last executing test programs: 2.600901583s ago: executing program 1 (id=2883): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) clock_settime(0x7, 0x0) 2.448745684s ago: executing program 1 (id=2886): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setsockopt$MRT6_TABLE(r3, 0x29, 0xd1, 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x8, &(0x7f0000000080)=[{0x1, 0x60, 0x8, 0x1}, {0x2, 0x4, 0x3, 0x6}, {0xf3a, 0xff, 0x9, 0x9}, {0x5, 0x4, 0x1, 0x8}, {0x8, 0xed, 0x7, 0x9}, {0x8, 0x8, 0x27, 0x80}, {0x4c, 0x2, 0x4, 0x1}, {0x0, 0x5, 0xfd, 0xfffffff5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 2.329827455s ago: executing program 4 (id=2888): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x48a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100146, 0x4, 0x1, 0x8, 0x3, 0xfffffffe, 0x7e, 0x0, 0x20, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000050000000000000000020000000000000000009d00da00"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0xff}}]}}}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) memfd_secret(0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 2.059405117s ago: executing program 4 (id=2889): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fstat(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x3, 0x4e24, 0x1, 0x2, 0x80, 0x0, 0x3c, 0x0, r6}, {0x3, 0x9, 0x1, 0x800, 0x5, 0x1000, 0xa, 0x6}, {0x101, 0x7, 0x1, 0x8000}, 0x310e, 0x6e6bb3, 0x2, 0x1, 0x2}, {{@in=@local, 0x4d4, 0xff}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x10, 0x2, 0xf}}, 0xe8) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 1.748453558s ago: executing program 1 (id=2890): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 1.732529408s ago: executing program 4 (id=2891): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x48a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100146, 0x4, 0x1, 0x8, 0x3, 0xfffffffe, 0x7e, 0x0, 0x20, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000050000000000000000020000000000000000009d00da00"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0xff}}]}}}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) memfd_secret(0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.607413719s ago: executing program 1 (id=2892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x7, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64]) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r7, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x691bd8bf6761d1af, 0x2, 0x5, 0x2, 0x8, @remote}, 0x10) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unlink(&(0x7f0000000180)='./file1\x00') 1.53590852s ago: executing program 4 (id=2894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x7, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64]) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r7, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x691bd8bf6761d1af, 0x2, 0x5, 0x2, 0x8, @remote}, 0x10) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unlink(&(0x7f0000000180)='./file1\x00') 1.384376811s ago: executing program 2 (id=2897): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) clock_settime(0x7, 0x0) 1.319665591s ago: executing program 2 (id=2900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af96e4b38bf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd19) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r5], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) 1.218722842s ago: executing program 0 (id=2902): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 1.208316692s ago: executing program 2 (id=2903): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x41) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8010000) 1.038917773s ago: executing program 3 (id=2905): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 978.358634ms ago: executing program 3 (id=2906): socket(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000008000000000000f7ffffff00008bc725d8eced6e794810000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) tkill(r0, 0x7) 977.315213ms ago: executing program 2 (id=2907): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r0}, 0x18) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xa, 0x5, {{0x43, 0x4, 0x1, 0x2d, 0x10c, 0x66, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x8, 0x106, 0x3, 0x8]}, @generic={0x94, 0x4, "dbc0"}, @cipso={0x86, 0x4c, 0x1, [{0x0, 0x7, "b61461a8e5"}, {0x7, 0x8, "bab0b4abbc32"}, {0x1, 0x9, "149894c6e26d12"}, {0x5, 0x4, "29d6"}, {0x0, 0x3, "ac"}, {0x1, 0xa, "e3097174949f5545"}, {0x6, 0xd, "ed03312736162be55c3330"}, {0x2, 0x10, "8efc19250a6f4860a9b3b1b14e98"}]}, @ssrr={0x89, 0x27, 0x42, [@rand_addr=0x64010100, @multicast2, @broadcast, @loopback, @local, @loopback, @loopback, @local, @empty]}, @lsrr={0x83, 0x17, 0x12, [@broadcast, @multicast1, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010102]}, @rr={0x7, 0x1b, 0xc7, [@multicast1, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}, @lsrr={0x83, 0x17, 0xef, [@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @broadcast, @local, @private=0xa010102]}, @generic={0x22, 0x8, "e7fea98f830f"}, @cipso={0x86, 0x17, 0x0, [{0x7, 0x11, "0d4f99e62f45916973b78db04efe0a"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf8, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2400c845}, 0x80) 944.044744ms ago: executing program 3 (id=2908): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) clock_settime(0x7, 0x0) 862.227504ms ago: executing program 3 (id=2909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60000) poll(&(0x7f0000000000)=[{r1, 0x12}], 0x1, 0x24) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x10001, 0xfffffffd, 0x66cca067, 0xfffffc01, 0xf97c, 0x81, 0x7, 0x1}}) io_setup(0x7f, &(0x7f0000000100)) 855.110444ms ago: executing program 3 (id=2910): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@delalloc}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000280)=""/251) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r4}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab0000000000000e0032"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) socket$caif_stream(0x25, 0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 781.085184ms ago: executing program 2 (id=2911): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 765.963435ms ago: executing program 2 (id=2912): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffffbb, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x4024094) memfd_secret(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001cc0)={0x3, 0x9, 0x4, 0xfffffffa, 0x6, 0x0, [{0x9, 0xa, 0x401, '\x00', 0x1bdba653d65d4b13}, {0xf805, 0xf001, 0x7, '\x00', 0x300}, {0x10000, 0x8, 0x6, '\x00', 0x2606}, {0x799, 0x7ff, 0x3, '\x00', 0x5}, {0xc, 0xd4f3, 0x2f24, '\x00', 0x88c}, {0x40, 0x6, 0x4, '\x00', 0x1304}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') read$nci(r6, &(0x7f0000000280)=""/134, 0x86) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 648.950936ms ago: executing program 1 (id=2913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 610.999786ms ago: executing program 1 (id=2914): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000002200)=0xc0100100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000203030000000040009900000000000009000200000008560300"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) kexec_load(0xce32, 0xa, &(0x7f0000000880)=[{&(0x7f0000000080)="78301add9cd9ca309fd03d1f997b53283db60e5d08cc6233ec852f86d815eab1d16de0c389becf78db61f7543afc5f", 0x2f, 0xc, 0x1}, {&(0x7f00000004c0)="0cc55bdf6386bcb60f0d08a2f72aff34d7a6137189c6827715c5de574e430e24355d97399cbcd4c9c7411cda4485469faf2b82344d043c13d1718a7ddeed758f90ea526a3e807aea8ddc2dbd40d09ef2824fce234a33fc506f6fc606712979960b30f1bf487664378ae3f9f4d30ef1becc3b603d88233e58603776c9387ec005eb2b08e9398dd445357b3d9e08d197d9a266b133ee2a218758382e327063894b13441cec3c6d62caf64dbdc41c9e280609992395dac5df9a1fd148f9182cdc65a58ac54a6b7104c33409ee25fd68b0291e22", 0xd2, 0x9, 0x5}, {&(0x7f0000000280)="b19b06ea9d08f7bd612c4f1db0b5366937c95de54610955051f7e0209b054b8dd6af127a5d441394b71b2b507a956c505c23cba4e29748d9b3c1a78027e11bb79bce6c288b46307948920d146ae712b0e1c40eab8aaaf546d28d561da5aaf9d727cc66e3d9df51ec976e6773aedfd5741dbb363d44fc8f7dc0bce9dec81d6a0beebbfd59d60c3598268e6cc6c07ab3a6755ed92d7b176005b8f2b3bca3a9f07419fc26db6aef224e206fbdfdf85c915daf0e18ce86d083e65984f7", 0xbb, 0xda, 0x3}, {&(0x7f00000001c0)="b63b68540edf150ecaf40e3b439ada5ab30ef288dce158db2ba4e2c058f77994b34d76d9ce029991f6daadef14401a0e3d5125e17f429b9574c5aa8f79ba59d0dd26d7d545428e0427a7de76d42eb8a5e7db24d8e39315307bdfa7f2f650a1b2db4e5138946e8aed9d1e7c5d1e0c795fac56cd184acc", 0x76, 0x1, 0x6}, {&(0x7f00000005c0)="8d8bd81ff71f3a511622956542548d8214f54000f0179989f6aec07df78ab9d0905ccff907a24e12242ce333fcecf64910ce77d11c6aa781e31616a0cab9468dcdc58bd6f31d9ee395ce6ee39d8eacaeec6dc4140488d8dcd2f612ca38eb29cdf90e8d0028ef8f24447f5a296f2c362091fa3adce6", 0x75, 0x0, 0x4}, {&(0x7f0000000640)="35b2b5a27259ea269b6ce9632b1031e526016ec53859ac1afbe6ce84bafe12e49607e65bead316a766051f497b36d2f4ebc33f124dc29e7d22e29728a2145f43b88fc3ea50da7538da76dd7ea3dce02916550a46a9cbd9176bc4cbb34291829c3498e8f582bb1b3914033cccbb303cd1ac964b", 0x73, 0x8, 0x10000}, {&(0x7f00000006c0)="b645f315b37c40ea0d1603331c0f03396f87e2898fb2d0d65701c09d5d00b6bad132a5f637594f63e6dcf4d01347dbb0b0b1f8d4459478fe249e89284790a3117561480d3d6cc6cb4c87f9ade9a46c08354dec6df1aab86d4fbd59b41316d63fbb00d8ac27b4699ceb7e80bcc07ebeb62417b437f900175c8a28583a7a5cc4a48704a819b15aefdb24d6a57f9c840a2a5d147a", 0x93, 0x100000001, 0x4}, {&(0x7f0000000a00)="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", 0x1000, 0x5, 0x8}, {&(0x7f0000000780)="7879d5ca363b01c36073649958b24e0ffb544a5b79ef2bf30ee14673d55a980c4bc70a1eeb0c75764db884fb4e2a38b0d1046a572852f54b5a1e4d0026c0b0b3a25bc575250fa3247fedced69fcf0afb6e268492ccef8dc232ed1d1c93e6f041ef64284a84c86c6ad1ac35108867c01bdec13477e54270918989b269c33c45230ad15d28d1304e3b19b14c5b3b766e7ad2", 0x91, 0x3}, {&(0x7f0000000840)="47a8fbea517d39fba2e68c71fced38046194136664", 0x15, 0xb, 0xfff}], 0x140000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10, 0x200000000}, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 553.428056ms ago: executing program 4 (id=2915): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x41) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8010000) 364.107067ms ago: executing program 4 (id=2916): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100003e044f6effe45300"/35], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000000306010100000000000000000700000a0900020073797a3100000000050001000700000005000100070000000900020073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x20040841}, 0x14000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x24000090) r6 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@phonet, &(0x7f00000003c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)={0x110, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x194}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40051}, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x20000088, &(0x7f0000000240)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 294.121488ms ago: executing program 0 (id=2917): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x2, 0xff, 0x0, 0x1b00}}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004ec0)={0x3, &(0x7f0000000000)=[{0x120}, {0x20, 0x7, 0x0, 0xffff}, {0x6, 0x6}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f124a6bed4a6e874c28a9af81606b403693c64c130d1c03d41c1da8ebbbd090ffdef352b1d82f25c7719aa569b4e29f1b1c3200d701547228df8a88f7c32e749"}, 0x48}, 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x4f, 0x0, "4112b0eab147b9ae45f74f98770abe97f34292f38ee1fa964dc642eebd353fd01c47dd45ed968f9a341c1a0bb521134e836f2e2506ce34f489a59658403035ef4f69920faf2ff2356f03749ea330c857"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000e27f0000030000", @ANYRES32, @ANYRESHEX=r8, @ANYBLOB="35d808c79ca23d47a5c0cabdfa1ad0dda72ea4e53a9704b39b3f5f46d88407084e5eebf4650ab7da8ec15ee1765e2d0457f654d92da4ed8b709384d5f9aade5343ab191677f7f6375591521ba73232d3919d5f4f8eda3ef2bd805bd3b50ee18d9a39a3bc0113641317095d567dbe2013f4f244fcaf5e6234870aaeeed0656890a7f5734b0ff49f37d181312ade72b43fcaa22d9e9355141505c15c37487dc9f8870c1e685eb53c263fe4d6622fc3ad35e10e1b7f7244b3c96a2f82a4bbb7dabb0e92a6dcc505b70157eeaa107b344f066147f2786366a97f80456357505db23f59f27cde88b36b6c59d1eba32495210cb5", @ANYRESOCT], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 272.158168ms ago: executing program 0 (id=2918): socket(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000008000000000000f7ffffff00008bc725d8eced6e794810000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) tkill(r0, 0x7) 203.477328ms ago: executing program 0 (id=2919): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) clock_settime(0x7, 0x0) 138.269759ms ago: executing program 0 (id=2920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60000) poll(&(0x7f0000000000)=[{r1, 0x12}], 0x1, 0x24) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x10001, 0xfffffffd, 0x66cca067, 0xfffffc01, 0xf97c, 0x81, 0x7, 0x1}}) io_setup(0x7f, &(0x7f0000000100)) 131.211898ms ago: executing program 0 (id=2921): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x41) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=2922): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 235.781376][T12826] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2533: bg 0: block 345: padding at end of block bitmap is not set [ 235.855091][T12826] EXT4-fs (loop2): Remounting filesystem read-only [ 235.864347][T12836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2537: bg 0: block 345: padding at end of block bitmap is not set [ 235.899461][T12836] EXT4-fs (loop0): Remounting filesystem read-only [ 236.158066][T12862] loop2: detected capacity change from 0 to 2048 [ 236.192925][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 236.202830][T12862] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.225405][T12872] loop0: detected capacity change from 0 to 2048 [ 236.225586][T12866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.252885][T12872] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.416734][T12882] loop3: detected capacity change from 0 to 2048 [ 236.431449][T12882] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.620901][T12883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2550: bg 0: block 345: padding at end of block bitmap is not set [ 236.639878][T12883] EXT4-fs (loop0): Remounting filesystem read-only [ 236.657095][T12887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2557: bg 0: block 345: padding at end of block bitmap is not set [ 236.675380][T12887] EXT4-fs (loop3): Remounting filesystem read-only [ 236.742846][T12370] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 236.768561][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x1 [ 236.776558][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.777655][T12370] EXT4-fs (loop2): Remounting filesystem read-only [ 236.784366][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.790930][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 236.798562][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.819758][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.827602][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.835390][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.843189][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.851001][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.858749][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.866519][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x4 [ 236.874308][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.882103][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.889899][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.897669][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.905509][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x4 [ 236.913295][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.921075][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.928834][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.936693][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.944471][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.952349][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.960473][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.968233][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.976051][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.983971][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.991809][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 236.999603][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.007385][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.015201][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.022992][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.030841][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.038592][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.046401][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.054182][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.061955][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.069813][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 237.078035][ T10] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 237.234133][T12905] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2567'. [ 237.255870][T12905] netlink: zone id is out of range [ 237.261070][T12905] netlink: zone id is out of range [ 237.267285][T12905] netlink: zone id is out of range [ 237.283530][T12905] netlink: zone id is out of range [ 237.293785][T12911] loop3: detected capacity change from 0 to 2048 [ 237.294209][T12905] netlink: del zone limit has 8 unknown bytes [ 237.317734][T12911] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.323704][T12915] loop2: detected capacity change from 0 to 2048 [ 237.369657][T12921] loop4: detected capacity change from 0 to 2048 [ 237.428201][T12930] loop1: detected capacity change from 0 to 2048 [ 237.497325][T12930] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.530451][T12921] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.560463][T12941] loop0: detected capacity change from 0 to 2048 [ 237.623121][T12941] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.764129][T12425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 237.765118][T12943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2575: bg 0: block 345: padding at end of block bitmap is not set [ 237.803239][T12425] EXT4-fs (loop3): Remounting filesystem read-only [ 237.820510][T12943] EXT4-fs (loop1): Remounting filesystem read-only [ 237.855111][T12944] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2571: bg 0: block 345: padding at end of block bitmap is not set [ 237.877504][T12944] EXT4-fs (loop4): Remounting filesystem read-only [ 238.027377][T12957] loop3: detected capacity change from 0 to 2048 [ 238.103679][T12957] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.157321][T12961] loop1: detected capacity change from 0 to 2048 [ 238.212109][T12952] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2578: bg 0: block 345: padding at end of block bitmap is not set [ 238.227241][T12952] EXT4-fs (loop0): Remounting filesystem read-only [ 238.235423][T12961] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.338364][T12972] loop4: detected capacity change from 0 to 2048 [ 238.412839][T12964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2580: bg 0: block 345: padding at end of block bitmap is not set [ 238.449355][T12970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2581: bg 0: block 345: padding at end of block bitmap is not set [ 238.469151][T12964] EXT4-fs (loop3): Remounting filesystem read-only [ 238.476436][T12970] EXT4-fs (loop1): Remounting filesystem read-only [ 238.519636][T12972] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.546488][T12975] loop0: detected capacity change from 0 to 2048 [ 238.595283][T12975] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.766744][T12987] loop2: detected capacity change from 0 to 2048 [ 238.825915][T12987] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.861722][T12980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2584: bg 0: block 345: padding at end of block bitmap is not set [ 238.877108][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 238.877121][ T30] audit: type=1326 audit(1741536078.795:28790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 238.927094][T12984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2585: bg 0: block 345: padding at end of block bitmap is not set [ 238.934866][ T30] audit: type=1326 audit(1741536078.825:28791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 238.965221][ T30] audit: type=1326 audit(1741536078.825:28792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 238.989038][ T30] audit: type=1326 audit(1741536078.825:28793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.012742][ T30] audit: type=1326 audit(1741536078.825:28794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.036491][ T30] audit: type=1326 audit(1741536078.825:28795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a71b9bad0 code=0x7ffc0000 [ 239.060135][ T30] audit: type=1326 audit(1741536078.825:28796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.083829][ T30] audit: type=1326 audit(1741536078.825:28797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.107373][ T30] audit: type=1326 audit(1741536078.825:28798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.130979][ T30] audit: type=1326 audit(1741536078.825:28799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 239.134352][T12984] EXT4-fs (loop0): Remounting filesystem read-only [ 239.169332][T12980] EXT4-fs (loop4): Remounting filesystem read-only [ 239.204370][T12987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2589: bg 0: block 345: padding at end of block bitmap is not set [ 239.220721][T12987] EXT4-fs (loop2): Remounting filesystem read-only [ 239.250608][T13002] loop3: detected capacity change from 0 to 2048 [ 239.290360][T13002] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.363000][T13006] loop1: detected capacity change from 0 to 2048 [ 239.386437][T13008] loop4: detected capacity change from 0 to 2048 [ 239.414687][T13008] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.460311][T13006] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.537298][T13020] loop0: detected capacity change from 0 to 2048 [ 239.667026][T13026] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2598'. [ 239.677785][T13026] netlink: zone id is out of range [ 239.683054][T13026] netlink: zone id is out of range [ 239.700951][T13021] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2593: bg 0: block 345: padding at end of block bitmap is not set [ 239.705477][T13026] netlink: zone id is out of range [ 239.721203][T13026] netlink: zone id is out of range [ 239.727067][T13026] netlink: del zone limit has 8 unknown bytes [ 239.735825][T13020] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.750387][T13026] loop2: detected capacity change from 0 to 2048 [ 239.750922][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2595'. [ 239.784154][T13021] EXT4-fs (loop4): Remounting filesystem read-only [ 239.804624][T13009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2592: bg 0: block 345: padding at end of block bitmap is not set [ 239.859883][T13009] EXT4-fs (loop3): Remounting filesystem read-only [ 239.899622][T13025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2595: bg 0: block 345: padding at end of block bitmap is not set [ 239.933790][T13025] EXT4-fs (loop1): Remounting filesystem read-only [ 240.076285][T13038] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2601'. [ 240.166926][T13042] loop2: detected capacity change from 0 to 2048 [ 240.179498][T13032] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2597: bg 0: block 345: padding at end of block bitmap is not set [ 240.197981][T13041] loop1: detected capacity change from 0 to 512 [ 240.214849][T13041] EXT4-fs: Ignoring removed bh option [ 240.227195][T13041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 240.240319][T13032] EXT4-fs (loop0): Remounting filesystem read-only [ 240.263994][T13041] EXT4-fs (loop1): 1 truncate cleaned up [ 240.287079][T13048] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2600'. [ 240.310975][T13041] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.332290][T13048] loop3: detected capacity change from 0 to 2048 [ 240.450878][T13053] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2604'. [ 240.471766][T13053] loop1: detected capacity change from 0 to 2048 [ 240.482867][T13055] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2603'. [ 240.513447][T13055] loop0: detected capacity change from 0 to 2048 [ 240.576618][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 240.589364][T13059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.656626][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'. [ 240.666454][T13066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.703675][T13070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.754708][T13074] loop2: detected capacity change from 0 to 2048 [ 240.786849][T13074] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.805958][T13079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.844678][T13086] loop3: detected capacity change from 0 to 2048 [ 240.903419][T13089] loop0: detected capacity change from 0 to 2048 [ 240.956572][T13096] loop4: detected capacity change from 0 to 512 [ 240.966427][T13096] EXT4-fs: Ignoring removed bh option [ 240.973199][T13096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.987606][T13096] EXT4-fs (loop4): 1 truncate cleaned up [ 241.000929][T13096] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.129637][T13092] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2609: bg 0: block 345: padding at end of block bitmap is not set [ 241.146447][T13092] EXT4-fs (loop2): Remounting filesystem read-only [ 241.208585][T13105] loop4: detected capacity change from 0 to 2048 [ 241.358281][T13111] loop2: detected capacity change from 0 to 2048 [ 241.382298][T13111] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.502878][T13117] loop4: detected capacity change from 0 to 2048 [ 241.521582][T13117] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.728281][T13116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2617: bg 0: block 345: padding at end of block bitmap is not set [ 241.764540][T13116] EXT4-fs (loop2): Remounting filesystem read-only [ 241.862885][T13121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2618: bg 0: block 345: padding at end of block bitmap is not set [ 241.884781][T13121] EXT4-fs (loop4): Remounting filesystem read-only [ 242.030515][T13130] loop1: detected capacity change from 0 to 1024 [ 242.037572][T13130] EXT4-fs: Ignoring removed orlov option [ 242.043356][T13130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.476957][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.484830][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.492616][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.500438][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.508187][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.516018][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.523826][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.531628][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.539657][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.547596][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.555411][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.563249][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.571038][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.578797][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.586597][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.594378][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.602283][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.610516][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.618342][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.626160][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.633938][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.641938][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.649962][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.657905][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.665727][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.673535][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.681326][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.689082][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.697051][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.697782][T13150] loop2: detected capacity change from 0 to 512 [ 242.704909][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.704937][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.726878][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.727678][T13150] EXT4-fs: Ignoring removed bh option [ 242.734647][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.747907][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.754534][T13150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.755931][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.768821][T13150] EXT4-fs (loop2): 1 truncate cleaned up [ 242.773476][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.786928][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.794737][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.802512][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.810473][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.818545][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.826361][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.834298][ T3376] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 242.863194][ T3376] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 243.147958][T13165] loop1: detected capacity change from 0 to 512 [ 243.208477][T13165] EXT4-fs: Ignoring removed bh option [ 243.249367][T13172] __nla_validate_parse: 4 callbacks suppressed [ 243.249389][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 243.441736][T13165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.471700][T13172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.482921][T13165] EXT4-fs (loop1): 1 truncate cleaned up [ 243.509614][T13176] loop2: detected capacity change from 0 to 512 [ 243.520020][T13176] EXT4-fs: Ignoring removed bh option [ 243.561692][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2637'. [ 243.571299][T13176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.638265][T13176] EXT4-fs (loop2): 1 truncate cleaned up [ 243.682747][T13191] loop4: detected capacity change from 0 to 512 [ 243.689332][T13191] EXT4-fs: Ignoring removed bh option [ 243.695217][T13191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.730175][T13191] EXT4-fs (loop4): 1 truncate cleaned up [ 243.753208][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.784981][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.702638][T13199] loop0: detected capacity change from 0 to 1024 [ 244.709827][T13199] EXT4-fs: Ignoring removed orlov option [ 244.715585][T13199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.974137][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'. [ 244.983911][T13214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.045454][ T30] kauditd_printk_skb: 576 callbacks suppressed [ 245.045471][ T30] audit: type=1326 audit(1741536084.965:29376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.095888][ T30] audit: type=1326 audit(1741536084.975:29377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.104235][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 245.119674][ T30] audit: type=1326 audit(1741536084.975:29378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.144319][T13220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.151984][ T30] audit: type=1326 audit(1741536084.975:29379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.152044][ T30] audit: type=1326 audit(1741536084.975:29380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.152076][ T30] audit: type=1326 audit(1741536084.975:29381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.230963][ T30] audit: type=1326 audit(1741536084.975:29382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.254606][ T30] audit: type=1326 audit(1741536084.975:29383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd184b9bad0 code=0x7ffc0000 [ 245.278213][ T30] audit: type=1326 audit(1741536084.975:29384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.301947][ T30] audit: type=1326 audit(1741536084.975:29385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 245.352802][T13227] loop0: detected capacity change from 0 to 512 [ 245.359461][T13227] EXT4-fs: Ignoring removed bh option [ 245.370586][T13227] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 245.396089][T13227] EXT4-fs (loop0): 1 truncate cleaned up [ 245.405617][T13227] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.481010][T13232] loop4: detected capacity change from 0 to 2048 [ 245.514189][T13232] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.530476][T13235] loop2: detected capacity change from 0 to 1024 [ 245.537276][T13235] EXT4-fs: Ignoring removed orlov option [ 245.543064][T13235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.630345][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.663986][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.814195][T13243] loop3: detected capacity change from 0 to 2048 [ 245.823530][T13245] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2658'. [ 245.833368][T13245] net_ratelimit: 35 callbacks suppressed [ 245.833381][T13245] netlink: zone id is out of range [ 245.844188][T13245] netlink: zone id is out of range [ 245.853420][T13237] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2655: bg 0: block 345: padding at end of block bitmap is not set [ 245.869247][T13245] netlink: zone id is out of range [ 245.875896][T13243] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.896173][T13245] netlink: zone id is out of range [ 245.901641][T13248] loop1: detected capacity change from 0 to 2048 [ 245.902241][T13245] netlink: del zone limit has 8 unknown bytes [ 245.916443][T13237] EXT4-fs (loop4): Remounting filesystem read-only [ 246.117614][T13254] loop4: detected capacity change from 0 to 128 [ 246.165776][T13256] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2660'. [ 246.183517][T13251] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2657: bg 0: block 345: padding at end of block bitmap is not set [ 246.201130][T13256] netlink: zone id is out of range [ 246.206306][T13256] netlink: zone id is out of range [ 246.212429][T13256] netlink: zone id is out of range [ 246.227758][T13256] netlink: zone id is out of range [ 246.233495][T13251] EXT4-fs (loop3): Remounting filesystem read-only [ 246.234021][T13254] loop4: detected capacity change from 0 to 128 [ 246.240924][T13256] netlink: del zone limit has 8 unknown bytes [ 246.297375][T13256] loop2: detected capacity change from 0 to 2048 [ 246.505663][T13273] loop2: detected capacity change from 0 to 512 [ 246.520391][T13273] EXT4-fs: Ignoring removed bh option [ 246.521792][T13275] FAULT_INJECTION: forcing a failure. [ 246.521792][T13275] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.538967][T13275] CPU: 0 UID: 0 PID: 13275 Comm: syz.3.2663 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 246.539020][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.539036][T13275] Call Trace: [ 246.539042][T13275] [ 246.539049][T13275] dump_stack_lvl+0xf2/0x150 [ 246.539114][T13275] dump_stack+0x15/0x1a [ 246.539140][T13275] should_fail_ex+0x24a/0x260 [ 246.539176][T13275] should_fail+0xb/0x10 [ 246.539205][T13275] should_fail_usercopy+0x1a/0x20 [ 246.539283][T13275] _copy_from_user+0x1c/0xa0 [ 246.539305][T13275] __sys_bpf+0x14e/0x7a0 [ 246.539385][T13275] __x64_sys_bpf+0x43/0x50 [ 246.539412][T13275] x64_sys_call+0x2914/0x2dc0 [ 246.539445][T13275] do_syscall_64+0xc9/0x1c0 [ 246.539503][T13275] ? clear_bhb_loop+0x55/0xb0 [ 246.539537][T13275] ? clear_bhb_loop+0x55/0xb0 [ 246.539556][T13273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.539569][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.539678][T13275] RIP: 0033:0x7f070c89d169 [ 246.539704][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.539728][T13275] RSP: 002b:00007f070af07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.539753][T13275] RAX: ffffffffffffffda RBX: 00007f070cab5fa0 RCX: 00007f070c89d169 [ 246.539768][T13275] RDX: 0000000000000094 RSI: 00004000000000c0 RDI: 0000000000000005 [ 246.539852][T13275] RBP: 00007f070af07090 R08: 0000000000000000 R09: 0000000000000000 [ 246.539868][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.539911][T13275] R13: 0000000000000000 R14: 00007f070cab5fa0 R15: 00007fff47d28478 [ 246.539998][T13275] [ 246.740953][T13273] EXT4-fs (loop2): 1 truncate cleaned up [ 246.757101][T13273] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.875165][T13291] bridge0: entered promiscuous mode [ 246.881835][T13291] bridge0: port 3(macsec1) entered blocking state [ 246.888360][T13291] bridge0: port 3(macsec1) entered disabled state [ 246.895148][T13291] macsec1: entered allmulticast mode [ 246.900557][T13291] bridge0: entered allmulticast mode [ 246.906552][T13291] macsec1: left allmulticast mode [ 246.911683][T13291] bridge0: left allmulticast mode [ 246.917156][T13291] bridge0: left promiscuous mode [ 246.982885][T13296] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2673'. [ 246.983603][T13273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.001415][T13273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.009446][T13296] loop1: detected capacity change from 0 to 2048 [ 247.189471][T13300] tipc: Started in network mode [ 247.194561][T13300] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 247.202286][T13300] tipc: Enabled bearer , priority 0 [ 247.611311][T13307] loop2: detected capacity change from 0 to 1024 [ 247.627587][T13307] EXT4-fs: inline encryption not supported [ 247.641176][T13307] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.662120][T13307] EXT4-fs error (device loop2): ext4_map_blocks:705: inode #3: block 1: comm syz.2.2676: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.666525][T13315] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2679'. [ 247.689333][T13307] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.2676: Failed to acquire dquot type 0 [ 247.704923][T13315] loop3: detected capacity change from 0 to 2048 [ 247.711781][T13307] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.2676: Freeing blocks not in datazone - block = 0, count = 4096 [ 247.730540][T13307] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2676: Invalid inode bitmap blk 0 in block_group 0 [ 247.743917][T13307] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 247.752638][ T12] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.767718][T13307] EXT4-fs (loop2): 1 orphan inode deleted [ 247.769470][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 247.848889][T13307] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 247.981751][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 247.990794][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 248.018783][T13307] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.2676: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 248.084818][T13321] loop1: detected capacity change from 0 to 512 [ 248.097275][T13319] loop0: detected capacity change from 0 to 2048 [ 248.145329][T13321] loop1: detected capacity change from 0 to 512 [ 248.164090][T13325] FAULT_INJECTION: forcing a failure. [ 248.164090][T13325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.175452][T13327] loop2: detected capacity change from 0 to 1024 [ 248.177230][T13325] CPU: 1 UID: 0 PID: 13325 Comm: syz.4.2684 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 248.177264][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.177281][T13325] Call Trace: [ 248.177311][T13325] [ 248.177320][T13325] dump_stack_lvl+0xf2/0x150 [ 248.177355][T13325] dump_stack+0x15/0x1a [ 248.177383][T13325] should_fail_ex+0x24a/0x260 [ 248.177423][T13325] should_fail+0xb/0x10 [ 248.177492][T13325] should_fail_usercopy+0x1a/0x20 [ 248.177598][T13325] _copy_from_user+0x1c/0xa0 [ 248.177622][T13325] copy_msghdr_from_user+0x54/0x2a0 [ 248.177664][T13325] ? __fget_files+0x17c/0x1c0 [ 248.177708][T13325] __sys_sendmsg+0x13e/0x230 [ 248.177823][T13325] __x64_sys_sendmsg+0x46/0x50 [ 248.177916][T13325] x64_sys_call+0x2734/0x2dc0 [ 248.177992][T13325] do_syscall_64+0xc9/0x1c0 [ 248.178041][T13325] ? clear_bhb_loop+0x55/0xb0 [ 248.178084][T13325] ? clear_bhb_loop+0x55/0xb0 [ 248.178118][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.178152][T13325] RIP: 0033:0x7f76fe5fd169 [ 248.178194][T13325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.178217][T13325] RSP: 002b:00007f76fcc67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.178240][T13325] RAX: ffffffffffffffda RBX: 00007f76fe815fa0 RCX: 00007f76fe5fd169 [ 248.178256][T13325] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 248.178271][T13325] RBP: 00007f76fcc67090 R08: 0000000000000000 R09: 0000000000000000 [ 248.178286][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.178301][T13325] R13: 0000000000000000 R14: 00007f76fe815fa0 R15: 00007ffce5e92908 [ 248.178325][T13325] [ 248.358579][ T10] tipc: Node number set to 15444650 [ 248.366412][T13334] netlink: 'syz.4.2686': attribute type 13 has an invalid length. [ 248.369633][T13335] loop0: detected capacity change from 0 to 512 [ 248.384098][T13321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2680: bg 0: block 248: padding at end of block bitmap is not set [ 248.403096][T13327] EXT4-fs: Ignoring removed orlov option [ 248.404671][T13335] EXT4-fs: Ignoring removed bh option [ 248.409124][T13327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.428869][T13321] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2680: Failed to acquire dquot type 1 [ 248.441355][T13335] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.450572][T13321] EXT4-fs (loop1): 1 truncate cleaned up [ 248.458736][T13321] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.462095][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.473748][T13335] EXT4-fs (loop0): 1 truncate cleaned up [ 248.476566][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.493827][T13335] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.582567][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 248.615926][T13347] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 248.633568][T13344] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 248.641596][T13348] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 248.651802][T13334] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.660735][T13334] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.669985][T13334] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.679222][T13334] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.692929][ T10] lo speed is unknown, defaulting to 1000 [ 248.701115][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.711493][T13347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.722524][T13347] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 248.750778][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.763933][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.774294][ T3298] EXT4-fs unmount: 136 callbacks suppressed [ 248.774311][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.791057][T13353] loop2: detected capacity change from 0 to 164 [ 248.814091][T13353] Unable to read rock-ridge attributes [ 248.834198][T13353] Unable to read rock-ridge attributes [ 248.841939][T13357] lo speed is unknown, defaulting to 1000 [ 248.926903][T13369] loop2: detected capacity change from 0 to 512 [ 248.933836][T13369] EXT4-fs: Ignoring removed bh option [ 248.961146][T13384] loop1: detected capacity change from 0 to 512 [ 248.976408][T13369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.988551][T13384] EXT4-fs: Ignoring removed bh option [ 248.997013][T13384] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.013359][T13369] EXT4-fs (loop2): 1 truncate cleaned up [ 249.020979][T13369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.045275][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.069903][T13384] EXT4-fs (loop1): 1 truncate cleaned up [ 249.077627][T13384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.096774][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.216527][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.319373][T13433] netlink: 'syz.1.2698': attribute type 3 has an invalid length. [ 249.331017][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 249.348363][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.478225][T13446] FAULT_INJECTION: forcing a failure. [ 249.478225][T13446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.491378][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.0.2703 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 249.491408][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.491422][T13446] Call Trace: [ 249.491430][T13446] [ 249.491437][T13446] dump_stack_lvl+0xf2/0x150 [ 249.491520][T13446] dump_stack+0x15/0x1a [ 249.491546][T13446] should_fail_ex+0x24a/0x260 [ 249.491582][T13446] should_fail+0xb/0x10 [ 249.491679][T13446] should_fail_usercopy+0x1a/0x20 [ 249.491756][T13446] _copy_from_user+0x1c/0xa0 [ 249.491776][T13446] inet6_ioctl+0xf2/0x190 [ 249.491811][T13446] sock_do_ioctl+0x81/0x260 [ 249.491846][T13446] sock_ioctl+0x40f/0x600 [ 249.491918][T13446] ? __pfx_sock_ioctl+0x10/0x10 [ 249.491953][T13446] __se_sys_ioctl+0xc9/0x140 [ 249.491983][T13446] __x64_sys_ioctl+0x43/0x50 [ 249.492081][T13446] x64_sys_call+0x1690/0x2dc0 [ 249.492165][T13446] do_syscall_64+0xc9/0x1c0 [ 249.492199][T13446] ? clear_bhb_loop+0x55/0xb0 [ 249.492226][T13446] ? clear_bhb_loop+0x55/0xb0 [ 249.492321][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.492350][T13446] RIP: 0033:0x7f43f5a4d169 [ 249.492367][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.492385][T13446] RSP: 002b:00007f43f40b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.492470][T13446] RAX: ffffffffffffffda RBX: 00007f43f5c65fa0 RCX: 00007f43f5a4d169 [ 249.492482][T13446] RDX: 0000400000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 249.492494][T13446] RBP: 00007f43f40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 249.492537][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.492627][T13446] R13: 0000000000000000 R14: 00007f43f5c65fa0 R15: 00007fffa8fedcd8 [ 249.492644][T13446] [ 249.693131][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.710901][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'. [ 249.759101][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.800334][T13455] 8021q: VLANs not supported on ip6gre0 [ 249.816592][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.853824][T13444] lo speed is unknown, defaulting to 1000 [ 249.875979][T13444] lo speed is unknown, defaulting to 1000 [ 249.909989][T13444] lo speed is unknown, defaulting to 1000 [ 249.957115][T13459] loop4: detected capacity change from 0 to 512 [ 249.966195][T13463] loop0: detected capacity change from 0 to 512 [ 249.975660][T13463] EXT4-fs: Ignoring removed bh option [ 249.982660][T13459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.991608][T13463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.024834][T13463] EXT4-fs (loop0): 1 truncate cleaned up [ 250.041073][T13444] infiniband syz2: set active [ 250.042409][T13463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.045812][T13444] infiniband syz2: added lo [ 250.063036][ T10] lo speed is unknown, defaulting to 1000 [ 250.067556][T13459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.072195][T13473] netlink: 'syz.2.2713': attribute type 10 has an invalid length. [ 250.085351][T13459] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.092580][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.113100][T13444] RDS/IB: syz2: added [ 250.117191][T13444] smc: adding ib device syz2 with port count 1 [ 250.123773][T13444] smc: ib device syz2 port 1 has pnetid [ 250.131162][T13463] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.132019][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.156314][T13473] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 250.167151][ T36] lo speed is unknown, defaulting to 1000 [ 250.173084][T13444] lo speed is unknown, defaulting to 1000 [ 250.204043][T13485] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2715'. [ 250.218929][T13444] lo speed is unknown, defaulting to 1000 [ 250.236827][T13485] loop3: detected capacity change from 0 to 2048 [ 250.261917][T13444] lo speed is unknown, defaulting to 1000 [ 250.285929][T13485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.308163][T13444] lo speed is unknown, defaulting to 1000 [ 250.352507][T13444] lo speed is unknown, defaulting to 1000 [ 250.366180][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 250.366199][ T30] audit: type=1326 audit(1741536090.285:29677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.397959][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.406562][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.439289][ T30] audit: type=1326 audit(1741536090.285:29678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.463164][ T30] audit: type=1326 audit(1741536090.285:29679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.486955][ T30] audit: type=1326 audit(1741536090.285:29680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.510635][ T30] audit: type=1326 audit(1741536090.285:29681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.534290][ T30] audit: type=1326 audit(1741536090.285:29682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.557897][ T30] audit: type=1326 audit(1741536090.285:29683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd184b9bad0 code=0x7ffc0000 [ 250.581489][ T30] audit: type=1326 audit(1741536090.285:29684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.605121][ T30] audit: type=1326 audit(1741536090.285:29685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.628638][ T30] audit: type=1326 audit(1741536090.285:29686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184b9d169 code=0x7ffc0000 [ 250.653080][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.656224][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.714512][T13502] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2717'. [ 250.730437][T13505] lo speed is unknown, defaulting to 1000 [ 250.736659][T13505] lo speed is unknown, defaulting to 1000 [ 250.743736][T13502] loop4: detected capacity change from 0 to 2048 [ 250.762945][T13502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.794786][T13503] ip6gretap0: entered promiscuous mode [ 250.800380][T13503] vlan0: entered promiscuous mode [ 250.806898][T13503] ip6gretap0: left promiscuous mode [ 250.913697][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.943272][T13514] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2722'. [ 250.976242][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.011183][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2722'. [ 251.058424][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.068224][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.109544][T13530] loop1: detected capacity change from 0 to 512 [ 251.118740][T13530] EXT4-fs: Ignoring removed bh option [ 251.128483][T13530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.142384][T13530] EXT4-fs (loop1): 1 truncate cleaned up [ 251.148603][T13530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.193568][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.234363][T13540] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2733'. [ 251.244341][T13540] net_ratelimit: 20 callbacks suppressed [ 251.244356][T13540] netlink: zone id is out of range [ 251.255201][T13540] netlink: zone id is out of range [ 251.261549][T13540] netlink: zone id is out of range [ 251.266757][T13540] netlink: zone id is out of range [ 251.274213][T13540] netlink: del zone limit has 8 unknown bytes [ 251.291948][T13540] loop1: detected capacity change from 0 to 2048 [ 251.302535][T13540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.607726][T13546] loop3: detected capacity change from 0 to 512 [ 251.627136][T13546] EXT4-fs: Ignoring removed bh option [ 251.646307][T13546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.647376][T13550] loop2: detected capacity change from 0 to 1024 [ 251.665098][T13550] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 251.668710][T13546] EXT4-fs (loop3): 1 truncate cleaned up [ 251.676106][T13550] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 251.683246][T13546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.703902][T13550] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.721289][T13550] EXT4-fs (loop2): invalid journal inode [ 251.734735][T13550] EXT4-fs (loop2): can't get journal size [ 251.749857][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.759017][T13550] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.2737: blocks 2-2 from inode overlap system zone [ 251.774456][T13550] EXT4-fs (loop2): failed to initialize system zone (-117) [ 251.782296][T13550] EXT4-fs (loop2): mount failed [ 251.823276][T13556] loop3: detected capacity change from 0 to 164 [ 251.835336][T13556] Unable to read rock-ridge attributes [ 251.853892][T13556] Unable to read rock-ridge attributes [ 251.929293][T13562] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2742'. [ 251.942364][T13562] netlink: zone id is out of range [ 251.947918][T13562] netlink: zone id is out of range [ 251.958347][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.975069][T13562] netlink: zone id is out of range [ 251.983344][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.002304][T13562] netlink: zone id is out of range [ 252.026040][T13562] netlink: del zone limit has 8 unknown bytes [ 252.043757][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x1 [ 252.051692][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.059536][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.067348][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.075158][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.082952][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.090821][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.098627][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.106483][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.114273][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.114486][T13566] loop3: detected capacity change from 0 to 2048 [ 252.122089][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x4 [ 252.136275][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.144058][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.151880][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.159674][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.167555][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x4 [ 252.175405][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.183244][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.191076][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.198925][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.206898][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.214777][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.222684][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.228102][T13575] FAULT_INJECTION: forcing a failure. [ 252.228102][T13575] name failslab, interval 1, probability 0, space 0, times 1 [ 252.230451][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.243076][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.0.2747 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 252.243132][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.243209][T13575] Call Trace: [ 252.243218][T13575] [ 252.243227][T13575] dump_stack_lvl+0xf2/0x150 [ 252.243263][T13575] dump_stack+0x15/0x1a [ 252.243290][T13575] should_fail_ex+0x24a/0x260 [ 252.243330][T13575] should_failslab+0x8f/0xb0 [ 252.243400][T13575] kmem_cache_alloc_noprof+0x52/0x320 [ 252.243428][T13575] ? audit_log_start+0x34c/0x6b0 [ 252.243472][T13575] audit_log_start+0x34c/0x6b0 [ 252.243569][T13575] audit_seccomp+0x4b/0x130 [ 252.243748][T13575] __seccomp_filter+0x6fa/0x1180 [ 252.243779][T13575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.243817][T13575] ? vfs_write+0x644/0x920 [ 252.243869][T13575] __secure_computing+0x9f/0x1c0 [ 252.243960][T13575] syscall_trace_enter+0xd1/0x1f0 [ 252.243994][T13575] do_syscall_64+0xaa/0x1c0 [ 252.244034][T13575] ? clear_bhb_loop+0x55/0xb0 [ 252.244069][T13575] ? clear_bhb_loop+0x55/0xb0 [ 252.244123][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.244182][T13575] RIP: 0033:0x7f43f5a4d169 [ 252.244202][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.244225][T13575] RSP: 002b:00007f43f40b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 252.244249][T13575] RAX: ffffffffffffffda RBX: 00007f43f5c65fa0 RCX: 00007f43f5a4d169 [ 252.244344][T13575] RDX: 0000000000000000 RSI: 00000000000002c4 RDI: 00000000798e2633 [ 252.244360][T13575] RBP: 00007f43f40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 252.244375][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.244390][T13575] R13: 0000000000000000 R14: 00007f43f5c65fa0 R15: 00007fffa8fedcd8 [ 252.244413][T13575] [ 252.265835][T13558] rdma_rxe: rxe_newlink: failed to add lo [ 252.271732][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.388222][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'. [ 252.393723][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.405093][T13566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.409779][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.486976][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.494932][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.502754][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.510562][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.518360][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.526156][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.533962][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.541824][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.549641][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.557513][ T9] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 252.586287][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.605005][T13581] loop0: detected capacity change from 0 to 512 [ 252.612751][ T9] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz1 [ 252.625211][T13581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.639753][T13581] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.678433][T13584] loop1: detected capacity change from 0 to 512 [ 252.688799][T13584] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.2749: corrupted xattr block 255: invalid header [ 252.702698][T13584] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 252.712665][T13584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.726309][T13584] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.2749: corrupted xattr block 255: invalid header [ 252.740983][T13584] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 252.748621][T13584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.765006][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.825760][T13594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 253.141615][T13616] IPVS: Error connecting to the multicast addr [ 253.150706][T13616] loop2: detected capacity change from 0 to 512 [ 253.162847][T13616] EXT4-fs (loop2): 1 orphan inode deleted [ 253.169006][T13616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.182004][T13616] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.196170][T13410] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:54: Failed to release dquot type 1 [ 253.219252][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.238224][T13622] FAULT_INJECTION: forcing a failure. [ 253.238224][T13622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.251631][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.2.2763 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 253.251661][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.251674][T13622] Call Trace: [ 253.251682][T13622] [ 253.251689][T13622] dump_stack_lvl+0xf2/0x150 [ 253.251718][T13622] dump_stack+0x15/0x1a [ 253.251754][T13622] should_fail_ex+0x24a/0x260 [ 253.251798][T13622] should_fail+0xb/0x10 [ 253.251866][T13622] should_fail_usercopy+0x1a/0x20 [ 253.251908][T13622] _copy_from_user+0x1c/0xa0 [ 253.251995][T13622] copy_msghdr_from_user+0x54/0x2a0 [ 253.252080][T13622] ? __fget_files+0x17c/0x1c0 [ 253.252124][T13622] __sys_sendmsg+0x13e/0x230 [ 253.252242][T13622] __x64_sys_sendmsg+0x46/0x50 [ 253.252298][T13622] x64_sys_call+0x2734/0x2dc0 [ 253.252331][T13622] do_syscall_64+0xc9/0x1c0 [ 253.252399][T13622] ? clear_bhb_loop+0x55/0xb0 [ 253.252421][T13622] ? clear_bhb_loop+0x55/0xb0 [ 253.252443][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.252466][T13622] RIP: 0033:0x7fd184b9d169 [ 253.252479][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.252547][T13622] RSP: 002b:00007fd183207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.252562][T13622] RAX: ffffffffffffffda RBX: 00007fd184db5fa0 RCX: 00007fd184b9d169 [ 253.252573][T13622] RDX: 0000000000000000 RSI: 00004000000047c0 RDI: 0000000000000003 [ 253.252583][T13622] RBP: 00007fd183207090 R08: 0000000000000000 R09: 0000000000000000 [ 253.252595][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.252605][T13622] R13: 0000000000000000 R14: 00007fd184db5fa0 R15: 00007ffdfd92fcc8 [ 253.252621][T13622] [ 253.433722][T13623] FAULT_INJECTION: forcing a failure. [ 253.433722][T13623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.446953][T13623] CPU: 1 UID: 0 PID: 13623 Comm: syz.4.2762 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 253.446992][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.447007][T13623] Call Trace: [ 253.447016][T13623] [ 253.447025][T13623] dump_stack_lvl+0xf2/0x150 [ 253.447072][T13623] dump_stack+0x15/0x1a [ 253.447098][T13623] should_fail_ex+0x24a/0x260 [ 253.447136][T13623] should_fail+0xb/0x10 [ 253.447168][T13623] should_fail_usercopy+0x1a/0x20 [ 253.447279][T13623] _copy_from_user+0x1c/0xa0 [ 253.447298][T13623] eventfd_write+0x73/0x370 [ 253.447396][T13623] vfs_writev+0x3fa/0x880 [ 253.447457][T13623] ? __pfx_eventfd_write+0x10/0x10 [ 253.447493][T13623] do_writev+0xf4/0x220 [ 253.447518][T13623] __x64_sys_writev+0x45/0x50 [ 253.447552][T13623] x64_sys_call+0x1fab/0x2dc0 [ 253.447580][T13623] do_syscall_64+0xc9/0x1c0 [ 253.447694][T13623] ? clear_bhb_loop+0x55/0xb0 [ 253.447728][T13623] ? clear_bhb_loop+0x55/0xb0 [ 253.447755][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.447808][T13623] RIP: 0033:0x7f76fe5fd169 [ 253.447827][T13623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.447849][T13623] RSP: 002b:00007f76fcc46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 253.447873][T13623] RAX: ffffffffffffffda RBX: 00007f76fe816080 RCX: 00007f76fe5fd169 [ 253.447895][T13623] RDX: 0000000000000008 RSI: 0000400000000080 RDI: 0000000000000003 [ 253.447910][T13623] RBP: 00007f76fcc46090 R08: 0000000000000000 R09: 0000000000000000 [ 253.447922][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.447933][T13623] R13: 0000000000000001 R14: 00007f76fe816080 R15: 00007ffce5e92908 [ 253.448028][T13623] [ 253.538493][T13627] loop1: detected capacity change from 0 to 2048 [ 253.644440][T13625] loop2: detected capacity change from 0 to 512 [ 253.645317][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.660452][T13625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.667426][T13627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.736268][T13625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.758578][T13638] __nla_validate_parse: 3 callbacks suppressed [ 253.758597][T13638] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2768'. [ 253.776914][T13625] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.819605][T13638] loop0: detected capacity change from 0 to 2048 [ 253.844121][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.848385][T13642] bridge0: entered promiscuous mode [ 253.859994][T13642] bridge0: port 3(macsec1) entered blocking state [ 253.866508][T13642] bridge0: port 3(macsec1) entered disabled state [ 253.870147][T13638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.886502][T13642] macsec1: entered allmulticast mode [ 253.891925][T13642] bridge0: entered allmulticast mode [ 253.898003][T13646] FAULT_INJECTION: forcing a failure. [ 253.898003][T13646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.911127][T13646] CPU: 1 UID: 0 PID: 13646 Comm: syz.1.2771 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 253.911157][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.911172][T13646] Call Trace: [ 253.911180][T13646] [ 253.911189][T13646] dump_stack_lvl+0xf2/0x150 [ 253.911251][T13646] dump_stack+0x15/0x1a [ 253.911273][T13646] should_fail_ex+0x24a/0x260 [ 253.911309][T13646] should_fail+0xb/0x10 [ 253.911340][T13646] should_fail_usercopy+0x1a/0x20 [ 253.911388][T13646] _copy_from_user+0x1c/0xa0 [ 253.911412][T13646] copy_msghdr_from_user+0x54/0x2a0 [ 253.911500][T13646] ? __fget_files+0x17c/0x1c0 [ 253.911537][T13646] __sys_sendmsg+0x13e/0x230 [ 253.911632][T13646] __x64_sys_sendmsg+0x46/0x50 [ 253.911663][T13646] x64_sys_call+0x2734/0x2dc0 [ 253.911696][T13646] do_syscall_64+0xc9/0x1c0 [ 253.911804][T13646] ? clear_bhb_loop+0x55/0xb0 [ 253.911940][T13646] ? clear_bhb_loop+0x55/0xb0 [ 253.911973][T13646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.912000][T13646] RIP: 0033:0x7f0a71b9d169 [ 253.912015][T13646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.912035][T13646] RSP: 002b:00007f0a70207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.912132][T13646] RAX: ffffffffffffffda RBX: 00007f0a71db5fa0 RCX: 00007f0a71b9d169 [ 253.912146][T13646] RDX: 0000000000040080 RSI: 00004000000007c0 RDI: 0000000000000003 [ 253.912161][T13646] RBP: 00007f0a70207090 R08: 0000000000000000 R09: 0000000000000000 [ 253.912176][T13646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.912257][T13646] R13: 0000000000000000 R14: 00007f0a71db5fa0 R15: 00007ffc73aedfa8 [ 253.912279][T13646] [ 253.913433][T13642] macsec1: left allmulticast mode [ 254.092828][T13642] bridge0: left allmulticast mode [ 254.103478][T13642] bridge0: left promiscuous mode [ 254.106112][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.108988][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.180777][T13657] loop1: detected capacity change from 0 to 512 [ 254.193489][T13657] EXT4-fs: Ignoring removed bh option [ 254.214279][T13657] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.230913][T13664] FAULT_INJECTION: forcing a failure. [ 254.230913][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 254.243740][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.4.2780 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 254.243769][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.243783][T13664] Call Trace: [ 254.243860][T13664] [ 254.243868][T13664] dump_stack_lvl+0xf2/0x150 [ 254.243898][T13664] dump_stack+0x15/0x1a [ 254.243995][T13664] should_fail_ex+0x24a/0x260 [ 254.244029][T13664] should_failslab+0x8f/0xb0 [ 254.244109][T13664] kmem_cache_alloc_noprof+0x52/0x320 [ 254.244159][T13664] ? getname_flags+0x81/0x3b0 [ 254.244197][T13664] getname_flags+0x81/0x3b0 [ 254.244231][T13664] __x64_sys_unlink+0x21/0x40 [ 254.244259][T13664] x64_sys_call+0x2329/0x2dc0 [ 254.244351][T13664] do_syscall_64+0xc9/0x1c0 [ 254.244389][T13664] ? clear_bhb_loop+0x55/0xb0 [ 254.244433][T13664] ? clear_bhb_loop+0x55/0xb0 [ 254.244466][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.244498][T13664] RIP: 0033:0x7f76fe5fd169 [ 254.244524][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.244545][T13664] RSP: 002b:00007f76fcc67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 254.244580][T13664] RAX: ffffffffffffffda RBX: 00007f76fe815fa0 RCX: 00007f76fe5fd169 [ 254.244594][T13664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000180 [ 254.244606][T13664] RBP: 00007f76fcc67090 R08: 0000000000000000 R09: 0000000000000000 [ 254.244690][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.244704][T13664] R13: 0000000000000000 R14: 00007f76fe815fa0 R15: 00007ffce5e92908 [ 254.244725][T13664] [ 254.255058][T13657] EXT4-fs (loop1): 1 truncate cleaned up [ 254.423516][T13675] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2783'. [ 254.441057][T13673] bridge0: entered promiscuous mode [ 254.460208][T13657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.470588][T13673] bridge0: port 3(macsec1) entered blocking state [ 254.479155][T13673] bridge0: port 3(macsec1) entered disabled state [ 254.497919][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.512268][T13675] loop4: detected capacity change from 0 to 2048 [ 254.532116][T13673] macsec1: entered allmulticast mode [ 254.537546][T13673] bridge0: entered allmulticast mode [ 254.558283][T13683] loop1: detected capacity change from 0 to 512 [ 254.565337][T13683] EXT4-fs: Ignoring removed bh option [ 254.571928][T13673] macsec1: left allmulticast mode [ 254.573186][T13683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.577024][T13673] bridge0: left allmulticast mode [ 254.587815][T13675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.604157][T13673] bridge0: left promiscuous mode [ 254.635091][T13683] EXT4-fs (loop1): 1 truncate cleaned up [ 254.641575][T13683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.670015][T13683] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.696294][T13694] FAULT_INJECTION: forcing a failure. [ 254.696294][T13694] name failslab, interval 1, probability 0, space 0, times 0 [ 254.708986][T13694] CPU: 0 UID: 0 PID: 13694 Comm: syz.0.2789 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 254.709015][T13694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.709027][T13694] Call Trace: [ 254.709034][T13694] [ 254.709042][T13694] dump_stack_lvl+0xf2/0x150 [ 254.709125][T13694] dump_stack+0x15/0x1a [ 254.709153][T13694] should_fail_ex+0x24a/0x260 [ 254.709262][T13694] should_failslab+0x8f/0xb0 [ 254.709301][T13694] __kmalloc_noprof+0xab/0x3f0 [ 254.709328][T13694] ? iovec_from_user+0x84/0x210 [ 254.709354][T13694] iovec_from_user+0x84/0x210 [ 254.709492][T13694] __import_iovec+0xff/0x540 [ 254.709516][T13694] ? __rcu_read_unlock+0x4e/0x70 [ 254.709546][T13694] import_iovec+0xbc/0xd0 [ 254.709580][T13694] __se_sys_vmsplice+0x168/0xda0 [ 254.709623][T13694] ? kstrtouint+0x77/0xc0 [ 254.709650][T13694] ? kstrtouint_from_user+0xb0/0xe0 [ 254.709688][T13694] ? get_pid_task+0x8e/0xc0 [ 254.709722][T13694] ? proc_fail_nth_write+0x12a/0x150 [ 254.709828][T13694] ? __fget_files+0x17c/0x1c0 [ 254.709864][T13694] ? fput+0x1c4/0x200 [ 254.709936][T13694] ? ksys_write+0x176/0x1b0 [ 254.709971][T13694] __x64_sys_vmsplice+0x55/0x70 [ 254.710024][T13694] x64_sys_call+0x29e6/0x2dc0 [ 254.710051][T13694] do_syscall_64+0xc9/0x1c0 [ 254.710088][T13694] ? clear_bhb_loop+0x55/0xb0 [ 254.710198][T13694] ? clear_bhb_loop+0x55/0xb0 [ 254.710229][T13694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.710265][T13694] RIP: 0033:0x7f43f5a4d169 [ 254.710302][T13694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.710430][T13694] RSP: 002b:00007f43f40b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 254.710457][T13694] RAX: ffffffffffffffda RBX: 00007f43f5c65fa0 RCX: 00007f43f5a4d169 [ 254.710469][T13694] RDX: 10000000000000e0 RSI: 00004000000013c0 RDI: 0000000000000004 [ 254.710481][T13694] RBP: 00007f43f40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.710492][T13694] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 254.710504][T13694] R13: 0000000000000000 R14: 00007f43f5c65fa0 R15: 00007fffa8fedcd8 [ 254.710526][T13694] [ 254.927147][T13696] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2790'. [ 254.942310][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.953947][T13696] loop3: detected capacity change from 0 to 2048 [ 254.989107][T13696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.057348][T13706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13706 comm=syz.0.2792 [ 255.098769][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.122929][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.180058][T13717] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2796'. [ 255.196074][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.237432][T13723] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2798'. [ 255.256705][T13722] bridge0: entered promiscuous mode [ 255.262854][T13723] loop2: detected capacity change from 0 to 2048 [ 255.281100][T13722] bridge0: port 3(macsec1) entered blocking state [ 255.287650][T13722] bridge0: port 3(macsec1) entered disabled state [ 255.295664][T13722] macsec1: entered allmulticast mode [ 255.301040][T13722] bridge0: entered allmulticast mode [ 255.307624][T13723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.321102][T13722] macsec1: left allmulticast mode [ 255.326237][T13722] bridge0: left allmulticast mode [ 255.332372][T13722] bridge0: left promiscuous mode [ 255.411771][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 255.411789][ T30] audit: type=1326 audit(1741536095.335:30028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.469884][ T30] audit: type=1326 audit(1741536095.365:30029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.493719][ T30] audit: type=1326 audit(1741536095.365:30030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.517358][ T30] audit: type=1326 audit(1741536095.365:30031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.541017][ T30] audit: type=1326 audit(1741536095.365:30032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.564701][ T30] audit: type=1326 audit(1741536095.365:30033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.588297][ T30] audit: type=1326 audit(1741536095.365:30034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.611984][ T30] audit: type=1326 audit(1741536095.365:30035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.635716][ T30] audit: type=1326 audit(1741536095.365:30036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.659253][ T30] audit: type=1326 audit(1741536095.365:30037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070c89d169 code=0x7ffc0000 [ 255.718292][T13751] FAULT_INJECTION: forcing a failure. [ 255.718292][T13751] name failslab, interval 1, probability 0, space 0, times 0 [ 255.731203][T13751] CPU: 0 UID: 0 PID: 13751 Comm: syz.0.2803 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 255.731273][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.731285][T13751] Call Trace: [ 255.731290][T13751] [ 255.731298][T13751] dump_stack_lvl+0xf2/0x150 [ 255.731329][T13751] dump_stack+0x15/0x1a [ 255.731411][T13751] should_fail_ex+0x24a/0x260 [ 255.731449][T13751] should_failslab+0x8f/0xb0 [ 255.731482][T13751] kmem_cache_alloc_noprof+0x52/0x320 [ 255.731508][T13751] ? audit_log_start+0x34c/0x6b0 [ 255.731575][T13751] audit_log_start+0x34c/0x6b0 [ 255.731642][T13751] audit_seccomp+0x4b/0x130 [ 255.731748][T13751] __seccomp_filter+0x6fa/0x1180 [ 255.731779][T13751] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.731848][T13751] ? vfs_write+0x644/0x920 [ 255.731886][T13751] __secure_computing+0x9f/0x1c0 [ 255.731913][T13751] syscall_trace_enter+0xd1/0x1f0 [ 255.731946][T13751] do_syscall_64+0xaa/0x1c0 [ 255.732063][T13751] ? clear_bhb_loop+0x55/0xb0 [ 255.732091][T13751] ? clear_bhb_loop+0x55/0xb0 [ 255.732118][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.732152][T13751] RIP: 0033:0x7f43f5a4d169 [ 255.732215][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.732296][T13751] RSP: 002b:00007f43f40b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 255.732319][T13751] RAX: ffffffffffffffda RBX: 00007f43f5c65fa0 RCX: 00007f43f5a4d169 [ 255.732334][T13751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.732348][T13751] RBP: 00007f43f40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.732360][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.732372][T13751] R13: 0000000000000000 R14: 00007f43f5c65fa0 R15: 00007fffa8fedcd8 [ 255.732394][T13751] [ 255.941829][T13750] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2804'. [ 255.952210][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.984602][T13755] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2807'. [ 256.003481][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.013589][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2809'. [ 256.040599][T13758] loop3: detected capacity change from 0 to 1164 [ 256.059895][T13755] loop4: detected capacity change from 0 to 2048 [ 256.075378][T13764] bridge0: port 3(macsec1) entered blocking state [ 256.082170][T13764] bridge0: port 3(macsec1) entered disabled state [ 256.096487][T13755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.110079][T13764] macsec1: entered allmulticast mode [ 256.128952][T13764] macsec1: left allmulticast mode [ 256.142706][T13773] FAULT_INJECTION: forcing a failure. [ 256.142706][T13773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.155900][T13773] CPU: 0 UID: 0 PID: 13773 Comm: syz.1.2813 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 256.155931][T13773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.155973][T13773] Call Trace: [ 256.155980][T13773] [ 256.155988][T13773] dump_stack_lvl+0xf2/0x150 [ 256.156095][T13773] dump_stack+0x15/0x1a [ 256.156121][T13773] should_fail_ex+0x24a/0x260 [ 256.156212][T13773] should_fail+0xb/0x10 [ 256.156245][T13773] should_fail_usercopy+0x1a/0x20 [ 256.156279][T13773] _copy_from_user+0x1c/0xa0 [ 256.156301][T13773] copy_bpf_fprog_from_user+0xda/0x250 [ 256.156354][T13773] sk_setsockopt+0xb4c/0x1f00 [ 256.156387][T13773] udp_lib_setsockopt+0x99/0x7e0 [ 256.156417][T13773] udp_setsockopt+0x73/0xb0 [ 256.156442][T13773] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 256.156483][T13773] sock_common_setsockopt+0x64/0x80 [ 256.156561][T13773] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.156604][T13773] __sys_setsockopt+0x187/0x200 [ 256.156635][T13773] __x64_sys_setsockopt+0x66/0x80 [ 256.156697][T13773] x64_sys_call+0x282e/0x2dc0 [ 256.156724][T13773] do_syscall_64+0xc9/0x1c0 [ 256.156758][T13773] ? clear_bhb_loop+0x55/0xb0 [ 256.156807][T13773] ? clear_bhb_loop+0x55/0xb0 [ 256.156899][T13773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.156925][T13773] RIP: 0033:0x7f0a71b9d169 [ 256.156940][T13773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.156958][T13773] RSP: 002b:00007f0a70207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.156980][T13773] RAX: ffffffffffffffda RBX: 00007f0a71db5fa0 RCX: 00007f0a71b9d169 [ 256.156995][T13773] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000004 [ 256.157053][T13773] RBP: 00007f0a70207090 R08: 0000000000000010 R09: 0000000000000000 [ 256.157110][T13773] R10: 00004000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 256.157125][T13773] R13: 0000000000000000 R14: 00007f0a71db5fa0 R15: 00007ffc73aedfa8 [ 256.157147][T13773] [ 256.364652][T13778] netlink: 'syz.3.2812': attribute type 13 has an invalid length. [ 256.443379][T13778] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.450636][T13778] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.491360][T13778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.512841][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.523917][T13778] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.533363][T13778] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.542390][T13778] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.551470][T13778] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.567748][T13784] bridge0: entered promiscuous mode [ 256.574345][T13784] bridge0: port 3(macsec1) entered blocking state [ 256.581005][T13784] bridge0: port 3(macsec1) entered disabled state [ 256.587612][T13784] macsec1: entered allmulticast mode [ 256.592965][T13784] bridge0: entered allmulticast mode [ 256.599310][T13784] macsec1: left allmulticast mode [ 256.604502][T13784] bridge0: left allmulticast mode [ 256.610365][T13784] bridge0: left promiscuous mode [ 296.550931][T13794] loop2: detected capacity change from 0 to 512 [ 296.560990][T13796] loop3: detected capacity change from 0 to 512 [ 296.567605][T13796] EXT4-fs: Ignoring removed bh option [ 296.577767][T13794] EXT4-fs: Ignoring removed bh option [ 296.588093][T13794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.600686][T13796] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.615911][T13802] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2821'. [ 296.625541][T13802] net_ratelimit: 30 callbacks suppressed [ 296.625559][T13802] netlink: zone id is out of range [ 296.629303][ T30] kauditd_printk_skb: 812 callbacks suppressed [ 296.629322][ T30] audit: type=1326 audit(1741536136.545:30848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.631241][T13802] netlink: zone id is out of range [ 296.632414][T13802] netlink: zone id is out of range [ 296.636624][ T30] audit: type=1326 audit(1741536136.545:30849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.643053][T13802] netlink: zone id is out of range [ 296.666217][ T30] audit: type=1326 audit(1741536136.545:30850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.687787][T13805] loop0: detected capacity change from 0 to 2048 [ 296.700070][ T30] audit: type=1326 audit(1741536136.545:30851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.707078][T13802] netlink: del zone limit has 8 unknown bytes [ 296.728769][ T30] audit: type=1326 audit(1741536136.545:30852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.728805][ T30] audit: type=1326 audit(1741536136.545:30853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.812102][ T30] audit: type=1326 audit(1741536136.545:30854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.835709][ T30] audit: type=1326 audit(1741536136.545:30855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.838595][T13796] EXT4-fs (loop3): 1 truncate cleaned up [ 296.859358][ T30] audit: type=1326 audit(1741536136.545:30856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fe5fd169 code=0x7ffc0000 [ 296.867034][T13794] EXT4-fs (loop2): 1 truncate cleaned up [ 296.908247][T13796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.926943][T13794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.940301][T13796] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.959492][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.968130][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.974491][T13805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.000801][ T30] audit: type=1400 audit(1741536136.735:30857): avc: denied { read write } for pid=13787 comm="syz.1.2817" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 297.004240][T13811] bridge0: port 3(macsec1) entered blocking state [ 297.031101][T13811] bridge0: port 3(macsec1) entered disabled state [ 297.047264][T13811] macsec1: entered allmulticast mode [ 297.052647][T13811] bridge0: entered allmulticast mode [ 297.056142][T13813] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2823'. [ 297.067564][T13813] netlink: zone id is out of range [ 297.067786][T13811] macsec1: left allmulticast mode [ 297.072766][T13813] netlink: zone id is out of range [ 297.072810][T13813] netlink: zone id is out of range [ 297.077804][T13811] bridge0: left allmulticast mode [ 297.084827][T13813] netlink: zone id is out of range [ 297.100216][T13813] netlink: del zone limit has 8 unknown bytes [ 297.119247][T13813] loop1: detected capacity change from 0 to 2048 [ 297.142174][T13813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.201958][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.248471][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.260054][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.263086][T13821] loop0: detected capacity change from 0 to 164 [ 297.284248][T13821] Unable to read rock-ridge attributes [ 297.292524][T13821] Unable to read rock-ridge attributes [ 297.338447][T13825] loop0: detected capacity change from 0 to 164 [ 297.346841][T13825] Unable to read rock-ridge attributes [ 297.353021][T13825] Unable to read rock-ridge attributes [ 297.398742][T13827] loop0: detected capacity change from 0 to 512 [ 297.426725][T13827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.439818][T13827] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.511056][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.688589][T13840] lo speed is unknown, defaulting to 1000 [ 297.695471][T13840] lo speed is unknown, defaulting to 1000 [ 297.749520][T13857] FAULT_INJECTION: forcing a failure. [ 297.749520][T13857] name failslab, interval 1, probability 0, space 0, times 0 [ 297.762235][T13857] CPU: 0 UID: 0 PID: 13857 Comm: syz.4.2835 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 297.762262][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.762274][T13857] Call Trace: [ 297.762281][T13857] [ 297.762289][T13857] dump_stack_lvl+0xf2/0x150 [ 297.762319][T13857] dump_stack+0x15/0x1a [ 297.762379][T13857] should_fail_ex+0x24a/0x260 [ 297.762413][T13857] should_failslab+0x8f/0xb0 [ 297.762446][T13857] kmem_cache_alloc_noprof+0x52/0x320 [ 297.762472][T13857] ? audit_log_start+0x34c/0x6b0 [ 297.762529][T13857] audit_log_start+0x34c/0x6b0 [ 297.762564][T13857] audit_seccomp+0x4b/0x130 [ 297.762597][T13857] __seccomp_filter+0x6fa/0x1180 [ 297.762623][T13857] ? save_fpregs_to_fpstate+0x102/0x160 [ 297.762680][T13857] __secure_computing+0x9f/0x1c0 [ 297.762704][T13857] syscall_trace_enter+0xd1/0x1f0 [ 297.762767][T13857] do_syscall_64+0xaa/0x1c0 [ 297.762804][T13857] ? clear_bhb_loop+0x55/0xb0 [ 297.762835][T13857] ? clear_bhb_loop+0x55/0xb0 [ 297.762865][T13857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.762958][T13857] RIP: 0033:0x7f76fe5fd169 [ 297.762986][T13857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.763003][T13857] RSP: 002b:00007f76fcc67038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 297.763022][T13857] RAX: ffffffffffffffda RBX: 00007f76fe815fa0 RCX: 00007f76fe5fd169 [ 297.763033][T13857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 297.763047][T13857] RBP: 00007f76fcc67090 R08: 0000000000000000 R09: 0000000000000000 [ 297.763103][T13857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.763115][T13857] R13: 0000000000000000 R14: 00007f76fe815fa0 R15: 00007ffce5e92908 [ 297.763216][T13857] [ 297.957619][T13399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.968704][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.990006][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.007287][T13840] chnl_net:caif_netlink_parms(): no params data found [ 298.016919][T13863] loop4: detected capacity change from 0 to 164 [ 298.031528][T13863] Unable to read rock-ridge attributes [ 298.043196][T13399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.094143][T13399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.122927][T13867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.167385][T13840] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.174597][T13840] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.186772][T13840] bridge_slave_0: entered allmulticast mode [ 298.195621][T13840] bridge_slave_0: entered promiscuous mode [ 298.208695][T13399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.225344][T13876] bridge0: port 3(macsec1) entered blocking state [ 298.232138][T13876] bridge0: port 3(macsec1) entered disabled state [ 298.239060][T13876] macsec1: entered allmulticast mode [ 298.244451][T13876] bridge0: entered allmulticast mode [ 298.250693][T13876] macsec1: left allmulticast mode [ 298.251248][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.255744][T13876] bridge0: left allmulticast mode [ 298.271883][T13840] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.278972][T13840] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.291541][T13840] bridge_slave_1: entered allmulticast mode [ 298.297989][T13840] bridge_slave_1: entered promiscuous mode [ 298.311574][T13867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.325769][T13885] bridge0: port 3(macsec1) entered blocking state [ 298.332403][T13885] bridge0: port 3(macsec1) entered disabled state [ 298.339144][T13885] macsec1: entered allmulticast mode [ 298.344574][T13885] bridge0: entered allmulticast mode [ 298.351928][T13888] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2844'. [ 298.361846][T13885] macsec1: left allmulticast mode [ 298.366928][T13885] bridge0: left allmulticast mode [ 298.374881][T13888] loop0: detected capacity change from 0 to 2048 [ 298.392059][T13888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.413811][T13840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.416846][T13892] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2845'. [ 298.432027][T13840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.458676][T13892] loop4: detected capacity change from 0 to 2048 [ 298.458704][T13840] team0: Port device team_slave_0 added [ 298.497482][T13892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.510807][T13867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.533624][T13897] bridge0: port 3(macsec1) entered blocking state [ 298.540357][T13897] bridge0: port 3(macsec1) entered disabled state [ 298.547041][T13897] macsec1: entered allmulticast mode [ 298.552404][T13897] bridge0: entered allmulticast mode [ 298.558615][T13897] macsec1: left allmulticast mode [ 298.563807][T13897] bridge0: left allmulticast mode [ 298.573430][T13840] team0: Port device team_slave_1 added [ 298.594376][T13867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.651851][T13840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.657256][T13900] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2847'. [ 298.658836][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.694340][T13840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.718447][T13900] loop3: detected capacity change from 0 to 2048 [ 298.732738][T13840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.735459][T13900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.739741][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.777769][T13840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.793459][T13867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.804304][T13399] bridge_slave_1: left allmulticast mode [ 298.810049][T13399] bridge_slave_1: left promiscuous mode [ 298.815851][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.827268][T13399] bridge_slave_0: left allmulticast mode [ 298.833010][T13399] bridge_slave_0: left promiscuous mode [ 298.838663][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.903136][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.933348][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.936247][T13905] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2848'. [ 298.954913][T13399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.965276][T13399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.974267][T13905] loop4: detected capacity change from 0 to 2048 [ 298.988668][T13399] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 299.000368][T13399] bond0 (unregistering): Released all slaves [ 299.008032][T13907] loop3: detected capacity change from 0 to 164 [ 299.010642][T13399] bond1 (unregistering): Released all slaves [ 299.025154][T13905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.025790][T13399] bond2 (unregistering): Released all slaves [ 299.065452][T13867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.082969][T13907] Unable to read rock-ridge attributes [ 299.105040][T13867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.135608][T13867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.166760][T13840] hsr_slave_0: entered promiscuous mode [ 299.181568][T13840] hsr_slave_1: entered promiscuous mode [ 299.187603][T13840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.210156][T13840] Cannot create hsr debugfs directory [ 299.232317][T13399] hsr_slave_0: left promiscuous mode [ 299.252276][T13399] hsr_slave_1: left promiscuous mode [ 299.260100][T13399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.267599][T13399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.312101][T13399] veth1_macvtap: left promiscuous mode [ 299.336670][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.338739][T13399] veth0_macvtap: left promiscuous mode [ 299.396611][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.457540][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x1 [ 299.465386][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.473192][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.480999][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.488789][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.496703][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.504631][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.512508][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.520333][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.528076][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.535885][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x4 [ 299.543682][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.551441][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.559180][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.566997][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.574864][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x4 [ 299.582623][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.590459][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.598198][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.606052][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.613962][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.621813][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.629553][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.637353][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.645109][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.652865][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.660642][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.668424][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.676277][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.684095][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.691837][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.699626][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.707376][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.715184][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.722945][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.730762][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.738505][ T10] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 299.747356][T13399] team0 (unregistering): Port device team_slave_1 removed [ 299.754848][ T10] hid-generic 0000:0000:20000000.0004: hidraw0: HID v0.01 Device [syz0] on syz1 [ 299.767760][T13399] team0 (unregistering): Port device team_slave_0 removed [ 299.820942][T13928] vlan0: entered allmulticast mode [ 299.893016][T13955] loop0: detected capacity change from 0 to 512 [ 299.921464][T13955] EXT4-fs: Ignoring removed bh option [ 299.946661][T13955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.994377][T13969] loop1: detected capacity change from 0 to 512 [ 300.010785][T13955] EXT4-fs (loop0): 1 truncate cleaned up [ 300.016948][T13955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.038585][T13969] EXT4-fs: Ignoring removed bh option [ 300.058407][T13978] loop4: detected capacity change from 0 to 512 [ 300.065168][T13978] EXT4-fs: Ignoring removed bh option [ 300.073281][T13978] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 300.085324][T13969] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.123462][T13969] EXT4-fs (loop1): 1 truncate cleaned up [ 300.129540][T13969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.145228][T13978] EXT4-fs (loop4): 1 truncate cleaned up [ 300.154060][T13978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.178503][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.180757][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.201632][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.210765][T13978] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.271452][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2871'. [ 300.284759][T13990] loop0: detected capacity change from 0 to 512 [ 300.302998][T13990] EXT4-fs: Ignoring removed bh option [ 300.321362][T13990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.336549][T13840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.351980][T13840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.361391][T13840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 300.372326][T13990] EXT4-fs (loop0): 1 truncate cleaned up [ 300.378702][T13990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.394754][T13990] FAULT_INJECTION: forcing a failure. [ 300.394754][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.401492][T14006] bridge0: port 3(macsec1) entered blocking state [ 300.407884][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.0.2869 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 300.407916][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.407930][T13990] Call Trace: [ 300.407937][T13990] [ 300.407974][T13990] dump_stack_lvl+0xf2/0x150 [ 300.408052][T13990] dump_stack+0x15/0x1a [ 300.408082][T13990] should_fail_ex+0x24a/0x260 [ 300.408122][T13990] should_fail+0xb/0x10 [ 300.408157][T13990] should_fail_usercopy+0x1a/0x20 [ 300.408272][T13990] _copy_from_user+0x1c/0xa0 [ 300.408298][T13990] __sys_bpf+0x14e/0x7a0 [ 300.408464][T13990] __x64_sys_bpf+0x43/0x50 [ 300.408498][T13990] x64_sys_call+0x2914/0x2dc0 [ 300.408532][T13990] do_syscall_64+0xc9/0x1c0 [ 300.408623][T13990] ? clear_bhb_loop+0x55/0xb0 [ 300.408658][T13990] ? clear_bhb_loop+0x55/0xb0 [ 300.408693][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.408808][T13990] RIP: 0033:0x7f43f5a4d169 [ 300.408828][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.408851][T13990] RSP: 002b:00007f43f40b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.408877][T13990] RAX: ffffffffffffffda RBX: 00007f43f5c65fa0 RCX: 00007f43f5a4d169 [ 300.408893][T13990] RDX: 0000000000000050 RSI: 00004000000008c0 RDI: 0000000000000000 [ 300.408909][T13990] RBP: 00007f43f40b1090 R08: 0000000000000000 R09: 0000000000000000 [ 300.408924][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.408969][T13990] R13: 0000000000000000 R14: 00007f43f5c65fa0 R15: 00007fffa8fedcd8 [ 300.408992][T13990] [ 300.441434][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.441912][T14006] bridge0: port 3(macsec1) entered disabled state [ 300.446488][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.448195][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.451013][T14006] macsec1: entered allmulticast mode [ 300.451031][T14006] bridge0: entered allmulticast mode [ 300.621446][T14006] macsec1: left allmulticast mode [ 300.626608][T14006] bridge0: left allmulticast mode [ 300.640424][T13840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.696556][T14014] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2875'. [ 300.701535][T13840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.731303][T13840] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.745233][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.752355][T13413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.776886][T14014] loop0: detected capacity change from 0 to 2048 [ 300.787231][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.794331][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.803669][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.829637][T14014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.956711][T13840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.021528][T14049] FAULT_INJECTION: forcing a failure. [ 301.021528][T14049] name failslab, interval 1, probability 0, space 0, times 0 [ 301.034288][T14049] CPU: 1 UID: 0 PID: 14049 Comm: syz.3.2880 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 301.034318][T14049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.034391][T14049] Call Trace: [ 301.034416][T14049] [ 301.034424][T14049] dump_stack_lvl+0xf2/0x150 [ 301.034458][T14049] dump_stack+0x15/0x1a [ 301.034523][T14049] should_fail_ex+0x24a/0x260 [ 301.034554][T14049] should_failslab+0x8f/0xb0 [ 301.034603][T14049] kmem_cache_alloc_node_noprof+0x59/0x320 [ 301.034629][T14049] ? __alloc_skb+0x10b/0x310 [ 301.034653][T14049] __alloc_skb+0x10b/0x310 [ 301.034674][T14049] ? audit_log_start+0x34c/0x6b0 [ 301.034708][T14049] audit_log_start+0x368/0x6b0 [ 301.034875][T14049] audit_seccomp+0x4b/0x130 [ 301.034909][T14049] __seccomp_filter+0x6fa/0x1180 [ 301.034933][T14049] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.034966][T14049] ? vfs_write+0x644/0x920 [ 301.035048][T14049] __secure_computing+0x9f/0x1c0 [ 301.035075][T14049] syscall_trace_enter+0xd1/0x1f0 [ 301.035161][T14049] do_syscall_64+0xaa/0x1c0 [ 301.035197][T14049] ? clear_bhb_loop+0x55/0xb0 [ 301.035225][T14049] ? clear_bhb_loop+0x55/0xb0 [ 301.035335][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.035367][T14049] RIP: 0033:0x7f070c89d169 [ 301.035386][T14049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.035426][T14049] RSP: 002b:00007f070af07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 301.035445][T14049] RAX: ffffffffffffffda RBX: 00007f070cab5fa0 RCX: 00007f070c89d169 [ 301.035458][T14049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000646 [ 301.035541][T14049] RBP: 00007f070af07090 R08: 0000000000000000 R09: 0000000000000000 [ 301.035553][T14049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.035564][T14049] R13: 0000000000000000 R14: 00007f070cab5fa0 R15: 00007fff47d28478 [ 301.035644][T14049] [ 301.036883][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2881'. [ 301.063061][T13840] veth0_vlan: entered promiscuous mode [ 301.248635][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.261759][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.296317][T14076] loop3: detected capacity change from 0 to 512 [ 301.321895][T14083] capability: warning: `syz.1.2886' uses deprecated v2 capabilities in a way that may be insecure [ 301.334948][T14076] EXT4-fs: Ignoring removed bh option [ 301.335556][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x1 [ 301.348202][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.356076][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.363881][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.364223][T14076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.371737][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.389370][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.397206][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.405024][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.412862][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.420654][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.421383][T14076] EXT4-fs (loop3): 1 truncate cleaned up [ 301.428407][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 301.428437][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.442519][T14076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.449573][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.449601][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.469661][T13840] veth1_vlan: entered promiscuous mode [ 301.469831][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.487048][T13840] veth0_macvtap: entered promiscuous mode [ 301.490884][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 301.498490][T13840] veth1_macvtap: entered promiscuous mode [ 301.504215][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.514781][T13840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.517657][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.517761][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.528140][T13840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.535901][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.543840][T13840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.553484][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.561175][T13840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.562819][T13840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.571634][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.580800][T13840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.589170][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.596372][T13840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.604099][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.614451][T13840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.622196][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.631998][T13840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.639741][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.676074][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.683937][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.691742][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.699612][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.707420][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.715239][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.719774][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 301.719794][ T30] audit: type=1326 audit(1741536141.575:31082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.723041][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.729177][ T30] audit: type=1326 audit(1741536141.575:31083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.752744][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.760437][ T30] audit: type=1326 audit(1741536141.615:31084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.783987][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.791688][ T30] audit: type=1326 audit(1741536141.615:31085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.815151][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.822893][ T30] audit: type=1326 audit(1741536141.615:31086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.846546][ T3441] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 301.854263][ T30] audit: type=1326 audit(1741536141.635:31087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.883758][T14076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.885671][ T30] audit: type=1326 audit(1741536141.635:31088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 301.911300][T14076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.951398][T13840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.976544][ T3441] hid-generic 0000:0000:20000000.0005: hidraw0: HID v0.01 Device [syz0] on syz1 [ 302.002069][ T30] audit: type=1326 audit(1741536141.875:31089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 302.025831][ T30] audit: type=1326 audit(1741536141.875:31090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14082 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a71b9d169 code=0x7ffc0000 [ 302.026770][T13840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.049551][ T30] audit: type=1326 audit(1741536141.875:31091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0a71bcfa25 code=0x7ffc0000 [ 302.058225][T13840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.091071][T13840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.099955][T13840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.132222][T14110] loop1: detected capacity change from 0 to 512 [ 302.138864][T14110] EXT4-fs: Ignoring removed bh option [ 302.145234][T14110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.176522][T14110] EXT4-fs (loop1): 1 truncate cleaned up [ 302.182875][T14110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.199251][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2893'. [ 302.205004][T14116] loop4: detected capacity change from 0 to 512 [ 302.234044][T14116] EXT4-fs: Ignoring removed bh option [ 302.243877][T14116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.257824][T14110] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.283081][T14116] EXT4-fs (loop4): 1 truncate cleaned up [ 302.296423][T14116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.361666][T14116] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.528661][T14110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.541407][T14110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.550940][T14154] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2903'. [ 302.560350][T14154] net_ratelimit: 25 callbacks suppressed [ 302.560363][T14154] netlink: zone id is out of range [ 302.571294][T14154] netlink: zone id is out of range [ 302.576479][T14154] netlink: zone id is out of range [ 302.581752][T14154] netlink: zone id is out of range [ 302.587576][T14154] netlink: del zone limit has 8 unknown bytes [ 302.600011][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.608700][T14154] loop2: detected capacity change from 0 to 2048 [ 302.609135][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.632653][T14154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.646517][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.674099][T14159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2904'. [ 302.757406][T13840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.885279][T14174] loop3: detected capacity change from 0 to 512 [ 302.894956][T14174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.907780][T14174] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.976276][T14179] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 302.985093][T14179] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 302.999290][T14180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2910'. [ 303.009189][T14179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.083582][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.178212][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.198289][T14188] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2915'. [ 303.207765][T14188] netlink: zone id is out of range [ 303.212964][T14188] netlink: zone id is out of range [ 303.218156][T14188] netlink: zone id is out of range [ 303.223588][T14188] netlink: zone id is out of range [ 303.229514][T14188] netlink: del zone limit has 8 unknown bytes [ 303.243999][T14188] loop4: detected capacity change from 0 to 2048 [ 303.261903][T14188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.370308][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.404577][T14195] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2916'. [ 303.417238][T14193] netem: change failed [ 303.419594][T14195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.429949][T14195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.608807][T14204] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2921'. [ 303.627796][T14204] loop0: detected capacity change from 0 to 2048 [ 303.651897][T14204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.733359][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.744305][ T3312] ================================================================== [ 303.752438][ T3312] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 303.759771][ T3312] [ 303.762112][ T3312] read-write to 0xffff888237c2ba28 of 8 bytes by task 14204 on cpu 0: [ 303.771068][ T3312] __find_get_block+0x42e/0x890 [ 303.775955][ T3312] bdev_getblk+0x30/0x3b0 [ 303.780322][ T3312] __ext4_get_inode_loc+0x2f7/0x940 [ 303.785689][ T3312] ext4_reserve_inode_write+0xb0/0x200 [ 303.791264][ T3312] __ext4_mark_inode_dirty+0x8e/0x440 [ 303.796669][ T3312] ext4_write_end+0x34f/0x770 [ 303.801436][ T3312] ext4_da_write_end+0x74/0x810 [ 303.806323][ T3312] generic_perform_write+0x33c/0x4a0 [ 303.811636][ T3312] ext4_buffered_write_iter+0x1ed/0x3c0 [ 303.817225][ T3312] ext4_file_write_iter+0x383/0xf20 [ 303.822464][ T3312] iter_file_splice_write+0x5f1/0x980 [ 303.827871][ T3312] direct_splice_actor+0x160/0x2c0 [ 303.833005][ T3312] splice_direct_to_actor+0x302/0x670 [ 303.838413][ T3312] do_splice_direct+0xd7/0x150 [ 303.843205][ T3312] do_sendfile+0x398/0x660 [ 303.847641][ T3312] __x64_sys_sendfile64+0x110/0x150 [ 303.852874][ T3312] x64_sys_call+0xfbd/0x2dc0 [ 303.857648][ T3312] do_syscall_64+0xc9/0x1c0 [ 303.862288][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.868217][ T3312] [ 303.870556][ T3312] read to 0xffff888237c2ba28 of 8 bytes by task 3312 on cpu 1: [ 303.878119][ T3312] has_bh_in_lru+0x35/0x1f0 [ 303.882658][ T3312] smp_call_function_many_cond+0x305/0xbb0 [ 303.888489][ T3312] on_each_cpu_cond_mask+0x3c/0x90 [ 303.893628][ T3312] invalidate_bh_lrus+0x2a/0x30 [ 303.898506][ T3312] blkdev_flush_mapping+0x9b/0x1a0 [ 303.903651][ T3312] bdev_release+0x2f9/0x420 [ 303.908200][ T3312] blkdev_release+0x15/0x20 [ 303.912746][ T3312] __fput+0x2ac/0x640 [ 303.916771][ T3312] ____fput+0x1c/0x30 [ 303.920780][ T3312] task_work_run+0x13a/0x1a0 [ 303.925403][ T3312] syscall_exit_to_user_mode+0xa8/0x120 [ 303.930990][ T3312] do_syscall_64+0xd6/0x1c0 [ 303.935524][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.941465][ T3312] [ 303.943813][ T3312] value changed: 0x0000000000000000 -> 0xffff888116c81680 [ 303.950938][ T3312] [ 303.953280][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 303.959476][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 303.970334][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.980400][ T3312] ================================================================== [ 304.303781][T14179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.485414][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.342353][T14179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.382571][T14179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.445627][T14179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.456551][T14179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.468175][T14179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.479294][T14179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0