T4577] EXT4-fs: Ignoring removed nobh option [ 56.827119][ T4577] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 56.835883][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.393: invalid indirect mapped block 256 (level 1) [ 56.857732][ T4584] loop2: detected capacity change from 0 to 128 [ 56.867619][ T4569] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.390'. [ 56.892863][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.393: invalid indirect mapped block 2683928664 (level 1) [ 56.912612][ T4587] loop0: detected capacity change from 0 to 1024 [ 56.919597][ T4587] EXT4-fs: Ignoring removed bh option [ 56.919937][ T4577] EXT4-fs (loop4): 1 truncate cleaned up [ 56.925072][ T4587] EXT4-fs: Ignoring removed nobh option [ 56.931015][ T4577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.936239][ T4587] EXT4-fs: inline encryption not supported [ 56.962968][ T4587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.976386][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.985315][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.998818][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 57.096978][ T4587] FAULT_INJECTION: forcing a failure. [ 57.096978][ T4587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.110084][ T4587] CPU: 1 UID: 0 PID: 4587 Comm: syz.0.394 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 57.110138][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.110150][ T4587] Call Trace: [ 57.110157][ T4587] [ 57.110206][ T4587] __dump_stack+0x1d/0x30 [ 57.110298][ T4587] dump_stack_lvl+0xe8/0x140 [ 57.110318][ T4587] dump_stack+0x15/0x1b [ 57.110335][ T4587] should_fail_ex+0x265/0x280 [ 57.110357][ T4587] should_fail+0xb/0x20 [ 57.110410][ T4587] should_fail_usercopy+0x1a/0x20 [ 57.110428][ T4587] _copy_from_iter+0xcf/0xe40 [ 57.110449][ T4587] ? file_tty_write+0x1cf/0x690 [ 57.110473][ T4587] ? file_tty_write+0x1cf/0x690 [ 57.110501][ T4587] ? kfree+0x27b/0x320 [ 57.110527][ T4587] file_tty_write+0x31d/0x690 [ 57.110551][ T4587] ? __pfx_tty_write+0x10/0x10 [ 57.110590][ T4587] tty_write+0x25/0x30 [ 57.110647][ T4587] vfs_write+0x52a/0x960 [ 57.110673][ T4587] ksys_write+0xda/0x1a0 [ 57.110693][ T4587] __x64_sys_write+0x40/0x50 [ 57.110710][ T4587] x64_sys_call+0x27fe/0x2ff0 [ 57.110773][ T4587] do_syscall_64+0xd2/0x200 [ 57.110841][ T4587] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.110922][ T4587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.110941][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.110962][ T4587] RIP: 0033:0x7f955b68ebe9 [ 57.111053][ T4587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.111070][ T4587] RSP: 002b:00007f955a0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.111089][ T4587] RAX: ffffffffffffffda RBX: 00007f955b8b5fa0 RCX: 00007f955b68ebe9 [ 57.111103][ T4587] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000f [ 57.111115][ T4587] RBP: 00007f955a0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.111125][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.111138][ T4587] R13: 00007f955b8b6038 R14: 00007f955b8b5fa0 R15: 00007ffc7948e858 [ 57.111157][ T4587] [ 57.335940][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.520262][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.534498][ T4617] loop0: detected capacity change from 0 to 164 [ 57.543530][ T4617] Unable to read rock-ridge attributes [ 57.668885][ T4628] loop1: detected capacity change from 0 to 8192 [ 57.893627][ T4642] loop2: detected capacity change from 0 to 8192 [ 57.983838][ T4672] loop2: detected capacity change from 0 to 1024 [ 57.991048][ T4672] ext4: Unknown parameter 'noacl' [ 58.017609][ T4679] netlink: 'syz.1.419': attribute type 11 has an invalid length. [ 58.025427][ T4679] netlink: 140 bytes leftover after parsing attributes in process `syz.1.419'. [ 58.137794][ T4683] loop0: detected capacity change from 0 to 4096 [ 58.147480][ T4683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.163019][ T4683] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.420: corrupted inode contents [ 58.176747][ T4683] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.420: mark_inode_dirty error [ 58.189340][ T4683] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.420: corrupted inode contents [ 58.201491][ T4683] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.420: mark_inode_dirty error [ 58.214330][ T4683] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.420: corrupted inode contents [ 58.226839][ T4683] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.420: mark_inode_dirty error [ 58.240346][ T4683] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.420: corrupted inode contents [ 58.254189][ T4683] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.420: mark_inode_dirty error [ 58.267257][ T4683] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 58.277084][ T4689] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.420: corrupted inode contents [ 58.331963][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.377465][ T4694] loop0: detected capacity change from 0 to 164 [ 58.386678][ T4694] Unable to read rock-ridge attributes [ 58.396267][ T1036] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz1] on syz0 [ 58.493492][ T4711] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 58.686631][ T4717] netlink: 'syz.4.423': attribute type 39 has an invalid length. [ 59.041745][ T4720] loop0: detected capacity change from 0 to 8192 [ 59.885354][ T4745] loop4: detected capacity change from 0 to 8192 [ 59.915165][ T4759] FAULT_INJECTION: forcing a failure. [ 59.915165][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 59.927846][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.2.444 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 59.927921][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.927932][ T4759] Call Trace: [ 59.927938][ T4759] [ 59.927944][ T4759] __dump_stack+0x1d/0x30 [ 59.927982][ T4759] dump_stack_lvl+0xe8/0x140 [ 59.928001][ T4759] dump_stack+0x15/0x1b [ 59.928073][ T4759] should_fail_ex+0x265/0x280 [ 59.928094][ T4759] should_failslab+0x8c/0xb0 [ 59.928118][ T4759] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.928204][ T4759] ? __alloc_skb+0x101/0x320 [ 59.928273][ T4759] __alloc_skb+0x101/0x320 [ 59.928299][ T4759] ? audit_log_start+0x365/0x6c0 [ 59.928326][ T4759] audit_log_start+0x380/0x6c0 [ 59.928352][ T4759] audit_seccomp+0x48/0x100 [ 59.928445][ T4759] ? __seccomp_filter+0x68c/0x10d0 [ 59.928462][ T4759] __seccomp_filter+0x69d/0x10d0 [ 59.928483][ T4759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.928509][ T4759] ? vfs_write+0x7e8/0x960 [ 59.928530][ T4759] ? __rcu_read_unlock+0x4f/0x70 [ 59.928566][ T4759] ? __fget_files+0x184/0x1c0 [ 59.928592][ T4759] __secure_computing+0x82/0x150 [ 59.928613][ T4759] syscall_trace_enter+0xcf/0x1e0 [ 59.928690][ T4759] do_syscall_64+0xac/0x200 [ 59.928773][ T4759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.928791][ T4759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.928814][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.928835][ T4759] RIP: 0033:0x7f7d6fb4ebe9 [ 59.928857][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.928906][ T4759] RSP: 002b:00007f7d6e5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.928928][ T4759] RAX: ffffffffffffffda RBX: 00007f7d6fd75fa0 RCX: 00007f7d6fb4ebe9 [ 59.928941][ T4759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 59.928958][ T4759] RBP: 00007f7d6e5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.928971][ T4759] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 59.929023][ T4759] R13: 00007f7d6fd76038 R14: 00007f7d6fd75fa0 R15: 00007ffcf211d3d8 [ 59.929038][ T4759] [ 60.352288][ T4778] loop1: detected capacity change from 0 to 8192 [ 60.360369][ T4775] tipc: Started in network mode [ 60.365295][ T4775] tipc: Node identity e694a264683e, cluster identity 4711 [ 60.372578][ T4775] tipc: Enabled bearer , priority 0 [ 60.434169][ T4784] netlink: 'syz.4.448': attribute type 39 has an invalid length. [ 60.563373][ T4775] tipc: Resetting bearer [ 60.570792][ T4785] syzkaller0: entered promiscuous mode [ 60.600730][ T29] kauditd_printk_skb: 1885 callbacks suppressed [ 60.600745][ T29] audit: type=1326 audit(1754952223.022:19363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6faeadd9 code=0x7ffc0000 [ 60.636314][ T4772] tipc: Resetting bearer [ 60.659531][ T4772] tipc: Disabling bearer [ 60.725019][ T29] audit: type=1326 audit(1754952223.102:19364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6fb45ba7 code=0x7ffc0000 [ 60.748341][ T29] audit: type=1326 audit(1754952223.102:19365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6faeadd9 code=0x7ffc0000 [ 60.771670][ T29] audit: type=1326 audit(1754952223.102:19366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6fb45ba7 code=0x7ffc0000 [ 60.781622][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 60.796087][ T29] audit: type=1326 audit(1754952223.102:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6faeadd9 code=0x7ffc0000 [ 60.796114][ T29] audit: type=1326 audit(1754952223.102:19368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6fb45ba7 code=0x7ffc0000 [ 60.796136][ T29] audit: type=1326 audit(1754952223.102:19369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6faeadd9 code=0x7ffc0000 [ 60.874762][ T29] audit: type=1326 audit(1754952223.102:19370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6fb45ba7 code=0x7ffc0000 [ 60.898210][ T29] audit: type=1326 audit(1754952223.102:19371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6faeadd9 code=0x7ffc0000 [ 60.921560][ T29] audit: type=1326 audit(1754952223.102:19372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6fb45ba7 code=0x7ffc0000 [ 61.107146][ T4811] netlink: 'syz.0.462': attribute type 11 has an invalid length. [ 61.114948][ T4811] netlink: 140 bytes leftover after parsing attributes in process `syz.0.462'. [ 61.162732][ T4813] loop4: detected capacity change from 0 to 8192 [ 61.289380][ T4822] netlink: 'syz.4.465': attribute type 11 has an invalid length. [ 61.297184][ T4822] netlink: 140 bytes leftover after parsing attributes in process `syz.4.465'. [ 61.395209][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 61.517601][ T4831] loop2: detected capacity change from 0 to 512 [ 61.569941][ T4831] EXT4-fs: Ignoring removed nobh option [ 61.632169][ T4833] loop1: detected capacity change from 0 to 164 [ 61.645508][ T4833] Unable to read rock-ridge attributes [ 61.658775][ T10] hid_parser_main: 138 callbacks suppressed [ 61.658793][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.672169][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.679567][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.686943][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.694423][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.702651][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.710496][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.717879][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.725334][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.732723][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.767410][ T4831] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 61.777660][ T4831] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.469: invalid indirect mapped block 256 (level 1) [ 61.799655][ T4831] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.469: invalid indirect mapped block 2683928664 (level 1) [ 61.821786][ T4831] EXT4-fs (loop2): 1 truncate cleaned up [ 61.836437][ T4831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.856684][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz1] on syz0 [ 62.298818][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.327711][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.436319][ T4888] loop0: detected capacity change from 0 to 4096 [ 62.445126][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 62.457433][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.473087][ T4888] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.479: corrupted inode contents [ 62.485213][ T4888] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.479: mark_inode_dirty error [ 62.497254][ T4888] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.479: corrupted inode contents [ 62.518732][ T4888] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.479: mark_inode_dirty error [ 62.541167][ T4888] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.479: corrupted inode contents [ 62.562405][ T4914] loop4: detected capacity change from 0 to 4096 [ 62.592228][ T4888] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.479: mark_inode_dirty error [ 62.607855][ T4888] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.479: corrupted inode contents [ 62.620566][ T4888] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.479: mark_inode_dirty error [ 62.641611][ T4888] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 62.651794][ T4914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.665390][ T4928] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.479: corrupted inode contents [ 62.679763][ T4914] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.482: corrupted inode contents [ 62.692184][ T4914] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.482: mark_inode_dirty error [ 62.703791][ T4914] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.482: corrupted inode contents [ 62.716280][ T4914] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.482: mark_inode_dirty error [ 62.729850][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.784359][ T4937] netlink: 'syz.3.483': attribute type 39 has an invalid length. [ 62.870231][ T4943] netlink: 'syz.1.487': attribute type 11 has an invalid length. [ 62.878042][ T4943] netlink: 140 bytes leftover after parsing attributes in process `syz.1.487'. [ 63.077974][ T4914] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.482: corrupted inode contents [ 63.120344][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.133145][ T4914] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.482: mark_inode_dirty error [ 63.159587][ T4914] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.482: corrupted inode contents [ 63.218750][ T4914] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.482: mark_inode_dirty error [ 63.230646][ T4914] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 63.251213][ T4936] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.482: corrupted inode contents [ 63.270956][ T4957] loop2: detected capacity change from 0 to 164 [ 63.299756][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.311418][ T4957] Unable to read rock-ridge attributes [ 63.328842][ T3403] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 63.458045][ T4976] FAULT_INJECTION: forcing a failure. [ 63.458045][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.471160][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.3.494 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 63.471188][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.471200][ T4976] Call Trace: [ 63.471208][ T4976] [ 63.471216][ T4976] __dump_stack+0x1d/0x30 [ 63.471265][ T4976] dump_stack_lvl+0xe8/0x140 [ 63.471285][ T4976] dump_stack+0x15/0x1b [ 63.471302][ T4976] should_fail_ex+0x265/0x280 [ 63.471320][ T4976] should_fail+0xb/0x20 [ 63.471338][ T4976] should_fail_usercopy+0x1a/0x20 [ 63.471360][ T4976] _copy_to_user+0x20/0xa0 [ 63.471489][ T4976] simple_read_from_buffer+0xb5/0x130 [ 63.471507][ T4976] proc_fail_nth_read+0x10e/0x150 [ 63.471532][ T4976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.471569][ T4976] vfs_read+0x1a8/0x770 [ 63.471589][ T4976] ? __rcu_read_unlock+0x4f/0x70 [ 63.471610][ T4976] ? __fget_files+0x184/0x1c0 [ 63.471675][ T4976] ? radix_tree_lookup+0xfa/0x140 [ 63.471698][ T4976] ksys_read+0xda/0x1a0 [ 63.471716][ T4976] __x64_sys_read+0x40/0x50 [ 63.471733][ T4976] x64_sys_call+0x27bc/0x2ff0 [ 63.471809][ T4976] do_syscall_64+0xd2/0x200 [ 63.471834][ T4976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.471889][ T4976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.471948][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.471971][ T4976] RIP: 0033:0x7f936fd4d5fc [ 63.471986][ T4976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 63.472003][ T4976] RSP: 002b:00007f936e7af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.472019][ T4976] RAX: ffffffffffffffda RBX: 00007f936ff75fa0 RCX: 00007f936fd4d5fc [ 63.472030][ T4976] RDX: 000000000000000f RSI: 00007f936e7af0a0 RDI: 0000000000000003 [ 63.472082][ T4976] RBP: 00007f936e7af090 R08: 0000000000000000 R09: 0000000000000000 [ 63.472095][ T4976] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 63.472107][ T4976] R13: 00007f936ff76038 R14: 00007f936ff75fa0 R15: 00007ffd7274e948 [ 63.472158][ T4976] [ 63.745863][ T4982] geneve0: entered allmulticast mode [ 63.865318][ T5022] loop4: detected capacity change from 0 to 164 [ 63.877669][ T5022] Unable to read rock-ridge attributes [ 63.903128][ T3376] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz1] on syz0 [ 63.935105][ T5043] netlink: 'syz.1.508': attribute type 11 has an invalid length. [ 63.942923][ T5043] netlink: 140 bytes leftover after parsing attributes in process `syz.1.508'. [ 63.971638][ T5049] loop4: detected capacity change from 0 to 164 [ 63.983749][ T5049] Unable to read rock-ridge attributes [ 63.991962][ T3376] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz1] on syz0 [ 64.103648][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2a9800: rx timeout, send abort [ 64.111886][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a2a8400: rx timeout, send abort [ 64.113514][ T5096] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 64.120109][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a2a9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.141992][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a2a8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.173134][ T5104] loop0: detected capacity change from 0 to 164 [ 64.181370][ T5104] Unable to read rock-ridge attributes [ 64.189828][ T3376] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz1] on syz0 [ 64.335967][ T5123] loop0: detected capacity change from 0 to 512 [ 64.826594][ T5134] loop0: detected capacity change from 0 to 8192 [ 64.872424][ T5142] loop0: detected capacity change from 0 to 164 [ 64.880898][ T5142] Unable to read rock-ridge attributes [ 64.891428][ T3403] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz1] on syz0 [ 64.930395][ T3376] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz1] on syz0 [ 65.078601][ T5199] FAULT_INJECTION: forcing a failure. [ 65.078601][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 65.091382][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.2.536 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 65.091414][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.091426][ T5199] Call Trace: [ 65.091433][ T5199] [ 65.091514][ T5199] __dump_stack+0x1d/0x30 [ 65.091536][ T5199] dump_stack_lvl+0xe8/0x140 [ 65.091556][ T5199] dump_stack+0x15/0x1b [ 65.091573][ T5199] should_fail_ex+0x265/0x280 [ 65.091744][ T5199] should_failslab+0x8c/0xb0 [ 65.091769][ T5199] kmem_cache_alloc_noprof+0x50/0x310 [ 65.091808][ T5199] ? audit_log_start+0x365/0x6c0 [ 65.091838][ T5199] audit_log_start+0x365/0x6c0 [ 65.091871][ T5199] audit_seccomp+0x48/0x100 [ 65.092000][ T5199] ? __seccomp_filter+0x68c/0x10d0 [ 65.092022][ T5199] __seccomp_filter+0x69d/0x10d0 [ 65.092045][ T5199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.092201][ T5199] ? vfs_write+0x7e8/0x960 [ 65.092229][ T5199] __secure_computing+0x82/0x150 [ 65.092276][ T5199] syscall_trace_enter+0xcf/0x1e0 [ 65.092301][ T5199] do_syscall_64+0xac/0x200 [ 65.092326][ T5199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.092350][ T5199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.092390][ T5199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.092412][ T5199] RIP: 0033:0x7f7d6fb4ebe9 [ 65.092428][ T5199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.092465][ T5199] RSP: 002b:00007f7d6e5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 65.092485][ T5199] RAX: ffffffffffffffda RBX: 00007f7d6fd75fa0 RCX: 00007f7d6fb4ebe9 [ 65.092510][ T5199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.092523][ T5199] RBP: 00007f7d6e5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.092601][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.092614][ T5199] R13: 00007f7d6fd76038 R14: 00007f7d6fd75fa0 R15: 00007ffcf211d3d8 [ 65.092705][ T5199] [ 65.294683][ T5201] loop0: detected capacity change from 0 to 4096 [ 65.307547][ T5201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.322894][ T5201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.537: corrupted inode contents [ 65.334855][ T5201] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.537: mark_inode_dirty error [ 65.336245][ T5206] netlink: 'syz.2.538': attribute type 11 has an invalid length. [ 65.347076][ T5201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.537: corrupted inode contents [ 65.353932][ T5206] netlink: 140 bytes leftover after parsing attributes in process `syz.2.538'. [ 65.376710][ T5201] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.537: mark_inode_dirty error [ 65.389145][ T5201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.537: corrupted inode contents [ 65.403951][ T5201] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.537: mark_inode_dirty error [ 65.415909][ T5201] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.537: corrupted inode contents [ 65.429394][ T5201] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.537: mark_inode_dirty error [ 65.445955][ T5201] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 65.466413][ T5207] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.537: corrupted inode contents [ 65.494019][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.593847][ T3376] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz1] on syz0 [ 65.608505][ T29] kauditd_printk_skb: 2584 callbacks suppressed [ 65.608528][ T29] audit: type=1326 audit(1754952228.042:21955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b246add9 code=0x7ffc0000 [ 65.670793][ T29] audit: type=1326 audit(1754952228.072:21956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b24c5ba7 code=0x7ffc0000 [ 65.694202][ T29] audit: type=1326 audit(1754952228.072:21957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b246add9 code=0x7ffc0000 [ 65.717675][ T29] audit: type=1326 audit(1754952228.072:21958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b24c5ba7 code=0x7ffc0000 [ 65.741092][ T29] audit: type=1326 audit(1754952228.072:21959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b246add9 code=0x7ffc0000 [ 65.764495][ T29] audit: type=1326 audit(1754952228.072:21960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b24c5ba7 code=0x7ffc0000 [ 65.787870][ T29] audit: type=1326 audit(1754952228.072:21961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b246add9 code=0x7ffc0000 [ 65.811277][ T29] audit: type=1326 audit(1754952228.072:21962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b24c5ba7 code=0x7ffc0000 [ 65.834561][ T29] audit: type=1326 audit(1754952228.082:21963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b246add9 code=0x7ffc0000 [ 65.857947][ T29] audit: type=1326 audit(1754952228.082:21964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b24c5ba7 code=0x7ffc0000 [ 66.023616][ T5234] loop0: detected capacity change from 0 to 164 [ 66.041289][ T5234] Unable to read rock-ridge attributes [ 66.314401][ T5265] loop0: detected capacity change from 0 to 164 [ 66.322098][ T5265] Unable to read rock-ridge attributes [ 66.332418][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz1] on syz0 [ 66.359758][ T5282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.561'. [ 66.436865][ T36] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.00 Device [syz1] on syz0 [ 66.444120][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 66.515279][ T5322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.572'. [ 66.643696][ T5329] loop4: detected capacity change from 0 to 8192 [ 66.717336][ T5336] netlink: 'syz.0.573': attribute type 39 has an invalid length. [ 66.936166][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 67.128651][ T5348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'. [ 67.157821][ T5348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.246810][ T5348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.286082][ T5372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.583'. [ 67.320161][ T5379] netlink: 'syz.2.584': attribute type 11 has an invalid length. [ 67.327915][ T5379] netlink: 140 bytes leftover after parsing attributes in process `syz.2.584'. [ 67.341539][ T5348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.416232][ T5348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.442274][ T36] hid_parser_main: 335 callbacks suppressed [ 67.442290][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.455699][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.463363][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.493439][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.501043][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.508475][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.515861][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.523313][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.530773][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.538140][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 67.563055][ T36] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.00 Device [syz1] on syz0 [ 67.628340][ T5405] FAULT_INJECTION: forcing a failure. [ 67.628340][ T5405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.641596][ T5405] CPU: 1 UID: 0 PID: 5405 Comm: syz.1.589 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 67.641675][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.641685][ T5405] Call Trace: [ 67.641691][ T5405] [ 67.641699][ T5405] __dump_stack+0x1d/0x30 [ 67.641721][ T5405] dump_stack_lvl+0xe8/0x140 [ 67.641741][ T5405] dump_stack+0x15/0x1b [ 67.641759][ T5405] should_fail_ex+0x265/0x280 [ 67.641781][ T5405] should_fail+0xb/0x20 [ 67.641798][ T5405] should_fail_usercopy+0x1a/0x20 [ 67.641829][ T5405] strncpy_from_user+0x25/0x230 [ 67.641933][ T5405] ? kmem_cache_alloc_noprof+0x186/0x310 [ 67.641961][ T5405] ? getname_flags+0x80/0x3b0 [ 67.641989][ T5405] getname_flags+0xae/0x3b0 [ 67.642084][ T5405] user_path_at+0x28/0x130 [ 67.642111][ T5405] __se_sys_mount+0x25b/0x2e0 [ 67.642203][ T5405] ? fput+0x8f/0xc0 [ 67.642234][ T5405] __x64_sys_mount+0x67/0x80 [ 67.642257][ T5405] x64_sys_call+0x2b4d/0x2ff0 [ 67.642326][ T5405] do_syscall_64+0xd2/0x200 [ 67.642358][ T5405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.642382][ T5405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.642406][ T5405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.642488][ T5405] RIP: 0033:0x7fc7b24cebe9 [ 67.642503][ T5405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.642520][ T5405] RSP: 002b:00007fc7b0f2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.642541][ T5405] RAX: ffffffffffffffda RBX: 00007fc7b26f5fa0 RCX: 00007fc7b24cebe9 [ 67.642555][ T5405] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 67.642568][ T5405] RBP: 00007fc7b0f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.642580][ T5405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.642593][ T5405] R13: 00007fc7b26f6038 R14: 00007fc7b26f5fa0 R15: 00007ffd60af60a8 [ 67.642612][ T5405] [ 67.748403][ T149] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.849639][ T149] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857891][ T149] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857924][ T149] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.965150][ T5426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.594'. [ 68.006388][ T5430] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 68.101368][ T5432] loop0: detected capacity change from 0 to 8192 [ 68.379111][ T5460] FAULT_INJECTION: forcing a failure. [ 68.379111][ T5460] name failslab, interval 1, probability 0, space 0, times 0 [ 68.391815][ T5460] CPU: 1 UID: 0 PID: 5460 Comm: syz.0.607 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 68.391839][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.391849][ T5460] Call Trace: [ 68.391855][ T5460] [ 68.391863][ T5460] __dump_stack+0x1d/0x30 [ 68.391900][ T5460] dump_stack_lvl+0xe8/0x140 [ 68.391918][ T5460] dump_stack+0x15/0x1b [ 68.391933][ T5460] should_fail_ex+0x265/0x280 [ 68.391954][ T5460] ? resv_map_alloc+0x57/0x190 [ 68.392045][ T5460] should_failslab+0x8c/0xb0 [ 68.392070][ T5460] __kmalloc_cache_noprof+0x4c/0x320 [ 68.392100][ T5460] resv_map_alloc+0x57/0x190 [ 68.392156][ T5460] hugetlbfs_get_inode+0x67/0x370 [ 68.392182][ T5460] hugetlb_file_setup+0x192/0x3d0 [ 68.392206][ T5460] ksys_mmap_pgoff+0x157/0x310 [ 68.392294][ T5460] x64_sys_call+0x14a3/0x2ff0 [ 68.392313][ T5460] do_syscall_64+0xd2/0x200 [ 68.392339][ T5460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.392405][ T5460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.392435][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.392456][ T5460] RIP: 0033:0x7f955b68ebe9 [ 68.392472][ T5460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.392543][ T5460] RSP: 002b:00007f955a0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.392568][ T5460] RAX: ffffffffffffffda RBX: 00007f955b8b5fa0 RCX: 00007f955b68ebe9 [ 68.392579][ T5460] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 68.392590][ T5460] RBP: 00007f955a0f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 68.392600][ T5460] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 68.392610][ T5460] R13: 00007f955b8b6038 R14: 00007f955b8b5fa0 R15: 00007ffc7948e858 [ 68.392629][ T5460] [ 68.769226][ T5472] loop0: detected capacity change from 0 to 512 [ 68.781401][ T5472] EXT4-fs: Ignoring removed nobh option [ 68.807396][ T5472] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 68.851061][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.613: invalid indirect mapped block 256 (level 1) [ 68.865328][ T5470] loop3: detected capacity change from 0 to 4096 [ 68.874854][ T5470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.889552][ T5470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.611: corrupted inode contents [ 68.939693][ T5470] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.611: mark_inode_dirty error [ 68.956973][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.613: invalid indirect mapped block 2683928664 (level 1) [ 69.020038][ T5470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.611: corrupted inode contents [ 69.038384][ T5472] EXT4-fs (loop0): 1 truncate cleaned up [ 69.044428][ T5472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.148303][ T5470] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.611: mark_inode_dirty error [ 69.168193][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.178133][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.227980][ T5470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.611: corrupted inode contents [ 69.245027][ T5470] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.611: mark_inode_dirty error [ 69.263905][ T3403] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.00 Device [syz1] on syz0 [ 69.273755][ T5470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.611: corrupted inode contents [ 69.290866][ T5470] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.611: mark_inode_dirty error [ 69.310192][ T5470] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 69.319106][ T5478] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.611: corrupted inode contents [ 69.352180][ T5512] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 69.372642][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.375300][ T5514] __nla_validate_parse: 1 callbacks suppressed [ 69.375313][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 69.582078][ T5534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.625'. [ 69.609966][ T5534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.681407][ T5534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.729024][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.777430][ T5534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.852736][ T5534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.870275][ T5553] loop0: detected capacity change from 0 to 8192 [ 69.978146][ T149] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.001998][ T149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.014952][ T149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.038909][ T149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.137258][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 70.204877][ T5599] loop3: detected capacity change from 0 to 164 [ 70.213075][ T5599] Unable to read rock-ridge attributes [ 70.260578][ T5606] loop2: detected capacity change from 0 to 4096 [ 70.270986][ T5606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.287019][ T5606] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.655: corrupted inode contents [ 70.305052][ T5604] loop0: detected capacity change from 0 to 8192 [ 70.328581][ T5606] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.655: mark_inode_dirty error [ 70.345040][ T5618] loop3: detected capacity change from 0 to 512 [ 70.351690][ T5618] EXT4-fs: Ignoring removed nobh option [ 70.361593][ T5606] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.655: corrupted inode contents [ 70.362175][ T5618] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 70.382674][ T5618] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.658: invalid indirect mapped block 256 (level 1) [ 70.396620][ T5606] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.655: mark_inode_dirty error [ 70.408071][ T5606] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.655: corrupted inode contents [ 70.408318][ T5618] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.658: invalid indirect mapped block 2683928664 (level 1) [ 70.434212][ T5631] loop1: detected capacity change from 0 to 512 [ 70.440463][ T5606] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.655: mark_inode_dirty error [ 70.440806][ T5606] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.655: corrupted inode contents [ 70.466941][ T5606] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.655: mark_inode_dirty error [ 70.475501][ T5631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.478368][ T5618] EXT4-fs (loop3): 1 truncate cleaned up [ 70.496385][ T5635] loop4: detected capacity change from 0 to 164 [ 70.504158][ T5635] Unable to read rock-ridge attributes [ 70.510384][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.523024][ T5606] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 70.533164][ T5631] EXT4-fs (loop1): 1 truncate cleaned up [ 70.539963][ T5631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.552848][ T5617] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.655: corrupted inode contents [ 70.558907][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.597211][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.606262][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.615837][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.634728][ T29] kauditd_printk_skb: 4098 callbacks suppressed [ 70.634740][ T29] audit: type=1400 audit(1754952233.062:26063): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.682669][ T29] audit: type=1400 audit(1754952233.102:26064): avc: denied { bind } for pid=5649 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.710900][ T29] audit: type=1400 audit(1754952233.142:26065): avc: denied { create } for pid=5657 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.733712][ T29] audit: type=1400 audit(1754952233.162:26066): avc: denied { create } for pid=5641 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.733800][ T5662] loop4: detected capacity change from 0 to 164 [ 70.753162][ T29] audit: type=1400 audit(1754952233.162:26067): avc: denied { bind } for pid=5641 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.779397][ T5662] Unable to read rock-ridge attributes [ 70.802323][ T36] hid-generic 0000:0000:0000.0019: hidraw0: HID v8.00 Device [syz1] on syz0 [ 70.856234][ T5687] loop4: detected capacity change from 0 to 164 [ 70.864435][ T5687] Unable to read rock-ridge attributes [ 70.888622][ T29] audit: type=1400 audit(1754952233.312:26068): avc: denied { execmem } for pid=5690 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.020416][ T5700] loop4: detected capacity change from 0 to 4096 [ 71.086422][ T5703] bridge0: entered promiscuous mode [ 71.095548][ T5703] netlink: 'syz.1.674': attribute type 39 has an invalid length. [ 71.109672][ T5704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5704 comm=syz.2.678 [ 71.168400][ T29] audit: type=1400 audit(1754952233.512:26069): avc: denied { ioctl } for pid=5690 comm="syz.1.674" path="socket:[12826]" dev="sockfs" ino=12826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.413301][ T5700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.431418][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.454393][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.491793][ T5718] loop3: detected capacity change from 0 to 164 [ 71.500659][ T5718] Unable to read rock-ridge attributes [ 71.541170][ T29] audit: type=1326 audit(1754952233.972:26070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 71.551397][ T5733] FAULT_INJECTION: forcing a failure. [ 71.551397][ T5733] name failslab, interval 1, probability 0, space 0, times 0 [ 71.564760][ T29] audit: type=1326 audit(1754952233.982:26071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 71.577193][ T5733] CPU: 1 UID: 0 PID: 5733 Comm: syz.3.685 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 71.577246][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.577258][ T5733] Call Trace: [ 71.577266][ T5733] [ 71.577274][ T5733] __dump_stack+0x1d/0x30 [ 71.577294][ T5733] dump_stack_lvl+0xe8/0x140 [ 71.577313][ T5733] dump_stack+0x15/0x1b [ 71.577391][ T5733] should_fail_ex+0x265/0x280 [ 71.577411][ T5733] ? audit_log_d_path+0x8d/0x150 [ 71.577440][ T5733] should_failslab+0x8c/0xb0 [ 71.577509][ T5733] __kmalloc_cache_noprof+0x4c/0x320 [ 71.577538][ T5733] audit_log_d_path+0x8d/0x150 [ 71.577569][ T5733] audit_log_d_path_exe+0x42/0x70 [ 71.577597][ T5733] audit_log_task+0x1e9/0x250 [ 71.577625][ T5733] audit_seccomp+0x61/0x100 [ 71.577657][ T5733] ? __seccomp_filter+0x68c/0x10d0 [ 71.577678][ T5733] __seccomp_filter+0x69d/0x10d0 [ 71.577700][ T5733] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.577725][ T5733] ? vfs_write+0x7e8/0x960 [ 71.577746][ T5733] ? __rcu_read_unlock+0x4f/0x70 [ 71.577846][ T5733] ? __fget_files+0x184/0x1c0 [ 71.577871][ T5733] __secure_computing+0x82/0x150 [ 71.577896][ T5733] syscall_trace_enter+0xcf/0x1e0 [ 71.577947][ T5733] do_syscall_64+0xac/0x200 [ 71.577972][ T5733] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.577994][ T5733] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.578017][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.578038][ T5733] RIP: 0033:0x7f936fd4ebe9 [ 71.578069][ T5733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.578108][ T5733] RSP: 002b:00007f936e7af038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 71.578127][ T5733] RAX: ffffffffffffffda RBX: 00007f936ff75fa0 RCX: 00007f936fd4ebe9 [ 71.578140][ T5733] RDX: 0000000000000008 RSI: 0000000000001000 RDI: 0000000000000000 [ 71.578151][ T5733] RBP: 00007f936e7af090 R08: 0000000000000000 R09: 0000000000000000 [ 71.578163][ T5733] R10: 0000200000fff000 R11: 0000000000000246 R12: 0000000000000001 [ 71.578175][ T5733] R13: 00007f936ff76038 R14: 00007f936ff75fa0 R15: 00007ffd7274e948 [ 71.578194][ T5733] [ 71.694630][ T5740] loop2: detected capacity change from 0 to 164 [ 71.698949][ T29] audit: type=1326 audit(1754952233.982:26072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 71.851167][ T5740] Unable to read rock-ridge attributes [ 71.864268][ T3403] hid-generic 0000:0000:0000.001A: hidraw0: HID v8.00 Device [syz1] on syz0 [ 71.941829][ T5755] loop3: detected capacity change from 0 to 4096 [ 71.968733][ T5755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.001040][ T5755] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.691: corrupted inode contents [ 72.013704][ T5755] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.691: mark_inode_dirty error [ 72.025674][ T5755] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.691: corrupted inode contents [ 72.041653][ T5755] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.691: mark_inode_dirty error [ 72.053023][ T3354] hid-generic 0000:0000:0000.001B: hidraw0: HID v8.00 Device [syz1] on syz0 [ 72.062579][ T5755] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.691: corrupted inode contents [ 72.077806][ T5755] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.691: mark_inode_dirty error [ 72.090199][ T5755] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.691: corrupted inode contents [ 72.108331][ T5755] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.691: mark_inode_dirty error [ 72.125769][ T5755] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 72.139162][ T5791] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.691: corrupted inode contents [ 72.216532][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.358277][ T5833] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 72.591366][ T5844] loop3: detected capacity change from 0 to 164 [ 72.599205][ T5844] Unable to read rock-ridge attributes [ 72.607155][ T3354] hid_parser_main: 164 callbacks suppressed [ 72.607170][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.620584][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.627959][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.635377][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.642762][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.650216][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.657647][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.665050][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.672463][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.679853][ T3354] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 72.688007][ T3354] hid-generic 0000:0000:0000.001C: hidraw0: HID v8.00 Device [syz1] on syz0 [ 72.755455][ T5873] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 72.891018][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 72.916243][ T5918] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 73.378721][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 73.431364][ T6087] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 73.463061][ T6094] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 73.471008][ T6094] netlink: 140 bytes leftover after parsing attributes in process `syz.2.781'. [ 74.035808][ T6122] loop1: detected capacity change from 0 to 8192 [ 74.779947][ T36] hid-generic 0000:0000:0000.001F: hidraw0: HID v8.00 Device [syz1] on syz0 [ 74.919797][ T6189] loop4: detected capacity change from 0 to 4096 [ 74.950216][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.013587][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.250782][ T6211] netlink: 'syz.0.830': attribute type 11 has an invalid length. [ 75.258597][ T6211] netlink: 140 bytes leftover after parsing attributes in process `syz.0.830'. [ 75.281748][ T1036] hid-generic 0000:0000:0000.0020: hidraw0: HID v8.00 Device [syz1] on syz0 [ 75.373785][ T6246] loop2: detected capacity change from 0 to 8192 [ 75.521463][ T1036] hid-generic 0000:0000:0000.0021: hidraw0: HID v8.00 Device [syz1] on syz0 [ 75.714797][ T1036] hid-generic 0000:0000:0000.0022: hidraw0: HID v8.00 Device [syz1] on syz0 [ 75.766408][ T6304] loop1: detected capacity change from 0 to 4096 [ 75.793077][ T1036] hid-generic 0000:0000:0000.0023: hidraw0: HID v8.00 Device [syz1] on syz0 [ 75.814252][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.865119][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.987659][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 75.987674][ T29] audit: type=1326 audit(1754952238.412:26431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 76.018007][ T29] audit: type=1326 audit(1754952238.412:26432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 76.041519][ T29] audit: type=1326 audit(1754952238.422:26433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 76.065938][ T29] audit: type=1326 audit(1754952238.492:26434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.090223][ T29] audit: type=1326 audit(1754952238.492:26435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.113687][ T29] audit: type=1326 audit(1754952238.492:26436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.137083][ T29] audit: type=1326 audit(1754952238.492:26437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.160369][ T29] audit: type=1326 audit(1754952238.492:26438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.183790][ T29] audit: type=1326 audit(1754952238.492:26439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.207250][ T29] audit: type=1326 audit(1754952238.492:26440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 76.235721][ T3354] hid-generic 0000:0000:0000.0024: hidraw0: HID v8.00 Device [syz1] on syz0 [ 76.322845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a572600: rx timeout, send abort [ 76.331099][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811991b800: rx timeout, send abort [ 76.339366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a572600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.353663][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811991b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.533519][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 76.545140][ T36] hid-generic 0000:0000:0000.0025: hidraw0: HID v8.00 Device [syz1] on syz0 [ 76.626668][ T6395] netlink: 'syz.2.874': attribute type 11 has an invalid length. [ 76.634556][ T6395] netlink: 140 bytes leftover after parsing attributes in process `syz.2.874'. [ 76.648973][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 76.664483][ T6406] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.710592][ T6406] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.773125][ T1036] hid-generic 0000:0000:0000.0026: hidraw0: HID v8.00 Device [syz1] on syz0 [ 76.826306][ T6406] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.981464][ T6406] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.098778][ T6451] netlink: 'syz.1.888': attribute type 39 has an invalid length. [ 77.238831][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.305127][ T6453] loop3: detected capacity change from 0 to 4096 [ 77.332220][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.355166][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.369418][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.382066][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411822][ T6453] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.891: corrupted inode contents [ 77.456830][ T6453] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.891: mark_inode_dirty error [ 77.474545][ T6453] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.891: corrupted inode contents [ 77.486340][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a283400: rx timeout, send abort [ 77.486387][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a282600: rx timeout, send abort [ 77.494625][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a283400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.494685][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a282600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.533795][ T6453] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.891: mark_inode_dirty error [ 77.549778][ T6453] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.891: corrupted inode contents [ 77.563050][ T6472] loop2: detected capacity change from 0 to 164 [ 77.570568][ T6472] Unable to read rock-ridge attributes [ 77.571132][ T6453] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.891: mark_inode_dirty error [ 77.600090][ T6453] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.891: corrupted inode contents [ 77.612399][ T6453] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.891: mark_inode_dirty error [ 77.625686][ T6453] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 77.656654][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.787550][ T6491] loop1: detected capacity change from 0 to 4096 [ 77.818500][ T6491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.867416][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 77.892272][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.958980][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 77.982649][ T6518] loop0: detected capacity change from 0 to 4096 [ 77.999329][ T6518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.029409][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.3.906'. [ 78.056939][ T6515] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.084602][ T6518] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.911: corrupted inode contents [ 78.116494][ T6516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'. [ 78.126647][ T6518] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.911: mark_inode_dirty error [ 78.162291][ T6516] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.178803][ T6518] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.911: corrupted inode contents [ 78.239426][ T6518] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.911: mark_inode_dirty error [ 78.305608][ T6532] netlink: 'syz.4.913': attribute type 39 has an invalid length. [ 78.558525][ T6518] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.911: corrupted inode contents [ 78.561435][ T6515] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.586569][ T6516] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.588459][ T6518] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.911: mark_inode_dirty error [ 78.628500][ T6518] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.911: corrupted inode contents [ 78.641989][ T6518] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.911: mark_inode_dirty error [ 78.654018][ T6518] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 78.666533][ T6515] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.687332][ T6516] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.699603][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.725165][ T6515] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.737068][ T1036] hid_parser_main: 340 callbacks suppressed [ 78.737118][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x1 [ 78.750576][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.757964][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.765429][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.772956][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.780400][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.787788][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.795204][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.802668][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.810066][ T1036] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 78.819716][ T1036] hid-generic 0000:0000:0000.0027: hidraw0: HID v8.00 Device [syz1] on syz0 [ 78.831975][ T6516] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.842620][ T6582] loop0: detected capacity change from 0 to 4096 [ 78.852351][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.902927][ T1634] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914777][ T1634] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.944030][ T1634] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.952845][ T1634] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966574][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.999692][ T1634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029472][ T3440] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050928][ T6612] loop2: detected capacity change from 0 to 4096 [ 79.062980][ T3440] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077823][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.098703][ T3440] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124549][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.926: corrupted inode contents [ 79.154315][ T6612] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.926: mark_inode_dirty error [ 79.195022][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.926: corrupted inode contents [ 79.237876][ T6612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.926: mark_inode_dirty error [ 79.270122][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.926: corrupted inode contents [ 79.290994][ T6612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.926: mark_inode_dirty error [ 79.307987][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.926: corrupted inode contents [ 79.329329][ T6612] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.926: mark_inode_dirty error [ 79.369719][ T6612] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 79.413897][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.441738][ T6654] loop0: detected capacity change from 0 to 8192 [ 79.546083][ T6673] loop1: detected capacity change from 0 to 164 [ 79.553410][ T6673] Unable to read rock-ridge attributes [ 79.578200][ T3413] hid-generic 0000:0000:0000.0028: hidraw0: HID v8.00 Device [syz1] on syz0 [ 79.684573][ T6694] loop1: detected capacity change from 0 to 8192 [ 79.740415][ T6715] loop1: detected capacity change from 0 to 512 [ 79.750645][ T6715] EXT4-fs: Ignoring removed nobh option [ 79.757584][ T6715] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 79.766586][ T6715] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.959: invalid indirect mapped block 256 (level 1) [ 79.780936][ T6715] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.959: invalid indirect mapped block 2683928664 (level 1) [ 79.798813][ T6715] EXT4-fs (loop1): 1 truncate cleaned up [ 79.804993][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.822618][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.832752][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.847129][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 79.872748][ T6717] loop2: detected capacity change from 0 to 164 [ 79.881995][ T6717] Unable to read rock-ridge attributes [ 79.907924][ T9] hid-generic 0000:0000:0000.0029: hidraw0: HID v8.00 Device [syz1] on syz0 [ 80.015431][ T6751] loop3: detected capacity change from 0 to 4096 [ 80.031491][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.068862][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.081912][ T6752] loop2: detected capacity change from 0 to 8192 [ 80.252829][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 80.330093][ T6786] loop2: detected capacity change from 0 to 8192 [ 80.380441][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.434724][ T9] hid-generic 0000:0000:0000.002A: hidraw0: HID v8.00 Device [syz1] on syz0 [ 80.535924][ T6834] loop3: detected capacity change from 0 to 512 [ 80.543976][ T6834] EXT4-fs: Ignoring removed nobh option [ 80.551466][ T6834] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 80.570508][ T6834] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1004: invalid indirect mapped block 256 (level 1) [ 80.594122][ T6834] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1004: invalid indirect mapped block 2683928664 (level 1) [ 80.609398][ T6834] EXT4-fs (loop3): 1 truncate cleaned up [ 80.615929][ T6834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.721257][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 81.006446][ T6871] netlink: 'syz.4.1013': attribute type 39 has an invalid length. [ 81.076537][ T6873] loop0: detected capacity change from 0 to 4096 [ 81.087967][ T6873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.106189][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1018: corrupted inode contents [ 81.119581][ T6873] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.1018: mark_inode_dirty error [ 81.131501][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1018: corrupted inode contents [ 81.145074][ T6873] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1018: mark_inode_dirty error [ 81.157032][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1018: corrupted inode contents [ 81.171694][ T6873] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1018: mark_inode_dirty error [ 81.183599][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1018: corrupted inode contents [ 81.197122][ T6873] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.1018: mark_inode_dirty error [ 81.209753][ T6873] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 81.236045][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.265947][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.284845][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 81.284920][ T29] audit: type=1326 audit(1754952243.712:26748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.314697][ T29] audit: type=1326 audit(1754952243.712:26749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.338179][ T29] audit: type=1326 audit(1754952243.712:26750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.361663][ T29] audit: type=1326 audit(1754952243.712:26751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.385252][ T29] audit: type=1326 audit(1754952243.712:26752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.408873][ T29] audit: type=1326 audit(1754952243.712:26753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.432368][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a444000: rx timeout, send abort [ 81.432416][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a444600: rx timeout, send abort [ 81.435184][ T6889] loop0: detected capacity change from 0 to 164 [ 81.440692][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a444000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.456328][ T6889] Unable to read rock-ridge attributes [ 81.469307][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a444600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.483100][ T1036] hid-generic 0000:0000:0000.002B: hidraw0: HID v8.00 Device [syz1] on syz0 [ 81.489136][ T29] audit: type=1326 audit(1754952243.712:26754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.522296][ T29] audit: type=1326 audit(1754952243.712:26755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.546431][ T29] audit: type=1326 audit(1754952243.712:26756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.569957][ T29] audit: type=1326 audit(1754952243.712:26757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 81.784228][ T6926] loop1: detected capacity change from 0 to 164 [ 81.792527][ T6926] Unable to read rock-ridge attributes [ 81.801035][ T9] hid-generic 0000:0000:0000.002C: hidraw0: HID v8.00 Device [syz1] on syz0 [ 81.891271][ T6936] bridge0: entered promiscuous mode [ 81.898946][ T6936] netlink: 'syz.0.1035': attribute type 39 has an invalid length. [ 82.405294][ T9] hid-generic 0000:0000:0000.002D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 82.439378][ T6950] loop2: detected capacity change from 0 to 8192 [ 82.538032][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 82.661934][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a444600: rx timeout, send abort [ 82.670606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a444000: rx timeout, send abort [ 82.680225][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a444600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.694725][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a444000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.917516][ T36] hid-generic 0000:0000:0000.002E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 83.052284][ T9] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.00 Device [syz1] on syz0 [ 83.183207][ T7076] netlink: 'syz.4.1093': attribute type 11 has an invalid length. [ 83.191116][ T7076] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1093'. [ 83.230969][ T9] hid-generic 0000:0000:0000.0030: hidraw0: HID v8.00 Device [syz1] on syz0 [ 83.378201][ T7098] netlink: 'syz.1.1100': attribute type 11 has an invalid length. [ 83.386089][ T7098] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1100'. [ 83.989764][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7116 comm=syz.0.1108 [ 84.517631][ T7138] loop4: detected capacity change from 0 to 164 [ 84.535666][ T7138] Unable to read rock-ridge attributes [ 84.714601][ T3354] hid_parser_main: 360 callbacks suppressed [ 84.714647][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.728051][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.735460][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.742933][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.750446][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.757859][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.765339][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.772753][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.780156][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.787530][ T3354] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 84.795777][ T3354] hid-generic 0000:0000:0000.0031: hidraw0: HID v8.00 Device [syz1] on syz0 [ 85.621553][ T7229] bridge0: entered promiscuous mode [ 85.628887][ T7229] netlink: 'syz.2.1156': attribute type 39 has an invalid length. [ 86.426958][ T29] kauditd_printk_skb: 1264 callbacks suppressed [ 86.426977][ T29] audit: type=1326 audit(1754952248.852:28022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.457003][ T29] audit: type=1326 audit(1754952248.852:28023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.482569][ T29] audit: type=1326 audit(1754952248.912:28024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.506219][ T29] audit: type=1326 audit(1754952248.912:28025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.529791][ T29] audit: type=1326 audit(1754952248.912:28026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.560733][ T29] audit: type=1326 audit(1754952248.952:28027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 86.584289][ T29] audit: type=1326 audit(1754952248.952:28028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 86.607895][ T29] audit: type=1326 audit(1754952248.952:28029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 86.631670][ T29] audit: type=1326 audit(1754952248.962:28030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 86.655386][ T29] audit: type=1326 audit(1754952248.992:28031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 86.879222][ T3354] hid-generic 0000:0000:0000.0032: hidraw0: HID v8.00 Device [syz1] on syz0 [ 86.907788][ T7335] loop1: detected capacity change from 0 to 512 [ 86.914615][ T7335] EXT4-fs: Ignoring removed nobh option [ 86.925488][ T7335] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 86.938275][ T7335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1205: invalid indirect mapped block 256 (level 1) [ 86.966074][ T7335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1205: invalid indirect mapped block 2683928664 (level 1) [ 87.000595][ T7335] EXT4-fs (loop1): 1 truncate cleaned up [ 87.033545][ T7335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.069194][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.077989][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.099991][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 87.264655][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 87.361954][ T7390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1229'. [ 87.403843][ T7390] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.510162][ T7390] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.586520][ T7390] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.630011][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.647391][ T7390] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.706497][ T7443] netlink: 'syz.1.1239': attribute type 11 has an invalid length. [ 87.714470][ T7443] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1239'. [ 87.767275][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.791189][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.804019][ T3440] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838909][ T3440] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.089717][ T7465] loop3: detected capacity change from 0 to 164 [ 88.100978][ T7465] Unable to read rock-ridge attributes [ 88.115779][ T9] hid-generic 0000:0000:0000.0033: hidraw0: HID v8.00 Device [syz1] on syz0 [ 88.352982][ T3354] hid-generic 0000:0000:0000.0034: hidraw0: HID v8.00 Device [syz1] on syz0 [ 88.433973][ T7510] netlink: 'syz.3.1260': attribute type 11 has an invalid length. [ 88.441886][ T7510] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1260'. [ 88.905969][ T7537] loop0: detected capacity change from 0 to 8192 [ 89.072881][ T1036] hid-generic 0000:0000:0000.0035: hidraw0: HID v8.00 Device [syz1] on syz0 [ 89.135929][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 89.287110][ T7578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1282'. [ 89.317512][ T7574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.410367][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 89.500378][ T7574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.594369][ T7574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.617495][ T7635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 89.655979][ T7643] netlink: 'syz.4.1304': attribute type 11 has an invalid length. [ 89.663969][ T7643] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1304'. [ 89.710320][ T7574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.729234][ T7646] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.822749][ T3440] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.839717][ T3440] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.855125][ T3440] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.874529][ T3440] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.982272][ T7646] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.090105][ T7646] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.159898][ T7646] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.221237][ T1634] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.247663][ T1634] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275868][ T1634] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305264][ T1634] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.654068][ T7723] loop2: detected capacity change from 0 to 8192 [ 90.940946][ T7758] netlink: 'syz.1.1331': attribute type 11 has an invalid length. [ 90.971992][ T7755] loop0: detected capacity change from 0 to 8192 [ 91.656231][ T29] kauditd_printk_skb: 4153 callbacks suppressed [ 91.656246][ T29] audit: type=1326 audit(1754952254.082:32185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.728430][ T29] audit: type=1326 audit(1754952254.082:32186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.751962][ T29] audit: type=1326 audit(1754952254.082:32187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.775538][ T29] audit: type=1326 audit(1754952254.082:32188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.799115][ T29] audit: type=1326 audit(1754952254.082:32189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.822636][ T29] audit: type=1326 audit(1754952254.082:32190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.846149][ T29] audit: type=1326 audit(1754952254.082:32191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.869564][ T29] audit: type=1326 audit(1754952254.082:32192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.893084][ T29] audit: type=1326 audit(1754952254.082:32193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 91.916617][ T29] audit: type=1326 audit(1754952254.082:32194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f936fd45ba7 code=0x7ffc0000 [ 92.080165][ T7832] netlink: 'syz.2.1352': attribute type 11 has an invalid length. [ 92.313199][ T9] hid_parser_main: 199 callbacks suppressed [ 92.313218][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.326620][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.334032][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.341503][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.348901][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.356276][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.363775][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.371176][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.378571][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.385953][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 92.395686][ T9] hid-generic 0000:0000:0000.0036: hidraw0: HID v8.00 Device [syz1] on syz0 [ 92.861146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811991d800: rx timeout, send abort [ 92.869413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811991d600: rx timeout, send abort [ 92.878284][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811991d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.891646][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a427a00: rx timeout, send abort [ 92.892555][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811991d600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.900763][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a427200: rx timeout, send abort [ 92.923272][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a427a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.937593][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a427200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.005963][ T7865] netlink: 'syz.0.1363': attribute type 11 has an invalid length. [ 93.014040][ T7865] __nla_validate_parse: 4 callbacks suppressed [ 93.014053][ T7865] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1363'. [ 93.067507][ T7872] loop1: detected capacity change from 0 to 164 [ 93.082464][ T7872] Unable to read rock-ridge attributes [ 93.108565][ T9] hid-generic 0000:0000:0000.0037: hidraw0: HID v8.00 Device [syz1] on syz0 [ 93.163686][ T7888] loop4: detected capacity change from 0 to 512 [ 93.170910][ T7888] EXT4-fs: Ignoring removed nobh option [ 93.179725][ T7888] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 93.189166][ T7888] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1372: invalid indirect mapped block 256 (level 1) [ 93.205215][ T7888] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1372: invalid indirect mapped block 2683928664 (level 1) [ 93.220283][ T7888] EXT4-fs (loop4): 1 truncate cleaned up [ 93.226302][ T7888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.246329][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.267175][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.354246][ T7900] loop1: detected capacity change from 0 to 164 [ 93.369427][ T7900] Unable to read rock-ridge attributes [ 93.373562][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 93.378012][ T3413] hid-generic 0000:0000:0000.0038: hidraw0: HID v8.00 Device [syz1] on syz0 [ 93.939794][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.161034][ T7941] loop1: detected capacity change from 0 to 8192 [ 94.198751][ T7947] netlink: 'syz.4.1389': attribute type 39 has an invalid length. [ 94.605078][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 94.620310][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 94.674025][ T7985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1403'. [ 94.725955][ T7975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1400'. [ 94.755638][ T7984] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1399'. [ 94.922601][ T8016] netlink: 'syz.4.1405': attribute type 39 has an invalid length. [ 95.129105][ T8045] netlink: 'syz.2.1407': attribute type 11 has an invalid length. [ 95.136945][ T8045] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1407'. [ 95.152599][ T8047] loop4: detected capacity change from 0 to 512 [ 95.174629][ T8047] EXT4-fs: Ignoring removed nobh option [ 95.190610][ T8047] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 95.204594][ T8047] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1408: invalid indirect mapped block 256 (level 1) [ 95.249465][ T8047] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1408: invalid indirect mapped block 2683928664 (level 1) [ 95.285075][ T8047] EXT4-fs (loop4): 1 truncate cleaned up [ 95.291289][ T8047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.313589][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a427200: rx timeout, send abort [ 95.321835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a427a00: rx timeout, send abort [ 95.330270][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a427200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.344572][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a427a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.387341][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.403344][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.415376][ T8062] sd 0:0:1:0: device reset [ 95.541931][ T8068] loop1: detected capacity change from 0 to 256 [ 95.549828][ T8068] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.572304][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'. [ 95.589066][ T8068] netlink: 'syz.1.1414': attribute type 5 has an invalid length. [ 95.814416][ T8086] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 95.837318][ T8086] bond1: (slave geneve2): making interface the new active one [ 95.848036][ T8086] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.856727][ T149] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.865368][ T149] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.879636][ T149] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.891350][ T1036] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.910671][ T149] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.987554][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.190307][ T8160] netlink: 'syz.4.1434': attribute type 11 has an invalid length. [ 96.198178][ T8160] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1434'. [ 96.230814][ T8162] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 96.329470][ T8198] netlink: 'syz.2.1432': attribute type 39 has an invalid length. [ 96.374257][ T3483] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.384775][ T8162] bond1: (slave geneve2): making interface the new active one [ 96.421910][ T8162] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.430753][ T1634] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.452850][ T1634] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.510966][ T1634] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.555769][ T1634] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.684890][ T29] kauditd_printk_skb: 5043 callbacks suppressed [ 96.684905][ T29] audit: type=1326 audit(1754952259.112:37238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 96.787507][ T29] audit: type=1326 audit(1754952259.112:37239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 96.811182][ T29] audit: type=1326 audit(1754952259.162:37240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 96.834601][ T29] audit: type=1326 audit(1754952259.162:37241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 96.858474][ T29] audit: type=1326 audit(1754952259.162:37242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b68ebe9 code=0x7ffc0000 [ 96.904397][ T29] audit: type=1326 audit(1754952259.322:37243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.3.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 96.928042][ T29] audit: type=1326 audit(1754952259.322:37244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.3.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 96.951574][ T29] audit: type=1326 audit(1754952259.322:37245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.3.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 96.974880][ T29] audit: type=1326 audit(1754952259.322:37246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.3.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 96.998347][ T29] audit: type=1326 audit(1754952259.322:37247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.3.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f936fd4ebe9 code=0x7ffc0000 [ 97.075538][ T8234] loop2: detected capacity change from 0 to 164 [ 97.097427][ T8234] Unable to read rock-ridge attributes [ 97.413163][ T8271] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.518733][ T8271] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.592006][ T8271] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.659844][ T8271] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.729252][ T3440] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.748579][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.760592][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.776192][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.879612][ T8320] sd 0:0:1:0: device reset [ 97.928128][ T8324] netlink: 'syz.3.1466': attribute type 11 has an invalid length. [ 98.025979][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811955a200: rx timeout, send abort [ 98.034244][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811955a800: rx timeout, send abort [ 98.042555][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811955a200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.056871][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811955a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.153945][ T8331] __nla_validate_parse: 3 callbacks suppressed [ 98.153958][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 98.362531][ T8353] loop2: detected capacity change from 0 to 164 [ 98.652821][ T8353] Unable to read rock-ridge attributes [ 98.851309][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 99.109922][ T8382] loop3: detected capacity change from 0 to 1024 [ 99.122612][ T8382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.137618][ T8394] netlink: 'syz.2.1487': attribute type 39 has an invalid length. [ 99.197200][ T8396] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1494'. [ 99.268094][ T8402] loop1: detected capacity change from 0 to 164 [ 99.297180][ T8402] Unable to read rock-ridge attributes [ 99.326546][ T3376] hid_parser_main: 170 callbacks suppressed [ 99.326563][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.339898][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.347345][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.354764][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.362161][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.369596][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.377042][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.384432][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.391805][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.399265][ T3376] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 99.407846][ T3376] hid-generic 0000:0000:0000.003B: hidraw0: HID v8.00 Device [syz1] on syz0 [ 99.439662][ T8382] loop3: detected capacity change from 1024 to 0 [ 99.479736][ T3301] bio_check_eod: 92 callbacks suppressed [ 99.479830][ T3301] syz-executor: attempt to access beyond end of device [ 99.479830][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.501830][ T3301] syz-executor: attempt to access beyond end of device [ 99.501830][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.516851][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.530984][ T3301] syz-executor: attempt to access beyond end of device [ 99.530984][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.544638][ T3301] syz-executor: attempt to access beyond end of device [ 99.544638][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.558793][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.572523][ T3301] syz-executor: attempt to access beyond end of device [ 99.572523][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.586636][ T3301] syz-executor: attempt to access beyond end of device [ 99.586636][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.600872][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.614462][ T3301] syz-executor: attempt to access beyond end of device [ 99.614462][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.618345][ T8050] ext4lazyinit: attempt to access beyond end of device [ 99.618345][ T8050] loop3: rw=536576, sector=6, nr_sectors = 2 limit=0 [ 99.629840][ T3301] syz-executor: attempt to access beyond end of device [ 99.629840][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.660797][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 99.670639][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.684297][ T3301] syz-executor: attempt to access beyond end of device [ 99.684297][ T3301] loop3: rw=12288, sector=64, nr_sectors = 2 limit=0 [ 99.699519][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.713629][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.727810][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.770685][ T8050] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 99.785299][ T8050] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 99.794957][ T8050] EXT4-fs (loop3): I/O error while writing superblock [ 99.803271][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.820480][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.849681][ T3301] EXT4-fs warning (device loop3): ext4_empty_dir:3084: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 99.950972][ T4978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.962409][ T4978] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 99.971685][ T4978] EXT4-fs (loop3): I/O error while writing superblock [ 99.979875][ T8392] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 100.211138][ T8452] loop0: detected capacity change from 0 to 164 [ 100.219660][ T8452] Unable to read rock-ridge attributes [ 100.221540][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 100.228693][ T10] hid-generic 0000:0000:0000.003C: hidraw0: HID v8.00 Device [syz1] on syz0 [ 100.312562][ T8465] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.322418][ T8465] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.430814][ T8503] loop0: detected capacity change from 0 to 512 [ 100.437381][ T8503] EXT4-fs: Ignoring removed nobh option [ 100.444929][ T8465] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.454754][ T8465] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.465839][ T8503] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 100.474912][ T8503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1523: invalid indirect mapped block 256 (level 1) [ 100.488639][ T8503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1523: invalid indirect mapped block 2683928664 (level 1) [ 100.503261][ T8503] EXT4-fs (loop0): 1 truncate cleaned up [ 100.509742][ T8503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.524505][ T8465] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.534317][ T8465] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.539394][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.552687][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.570383][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 100.609767][ T8465] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.619536][ T8465] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.642219][ T8525] validate_nla: 1 callbacks suppressed [ 100.642228][ T8525] netlink: 'syz.4.1527': attribute type 11 has an invalid length. [ 100.655573][ T8525] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1527'. [ 100.684497][ T5342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.692826][ T5342] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.703904][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.712227][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.732245][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.740724][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.751027][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.759332][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.847830][ T8539] loop1: detected capacity change from 0 to 164 [ 100.856265][ T8539] Unable to read rock-ridge attributes [ 100.864785][ T3376] hid-generic 0000:0000:0000.003D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 101.097605][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.116538][ T8559] loop0: detected capacity change from 0 to 512 [ 101.123558][ T8559] EXT4-fs: Ignoring removed nobh option [ 101.131280][ T8559] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 101.241709][ T8563] netlink: 'syz.1.1532': attribute type 39 has an invalid length. [ 101.358482][ T8559] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1533: invalid indirect mapped block 256 (level 1) [ 101.413827][ T8559] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1533: invalid indirect mapped block 2683928664 (level 1) [ 101.464306][ T8559] EXT4-fs (loop0): 1 truncate cleaned up [ 101.486373][ T8559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.531751][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.540663][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.855695][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 101.855708][ T29] audit: type=1326 audit(1754952264.282:37399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 101.885530][ T29] audit: type=1326 audit(1754952264.282:37400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 101.909102][ T29] audit: type=1326 audit(1754952264.292:37401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 101.932809][ T29] audit: type=1326 audit(1754952264.292:37402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 101.956381][ T29] audit: type=1326 audit(1754952264.292:37403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 101.980042][ T29] audit: type=1326 audit(1754952264.292:37404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 102.003436][ T29] audit: type=1326 audit(1754952264.292:37405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 102.026971][ T29] audit: type=1326 audit(1754952264.292:37406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 102.050358][ T29] audit: type=1326 audit(1754952264.292:37407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 102.073852][ T29] audit: type=1326 audit(1754952264.292:37408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc7b24cebe9 code=0x7ffc0000 [ 102.099470][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.155201][ T8596] loop1: detected capacity change from 0 to 1024 [ 102.172294][ T8596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.228302][ T8596] loop1: detected capacity change from 1024 to 0 [ 102.242677][ T3312] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 102.255661][ T3312] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 102.264631][ T3312] EXT4-fs (loop1): I/O error while writing superblock [ 102.271544][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: IO failure [ 102.280463][ T3312] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 102.288730][ T3312] EXT4-fs (loop1): I/O error while writing superblock [ 102.295477][ T3312] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 102.306939][ T3312] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 102.315237][ T3312] EXT4-fs (loop1): I/O error while writing superblock [ 102.327754][ T1634] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 102.341538][ T1634] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 102.350087][ T1634] EXT4-fs (loop1): I/O error while writing superblock [ 102.357307][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.366930][ T3312] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 102.375229][ T3312] EXT4-fs (loop1): I/O error while writing superblock [ 102.382891][ T8598] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 102.453907][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a257200: rx timeout, send abort [ 102.462141][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a256c00: rx timeout, send abort [ 102.470372][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a257200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.484725][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a256c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.525027][ T8608] loop4: detected capacity change from 0 to 164 [ 102.532467][ T8608] Unable to read rock-ridge attributes [ 102.540446][ T1036] hid-generic 0000:0000:0000.003E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 102.617832][ T8625] loop4: detected capacity change from 0 to 512 [ 102.624471][ T8625] EXT4-fs: Ignoring removed nobh option [ 102.631853][ T8625] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 102.640587][ T8625] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1551: invalid indirect mapped block 256 (level 1) [ 102.654419][ T8625] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1551: invalid indirect mapped block 2683928664 (level 1) [ 102.669423][ T8625] EXT4-fs (loop4): 1 truncate cleaned up [ 102.675243][ T8625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.690945][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.699426][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.711469][ T5342] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.751052][ T5342] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.821277][ T5342] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.884065][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 102.896255][ T5342] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.933998][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.941073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a427200: rx timeout, send abort [ 102.941110][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a57f200: rx timeout, send abort [ 102.949388][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a427200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.949440][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a57f200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.986432][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.994898][ T8631] bridge_slave_0: entered allmulticast mode [ 103.002049][ T8631] bridge_slave_0: entered promiscuous mode [ 103.009268][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.016489][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.023857][ T8631] bridge_slave_1: entered allmulticast mode [ 103.031109][ T8631] bridge_slave_1: entered promiscuous mode [ 103.056278][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.072181][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.094901][ T8631] team0: Port device team_slave_0 added [ 103.101676][ T8631] team0: Port device team_slave_1 added [ 103.117705][ T149] ================================================================== [ 103.125804][ T149] BUG: KCSAN: data-race in copy_process / free_pid [ 103.132293][ T149] [ 103.134599][ T149] read-write to 0xffffffff8685fc48 of 4 bytes by task 8868 on cpu 0: [ 103.142643][ T149] free_pid+0x77/0x180 [ 103.146716][ T149] free_pids+0x7a/0xb0 [ 103.150767][ T149] release_task+0x9a9/0xb60 [ 103.155258][ T149] do_exit+0xd81/0x15c0 [ 103.159399][ T149] call_usermodehelper_exec_async+0x247/0x250 [ 103.165458][ T149] ret_from_fork+0xda/0x150 [ 103.169945][ T149] ret_from_fork_asm+0x1a/0x30 [ 103.174717][ T149] [ 103.177026][ T149] read to 0xffffffff8685fc48 of 4 bytes by task 149 on cpu 1: [ 103.184461][ T149] copy_process+0x14a6/0x2000 [ 103.189123][ T149] kernel_clone+0x16c/0x5c0 [ 103.193610][ T149] user_mode_thread+0x7d/0xb0 [ 103.198289][ T149] call_usermodehelper_exec_work+0x41/0x160 [ 103.204174][ T149] process_scheduled_works+0x4cb/0x9d0 [ 103.209622][ T149] worker_thread+0x582/0x770 [ 103.214198][ T149] kthread+0x489/0x510 [ 103.218247][ T149] ret_from_fork+0xda/0x150 [ 103.222742][ T149] ret_from_fork_asm+0x1a/0x30 [ 103.227488][ T149] [ 103.229795][ T149] value changed: 0x800000c6 -> 0x800000c5 [ 103.235490][ T149] [ 103.237792][ T149] Reported by Kernel Concurrency Sanitizer on: [ 103.243919][ T149] CPU: 1 UID: 0 PID: 149 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.254662][ T149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.264787][ T149] Workqueue: events_unbound call_usermodehelper_exec_work [ 103.271895][ T149] ================================================================== [ 103.331306][ T5342] bridge_slave_1: left allmulticast mode [ 103.336968][ T5342] bridge_slave_1: left promiscuous mode [ 103.342755][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.369071][ T5342] bridge_slave_0: left allmulticast mode [ 103.374736][ T5342] bridge_slave_0: left promiscuous mode [ 103.380429][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.400072][ T8625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.460383][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.469778][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.479491][ T5342] bond0 (unregistering): Released all slaves [ 103.487201][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.494147][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.520043][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.551042][ T5342] tipc: Left network mode [ 103.559083][ T5342] hsr_slave_0: left promiscuous mode [ 103.564605][ T5342] hsr_slave_1: left promiscuous mode [ 103.570244][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.577588][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.585115][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.592510][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.602037][ T5342] veth1_macvtap: left promiscuous mode [ 103.607519][ T5342] veth0_macvtap: left promiscuous mode [ 103.613120][ T5342] veth1_vlan: left promiscuous mode [ 103.618441][ T5342] veth0_vlan: left promiscuous mode [ 103.667024][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 103.677837][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 104.008998][ T5342] bridge_slave_1: left allmulticast mode [ 104.014635][ T5342] bridge_slave_1: left promiscuous mode [ 104.020402][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.028174][ T5342] bridge_slave_0: left allmulticast mode [ 104.033873][ T5342] bridge_slave_0: left promiscuous mode [ 104.039570][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.099753][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.109239][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.118360][ T5342] bond0 (unregistering): Released all slaves [ 104.169716][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.181832][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 104.191173][ T5342] team0 (unregistering): Port device team_slave_0 removed