last executing test programs: 4.204276949s ago: executing program 4 (id=2741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet(0x2, 0x3, 0x8d) clock_gettime(0x0, &(0x7f0000000280)) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff7]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.083327995s ago: executing program 4 (id=2743): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r5, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) geteuid() r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) 3.919124436s ago: executing program 4 (id=2746): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x18) geteuid() r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r7, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) 3.672255467s ago: executing program 4 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0xfffffffd, 0xfffffff8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.300247115s ago: executing program 3 (id=2754): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') pselect6(0x40, &(0x7f0000000200)={0x1, 0x1, 0x4, 0x9, 0x1, 0x1, 0xfffffffffffffffe, 0x7}, &(0x7f00000004c0)={0x46d9, 0x2, 0x9, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0xea, 0x300000000000}, &(0x7f0000000500)={0x7ff, 0x4, 0x9, 0x5, 0x31c, 0x10, 0x1, 0x8898}, 0x0, 0x0) 2.817680748s ago: executing program 3 (id=2761): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@private, @remote, 0x0}, &(0x7f0000000480)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xb4}, @call={0x85, 0x0, 0x0, 0x19}, @call={0x85, 0x0, 0x0, 0xd1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf79a}, @call={0x85, 0x0, 0x0, 0x7b}, @jmp={0x5, 0x0, 0x1, 0x2, 0xa, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x6, 0xffffcaf7, 0x8000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40081) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="fea53898b8cf174215fbb62ae1a7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(0x3) r3 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) 2.769513323s ago: executing program 3 (id=2762): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.71842789s ago: executing program 3 (id=2764): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) socket$packet(0x11, 0x3, 0x300) 2.571532459s ago: executing program 0 (id=2765): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x18) geteuid() r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r7, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) 2.340377999s ago: executing program 0 (id=2766): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) geteuid() r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) 2.039564117s ago: executing program 0 (id=2769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x18) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) socket$packet(0x11, 0x3, 0x300) 1.748978365s ago: executing program 3 (id=2771): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.680309823s ago: executing program 3 (id=2773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet6_sctp(0xa, 0x5, 0x84) 1.573858057s ago: executing program 1 (id=2774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r5, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r5) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@ipv4_getaddr={0x2c, 0x16, 0x4, 0x70bd25, 0x25dfdbff, {0x2, 0x40, 0x0, 0xc8}, [@IFA_CACHEINFO={0x14, 0x6, {0x97, 0x2, 0x10000, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000001600)) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$security_capability(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200c800, &(0x7f0000000080), 0x1, 0x683, &(0x7f0000001000)="$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") 1.312541341s ago: executing program 4 (id=2776): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") pselect6(0x40, &(0x7f0000000200)={0x1, 0x1, 0x4, 0x9, 0x1, 0x1, 0xfffffffffffffffe, 0x7}, &(0x7f00000004c0)={0x46d9, 0x2, 0x9, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0xea, 0x300000000000}, &(0x7f0000000500)={0x7ff, 0x4, 0x9, 0x5, 0x31c, 0x10, 0x1, 0x8898}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.181804297s ago: executing program 1 (id=2777): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x18) geteuid() r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r7, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) 1.110435877s ago: executing program 0 (id=2778): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000074b000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) 996.650761ms ago: executing program 2 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet(0x2, 0x3, 0x8d) clock_gettime(0x0, &(0x7f0000000280)) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 976.830004ms ago: executing program 2 (id=2780): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) geteuid() r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) 893.005024ms ago: executing program 1 (id=2781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet(0x2, 0x3, 0x8d) clock_gettime(0x0, &(0x7f0000000280)) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff7]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 763.437611ms ago: executing program 1 (id=2782): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x24, 0x0, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 762.414121ms ago: executing program 2 (id=2783): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 760.815461ms ago: executing program 4 (id=2784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet6_sctp(0xa, 0x5, 0x84) 732.869505ms ago: executing program 2 (id=2785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00']) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r10, r10, 0x0, 0x2) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r4}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x0, 0x3, 0x401, 0xe4f, 0x7ff}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 694.50415ms ago: executing program 1 (id=2786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00']) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r10, r10, 0x0, 0x2) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r4}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x0, 0x3, 0x401, 0xe4f, 0x7ff}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 473.252729ms ago: executing program 0 (id=2787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0xfffffffd, 0xfffffff8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 397.301128ms ago: executing program 2 (id=2788): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x18) geteuid() r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r7, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) 328.500337ms ago: executing program 1 (id=2789): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 48.185253ms ago: executing program 0 (id=2790): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)=ANY=[@ANYBLOB='fllate=1,nonumtail=0,shortname=lower,utf8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,shortname=winnt,uni_xlate=1,nonumtail=0,shortname=lower,shortname=lower,\x00'/198], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r5, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) geteuid() r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x4, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9, 0xffffffffffffffff}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) 0s ago: executing program 2 (id=2791): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) kernel console output (not intermixed with test programs): syzkaller0 mtu (1514) ! [ 183.240235][T10119] lo speed is unknown, defaulting to 1000 [ 183.265166][T10123] loop0: detected capacity change from 0 to 1024 [ 183.308066][T10125] loop3: detected capacity change from 0 to 128 [ 183.401157][T10123] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.412083][T10123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 183.461950][T10125] vfat: Unknown parameter 'fllate' [ 183.544521][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 183.617284][T10123] EXT4-fs (loop0): invalid journal inode [ 183.622988][T10123] EXT4-fs (loop0): can't get journal size [ 183.629897][T10123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.656354][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.677075][T10137] loop2: detected capacity change from 0 to 128 [ 183.705448][T10139] loop0: detected capacity change from 0 to 1024 [ 183.740394][ T3677] hid-generic 0000:0000:FFFFFFFC.0036: hidraw0: HID v8.00 Device [syz0] on syz0 [ 183.757885][T10142] loop2: detected capacity change from 0 to 1024 [ 183.768690][T10142] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.779580][T10142] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 183.797276][T10144] fido_id[10144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.811910][T10146] loop3: detected capacity change from 0 to 128 [ 183.815616][T10139] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.818450][T10142] EXT4-fs (loop2): invalid journal inode [ 183.829062][T10139] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 183.835020][T10146] vfat: Unknown parameter 'fllate' [ 183.854239][T10142] EXT4-fs (loop2): can't get journal size [ 183.864837][T10142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.866513][T10139] EXT4-fs (loop0): invalid journal inode [ 183.889265][T10119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2336'. [ 183.908846][T10139] EXT4-fs (loop0): can't get journal size [ 183.922072][T10139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.941702][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.076695][T10155] loop4: detected capacity change from 0 to 128 [ 184.103007][T10159] tipc: Enabling of bearer rejected, failed to enable media [ 184.648876][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.660127][T10165] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.681023][T10162] syzkaller0: entered promiscuous mode [ 184.686580][T10162] syzkaller0: entered allmulticast mode [ 185.035131][T10178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'. [ 185.075602][T10180] loop3: detected capacity change from 0 to 128 [ 185.142224][T10182] loop0: detected capacity change from 0 to 128 [ 185.168239][T10185] lo speed is unknown, defaulting to 1000 [ 185.201581][ T29] kauditd_printk_skb: 1627 callbacks suppressed [ 185.201595][ T29] audit: type=1326 audit(1768529875.573:22287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.231834][T10182] vfat: Unknown parameter 'fllate' [ 185.254014][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 185.261895][ T3320] FAT-fs (loop4): Filesystem has been set read-only [ 185.269276][T10188] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 185.280167][T10188] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 185.280365][ T29] audit: type=1326 audit(1768529875.573:22288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.308204][T10188] EXT4-fs (loop3): invalid journal inode [ 185.313287][ T29] audit: type=1326 audit(1768529875.573:22289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.328493][T10188] EXT4-fs (loop3): can't get journal size [ 185.342392][ T29] audit: type=1326 audit(1768529875.573:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.371617][ T29] audit: type=1326 audit(1768529875.573:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.395184][ T29] audit: type=1326 audit(1768529875.573:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.418879][ T29] audit: type=1326 audit(1768529875.573:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.442516][ T29] audit: type=1326 audit(1768529875.573:22294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.466071][ T29] audit: type=1326 audit(1768529875.573:22295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.489700][ T29] audit: type=1326 audit(1768529875.573:22296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 185.515063][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.647751][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.668777][T10185] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2354'. [ 186.077016][T10200] lo speed is unknown, defaulting to 1000 [ 186.170465][T10212] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 186.170465][T10212] [ 186.548937][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2358'. [ 186.960832][T10230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2365'. [ 187.065073][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 187.072927][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 187.159345][T10237] vfat: Unknown parameter 'fllate' [ 187.194349][T10235] tipc: Enabling of bearer rejected, failed to enable media [ 187.210798][T10235] syzkaller0: entered promiscuous mode [ 187.216407][T10235] syzkaller0: entered allmulticast mode [ 187.232234][T10240] vfat: Unknown parameter 'fllate' [ 187.245540][T10235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.336412][ T3677] hid_parser_main: 120 callbacks suppressed [ 187.336428][ T3677] hid-generic 0000:0000:FFFFFFFC.0037: unknown main item tag 0x0 [ 187.350144][ T3677] hid-generic 0000:0000:FFFFFFFC.0037: unknown main item tag 0x0 [ 187.357875][ T3677] hid-generic 0000:0000:FFFFFFFC.0037: unknown main item tag 0x0 [ 187.364756][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.370614][T10249] vfat: Unknown parameter 'fllate' [ 187.373378][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.386214][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.423223][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.431060][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.438851][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x0 [ 187.446617][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: unknown main item tag 0x1 [ 187.470822][ T3677] hid-generic 0000:0000:FFFFFFFC.0037: hidraw0: HID v8.00 Device [syz0] on syz0 [ 187.527038][ T3509] hid-generic 0000:0000:FFFFFFFC.0038: hidraw0: HID v8.00 Device [syz0] on syz0 [ 187.609009][T10261] vfat: Unknown parameter 'fllate' [ 187.653660][T10258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 187.661646][T10258] FAT-fs (loop4): Filesystem has been set read-only [ 187.668395][T10258] bio_check_eod: 2871 callbacks suppressed [ 187.674307][T10258] syz.4.2374: attempt to access beyond end of device [ 187.674307][T10258] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 187.699464][T10258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 187.707344][T10258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 187.729390][T10266] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 187.729390][T10266] [ 187.757603][T10258] syz.4.2374: attempt to access beyond end of device [ 187.757603][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.771916][ T3509] hid-generic 0000:0000:FFFFFFFC.0039: hidraw0: HID v8.00 Device [syz0] on syz0 [ 187.798832][T10258] syz.4.2374: attempt to access beyond end of device [ 187.798832][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.812777][T10258] syz.4.2374: attempt to access beyond end of device [ 187.812777][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.826986][T10258] syz.4.2374: attempt to access beyond end of device [ 187.826986][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.842597][T10264] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.853507][T10264] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 187.885595][T10270] fido_id[10270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.893357][T10258] syz.4.2374: attempt to access beyond end of device [ 187.893357][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.912161][T10272] lo speed is unknown, defaulting to 1000 [ 187.916714][T10264] EXT4-fs (loop1): invalid journal inode [ 187.924334][T10264] EXT4-fs (loop1): can't get journal size [ 187.936509][T10264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.952010][T10258] syz.4.2374: attempt to access beyond end of device [ 187.952010][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.965878][T10258] syz.4.2374: attempt to access beyond end of device [ 187.965878][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 187.999082][T10258] syz.4.2374: attempt to access beyond end of device [ 187.999082][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 188.046263][T10258] syz.4.2374: attempt to access beyond end of device [ 188.046263][T10258] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 188.062023][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.076379][T10277] siw: device registration error -23 [ 188.082350][T10277] syz!: rxe_newlink: already configured on team_slave_0 [ 188.151745][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2378'. [ 188.238998][T10283] set_capacity_and_notify: 11 callbacks suppressed [ 188.239012][T10283] loop1: detected capacity change from 0 to 1024 [ 188.266298][T10283] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.277231][T10283] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 188.343909][T10290] syzkaller0: entered promiscuous mode [ 188.349431][T10290] syzkaller0: entered allmulticast mode [ 188.355541][T10283] EXT4-fs (loop1): invalid journal inode [ 188.361369][T10283] EXT4-fs (loop1): can't get journal size [ 188.369150][T10283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.385777][T10290] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.639452][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.704204][T10299] loop2: detected capacity change from 0 to 128 [ 188.718145][T10300] loop3: detected capacity change from 0 to 128 [ 188.766018][T10299] vfat: Unknown parameter 'fllate' [ 188.776211][T10300] vfat: Unknown parameter 'fllate' [ 188.855247][T10302] loop1: detected capacity change from 0 to 128 [ 188.905642][T10304] siw: device registration error -23 [ 188.914986][T10304] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.944143][T10309] loop4: detected capacity change from 0 to 128 [ 188.951928][T10309] vfat: Unknown parameter 'fllate' [ 188.988224][ T3677] hid-generic 0000:0000:FFFFFFFC.003A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 189.009861][T10302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 189.017701][T10302] FAT-fs (loop1): Filesystem has been set read-only [ 189.025091][T10312] fido_id[10312]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.043902][T10302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 189.051922][T10302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 189.105637][T10318] loop3: detected capacity change from 0 to 1024 [ 189.142023][T10318] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 189.142023][T10318] [ 189.156257][T10325] lo speed is unknown, defaulting to 1000 [ 189.275523][T10329] syzkaller0: entered promiscuous mode [ 189.281055][T10329] syzkaller0: entered allmulticast mode [ 189.319058][T10331] siw: device registration error -23 [ 189.331999][T10329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.359108][T10331] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.401822][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2396'. [ 189.448755][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2400'. [ 189.590242][T10343] loop3: detected capacity change from 0 to 128 [ 189.719466][T10343] vfat: Unknown parameter 'fllate' [ 189.865642][T10341] loop2: detected capacity change from 0 to 1024 [ 189.924211][T10341] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 189.935188][T10341] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 190.060181][T10341] EXT4-fs (loop2): invalid journal inode [ 190.074450][ T3677] hid-generic 0000:0000:FFFFFFFC.003B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 190.111351][T10341] EXT4-fs (loop2): can't get journal size [ 190.128588][T10341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.184170][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.189848][T10351] loop3: detected capacity change from 0 to 1024 [ 190.200496][T10351] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.211405][T10351] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 190.221362][T10351] EXT4-fs (loop3): invalid journal inode [ 190.227005][T10351] EXT4-fs (loop3): can't get journal size [ 190.234650][T10351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.251975][T10354] loop2: detected capacity change from 0 to 128 [ 190.258781][T10354] vfat: Unknown parameter 'fllate' [ 190.266817][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 190.266830][ T29] audit: type=1326 audit(1768529880.633:23687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.368830][ T29] audit: type=1326 audit(1768529880.633:23688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.392586][ T29] audit: type=1326 audit(1768529880.633:23689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.416163][ T29] audit: type=1326 audit(1768529880.633:23690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.424470][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.439827][ T29] audit: type=1326 audit(1768529880.633:23691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.439854][ T29] audit: type=1326 audit(1768529880.633:23692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.439879][ T29] audit: type=1326 audit(1768529880.633:23693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.439906][ T29] audit: type=1326 audit(1768529880.633:23694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.439929][ T29] audit: type=1326 audit(1768529880.633:23695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.439951][ T29] audit: type=1326 audit(1768529880.633:23696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 190.629686][ T3677] hid-generic 0000:0000:FFFFFFFC.003C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 190.676471][T10371] syzkaller0: entered promiscuous mode [ 190.682124][T10371] syzkaller0: entered allmulticast mode [ 190.768082][T10374] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 190.833090][T10376] vfat: Unknown parameter 'fllate' [ 190.883503][T10379] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 190.997049][T10378] lo speed is unknown, defaulting to 1000 [ 191.047019][T10368] fido_id[10368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.110018][T10387] vfat: Unknown parameter 'fllate' [ 191.168464][T10385] siw: device registration error -23 [ 191.192634][T10394] vfat: Unknown parameter 'fllate' [ 191.202154][T10385] syz!: rxe_newlink: already configured on team_slave_0 [ 191.226499][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 191.236168][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 191.275339][ T3509] hid-generic 0000:0000:FFFFFFFC.003D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 191.341923][T10405] fido_id[10405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.365476][ T3677] hid-generic 0000:0000:FFFFFFFC.003E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 191.416176][T10416] syzkaller0: entered promiscuous mode [ 191.421850][T10416] syzkaller0: entered allmulticast mode [ 191.454754][T10419] vfat: Unknown parameter 'fllate' [ 191.478993][T10416] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.489661][T10417] fido_id[10417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.521083][T10424] vfat: Unknown parameter 'fllate' [ 191.738214][ T3677] hid-generic 0000:0000:FFFFFFFC.003F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 191.903514][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2432'. [ 191.912513][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2432'. [ 191.949667][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 191.957511][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 191.968432][T10436] fido_id[10436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.032504][T10442] vfat: Unknown parameter 'fllate' [ 192.111847][T10446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 192.119741][T10446] FAT-fs (loop0): Filesystem has been set read-only [ 192.168636][T10446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 192.176512][T10446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 192.216394][T10448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.227320][T10448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 192.243652][T10448] EXT4-fs (loop4): invalid journal inode [ 192.249692][T10448] EXT4-fs (loop4): can't get journal size [ 192.273089][T10448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.421091][T10458] lo speed is unknown, defaulting to 1000 [ 192.441807][T10464] vfat: Unknown parameter 'fllate' [ 192.451151][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.488837][T10445] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 192.496689][T10445] FAT-fs (loop2): Filesystem has been set read-only [ 192.524047][T10466] vfat: Unknown parameter 'fllate' [ 192.539943][T10445] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 192.547797][T10445] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 192.600076][ T8632] hid_parser_main: 251 callbacks suppressed [ 192.600094][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.613851][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.621653][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.629485][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.637253][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.645010][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.652789][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.660544][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.668304][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.669350][T10445] bio_check_eod: 31382 callbacks suppressed [ 192.669427][T10445] syz.2.2433: attempt to access beyond end of device [ 192.669427][T10445] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.676189][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: unknown main item tag 0x0 [ 192.703356][ T3677] hid-generic 0000:0000:FFFFFFFC.0041: hidraw0: HID v8.00 Device [syz0] on syz0 [ 192.703652][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: item fetching failed at offset 20/43 [ 192.723375][T10446] syz.0.2431: attempt to access beyond end of device [ 192.723375][T10446] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.725885][T10445] syz.2.2433: attempt to access beyond end of device [ 192.725885][T10445] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.758503][T10446] syz.0.2431: attempt to access beyond end of device [ 192.758503][T10446] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.776788][T10471] fido_id[10471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.800835][T10446] syz.0.2431: attempt to access beyond end of device [ 192.800835][T10446] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.808197][T10445] syz.2.2433: attempt to access beyond end of device [ 192.808197][T10445] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.828673][T10446] syz.0.2431: attempt to access beyond end of device [ 192.828673][T10446] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.832849][T10445] syz.2.2433: attempt to access beyond end of device [ 192.832849][T10445] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.850366][T10446] syz.0.2431: attempt to access beyond end of device [ 192.850366][T10446] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.858999][T10445] syz.2.2433: attempt to access beyond end of device [ 192.858999][T10445] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 192.870633][ T8632] hid-generic 0000:0000:FFFFFFFC.0040: probe with driver hid-generic failed with error -22 [ 192.893778][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 192.946316][T10476] vfat: Unknown parameter 'fllate' [ 192.983512][T10478] syzkaller0: entered promiscuous mode [ 192.989039][T10478] syzkaller0: entered allmulticast mode [ 192.997753][T10478] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.073965][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 193.082978][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 193.114839][T10486] vfat: Unknown parameter 'fllate' [ 193.136076][T10487] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 193.136076][T10487] [ 193.179221][T10491] siw: device registration error -23 [ 193.202457][T10491] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.223044][T10493] siw: device registration error -23 [ 193.261678][T10493] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.274470][ T3677] hid-generic 0000:0000:FFFFFFFC.0042: hidraw0: HID v8.00 Device [syz0] on syz0 [ 193.326744][T10500] fido_id[10500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.341726][T10502] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.346089][T10505] set_capacity_and_notify: 18 callbacks suppressed [ 193.346105][T10505] loop1: detected capacity change from 0 to 128 [ 193.362793][T10507] loop0: detected capacity change from 0 to 128 [ 193.369771][T10507] vfat: Unknown parameter 'fllate' [ 193.389218][T10505] vfat: Unknown parameter 'fllate' [ 193.435638][T10509] loop4: detected capacity change from 0 to 128 [ 193.458985][T10509] vfat: Unknown parameter 'fllate' [ 193.499251][T10513] lo speed is unknown, defaulting to 1000 [ 193.518059][T10514] lo speed is unknown, defaulting to 1000 [ 193.522541][ T3677] hid-generic 0000:0000:FFFFFFFC.0043: hidraw0: HID v8.00 Device [syz0] on syz0 [ 193.550922][T10518] fido_id[10518]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.594319][ T8632] hid-generic 0000:0000:FFFFFFFC.0044: item fetching failed at offset 20/43 [ 193.600856][T10522] loop0: detected capacity change from 0 to 1024 [ 193.603301][ T8632] hid-generic 0000:0000:FFFFFFFC.0044: probe with driver hid-generic failed with error -22 [ 193.619768][T10522] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 193.630698][T10522] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 193.632032][T10524] syzkaller0: entered promiscuous mode [ 193.645755][T10524] syzkaller0: entered allmulticast mode [ 193.652655][T10522] EXT4-fs (loop0): invalid journal inode [ 193.662097][T10522] EXT4-fs (loop0): can't get journal size [ 193.696798][T10522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.709464][T10526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2460'. [ 193.718441][T10526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2460'. [ 193.728879][T10524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.775282][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.815500][T10533] loop3: detected capacity change from 0 to 128 [ 193.858955][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 193.875951][T10539] lo speed is unknown, defaulting to 1000 [ 193.882640][T10538] syz!: rxe_newlink: already configured on team_slave_0 [ 193.942916][T10543] loop4: detected capacity change from 0 to 128 [ 193.963036][T10543] vfat: Unknown parameter 'fllate' [ 193.987819][T10545] loop0: detected capacity change from 0 to 128 [ 194.008820][T10545] vfat: Unknown parameter 'fllate' [ 194.031678][T10548] loop2: detected capacity change from 0 to 128 [ 194.119967][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 194.128073][ T1038] hid-generic 0000:0000:FFFFFFFC.0045: hidraw0: HID v8.00 Device [syz0] on syz0 [ 194.156558][T10555] siw: device registration error -23 [ 194.192511][T10555] syz!: rxe_newlink: already configured on team_slave_0 [ 194.206480][T10556] fido_id[10556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.231077][T10560] loop4: detected capacity change from 0 to 128 [ 194.257976][T10562] loop1: detected capacity change from 0 to 128 [ 194.267660][T10562] vfat: Unknown parameter 'fllate' [ 194.275790][T10560] vfat: Unknown parameter 'fllate' [ 194.284406][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 194.318242][T10566] vfat: Unknown parameter 'fllate' [ 194.390499][T10548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 194.398377][T10548] FAT-fs (loop2): Filesystem has been set read-only [ 194.406929][T10548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 194.415032][T10548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 194.423339][ T3622] hid-generic 0000:0000:FFFFFFFC.0046: hidraw0: HID v8.00 Device [syz0] on syz0 [ 194.450757][T10571] fido_id[10571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.512210][T10575] syzkaller0: entered promiscuous mode [ 194.517747][T10575] syzkaller0: entered allmulticast mode [ 194.613646][T10575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.665003][T10584] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.181876][T10587] lo speed is unknown, defaulting to 1000 [ 195.186250][T10589] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.198578][T10589] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 195.229296][T10592] vfat: Unknown parameter 'fllate' [ 195.239934][T10589] EXT4-fs (loop0): invalid journal inode [ 195.250459][T10589] EXT4-fs (loop0): can't get journal size [ 195.268031][T10589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.282035][ T29] kauditd_printk_skb: 2128 callbacks suppressed [ 195.282049][ T29] audit: type=1326 audit(1768529885.653:25825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10d6c1df90 code=0x7ffc0000 [ 195.327572][ T29] audit: type=1326 audit(1768529885.653:25826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10d6c1df90 code=0x7ffc0000 [ 195.351364][ T29] audit: type=1326 audit(1768529885.653:25827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.374999][ T29] audit: type=1326 audit(1768529885.653:25828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.441404][ T29] audit: type=1326 audit(1768529885.813:25829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.464999][ T29] audit: type=1326 audit(1768529885.813:25830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.488608][ T29] audit: type=1326 audit(1768529885.813:25831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.512000][ T29] audit: type=1326 audit(1768529885.813:25832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.535598][ T29] audit: type=1326 audit(1768529885.813:25833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.559177][ T29] audit: type=1326 audit(1768529885.813:25834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 195.588860][T10598] vfat: Unknown parameter 'fllate' [ 195.603838][T10602] vfat: Unknown parameter 'fllate' [ 195.616853][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.643499][T10604] vfat: Unknown parameter 'fllate' [ 195.685820][T10606] syz!: rxe_newlink: already configured on team_slave_0 [ 195.718287][T10609] lo speed is unknown, defaulting to 1000 [ 195.746785][ T3677] hid-generic 0000:0000:FFFFFFFC.0047: hidraw0: HID v8.00 Device [syz0] on syz0 [ 195.778746][T10617] syzkaller0: entered promiscuous mode [ 195.784227][T10617] syzkaller0: entered allmulticast mode [ 195.799288][ T3622] hid-generic 0000:0000:FFFFFFFC.0048: hidraw0: HID v8.00 Device [syz0] on syz0 [ 195.842531][T10618] fido_id[10618]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.917158][T10626] vfat: Unknown parameter 'fllate' [ 195.924216][T10629] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.932717][T10617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.967092][T10627] fido_id[10627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.250036][T10634] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 196.250036][T10634] [ 196.362601][ T3622] hid-generic 0000:0000:FFFFFFFC.0049: hidraw0: HID v8.00 Device [syz0] on syz0 [ 196.882085][T10650] vfat: Unknown parameter 'fllate' [ 196.901329][T10648] lo speed is unknown, defaulting to 1000 [ 197.068897][T10656] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 197.076734][T10656] FAT-fs (loop2): Filesystem has been set read-only [ 197.100847][ T3677] hid-generic 0000:0000:FFFFFFFC.004A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 197.106590][T10656] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 197.118778][T10656] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 197.167229][T10659] fido_id[10659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.279634][T10669] vfat: Unknown parameter 'fllate' [ 197.307306][T10662] lo speed is unknown, defaulting to 1000 [ 197.509647][T10648] __nla_validate_parse: 8 callbacks suppressed [ 197.509663][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'. [ 197.528975][ T3622] hid-generic 0000:0000:FFFFFFFC.004B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 197.593818][T10676] fido_id[10676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.681321][T10678] vfat: Unknown parameter 'fllate' [ 197.688264][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2501'. [ 197.713699][T10656] bio_check_eod: 24379 callbacks suppressed [ 197.713725][T10656] syz.2.2497: attempt to access beyond end of device [ 197.713725][T10656] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 197.796607][T10682] vfat: Unknown parameter 'fllate' [ 197.855692][ T1038] hid_parser_main: 314 callbacks suppressed [ 197.855711][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.869508][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.877293][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.920864][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.928754][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.936710][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.944521][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x1 [ 197.952256][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.960046][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.967772][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: unknown main item tag 0x0 [ 197.983309][ T3677] hid-generic 0000:0000:FFFFFFFC.004D: hidraw1: HID v8.00 Device [syz0] on syz0 [ 198.027607][ T1038] hid-generic 0000:0000:FFFFFFFC.004C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 198.074685][T10694] fido_id[10694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 198.094269][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 198.103273][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 198.132760][T10684] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 198.140732][T10684] FAT-fs (loop2): Filesystem has been set read-only [ 198.158296][T10703] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 198.163764][T10684] syz.2.2506: attempt to access beyond end of device [ 198.163764][T10684] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 198.179543][T10684] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 198.187399][T10684] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 198.196245][T10684] syz.2.2506: attempt to access beyond end of device [ 198.196245][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.230706][T10684] syz.2.2506: attempt to access beyond end of device [ 198.230706][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.254451][T10707] vfat: Unknown parameter 'fllate' [ 198.264520][T10684] syz.2.2506: attempt to access beyond end of device [ 198.264520][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.283833][T10684] syz.2.2506: attempt to access beyond end of device [ 198.283833][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.302802][T10708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.307400][ T3325] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 198.310655][T10708] FAT-fs (loop0): Filesystem has been set read-only [ 198.318526][ T3325] FAT-fs (loop3): Filesystem has been set read-only [ 198.327389][T10684] syz.2.2506: attempt to access beyond end of device [ 198.327389][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.345959][T10708] syz.0.2507: attempt to access beyond end of device [ 198.345959][T10708] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 198.405854][T10684] syz.2.2506: attempt to access beyond end of device [ 198.405854][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.421429][T10684] syz.2.2506: attempt to access beyond end of device [ 198.421429][T10684] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 198.456038][T10708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.463909][T10708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.479095][T10714] syzkaller0: entered promiscuous mode [ 198.484606][T10714] syzkaller0: entered allmulticast mode [ 198.492767][ T3622] hid-generic 0000:0000:FFFFFFFC.004E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 198.508222][T10714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 198.782647][T10719] set_capacity_and_notify: 20 callbacks suppressed [ 198.782664][T10719] loop4: detected capacity change from 0 to 128 [ 199.159307][T10723] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.167205][T10723] FAT-fs (loop4): Filesystem has been set read-only [ 199.233623][T10725] siw: device registration error -23 [ 199.263970][T10723] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.272023][T10723] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.283865][T10727] loop3: detected capacity change from 0 to 128 [ 199.332372][T10733] loop1: detected capacity change from 0 to 128 [ 199.344561][T10729] lo speed is unknown, defaulting to 1000 [ 199.350184][T10727] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.358084][T10727] FAT-fs (loop3): Filesystem has been set read-only [ 199.358715][T10733] vfat: Unknown parameter 'fllate' [ 199.370239][T10727] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.378103][T10727] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.548741][ T1038] hid-generic 0000:0000:FFFFFFFC.004F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 199.612774][T10740] fido_id[10740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.809379][T10744] loop1: detected capacity change from 0 to 128 [ 199.816033][T10744] vfat: Unknown parameter 'fllate' [ 199.878315][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 200.262598][ T1038] hid-generic 0000:0000:FFFFFFFC.0050: hidraw0: HID v8.00 Device [syz0] on syz0 [ 200.290166][T10752] loop2: detected capacity change from 0 to 1024 [ 200.296097][ T29] kauditd_printk_skb: 1685 callbacks suppressed [ 200.296111][ T29] audit: type=1326 audit(1768529890.663:27520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.1.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.332062][T10756] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 200.344268][T10754] fido_id[10754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.370666][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2522'. [ 200.374521][T10760] loop1: detected capacity change from 0 to 128 [ 200.379660][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2522'. [ 200.387637][T10760] vfat: Unknown parameter 'fllate' [ 200.410214][T10752] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 200.410214][T10752] [ 200.422006][T10758] siw: device registration error -23 [ 200.440250][ T29] audit: type=1326 audit(1768529890.813:27521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.458306][T10762] syzkaller0: entered promiscuous mode [ 200.465675][ T29] audit: type=1326 audit(1768529890.833:27522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.469323][T10762] syzkaller0: entered allmulticast mode [ 200.492861][ T29] audit: type=1326 audit(1768529890.833:27523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.492897][ T29] audit: type=1326 audit(1768529890.833:27524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.492919][ T29] audit: type=1326 audit(1768529890.833:27525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.530190][T10763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.545602][ T29] audit: type=1326 audit(1768529890.833:27526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.600753][ T29] audit: type=1326 audit(1768529890.833:27527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.624411][ T29] audit: type=1326 audit(1768529890.833:27528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.647891][ T29] audit: type=1326 audit(1768529890.833:27529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad01f749 code=0x7ffc0000 [ 200.705020][ T3622] hid-generic 0000:0000:FFFFFFFC.0051: hidraw0: HID v8.00 Device [syz0] on syz0 [ 200.751146][T10770] loop1: detected capacity change from 0 to 128 [ 200.758122][T10770] vfat: Unknown parameter 'fllate' [ 200.776267][T10768] fido_id[10768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.798009][T10773] siw: device registration error -23 [ 200.923054][T10773] syz!: rxe_newlink: already configured on team_slave_0 [ 200.973562][T10780] loop4: detected capacity change from 0 to 128 [ 200.988820][ T1038] hid-generic 0000:0000:FFFFFFFC.0052: hidraw0: HID v8.00 Device [syz0] on syz0 [ 201.004027][T10780] vfat: Unknown parameter 'fllate' [ 201.178610][T10782] fido_id[10782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.192374][T10783] loop2: detected capacity change from 0 to 1024 [ 201.207316][T10785] lo speed is unknown, defaulting to 1000 [ 201.214496][T10783] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 201.214496][T10783] [ 201.261648][T10792] loop4: detected capacity change from 0 to 1024 [ 201.269177][T10792] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.280090][T10792] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 201.299790][T10792] EXT4-fs (loop4): invalid journal inode [ 201.305667][T10792] EXT4-fs (loop4): can't get journal size [ 201.314973][T10792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.400445][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.453807][T10796] vfat: Unknown parameter 'fllate' [ 201.532428][T10798] vfat: Unknown parameter 'fllate' [ 201.602751][ T3622] hid-generic 0000:0000:FFFFFFFC.0053: hidraw0: HID v8.00 Device [syz0] on syz0 [ 201.622043][T10804] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.664273][T10806] fido_id[10806]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.676161][T10808] vfat: Unknown parameter 'fllate' [ 201.711521][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 201.720638][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 201.730248][ T3622] hid-generic 0000:0000:FFFFFFFC.0054: hidraw0: HID v8.00 Device [syz0] on syz0 [ 201.740889][T10810] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.751877][T10810] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 201.802043][T10810] EXT4-fs (loop2): invalid journal inode [ 201.809516][T10816] syzkaller0: entered promiscuous mode [ 201.815003][T10816] syzkaller0: entered allmulticast mode [ 201.825525][T10815] fido_id[10815]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.832740][T10818] vfat: Unknown parameter 'fllate' [ 201.839521][T10810] EXT4-fs (loop2): can't get journal size [ 201.852098][ T3622] hid-generic 0000:0000:FFFFFFFC.0055: hidraw0: HID v8.00 Device [syz0] on syz0 [ 201.853064][T10816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.872081][T10810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.915126][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.930432][T10821] fido_id[10821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.001339][T10826] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.012295][T10826] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 202.027492][T10827] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.038504][T10827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 202.050022][T10826] EXT4-fs (loop4): invalid journal inode [ 202.055696][T10826] EXT4-fs (loop4): can't get journal size [ 202.083521][T10826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.109985][ T3622] hid-generic 0000:0000:FFFFFFFC.0056: hidraw0: HID v8.00 Device [syz0] on syz0 [ 202.143476][T10827] EXT4-fs (loop0): invalid journal inode [ 202.157676][T10833] fido_id[10833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.177019][T10827] EXT4-fs (loop0): can't get journal size [ 202.197930][T10827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.240616][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.285693][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.363483][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.371360][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 202.371556][T10845] syz!: rxe_newlink: already configured on team_slave_0 [ 202.381210][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 202.454196][T10836] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 202.462141][T10836] FAT-fs (loop3): Filesystem has been set read-only [ 202.573075][T10852] vfat: Unknown parameter 'fllate' [ 202.633193][T10855] vfat: Unknown parameter 'fllate' [ 202.640483][T10850] lo speed is unknown, defaulting to 1000 [ 202.691581][T10836] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 202.699500][T10836] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 202.782339][T10836] bio_check_eod: 46523 callbacks suppressed [ 202.782356][T10836] syz.3.2547: attempt to access beyond end of device [ 202.782356][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.832334][ T36] hid-generic 0000:0000:FFFFFFFC.0057: hidraw0: HID v8.00 Device [syz0] on syz0 [ 202.881084][T10836] syz.3.2547: attempt to access beyond end of device [ 202.881084][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.894912][T10836] syz.3.2547: attempt to access beyond end of device [ 202.894912][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.895624][ T36] hid_parser_main: 338 callbacks suppressed [ 202.895641][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 202.908726][T10836] syz.3.2547: attempt to access beyond end of device [ 202.908726][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.908815][T10836] syz.3.2547: attempt to access beyond end of device [ 202.908815][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.914732][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 202.934029][T10836] syz.3.2547: attempt to access beyond end of device [ 202.934029][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 202.936255][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 202.970713][T10859] fido_id[10859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.977055][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.000374][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.008174][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.015959][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x1 [ 203.023713][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.031491][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.033182][T10836] syz.3.2547: attempt to access beyond end of device [ 203.033182][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 203.039245][ T36] hid-generic 0000:0000:FFFFFFFC.0058: unknown main item tag 0x0 [ 203.039945][ T36] hid-generic 0000:0000:FFFFFFFC.0058: hidraw0: HID v8.00 Device [syz0] on syz0 [ 203.094199][T10836] syz.3.2547: attempt to access beyond end of device [ 203.094199][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 203.132224][T10864] syzkaller0: entered promiscuous mode [ 203.135317][T10836] syz.3.2547: attempt to access beyond end of device [ 203.135317][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 203.137699][T10864] syzkaller0: entered allmulticast mode [ 203.155621][T10836] syz.3.2547: attempt to access beyond end of device [ 203.155621][T10836] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 203.182007][T10864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 203.183469][T10866] vfat: Unknown parameter 'fllate' [ 203.299355][T10874] vfat: Unknown parameter 'fllate' [ 203.341648][T10879] vfat: Unknown parameter 'fllate' [ 203.348176][T10877] vfat: Unknown parameter 'fllate' [ 203.370079][T10881] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.380988][T10881] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 203.391846][T10881] EXT4-fs (loop3): invalid journal inode [ 203.397527][T10881] EXT4-fs (loop3): can't get journal size [ 203.415332][T10881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.447752][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.462405][ T36] hid-generic 0000:0000:FFFFFFFC.0059: hidraw0: HID v8.00 Device [syz0] on syz0 [ 203.507762][T10890] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.536696][ T8632] hid-generic 0000:0000:FFFFFFFC.005A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 203.620738][T10895] vfat: Unknown parameter 'fllate' [ 203.655408][T10905] lo speed is unknown, defaulting to 1000 [ 203.675594][T10897] fido_id[10897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.974576][T10916] set_capacity_and_notify: 20 callbacks suppressed [ 203.974590][T10916] loop1: detected capacity change from 0 to 128 [ 203.990955][T10917] loop2: detected capacity change from 0 to 128 [ 203.999138][T10917] vfat: Unknown parameter 'fllate' [ 204.020611][T10916] vfat: Unknown parameter 'fllate' [ 204.167016][ T8632] hid-generic 0000:0000:FFFFFFFC.005B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 204.203803][T10923] syzkaller0: entered promiscuous mode [ 204.209459][T10923] syzkaller0: entered allmulticast mode [ 204.217387][T10923] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.218769][T10921] fido_id[10921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.246795][ T36] hid-generic 0000:0000:FFFFFFFC.005C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 204.332055][T10927] fido_id[10927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.385545][T10934] loop0: detected capacity change from 0 to 1024 [ 204.395880][T10934] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.406882][T10934] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 204.417502][T10934] EXT4-fs (loop0): invalid journal inode [ 204.423620][T10934] EXT4-fs (loop0): can't get journal size [ 204.435080][T10935] loop2: detected capacity change from 0 to 1024 [ 204.483161][T10934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.485333][T10940] loop4: detected capacity change from 0 to 128 [ 204.518654][T10941] loop3: detected capacity change from 0 to 1024 [ 204.528754][T10941] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.539700][T10941] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 204.550246][T10935] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 204.550246][T10935] [ 204.561740][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.567100][T10940] vfat: Unknown parameter 'fllate' [ 204.580473][T10941] EXT4-fs (loop3): invalid journal inode [ 204.586235][T10941] EXT4-fs (loop3): can't get journal size [ 204.593711][T10943] loop0: detected capacity change from 0 to 128 [ 204.616431][T10941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.675823][T10946] syz!: rxe_newlink: already configured on team_slave_0 [ 204.680494][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.723853][T10949] loop3: detected capacity change from 0 to 128 [ 204.746733][T10951] loop0: detected capacity change from 0 to 128 [ 204.758013][ T3622] hid-generic 0000:0000:FFFFFFFC.005D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 204.781887][T10951] vfat: Unknown parameter 'fllate' [ 204.825772][T10953] fido_id[10953]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.883990][T10961] syzkaller0: entered promiscuous mode [ 204.889606][T10961] syzkaller0: entered allmulticast mode [ 204.929734][T10961] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.972153][T10966] loop4: detected capacity change from 0 to 1024 [ 204.982923][T10966] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 204.982923][T10966] [ 204.983461][ T36] hid-generic 0000:0000:FFFFFFFC.005E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 205.042111][T10968] fido_id[10968]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.053976][T10970] lo speed is unknown, defaulting to 1000 [ 205.164147][ T3325] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 205.172104][ T3325] FAT-fs (loop3): Filesystem has been set read-only [ 205.304617][ T29] kauditd_printk_skb: 3119 callbacks suppressed [ 205.304633][ T29] audit: type=1326 audit(1768529895.673:30649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.337915][ T29] audit: type=1326 audit(1768529895.673:30650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.361640][ T29] audit: type=1326 audit(1768529895.673:30651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.385225][ T29] audit: type=1326 audit(1768529895.673:30652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.408863][ T29] audit: type=1326 audit(1768529895.673:30653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.432424][ T29] audit: type=1326 audit(1768529895.673:30654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.456001][ T29] audit: type=1326 audit(1768529895.673:30655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.479644][ T29] audit: type=1326 audit(1768529895.673:30657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.503326][ T29] audit: type=1326 audit(1768529895.673:30656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.526987][ T29] audit: type=1326 audit(1768529895.673:30658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d6c1f749 code=0x7ffc0000 [ 205.562055][ T36] hid-generic 0000:0000:FFFFFFFC.005F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 205.657148][T10989] fido_id[10989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.905079][T10993] syz!: rxe_newlink: already configured on team_slave_0 [ 205.976415][T10997] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 205.989558][T10999] vfat: Unknown parameter 'fllate' [ 205.991114][T11001] vfat: Unknown parameter 'fllate' [ 206.013530][T10997] bond2: entered promiscuous mode [ 206.023629][T10997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.038788][T10997] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 206.046530][T10997] __nla_validate_parse: 1 callbacks suppressed [ 206.046543][T10997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2595'. [ 206.058613][ T3622] hid-generic 0000:0000:FFFFFFFC.0060: hidraw0: HID v8.00 Device [syz0] on syz0 [ 206.109833][ T36] hid-generic 0000:0000:FFFFFFFC.0061: hidraw1: HID v8.00 Device [syz0] on syz0 [ 206.152886][T11011] fido_id[11011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.174779][T11010] tipc: Enabled bearer , priority 0 [ 206.185493][T11014] vfat: Unknown parameter 'fllate' [ 206.199119][T11010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.212905][T11010] tipc: Resetting bearer [ 206.225198][T11016] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.236111][T11016] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 206.247897][T11009] tipc: Disabling bearer [ 206.255005][T11016] EXT4-fs (loop1): invalid journal inode [ 206.260890][T11016] EXT4-fs (loop1): can't get journal size [ 206.268375][T11016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.300400][T11021] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 206.311639][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.326716][T11021] bond1: entered promiscuous mode [ 206.332107][T11021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.368272][T11021] bond1: (slave bridge6): making interface the new active one [ 206.375804][T11021] bridge6: entered promiscuous mode [ 206.400311][T11021] bridge6: left promiscuous mode [ 206.406346][ T3622] hid-generic 0000:0000:FFFFFFFC.0062: hidraw0: HID v8.00 Device [syz0] on syz0 [ 206.441216][T11028] fido_id[11028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.472205][T11031] vfat: Unknown parameter 'fllate' [ 206.511549][ T3321] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 206.519572][ T3321] FAT-fs (loop0): Filesystem has been set read-only [ 206.584162][T11039] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 206.647177][ T3622] hid-generic 0000:0000:FFFFFFFC.0063: hidraw0: HID v8.00 Device [syz0] on syz0 [ 206.714685][T11046] fido_id[11046]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.743157][T11048] lo speed is unknown, defaulting to 1000 [ 206.794170][T11025] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.802069][T11025] FAT-fs (loop1): Filesystem has been set read-only [ 206.919459][T11025] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.927323][T11025] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.080813][T11052] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.091794][T11052] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 207.226182][T11052] EXT4-fs (loop2): invalid journal inode [ 207.231899][T11052] EXT4-fs (loop2): can't get journal size [ 207.243230][T11052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.316255][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.330894][T11056] vfat: Unknown parameter 'fllate' [ 207.353330][T11059] tipc: Enabled bearer , priority 0 [ 207.373130][T11059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.383321][T11059] tipc: Resetting bearer [ 207.391393][T11058] tipc: Disabling bearer [ 207.514227][T11069] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 207.528029][T11069] bond1: entered promiscuous mode [ 207.534305][T11069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.548217][T11069] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 207.556029][T11069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2615'. [ 207.622435][T11074] vfat: Unknown parameter 'fllate' [ 207.628276][T11069] bond1: (slave bridge3): making interface the new active one [ 207.635828][T11069] bridge3: entered promiscuous mode [ 207.653018][T11075] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 207.653018][T11075] [ 207.673718][T11069] bridge3: left promiscuous mode [ 207.765405][T11081] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.809768][T11087] vfat: Unknown parameter 'fllate' [ 207.817759][ T3622] hid-generic 0000:0000:FFFFFFFC.0064: hidraw0: HID v8.00 Device [syz0] on syz0 [ 207.860155][T11090] vfat: Unknown parameter 'fllate' [ 207.874441][T11088] fido_id[11088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.912650][T11093] vfat: Unknown parameter 'fllate' [ 207.924114][ T3622] hid_parser_main: 367 callbacks suppressed [ 207.924131][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.937987][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.945823][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.970573][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.978341][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.982826][T11072] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 207.986142][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 207.993895][T11072] FAT-fs (loop1): Filesystem has been set read-only [ 208.001610][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x1 [ 208.016057][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 208.021190][T11072] bio_check_eod: 2365 callbacks suppressed [ 208.021204][T11072] syz.1.2616: attempt to access beyond end of device [ 208.021204][T11072] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 208.023810][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 208.041559][T11072] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.043337][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: unknown main item tag 0x0 [ 208.051040][T11072] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.094153][ T8632] hid-generic 0000:0000:FFFFFFFC.0066: hidraw1: HID v8.00 Device [syz0] on syz0 [ 208.105547][T11072] syz.1.2616: attempt to access beyond end of device [ 208.105547][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.119397][ T3622] hid-generic 0000:0000:FFFFFFFC.0065: hidraw0: HID v8.00 Device [syz0] on syz0 [ 208.148509][T11104] vfat: Unknown parameter 'fllate' [ 208.168581][T11072] syz.1.2616: attempt to access beyond end of device [ 208.168581][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.187650][T11102] fido_id[11102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.227974][T11072] syz.1.2616: attempt to access beyond end of device [ 208.227974][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.283291][T11072] syz.1.2616: attempt to access beyond end of device [ 208.283291][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.348468][T11072] syz.1.2616: attempt to access beyond end of device [ 208.348468][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.382583][T11072] syz.1.2616: attempt to access beyond end of device [ 208.382583][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.424770][T11072] syz.1.2616: attempt to access beyond end of device [ 208.424770][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.454744][T11072] syz.1.2616: attempt to access beyond end of device [ 208.454744][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.470347][T11072] syz.1.2616: attempt to access beyond end of device [ 208.470347][T11072] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 208.534058][ T3325] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 208.541956][ T3325] FAT-fs (loop3): Filesystem has been set read-only [ 208.710199][T11117] lo speed is unknown, defaulting to 1000 [ 208.887979][T11120] tipc: Enabled bearer , priority 0 [ 208.899957][T11120] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.919889][T11120] tipc: Resetting bearer [ 208.927110][T11119] tipc: Disabling bearer [ 209.005368][T11126] set_capacity_and_notify: 21 callbacks suppressed [ 209.005384][T11126] loop0: detected capacity change from 0 to 1024 [ 209.028754][T11126] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.039713][T11126] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 209.067456][T11126] EXT4-fs (loop0): invalid journal inode [ 209.074704][T11130] loop3: detected capacity change from 0 to 128 [ 209.075628][T11126] EXT4-fs (loop0): can't get journal size [ 209.099886][T11126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.116143][T11135] loop2: detected capacity change from 0 to 128 [ 209.123604][T11135] vfat: Unknown parameter 'fllate' [ 209.137761][T11132] loop1: detected capacity change from 0 to 1024 [ 209.199243][T11132] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.210263][T11132] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 209.232286][T11132] EXT4-fs (loop1): invalid journal inode [ 209.232930][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.237934][T11132] EXT4-fs (loop1): can't get journal size [ 209.254128][T11132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.285003][ T3622] hid-generic 0000:0000:FFFFFFFC.0067: hidraw0: HID v8.00 Device [syz0] on syz0 [ 209.312258][T11138] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 209.334779][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.336425][T11144] loop0: detected capacity change from 0 to 128 [ 209.356210][T11144] vfat: Unknown parameter 'fllate' [ 209.365721][T11148] loop2: detected capacity change from 0 to 128 [ 209.389001][T11138] bond2: entered promiscuous mode [ 209.401285][T11148] vfat: Unknown parameter 'fllate' [ 209.409293][T11138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.423609][ T36] hid-generic 0000:0000:FFFFFFFC.0068: hidraw0: HID v8.00 Device [syz0] on syz0 [ 209.436317][T11154] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 209.444089][T11154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2637'. [ 209.468788][T11130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 209.470246][T11156] loop1: detected capacity change from 0 to 128 [ 209.476637][T11130] FAT-fs (loop3): Filesystem has been set read-only [ 209.493005][T11152] fido_id[11152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.518727][T11156] vfat: Unknown parameter 'fllate' [ 209.527522][T11130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 209.535438][T11130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 209.555859][T11138] bond2: (slave bridge3): making interface the new active one [ 209.563407][T11138] bridge3: entered promiscuous mode [ 209.589844][T11138] bridge3: left promiscuous mode [ 209.654043][T11166] loop2: detected capacity change from 0 to 128 [ 209.702178][T11169] tipc: Enabled bearer , priority 0 [ 209.737233][T11169] syzkaller0: entered promiscuous mode [ 209.742819][T11169] syzkaller0: entered allmulticast mode [ 209.766287][T11171] loop1: detected capacity change from 0 to 128 [ 209.768984][T11169] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.902972][T11168] tipc: Resetting bearer [ 209.920422][T11168] tipc: Disabling bearer [ 210.308463][ T29] kauditd_printk_skb: 2302 callbacks suppressed [ 210.308477][ T29] audit: type=1326 audit(1768529900.673:32961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.439457][ T3314] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 210.447314][ T3314] FAT-fs (loop1): Filesystem has been set read-only [ 210.485958][ T29] audit: type=1326 audit(1768529900.713:32963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.509642][ T29] audit: type=1326 audit(1768529900.713:32962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.533180][ T29] audit: type=1326 audit(1768529900.713:32964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.551413][T11187] loop4: detected capacity change from 0 to 128 [ 210.556727][ T29] audit: type=1326 audit(1768529900.713:32965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.586605][ T29] audit: type=1326 audit(1768529900.713:32966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.592974][T11189] vfat: Unknown parameter 'fllate' [ 210.610315][ T29] audit: type=1326 audit(1768529900.713:32967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.610343][ T29] audit: type=1326 audit(1768529900.713:32969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.662507][ T29] audit: type=1326 audit(1768529900.713:32968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.670447][T11187] vfat: Unknown parameter 'fllate' [ 210.686089][ T29] audit: type=1326 audit(1768529900.713:32970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.4.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dacbf749 code=0x7ffc0000 [ 210.747341][T11191] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 210.756424][T11193] vfat: Unknown parameter 'fllate' [ 210.768499][T11191] bond1: entered promiscuous mode [ 210.773758][T11191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.789304][T11191] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 210.797058][T11191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2654'. [ 210.813385][T11191] bond1: (slave bridge5): making interface the new active one [ 210.820998][T11191] bridge5: entered promiscuous mode [ 210.827469][T11191] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 210.862339][ T36] hid-generic 0000:0000:FFFFFFFC.0069: hidraw0: HID v8.00 Device [syz0] on syz0 [ 210.885245][T11203] fido_id[11203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.918980][ T8632] hid-generic 0000:0000:FFFFFFFC.006A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 210.936562][ T3622] hid-generic 0000:0000:FFFFFFFC.006B: hidraw1: HID v8.00 Device [syz0] on syz0 [ 211.003099][T11219] syz!: rxe_newlink: already configured on team_slave_0 [ 211.012366][T11221] vfat: Unknown parameter 'fllate' [ 211.019105][T11212] fido_id[11212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.033112][T11214] tipc: Enabled bearer , priority 0 [ 211.068598][T11215] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 211.068598][T11215] [ 211.081583][T11214] syzkaller0: entered promiscuous mode [ 211.087064][T11214] syzkaller0: entered allmulticast mode [ 211.096389][ T8632] hid-generic 0000:0000:FFFFFFFC.006C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 211.117537][T11226] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 211.164583][T11226] bond3: entered promiscuous mode [ 211.176842][T11226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.186817][T11229] fido_id[11229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.203515][T11233] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 211.204044][T11228] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.211325][T11233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2661'. [ 211.233150][T11213] tipc: Resetting bearer [ 211.270234][T11213] tipc: Disabling bearer [ 211.282786][T11226] bond3: (slave bridge3): making interface the new active one [ 211.290311][T11226] bridge3: entered promiscuous mode [ 211.307175][T11226] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 211.393272][T11243] netlink: 'syz.1.2666': attribute type 1 has an invalid length. [ 211.439267][T11243] bond1: entered promiscuous mode [ 211.472744][T11243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.615794][T11246] netlink: 'syz.1.2666': attribute type 1 has an invalid length. [ 211.623602][T11246] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2666'. [ 211.707831][ T3325] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 211.715727][ T3325] FAT-fs (loop3): Filesystem has been set read-only [ 211.881561][T11251] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 211.906089][T11253] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.917027][T11253] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 211.929195][T11253] EXT4-fs (loop3): invalid journal inode [ 211.936061][T11254] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 211.943922][T11254] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2668'. [ 211.953313][T11253] EXT4-fs (loop3): can't get journal size [ 211.969010][T11251] bond2: entered promiscuous mode [ 211.974502][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.987764][T11258] vfat: Unknown parameter 'fllate' [ 212.005427][T11251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.040116][T11254] bond2: (slave bridge2): making interface the new active one [ 212.047625][T11254] bridge2: entered promiscuous mode [ 212.054520][T11254] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 212.063574][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.095516][T11262] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 212.095516][T11262] [ 212.151559][ T36] hid-generic 0000:0000:FFFFFFFC.006D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 212.174949][T11266] vfat: Unknown parameter 'fllate' [ 212.186050][T11270] vfat: Unknown parameter 'fllate' [ 212.192216][T11269] syz!: rxe_newlink: already configured on team_slave_0 [ 212.224295][T11264] fido_id[11264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.244066][ T36] hid-generic 0000:0000:FFFFFFFC.006E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 212.299811][T11276] tipc: Enabled bearer , priority 0 [ 212.329334][T11277] fido_id[11277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.331855][T11276] syzkaller0: entered promiscuous mode [ 212.348501][T11276] syzkaller0: entered allmulticast mode [ 212.392099][T11285] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 212.420224][T11274] tipc: Resetting bearer [ 212.462097][T11274] tipc: Disabling bearer [ 212.520830][T11295] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 212.535465][T11295] bond4: entered promiscuous mode [ 212.561241][T11295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.586608][T11300] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 212.594468][T11300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2680'. [ 212.650439][T11301] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 212.681991][T11295] bond4: (slave bridge4): making interface the new active one [ 212.689599][T11295] bridge4: entered promiscuous mode [ 212.701357][T11304] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 212.709131][T11304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2681'. [ 212.721349][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 212.728351][T11295] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 212.729229][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 212.745847][T11303] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.756752][T11303] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 212.764160][T11301] bond3: entered promiscuous mode [ 212.771978][T11301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.797469][T11304] bond3: (slave bridge9): making interface the new active one [ 212.805008][T11304] bridge9: entered promiscuous mode [ 212.815172][T11307] vfat: Unknown parameter 'fllate' [ 212.826826][T11304] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 212.826993][T11303] EXT4-fs (loop3): invalid journal inode [ 212.876203][T11303] EXT4-fs (loop3): can't get journal size [ 212.900950][T11303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.969349][T11315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.998296][T11309] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 213.006293][T11309] FAT-fs (loop4): Filesystem has been set read-only [ 213.009811][ T36] hid_parser_main: 308 callbacks suppressed [ 213.009903][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.013049][T11309] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 213.018808][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.026508][T11309] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 213.049169][T11309] bio_check_eod: 12620 callbacks suppressed [ 213.049183][T11309] syz.4.2684: attempt to access beyond end of device [ 213.049183][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.050013][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.056954][T11309] syz.4.2684: attempt to access beyond end of device [ 213.056954][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.098563][T11309] syz.4.2684: attempt to access beyond end of device [ 213.098563][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.098957][T11319] vfat: Unknown parameter 'fllate' [ 213.112455][T11309] syz.4.2684: attempt to access beyond end of device [ 213.112455][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.131698][T11309] syz.4.2684: attempt to access beyond end of device [ 213.131698][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.161287][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.173899][T11309] syz.4.2684: attempt to access beyond end of device [ 213.173899][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.191425][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.199227][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.207042][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.214826][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x1 [ 213.222592][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.230440][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.238236][ T36] hid-generic 0000:0000:FFFFFFFC.006F: unknown main item tag 0x0 [ 213.240654][T11322] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.256885][T11322] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 213.268316][T11309] syz.4.2684: attempt to access beyond end of device [ 213.268316][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.282481][T11309] syz.4.2684: attempt to access beyond end of device [ 213.282481][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.297445][T11322] EXT4-fs (loop3): invalid journal inode [ 213.303426][ T1038] hid-generic 0000:0000:FFFFFFFC.0070: hidraw1: HID v8.00 Device [syz0] on syz0 [ 213.314801][T11322] EXT4-fs (loop3): can't get journal size [ 213.323221][ T36] hid-generic 0000:0000:FFFFFFFC.006F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 213.332443][T11309] syz.4.2684: attempt to access beyond end of device [ 213.332443][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.350741][T11322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.364307][ T3305] udevd[3305]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 213.382649][T11327] fido_id[11327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.385229][T11309] syz.4.2684: attempt to access beyond end of device [ 213.385229][T11309] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 213.416618][T11329] vfat: Unknown parameter 'fllate' [ 213.475061][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.540502][T11333] vfat: Unknown parameter 'fllate' [ 213.561689][T11336] tipc: Enabled bearer , priority 0 [ 213.568806][T11336] syzkaller0: entered promiscuous mode [ 213.574275][T11336] syzkaller0: entered allmulticast mode [ 213.583787][T11336] tipc: Resetting bearer [ 213.590445][T11335] tipc: Resetting bearer [ 213.597871][T11335] tipc: Disabling bearer [ 213.605054][ T36] hid-generic 0000:0000:FFFFFFFC.0071: hidraw0: HID v8.00 Device [syz0] on syz0 [ 213.657264][T11339] fido_id[11339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.717926][T11343] bond2: entered promiscuous mode [ 213.724926][T11343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.755210][T11347] bond3: entered promiscuous mode [ 213.761415][T11347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.781336][T11343] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2694'. [ 213.804132][T11351] vfat: Unknown parameter 'fllate' [ 213.853897][T11343] bond2: (slave bridge6): making interface the new active one [ 213.861415][T11343] bridge6: entered promiscuous mode [ 213.874659][T11343] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 213.884926][T11355] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.906522][T11359] vfat: Unknown parameter 'fllate' [ 213.946286][T11361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.969256][ T3622] hid-generic 0000:0000:FFFFFFFC.0072: hidraw0: HID v8.00 Device [syz0] on syz0 [ 213.986801][T11345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 213.991531][T11363] fido_id[11363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.994725][T11345] FAT-fs (loop3): Filesystem has been set read-only [ 214.025518][T11345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 214.033436][T11345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 214.053109][ T3622] hid-generic 0000:0000:FFFFFFFC.0073: hidraw0: HID v8.00 Device [syz0] on syz0 [ 214.065627][T11370] set_capacity_and_notify: 25 callbacks suppressed [ 214.065642][T11370] loop0: detected capacity change from 0 to 128 [ 214.091429][T11371] fido_id[11371]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.092284][T11366] bond4: entered promiscuous mode [ 214.106259][T11372] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2700'. [ 214.128077][T11370] vfat: Unknown parameter 'fllate' [ 214.141939][T11366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.183191][T11361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.210700][T11366] bond4: (slave bridge3): making interface the new active one [ 214.218204][T11366] bridge3: entered promiscuous mode [ 214.225331][T11366] bridge3: left promiscuous mode [ 214.245470][T11376] loop4: detected capacity change from 0 to 128 [ 214.278677][ T36] hid-generic 0000:0000:FFFFFFFC.0074: hidraw0: HID v8.00 Device [syz0] on syz0 [ 214.306982][T11361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.328656][T11380] loop4: detected capacity change from 0 to 128 [ 214.337917][T11380] vfat: Unknown parameter 'fllate' [ 214.381491][T11361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.404778][T11382] loop0: detected capacity change from 0 to 128 [ 214.417849][T11384] tipc: Enabled bearer , priority 0 [ 214.419509][T11382] vfat: Unknown parameter 'fllate' [ 214.437180][T11384] syzkaller0: entered promiscuous mode [ 214.442750][T11384] syzkaller0: entered allmulticast mode [ 214.461441][ T292] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.476811][ T292] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.486767][T11384] tipc: Resetting bearer [ 214.492804][ T292] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.504960][ T292] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.527258][T11383] tipc: Resetting bearer [ 214.543321][T11389] loop4: detected capacity change from 0 to 128 [ 214.550086][T11389] vfat: Unknown parameter 'fllate' [ 214.574614][T11383] tipc: Disabling bearer [ 214.619331][T11393] syz!: rxe_newlink: already configured on team_slave_0 [ 214.627366][T11394] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.667624][T11399] loop3: detected capacity change from 0 to 128 [ 214.675947][T11394] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.686326][T11399] vfat: Unknown parameter 'fllate' [ 214.723795][T11405] loop4: detected capacity change from 0 to 128 [ 214.737264][T11405] vfat: Unknown parameter 'fllate' [ 214.744468][T11394] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.754988][T11407] loop1: detected capacity change from 0 to 128 [ 214.800848][T11394] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.816030][T11411] loop1: detected capacity change from 0 to 128 [ 214.890234][ T36] hid-generic 0000:0000:FFFFFFFC.0075: hidraw0: HID v8.00 Device [syz0] on syz0 [ 214.908146][ T3677] hid-generic 0000:0000:FFFFFFFC.0076: hidraw1: HID v8.00 Device [syz0] on syz0 [ 214.944624][T11416] fido_id[11416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.958959][T11417] fido_id[11417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.985887][T11419] loop3: detected capacity change from 0 to 128 [ 215.006884][T11419] vfat: Unknown parameter 'fllate' [ 215.013814][T11421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.040574][T11411] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 215.048469][T11411] FAT-fs (loop1): Filesystem has been set read-only [ 215.055266][T11411] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 215.063122][T11411] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 215.111882][T11421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.139204][ T3622] hid-generic 0000:0000:FFFFFFFC.0077: hidraw0: HID v8.00 Device [syz0] on syz0 [ 215.171868][T11421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.173243][T11425] fido_id[11425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.256201][T11429] vfat: Unknown parameter 'fllate' [ 215.281992][T11421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.306347][T11431] vfat: Unknown parameter 'fllate' [ 215.318949][ T29] kauditd_printk_skb: 2559 callbacks suppressed [ 215.318962][ T29] audit: type=1326 audit(1768529905.693:35530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.348953][ T29] audit: type=1326 audit(1768529905.693:35531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.372510][ T29] audit: type=1326 audit(1768529905.693:35532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.396169][ T29] audit: type=1326 audit(1768529905.693:35533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.422094][ T29] audit: type=1326 audit(1768529905.693:35534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.445824][ T29] audit: type=1326 audit(1768529905.693:35535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.469398][ T29] audit: type=1326 audit(1768529905.693:35536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.493027][ T29] audit: type=1326 audit(1768529905.693:35537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.516593][ T29] audit: type=1326 audit(1768529905.693:35538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.540159][ T29] audit: type=1326 audit(1768529905.693:35539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.3.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb9df749 code=0x7ffc0000 [ 215.571876][ T1740] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.583424][ T1740] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.598807][ T1740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.607197][ T1740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.636036][T11437] vfat: Unknown parameter 'fllate' [ 215.679260][T11439] tipc: Enabled bearer , priority 0 [ 215.696335][T11439] syzkaller0: entered promiscuous mode [ 215.701929][T11439] syzkaller0: entered allmulticast mode [ 215.712386][T11439] tipc: Resetting bearer [ 215.719503][T11438] tipc: Resetting bearer [ 215.725839][T11441] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 215.733353][T11438] tipc: Disabling bearer [ 215.758204][T11444] vfat: Unknown parameter 'fllate' [ 215.801375][ T8632] hid-generic 0000:0000:FFFFFFFC.0078: hidraw0: HID v8.00 Device [syz0] on syz0 [ 215.814365][T11449] vfat: Unknown parameter 'fllate' [ 215.849067][T11450] fido_id[11450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.883354][T11453] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 215.894327][T11453] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 215.904129][ T36] hid-generic 0000:0000:FFFFFFFC.0079: hidraw0: HID v8.00 Device [syz0] on syz0 [ 215.912885][T11453] EXT4-fs (loop0): invalid journal inode [ 215.921354][T11453] EXT4-fs (loop0): can't get journal size [ 215.941113][T11453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.970509][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.980730][ T36] hid-generic 0000:0000:FFFFFFFC.007A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 216.019010][T11464] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.030023][T11464] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 216.042346][T11466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.058681][T11464] EXT4-fs (loop4): invalid journal inode [ 216.071202][T11464] EXT4-fs (loop4): can't get journal size [ 216.081693][T11464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.106246][T11466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.129581][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.151399][T11471] vfat: Unknown parameter 'fllate' [ 216.172481][T11466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.189303][T11473] validate_nla: 5 callbacks suppressed [ 216.189317][T11473] netlink: 'syz.4.2732': attribute type 1 has an invalid length. [ 216.209902][T11473] bond5: entered promiscuous mode [ 216.215210][T11473] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.227955][T11466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.231030][T11473] netlink: 'syz.4.2732': attribute type 1 has an invalid length. [ 216.246134][T11473] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2732'. [ 216.270587][T11473] bond5: (slave bridge5): making interface the new active one [ 216.278155][T11473] bridge5: entered promiscuous mode [ 216.306647][T11473] bridge5: left promiscuous mode [ 216.382961][ T1740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.394937][ T1740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.421846][ T1740] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.448485][ T1740] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.453571][T11479] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 216.464577][T11479] FAT-fs (loop1): Filesystem has been set read-only [ 216.479822][T11481] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 216.497191][T11479] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 216.505134][T11479] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 216.534585][T11487] tipc: Enabled bearer , priority 0 [ 216.542682][T11487] syzkaller0: entered promiscuous mode [ 216.548168][T11487] syzkaller0: entered allmulticast mode [ 216.555724][T11489] vfat: Unknown parameter 'fllate' [ 216.576256][T11487] tipc: Resetting bearer [ 216.585578][T11483] tipc: Resetting bearer [ 216.600572][T11483] tipc: Disabling bearer [ 216.656785][T11494] vfat: Unknown parameter 'fllate' [ 216.734937][ T36] hid-generic 0000:0000:FFFFFFFC.007B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 216.757341][ T36] hid-generic 0000:0000:FFFFFFFC.007C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 216.768939][T11500] fido_id[11500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.815537][T11504] vfat: Unknown parameter 'fllate' [ 216.815664][ T8632] hid-generic 0000:0000:FFFFFFFC.007D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 216.832524][T11501] fido_id[11501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.896841][T11507] fido_id[11507]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.930307][T11512] vfat: Unknown parameter 'fllate' [ 216.986083][T11515] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 217.001878][T11515] bond2: entered promiscuous mode [ 217.007673][T11515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.103216][T11515] bond2: (slave bridge6): making interface the new active one [ 217.110815][T11515] bridge6: entered promiscuous mode [ 217.117487][T11523] vfat: Unknown parameter 'fllate' [ 217.170067][T11515] bridge6: left promiscuous mode [ 217.252352][T11527] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 217.274669][ T36] hid-generic 0000:0000:FFFFFFFC.007E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 217.316851][T11531] fido_id[11531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.365275][T11535] tipc: Enabled bearer , priority 0 [ 217.388767][T11535] syzkaller0: entered promiscuous mode [ 217.394329][T11535] syzkaller0: entered allmulticast mode [ 217.411779][T11537] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 217.436137][T11537] bond3: entered promiscuous mode [ 217.445724][T11537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.455702][T11535] tipc: Resetting bearer [ 217.462528][T11534] tipc: Resetting bearer [ 217.469975][T11534] tipc: Disabling bearer [ 217.504453][T11530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 217.512482][T11530] FAT-fs (loop1): Filesystem has been set read-only [ 217.519340][T11530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 217.527248][T11530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 217.559311][T11543] vfat: Unknown parameter 'fllate' [ 217.577583][T11537] bond3: (slave bridge6): making interface the new active one [ 217.585166][T11537] bridge6: entered promiscuous mode [ 217.600059][T11537] bridge6: left promiscuous mode [ 217.689241][ T36] hid-generic 0000:0000:FFFFFFFC.007F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 217.723755][T11546] fido_id[11546]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.742597][T11548] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.774787][T11552] vfat: Unknown parameter 'fllate' [ 217.788469][T11553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.812522][T11553] EXT4-fs (loop3): too many log groups per flexible block group [ 217.820955][T11553] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 217.827785][T11553] EXT4-fs (loop3): mount failed [ 217.834994][T11548] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.901552][T11548] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.944089][ T36] hid-generic 0000:0000:FFFFFFFC.0080: hidraw0: HID v8.00 Device [syz0] on syz0 [ 217.962042][T11548] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.978813][T11558] fido_id[11558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.035825][ T292] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.044233][ T292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.052648][T11530] bio_check_eod: 75603 callbacks suppressed [ 218.052661][T11530] syz.1.2748: attempt to access beyond end of device [ 218.052661][T11530] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.075835][ T292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.084130][ T292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.092703][T11530] syz.1.2748: attempt to access beyond end of device [ 218.092703][T11530] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.106702][ T292] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.115490][ T292] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.121462][T11562] vfat: Unknown parameter 'fllate' [ 218.128712][ T292] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.140458][T11564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 218.164592][ T292] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.170100][T11530] syz.1.2748: attempt to access beyond end of device [ 218.170100][T11530] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.310038][ T3509] hid_parser_main: 512 callbacks suppressed [ 218.310054][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.323762][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.331516][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.339336][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.347167][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.355060][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.362818][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.370580][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.378311][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.386081][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: unknown main item tag 0x0 [ 218.393912][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: item fetching failed at offset 20/43 [ 218.405107][ T3509] hid-generic 0000:0000:FFFFFFFC.0081: probe with driver hid-generic failed with error -22 [ 218.439087][T11581] vfat: Unknown parameter 'fllate' [ 218.479055][T11567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.486972][T11567] FAT-fs (loop2): Filesystem has been set read-only [ 218.504591][T11567] syz.2.2760: attempt to access beyond end of device [ 218.504591][T11567] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 218.529837][T11567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.537690][T11567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.548791][T11567] syz.2.2760: attempt to access beyond end of device [ 218.548791][T11567] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.562723][T11567] syz.2.2760: attempt to access beyond end of device [ 218.562723][T11567] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.566533][T11576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 218.584378][T11576] FAT-fs (loop3): Filesystem has been set read-only [ 218.588691][T11567] syz.2.2760: attempt to access beyond end of device [ 218.588691][T11567] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.595472][T11576] syz.3.2764: attempt to access beyond end of device [ 218.595472][T11576] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 218.619329][T11576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 218.625318][T11567] syz.2.2760: attempt to access beyond end of device [ 218.625318][T11567] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.627155][T11576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 218.651197][T11567] syz.2.2760: attempt to access beyond end of device [ 218.651197][T11567] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 218.682684][T11587] vfat: Unknown parameter 'fllate' [ 218.867948][ T3509] hid-generic 0000:0000:FFFFFFFC.0082: hidraw0: HID v8.00 Device [syz0] on syz0 [ 218.891849][T11593] vfat: Unknown parameter 'fllate' [ 218.948909][T11594] fido_id[11594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.096510][ T3509] hid-generic 0000:0000:FFFFFFFC.0083: hidraw0: HID v8.00 Device [syz0] on syz0 [ 219.181384][T11600] fido_id[11600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.183884][T11603] set_capacity_and_notify: 29 callbacks suppressed [ 219.183898][T11603] loop1: detected capacity change from 0 to 1024 [ 219.211010][T11599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.218916][T11599] FAT-fs (loop0): Filesystem has been set read-only [ 219.225698][T11599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.230606][T11603] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.233573][T11599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 219.244404][T11603] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 219.273646][T11603] EXT4-fs (loop1): invalid journal inode [ 219.281968][T11606] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 219.298950][T11603] EXT4-fs (loop1): can't get journal size [ 219.313388][T11603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.330485][T11608] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 219.356124][T11608] bond3: entered promiscuous mode [ 219.371573][T11608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.396265][T11611] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.431983][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.449191][T11608] bond3: (slave bridge7): making interface the new active one [ 219.456677][T11608] bridge7: entered promiscuous mode [ 219.465573][T11614] loop3: detected capacity change from 0 to 512 [ 219.472854][T11614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.499846][T11614] EXT4-fs (loop3): too many log groups per flexible block group [ 219.508787][T11608] bridge7: left promiscuous mode [ 219.522607][T11614] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 219.539476][T11614] EXT4-fs (loop3): mount failed [ 219.571884][T11611] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.603391][T11620] loop1: detected capacity change from 0 to 1024 [ 219.620832][T11620] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 219.620832][T11620] [ 219.650762][T11611] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.729511][T11622] loop2: detected capacity change from 0 to 128 [ 219.736771][T11611] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.748772][T11624] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.797280][T11622] vfat: Unknown parameter 'fllate' [ 219.849081][T11625] loop4: detected capacity change from 0 to 512 [ 219.863836][T11624] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.886800][T11627] loop1: detected capacity change from 0 to 128 [ 219.893724][T11627] vfat: Unknown parameter 'fllate' [ 219.897150][T11625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.931486][T11625] EXT4-fs (loop4): too many log groups per flexible block group [ 219.939699][T11625] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 219.946796][T11625] EXT4-fs (loop4): mount failed [ 219.968507][ T3677] hid-generic 0000:0000:FFFFFFFC.0084: item fetching failed at offset 20/43 [ 219.981080][ T3677] hid-generic 0000:0000:FFFFFFFC.0084: probe with driver hid-generic failed with error -22 [ 219.987993][T11624] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.035845][T11640] loop2: detected capacity change from 0 to 128 [ 220.042546][T11640] vfat: Unknown parameter 'fllate' [ 220.048869][ T3677] hid-generic 0000:0000:FFFFFFFC.0085: hidraw0: HID v8.00 Device [syz0] on syz0 [ 220.063936][T11624] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.120020][ T145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.141079][ T145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.171510][T11641] fido_id[11641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.188363][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.197074][ T3677] hid-generic 0000:0000:FFFFFFFC.0086: hidraw0: HID v8.00 Device [syz0] on syz0 [ 220.227920][ T145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.257225][T11653] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 220.282407][T11651] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.287618][T11654] fido_id[11654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.312182][T11656] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 220.330397][T11656] bond4: entered promiscuous mode [ 220.335860][T11656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.349309][T11659] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 220.367439][T11651] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.384648][T11660] loop4: detected capacity change from 0 to 512 [ 220.394935][T11660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.395921][T11659] bond5: entered promiscuous mode [ 220.409009][T11659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.422343][T11656] bond4: (slave bridge7): making interface the new active one [ 220.429935][T11656] bridge7: entered promiscuous mode [ 220.436835][T11660] EXT4-fs (loop4): too many log groups per flexible block group [ 220.445185][T11660] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 220.453716][T11656] bridge7: left promiscuous mode [ 220.458878][T11660] EXT4-fs (loop4): mount failed [ 220.520200][T11651] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.539570][T11666] bond5: (slave bridge3): making interface the new active one [ 220.547123][T11666] bridge3: entered promiscuous mode [ 220.553813][T11666] bridge3: left promiscuous mode [ 220.590929][T11667] tipc: Enabled bearer , priority 0 [ 220.598924][T11651] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.614003][T11669] loop2: detected capacity change from 0 to 128 [ 220.620774][T11665] syzkaller0: entered promiscuous mode [ 220.622706][T11669] vfat: Unknown parameter 'fllate' [ 220.626295][T11665] syzkaller0: entered allmulticast mode [ 220.649678][T11665] tipc: Resetting bearer [ 220.656343][T11664] tipc: Resetting bearer [ 220.664166][T11664] tipc: Disabling bearer [ 220.672917][ T29] kauditd_printk_skb: 2544 callbacks suppressed [ 220.672986][ T29] audit: type=1326 audit(1768529911.043:38084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.703304][ T29] audit: type=1326 audit(1768529911.053:38085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.727027][ T29] audit: type=1326 audit(1768529911.053:38086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.750605][ T29] audit: type=1326 audit(1768529911.053:38087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.774240][ T29] audit: type=1326 audit(1768529911.053:38088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.797869][ T29] audit: type=1326 audit(1768529911.053:38089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.798703][T11672] loop1: detected capacity change from 0 to 512 [ 220.821522][ T29] audit: type=1326 audit(1768529911.053:38090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.851385][ T29] audit: type=1326 audit(1768529911.053:38091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.874994][ T29] audit: type=1326 audit(1768529911.053:38092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.876326][T11672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.898589][ T29] audit: type=1326 audit(1768529911.053:38093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43eb33f749 code=0x7ffc0000 [ 220.933811][T11671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.947688][ T3677] hid-generic 0000:0000:FFFFFFFC.0087: hidraw0: HID v8.00 Device [syz0] on syz0 [ 220.963759][T11672] EXT4-fs (loop1): too many log groups per flexible block group [ 220.971899][T11677] vfat: Unknown parameter 'fllate' [ 220.983484][T11672] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 220.990461][T11675] fido_id[11675]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.006606][T11672] EXT4-fs (loop1): mount failed [ 221.031501][T11683] vfat: Unknown parameter 'fllate' [ 221.040784][T11671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.063689][ T3005] ================================================================== [ 221.071793][ T3005] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 221.079799][ T3005] [ 221.082108][ T3005] write to 0xffff88811a477c30 of 8 bytes by task 3307 on cpu 0: [ 221.089720][ T3005] dentry_unlink_inode+0x65/0x260 [ 221.094763][ T3005] d_delete+0x164/0x180 [ 221.098918][ T3005] d_delete_notify+0x32/0x100 [ 221.103590][ T3005] vfs_unlink+0x32c/0x440 [ 221.107896][ T3005] do_unlinkat+0x1cd/0x4b0 [ 221.112289][ T3005] __x64_sys_unlink+0x2e/0x40 [ 221.116944][ T3005] x64_sys_call+0x2f48/0x3000 [ 221.121610][ T3005] do_syscall_64+0xca/0x2b0 [ 221.123991][ T3622] hid-generic 0000:0000:FFFFFFFC.0088: item fetching failed at offset 20/43 [ 221.126109][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.135536][ T3622] hid-generic 0000:0000:FFFFFFFC.0088: probe with driver hid-generic failed with error -22 [ 221.140631][ T3005] [ 221.140638][ T3005] read to 0xffff88811a477c30 of 8 bytes by task 3005 on cpu 1: [ 221.140654][ T3005] step_into_slowpath+0x113/0x480 [ 221.165462][ T3005] path_lookupat+0x330/0x500 [ 221.170052][ T3005] filename_lookup+0x147/0x340 [ 221.174810][ T3005] do_readlinkat+0x7d/0x320 [ 221.179307][ T3005] __x64_sys_readlink+0x47/0x60 [ 221.184149][ T3005] x64_sys_call+0x2af1/0x3000 [ 221.188816][ T3005] do_syscall_64+0xca/0x2b0 [ 221.193307][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.199184][ T3005] [ 221.201486][ T3005] value changed: 0xffff88811abd0f08 -> 0x0000000000000000 [ 221.208573][ T3005] [ 221.210875][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 221.217020][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.227856][ T3005] Tainted: [W]=WARN [ 221.231639][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.241676][ T3005] ================================================================== [ 221.257269][T11671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.311202][T11671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.354265][ T1704] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.365026][ T1740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.375467][ T1740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.386401][ T1740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.363280][ T1740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.374295][ T1740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.384907][ T1740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.395804][ T1740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.093854][ T145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.104184][ T145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.115255][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.126370][ T145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0