last executing test programs: 14.28286869s ago: executing program 3 (id=10171): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 13.348170472s ago: executing program 3 (id=10181): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 13.131614343s ago: executing program 3 (id=10184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '-$./*[(]-+'}}]}}) 13.069617299s ago: executing program 3 (id=10185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffff7fffffffe}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0, 0x7, 0xff, 0x8000}]}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @remote}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'veth0_virt_wifi\x00'}) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, {[@hopopts={0x1d, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @echo_reply}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000cbed7b155c851f5800010800060cff07000008000000640101020057150000007f000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='svcrdma_send_pullup\x00', r0, 0x0, 0x2}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsmount(r1, 0x0, 0x82) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdfff7ff000000000800000030000280280003800c000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e00000000000000000004f29f4c3cf110ffd4c8e36b76414414eb1f8df61fdbe1fa66a0219ae03214e2e4a2584593af476e2785913263141eaa053616"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 12.621801893s ago: executing program 3 (id=10194): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xcfdc}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 12.118907362s ago: executing program 3 (id=10201): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}, {&(0x7f0000000300)}, {&(0x7f0000000340)="3887aac15b723fa0c4c2d51950def43d1e0461816341c126d3a3053c02b1f3fe07ab121356ab0a9a806131388048037d6f3f7ccdc39cecbeabc0fe5534a90f3b2f6f52384d723d54f25381872f39f941e1c48e4ad6a258d8ad2d3ffa0aea97d005b181b9e2fe9e0bd12af558df2b80dc608d1adbd4513aba4e40720c3910c9604fa45d783fc4de76df3c88f733df74e137a08cc5852a79422a07b01ddbff5e9ea39db9e125d6eb1453240b3a249b9b3c6128842bf7544778a3a961e8beb55bf93be8f75478", 0xc5}, {&(0x7f0000000440)="69f4098f15820dc6b3711ee1d4164c8772313aea01a160772b0d03b057", 0x1d}], 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r4, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 12.097904164s ago: executing program 32 (id=10201): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}, {&(0x7f0000000300)}, {&(0x7f0000000340)="3887aac15b723fa0c4c2d51950def43d1e0461816341c126d3a3053c02b1f3fe07ab121356ab0a9a806131388048037d6f3f7ccdc39cecbeabc0fe5534a90f3b2f6f52384d723d54f25381872f39f941e1c48e4ad6a258d8ad2d3ffa0aea97d005b181b9e2fe9e0bd12af558df2b80dc608d1adbd4513aba4e40720c3910c9604fa45d783fc4de76df3c88f733df74e137a08cc5852a79422a07b01ddbff5e9ea39db9e125d6eb1453240b3a249b9b3c6128842bf7544778a3a961e8beb55bf93be8f75478", 0xc5}, {&(0x7f0000000440)="69f4098f15820dc6b3711ee1d4164c8772313aea01a160772b0d03b057", 0x1d}], 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r4, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 6.403384193s ago: executing program 1 (id=10285): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) 6.403063843s ago: executing program 1 (id=10286): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 6.402885413s ago: executing program 1 (id=10287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.402543883s ago: executing program 1 (id=10288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffff7fffffffe}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0, 0x7, 0xff, 0x8000}]}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @remote}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'veth0_virt_wifi\x00'}) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, {[@hopopts={0x1d, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @echo_reply}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000cbed7b155c851f5800010800060cff07000008000000640101020057150000007f000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='svcrdma_send_pullup\x00', r0, 0x0, 0x2}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsmount(r1, 0x0, 0x82) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdfff7ff000000000800000030000280280003800c000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e00000000000000000004f29f4c3cf110ffd4c8e36b76414414eb1f8df61fdbe1fa66a0219ae03214e2e4a2584593af476e2785913263141eaa053616"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) 6.401628163s ago: executing program 1 (id=10289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x50) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) pwritev2(0xffffffffffffffff, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000580)="cf", 0x1}], 0x2, 0xc, 0x0, 0x16) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="f2435f01000880000000", 0xa, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000000f00)={0x8, {"86281245b7ac868c445b748333824541c70d0f75e05a7b36d76581f275c678b7a2a25beacb474be768b33864f84256c999e8bb5eb9cd05f007bd9f2f1b890acf4107163481758a74ad44bc66ae2246679a856a3fca55f9f2fcc45d07480119e12b3b1ee547a0c7da074d6f71b1f3ac893407a09499f20a743ab2547fc39e90d29eee23147d28a12159bcaee9e573411ba61271e35e48ed540313277fddbced6a3145ea8806ae33eb1160baabc9cae04b7bc2ff55c787b38f37ad3f75416044d210c9be54cd0c1e23f3ea313e409c7369e67bda49f0272dabc403d02baf08e8a6a6f87682c9001ecb1e6a92444324e6e4cad7d039389b94b6eb6b7b775923dc0356d4d67adaf8b81dd4de27a8f39bcf2474532906375ed69878e5680c6d7ffad9bd01ba0d513b9406750566d720a0a192685698b2e14ce55561982596830621654db1a07e892b111f1bf7a2fe63ff02238ca54c426c9016a0cc6778b4090bb5e28505d72e9e0475cb7f65b69a2c435bbb061a10cdbcf38e62478cdf59ba42f472ede9191720827b634406fdb2d10f50108bf4dacc15dd458464cab6421ca672dc5d0bd9bc9157bb094b77d683d19494d8adc4dc09b8b56cd4fe80a9406057ca75dd0daef1aebee3c555f9389b947ef46daec01227bcf82e009978856e43920eebee66d1b5b0a13382aae9dc21a67c5b3987f4d5716f189f7ac56d4773d9b27d55cefeb9b8386977ae77de3c69b28299fe6952d89a87b5d6f2927d579a8eaa8cf4854e01f142925d6bc8a9e4aa45bde5f147e6dbf3f86cf3ddbdd1e7e1c36a9e78b809b4093c589d9aac839a1b65d5f5c13057c45498aee308547193ee491e91894c9eea04eef31d5bfb41ebac374f4d7def957bb888193a4c3001572c61a5fbfe5e6204dc1507daf7157ff1d79b110c8e5aa947d2e426738320e436183cdcde9218a1295b429f52f2c820316565630d0c61c74aa3118a49b7cda87e1f85ea76c014cbaa24aa809074226ef15a330de1fe7d7da147e4b8321d77a978fc392450935cd1d490505d1988bc48626be284adb4fd60492ffe9df63796d269bade94e68c7f727cdb20a304b0db8018103dbafef917cd538040ebf8af5cb7537ecaf655a9c728a6a5a6a6d8cadcc4bc97360214736f5f97f1186f3e216e99d593b22e648beabd69a5f41738124750162a06aa4f684f8942eda4d00e880528fbf33e41d84b9506d29e4c50cbb8e67b19868a194305dd75a42162c58b9540644e582b32290a7faaa2ccf41d20af5197d977cd02386455f714e529fb5d3c8f3b1674debc775940fb27d1fef6458e7ac2e299183eff6a3765e396eb59401f5a41d53b711b45931138f5e8a78656c91c8443ab63e0a67cda2599661739e2d80001c7ac9d287fcfe89694c2ca5f1c7724755c4a0c8a35dc88369de96d95e17d52738b7f1154600abfd71cda87b9a641ae6d563a4e736d94515c7b35918d78023184c07968082fdb06c5be013f23b04ea89552e7fcbf640469da4f639ed5a772436132ff2945ed03da401547934bf2e90a4bba7b0f0e68eb7fbf2fd8bd9392fd7f8fc3efdd84ff1d6709427a561b7f86674192ad76d740429e6ea05a5323425d353e15a831170dc854de66e6b4bf31543e240e9316102370f15b9e9b39e8fadd8139789de26b7bf16d0a00503ec6950abf2a567b49d37ea7b1044fbf7fe2fe99000db12bb8a9c84b092269d28908b43b6046ed0d8abe9835298df07e02e2d387cb74b0a4505edf05dede01af6ef230f857f2d963bda9b7da782f6979e83de23d5b5b8d9826ea1d4d7db191e089c087aa9e84d8f0e21f61c2d10a7a2d65d17174ea2c8ddb25c433815ffc8026b521029a7122dff3864a07ad58a80ca3ba724128f821918c0c4d52c0d53e6b9fc0b75d63bba5cc1584d7faeb63246f13e5898288bb73059910f69be85dfc9b4f7cc1446d7d989f01a9db7d16eaba8983664fcadb3dbabf5ca4cc80086a441446002ced1f21f2d54caa458b7d27ebcf7e56f3e1a0ed13b8c1c27b9c0e2e5a0092b371fa422e98647e4731d4cb7aaff7a5214d4f9b32bb1d95bd221e14ad83a29c104a9ae5141a933b45fbaea5c1ad44cc98159ef5a0ae9f183fb4c918dfcc5ae49c2292241ea5ec7da789c334fdf3c42aaacb2ec0336e66b71f3402f7d59f01686f2dcb5c003ef4a6d7255555b361487d39c9dfe2ec73bf490b28b373fac7f222b4bb9a8ef82dd8f0bccc410ea6f963986097f9039c39cf7c1b0619ef44ed6ad702d7e9669d546b9e174129dbf77327d935a235b0d74625dd6ae5e1bac280fff6cd8bca31f611ae540c7d8aec44d9312cddf4c475f13e12080ad9b784dba9bcc9a7179e737090a2bc1c09d0eae2baa8b21ca89f308054f2fe91984865bd3c3363ca48dceceba88fc7cf2a661bce5d33be25456f7ad1f1874102464e3bd4bd2a4ec0a0d3b6ddc568946dfd65bc824ddef6bf53a8d0232ac2c55353c303832794f98cc96adc1aae42b5296324ba737d6793cc9700135e9642cfe9227a303efe4403f140d5eeea8aeab08a9edbb4fc255f804a6ec7cb6ab16aad4fa0715e771d34d286ee054028d9804a08a45ddc00eb46f50487426602a9d1284f9bd220eda8a9d18a909051f5769c8c25d2e0911fad675214e51445c12bed9188348ea78d8953b199bd4cd334b03607fdcba7b3c43dae64c73e00b55d83edd41940feeae9c400e64edf8f3698d131985211860f2de84c763be8409694021dae096fcaa6284e5a6869790c5ad54c6a76d58b83ac892d5019ec4dd19860f0419fbe6a13c41869adaf7f6ab2ed1371f3311d805c39f65e40919e8b7b11719d220d61ed05d0019694de23ad72cac2f8766d0aded0ebef53a6ebec6d6957f0d26f0530c5715214730f1b05c7d92eabc2148900bdeef4e035a3655141db08aa081fa7d3a9b289379fc16fcae453dbe6feedafa8fe45320cbbe9cce724e3a5efc7f2c0fed1bc3da85ad0e31796ac610bef2779b212cfcf14b1d2539db950c3bf5c2dbcc128cab6312016d780df421483b6d1c5b7de894208d5068d7a789f3847f3fa422fb03fa17bb760622062cdf9e23573a9a15a4ea5e44c5c607e48e22c6f674d4d9f6c00cafd98bf4f4d244fdeebffa034ef334ac11950278f0a9f29e3a1fa2ad45cb745462c88241ea4b77ec7a90e444e1c4957579e49968aa344dfa42b2579fd0ad40437e3b227e8a93cfeeca113593e1631d8e88aa948b086c2ddf21eb5f7080553438e2822b67134c85954ff7f9a3e3097e13fb0473135607442ab20330417cf4ff8c2b20a84630524f7b9cd139c8ca5386635d6159581c273b47706a8c341026c01c85aa1b476965201fd53327d1c23228b30ba10ee9d7b17aa0af74dbe109c2c430ecd58b5c49473a83b4eaa0db85a9ddcc6db90a0604547abacc6ed642165283c015f3da78c7b80b9c812c73d02e68d8c3f8dc2ac65ea63c8cfa3b45ec344737b3b4e8d1ee7f10e9ad8a20bf473207ffe1f7864ebd334626a100ad99029697edad74a6d01c04c57725e94d80227a0036b0a83daedec5da56cdc4a97e35d8e1b34401c9f30e46a337a78755dbecc0e91e4321f302962d0e9d392efbfc263ade0d70036e512b22a931db33f882ccd9489ffcdbc793ca3bf0560ba44411f59a9435cf9a95df7b1a01362561c136421972b89ee20f39c22ef81366956ef20fd7aab0967cb6bf4b92e343d77707d16cd1fd358f01c008ca1e300a9f1d0c337aee194759fa4ca2bf364554656cd0cd6bfce8a21234370bd0605707c52436e51e0610d2614659d006b45992391aab39c0d1faa5b49bd48098fb05e25a89005883bd3a3ca35995da5c4fb96c4d4bfca2d10d614428fed21e1bca042d25a34cfc8b59cea352f408e3c6bb37777edc7db9f4807f3c0e2ad50fa7c39ec90ba518f1a32d8dfa5e7c1e43d0d4e2a9e4f12be4084b8dcc1198c7800af2d4d5fe9dfc3aa5d380f5ce2cadf7f778720c7bf928ff3b196f8a2f1515d751d525376bfae695d8885d9cf2c55e097e15a3dcd0ac989903ba2009bfb433fe89af680b88d7c96116ff69c636ca148db455fed6dd87cb02e362f53939311141b7b7c0c275b2c68851b2163628013d272c0693d54a9716a026846c3d425e7d6008c67a700668ad123a50ec64dd32ec8d4c22bfd294a65e0faf719c742fd2afb1fc2def910293a6ef49f792073b5ea72bfa0e1b15c79da0d21ab5e5fd3854687fa21dca6a0bc217ddbc93c192210e7a2e5752f497d20044188235379b011c0e0ef81b35f233dda2bfc047044f4201f54dd75fcf3b4a3828e9100bf651f32a96e49277117fa4103718285f733180fa7ab60f1bec72501f5d436cadd372fd547b5b3b4d9f130d19823b95d3070d0ec5e521ec274c5b10b97b091fe8bf0e3530742ccf586c71a18a1ace61e57d741b79a732452ce71f82eea3a622001dace839dcaaaac2e32805c973e13dc170753ca7923c7460e99bf66e4583519a521301efa4f7631c6caf799eb90c3ababa2bc7e82de88a09fcafd1c7aeff3bbd198b56ec7caeac4446166803a85dd75a2222f0e681fb44ef71b7181a6513b1473d21090b67613a3a08ba32c3d12bc0340d3fe7750717b5f7622fd6dc8f83da9545e3c6681a5a9eae6ac9bc08e5522e930798d16afc04b341bd6f1cef177381bafcc8db26829e48ed4219b45a90aca65a3899bb98f4f3245bd35ecb90c318258993ac3053188670133902159d1be8ad3b413666f648321662b50dff8ad376bc050f1537d3d58ce58ae057f039ab1e26ade30d8a53744501b2024162dd6e2319efb19f0ce309a2352a02e5bd8f195989b305dbd99621c4132ccf6f112ec8bf0a9d4b9f8a528ee41199985586dd042e0baf3744d86fe9230d06f93d4c0237bcc66ac469dffbe6b797e21585779b38c5ee957340557b6a21049b1b23ae23068bc0dc836b64122849a305a1f779de92c6d5d77d552236328377ce1f53414973f7a02c615f9e64d50fde3067689873fec9d4c70a1316a2e5668d4e80ff601a0894c3cb17376b811ce83292e2c002c3ce617b23c2381772428cac640319b7652cbb529c4760ee1408a700eeb5ef20d37e7fabf72bb4baba816fe974ab1b1269b59e1dd4c6524264f5304d4c54f8eba24aa3cdc05441173d21bceca4b63a901922cb1a1cffd638113816cc1331a661a9e596729d214299779908ce119c53050ac285f75d25f33044e15d11b23fdc88a35a5e8211aa4a656f747b0b5de4b90f01e62416cabd7c854c9cb87b69889ab766d099a243dedfe3873e2bd48ef198642b416ac60c426b7a221604f3f7c320fd2214344d4141c002f65e9caa9ca19865bf51f46127ea8f44c72d95afd47d98f1fa55aeb26a483937bc5d5f19dad0493037632a76ee4250ff835191aac364e9030867effef5ee181dfd7c61c7b459fada77d78fa8a844cb338ee37cb6a51e35ed8880fcef5fcc3ee5e52bce9e631e9ccba0575904f1dae22cc505101e444e671407bbe431156da7bd3e79b881fabb71d7f315cc6eba892f77a9db6a9a3ece6a8520b5d91552b6ab6f2d145c62af71fd4724b20b1016395195a20e191c0713b1f010e36fb148839ce97876f7bfd6c03f576c2a06638126d21e3afc69f5fbb5d4f2ba100cc1f9c837cff9919e7a7dbafb782599ea7963d2ebb2ed296345d764af177d74cb2ddbe81bf19bf63921b356e44fb5d12ed198d0cc1291ea603642f2387569ed6da3987cb2ef3dea3aac9901c9ab29b71c0976d428251e63e5412f5047e4690d51cffa3e97cc5", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.004921442s ago: executing program 1 (id=10292): syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffb, 0x515d01) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x6, 0x5}, 0x1c) syz_emit_ethernet(0xf87, &(0x7f000001dec0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x3) 5.976737685s ago: executing program 33 (id=10292): syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffb, 0x515d01) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x6, 0x5}, 0x1c) syz_emit_ethernet(0xf87, &(0x7f000001dec0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x3) 3.915157167s ago: executing program 2 (id=10312): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 3.833482535s ago: executing program 2 (id=10314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 3.78289069s ago: executing program 2 (id=10316): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xcfdc}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 3.6727762s ago: executing program 2 (id=10319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffff7fffffffe}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0, 0x7, 0xff, 0x8000}]}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @remote}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'veth0_virt_wifi\x00'}) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, {[@hopopts={0x1d, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @echo_reply}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000cbed7b155c851f5800010800060cff07000008000000640101020057150000007f000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='svcrdma_send_pullup\x00', r0, 0x0, 0x2}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsmount(r1, 0x0, 0x82) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdfff7ff000000000800000030000280280003800c000180080001000800000018000180120002006d61785f62617463685f74696d65000004000100180001801400020073797a5f74756e00000000000000000004f29f4c3cf110ffd4c8e36b76414414eb1f8df61fdbe1fa66a0219ae03214e2e4a2584593af476e2785913263141eaa053616"], 0x5c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) 3.256273881s ago: executing program 2 (id=10325): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000230000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2.629253213s ago: executing program 4 (id=10333): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.400500435s ago: executing program 2 (id=10336): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[]) (fail_nth: 1) 2.324230282s ago: executing program 34 (id=10336): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[]) (fail_nth: 1) 1.645621859s ago: executing program 4 (id=10346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 1.605811933s ago: executing program 4 (id=10348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xe, &(0x7f0000001a40)=ANY=[@ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x70, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c06000000000000", 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r3, 0x58, &(0x7f0000000fc0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f00000025c0)=ANY=[@ANYRES8], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.543193819s ago: executing program 0 (id=10350): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.493514944s ago: executing program 0 (id=10351): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 1.401682793s ago: executing program 0 (id=10353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000fb53d901ad8ad18f53c717a291f30a3b135859b24d25e0a6f424900dd5b81ed5b7d7466b605a32a702f74c58f870fd0a2fe0a906ba5352cf1572242aff6157b5fb08d2da948211bd9ae7bf47fb2e76cb162264ae1e31f2d7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/436], 0x1fc}}, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x3ff, 0x0, 0x1}, &(0x7f0000000040)=[{}]) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001000), 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@minixdf}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@block_validity}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f0000003600)={[], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fowner_lt}, {@fowner_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x33, 0x62, 0x30, 0x31, 0x35, 0x30], 0x2d, [0x39, 0x30, 0x34, 0x65], 0x2d, [0x61, 0x33, 0x31, 0x62], 0x2d, [0x38, 0x64, 0x38, 0x31], 0x2d, [0x65, 0x66, 0x63, 0x38, 0x63, 0x37, 0x31, 0x62]}}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'minixdf'}}, {@fowner_eq}, {@flag='rw'}]}, 0x7, 0x44f, &(0x7f0000000600)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="640100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000580)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00100001000010028bd700000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000001ffd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20f2651bf4b992194f33ca299c68fe8000000000000000000000000000bb000000946c000000fc000000000000000000000000000000090000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000200000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008000000000020004060c00000000000000b30003006465666c6174650000000000000000000000000000000000000000000000000000000000000000001601d42e000000000000000000000000000000000000000058030000f44826d697b2af005909e7c65fc3936ae4e6c72f1c756e1b8dc3f98ea3a4c1bcf86570f8dcb52b2a6dfd9c089946f0b791232a3f513f913836912c8691166343b2f333b2b082c965d4ced5b38e2222d6fbdbe8026c47810cc3056f469256f58537210be1d2a55f1ce266f2001c0014007374726565626f6735313200"/424], 0x1f0}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) 1.251699918s ago: executing program 5 (id=10354): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='iocost_iocg_forgive_debt\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) unshare(0x28000600) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x49200, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x80) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r2}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) dup(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x94) r6 = syz_open_dev$vcsa(&(0x7f0000000480), 0x9, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.213868281s ago: executing program 5 (id=10355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) 1.198182553s ago: executing program 5 (id=10356): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000230000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 1.055448567s ago: executing program 5 (id=10357): mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x40c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0700000004000000005a98e20a31286888c801000006000000280000004a6fde244f5daf18fec0a5424f137ef65fd7f065ec2d0317d8e127dbef4be553e043d352a40f3a5d27b6557d5545f356519436c2aba14faad399bdd19eb344b9b99c3d916636de49f4ba45f5bc5706f9504348f42fe042fc10889718f7b5fa96ba05faa1d24ee63a6dcf2ac4c368eadc95e1af28f867f566e0bce792f4f80a635c4de88b8929576674b418569089eaa83d7b4d8a3dd45835d597abe28d59e26318eccea80d156dd4e4e3cbf855fea389663cbe347b0b00000049281d9b1044", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001b00)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x20000004007b1}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe9}}, {@abort}, {@grpjquota_path={'grpjquota', 0x3d, './file1/file0'}}, {@noquota}, {@stripe={'stripe', 0x3d, 0x154}}], [{@smackfsfloor}, {@obj_user}, {@flag='sync'}, {@smackfsfloor}]}, 0x1, 0x571, &(0x7f00000022c0)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlOaWLA92IsXKYKIBfGud4/Ff8C/oqCFIiXowcvKbGbTTbObTdNtsu1+PjDhfXdm9p1nZp6Xd/LusgEMrLHsTyHi5Yj4Jok4HBFJvm448pVjq9utPLw+nS1J1Ouf/pU0tsvqzfdq7ncwr7wUEb99FXGysLHd6tLyXKlcThfy+nht/sp4dWn51KX50mw6m16enJo68/bU5HvvvtOzWN84/8/3n9z98MzXx1e+++X+kdtJnI1D+brWOJ7CjdbKWIzl52Qkzj624UQPGusnyW4fANsylOf5SGR9wOEYyrMeePF9GRF1YEAl8h8GVHMc0Hy279Fz8HPjwQerD0Ab4x9e/d9I7Gs8Gx1YSdY9GWXPu6M9aD9r49c/79zOlujd/yEAurpxMyJODw9v7P+SvP/bvtNb2ObxNvR/sHPuZuOfN9uNfwpr459oM/452CZ3t6N7/hfu96CZjrLx3/ttx79rk1ajQ3ntf40x30hy8VI5zfq2/0fEiRjZm9UnYn/HNs6s3Kt3Wtc6/suWrP3mWLDTtMpMqVZ6ipDXeXAz4pW2499k7fonba5/dj7Ob7GNY+md1zqt6xL/M1f/KeL1ttf/0alPNp+fHG/cD+PNu2Kjv28d+71T+7sdf3b9D2we/2jSOl9b3ezd2s8d/bjv37TTHuvij3bxF+4P712/T3b/70k+a5T35K9dK9VqCxMRe5KPN74++WjfZr25fRb/ieOb93/t7v8s2z/f7FS0uHX051e3FH+36/8MJlmz+Gee6Po/eeHeR1/8sP34s+v/VqN0In9lK/3fVg/wac4dAAAAAAAA9JtCRByKpFBcKxcKxeLq5zuOxoFCuVKtnbxYWbw8E43vyo7GSKE503245fMQE/nnYZv1ycfqUxFxJCK+HdrfqBenK+WZ3Q4eAAAAAAAAAAAAAAAAAAAA+sTBDt//z/wxtNtHBzxz3X7yO7mxQwcC7LiuP/nfi196AvpS1/wHXljyHwaX/IfBJf9hcMl/GFzyHwaX/IfBJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgp86fO5ct9ZWH16ez+szVpcW5ytVTM2l1rji/OF2crixcKc5WKrPltDhdme/2fuVK5crEZCxeG6+l1dp4dWn5wnxl8XLtwqX50mx6IR3ZkagAAAAAAAAAAAAAAAAAAADg+VJdWp4rlcvpgoLCtgrD/XEYy3MRfXEYL0pht3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjkvwAAAP//6pc2fQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41091aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e7890200000065ccd19545b778fb470ef7c7247c631882fe3cee1ad627ad729a6854be4caee94165189cececc6ed604084f0de672a6143348dff41ef68fb47af35228b6eeb54e1afe8564aa6b18234add638dfecef8df0f90b274de0edd802c6295f55af1965e8904d0bbe9083e2264eb82d0704440bd01c8ee32d09636bef65fa39451137ba", 0xf1}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000002840)="3b9eccc918ce8c50894cb802b04e9492b64a02d85d3ed05eac49318868ad13e4fa9e2f1b165dfcc79e43ed30bb0c212bebb71afc79347f2f1a90e936a487e1ce171789626d34ffa8e3b4415ad869955133f81fab7f450d7ef6df7bf6a16cc39fd78e88662ffd1c3b31ffe836682b1ad9c331a068a75d12fd346d77f5cdacee9fee2203a321c260b0b5fdc8b5d7d43148f4b0fb550dd9d8746f0a0444cfa52af90a966921f9cb48b0c99727166a2f59c12dae2fcc4d891258bd723b5fd1fcb4cb219c87fadebe2582802ef18165f5ff67ba0d4eb4d3ef1f80ba9dff1a74dd5874b3d8017ff61b5174d9660e54f2b5f94f29f6665567b2ca6d0549a500a428ce29b197f754f8e3b6c7dc21260ce97551074886667837db75c9a21cdf92b14dcb2e1f997bab3bf1902b8d8e9eb238c021fdbe48675473dac385e2fada25f767ce5e7576c2dc496841123c81314f100e0648405f0ca9b5aa012d9316f3945e613aba10d1fbc2917143ed606c5513394343c9fac6f95ee678031ba5f4a81d8c2ae0d31c5711c91845f07b0add2bb4bd0f700217044582adf1850b0af5f04b63906918b7312fc3a800d67d8293604321633c41153f83662b2cbec354cf9c33e9eaa8ab2c5e4d86f82d379e98ad8d749595829b548ad77596448bf718c5e52a7dac04f62fde8ab1cc55ee5b6fd57327c8e678c1c8f9b8c235c132faffc553d54253f67d40075d91b7abaa303e5844ee31871fcdded3d8de8df952ae53e60d73e57267117129a4b42df34faa3287bb1c475d9ef904b7a4d33f1f8014e59905c3dc145e3974d71487ce05c9149fb4f9788ef0f519151d82391d783df5753819a0d967d842e60d28257741fb8b794b18a4e2f2f4f10412aa580062d0ef3691f4bdc14d283d672ae10fbbe23fa15f9225642aad56cc8a36538afe97750a0bf313cf3b9fdd881aa067b3b6ad9a69c04b50c9b4f8e29c11d7dcaf08b57ecd5cfd8a01b0e50313d09ea6b3634867f0c23c06055e04c36bddcdc6f4e30b2b6c0b0fa25a20843570bd582df937f7f48cd8e07abcfeaef4f8a72b34978ba5c95d65731943cdf2df8357311bb28d7d72fb9226dcbd059b14242c6fd4ab1ac90367a27ab715ebe553416966ceb79db37cd2dc45687269e4da211fbfdd77a44c730a4732a12ff99fd151d205379bee91935a7bf4eef879d564872fdb2d7c399972ce5d44b59ea05d19a6b00c717b1dd3401a169b4402152b6f21c84c865f00ed0a9da758decaf1ad20138b80bee54a918d5d7dd5432c7ee34ae786cf7f55ea7f67229c39b81cccf80ccb424d139df240a9b18b3c4223de42e71ee7264a1c5db8da2d7fb3dfae2befb2f26e0c996d204ba3df39b111c445f3affed9c9fc8c2b67630de56b5a922f3fd7e0c2ef97df3ad486354937c4606a91874c7403dadaeabd03fe82c92cde4d67c6ac2ad7eedc9761224bf0c6b73ba60934f5c2db9846de4c41c6cb2f5ac6a7ad47418279f6cdd951679c1530ee4dab6d81a8cb41db64fc28ab9598c26fe51f6ddb0900a971aacc92a7e2dfbb596a1571609a4b8bc86c5c218b9220ceca304b7052a58e8c6ce427e4c9b127a133e625c02bf77a89ebff746f829401230f2a757c3ce04a6d01b35350973d24637526278fa724cb3053fd04cba673f682992041dc1cbebe9b574e5ab39307d695b2470cc21122e9c587301630351eeaa5dc1c8bb685ce2b0f4cc25d584354799858c2a11fe1b70518659acff13ad9702e6fd3116d311628bbd9b86f6a09c2a00ad08440860b621716799576b0de92285d0700004719a1eddbb691878526c34ad392e1d72f04d7830686f792152e7e497bc76721aa1c0493698efb8f463d0403d134b9ca6b19240e496edad804be73acb88b0fd1e0de3f00f83a135cf1b58376137e6e93136682343440fd4f96f00d56f9ff265cf5f4b8cc663d56eace1c1eb9fc8bcfcc5f947f14633886ae2b4c6b2bdeb71fcc7802945e484188b3f0425fd96996780f4f9e5ba028e5a600c65bdf6fc6936fc5f9e1792a02cb428f97262167e47a13f6a6634b99eb1791e7cd82f14c8c3353a52569c12e5b40a404564b4cba2fa7f247fbd74e1ab16f4caf68f6ebad58634970c1336d38c3feaf2b5c4eb8afb45aedb65c54b7e6a811c337d68ca5fc58279d7c4c524eb02bb36cd61f6269ce6b81e542e86500c837f7144962b2a6772981bed18a2173e41d73a74235f468305b3f0d5bd0a8f6ce90f6ba63f25322705d6464f9a24cdc13a528a9ae5f3907aa7018f5a1582c5242dbd325d05fef384da2f2cbd65ac0905a2311d75f72e2e1d30d34a62f91ebb79464ad1ca22b94e84d14c2337d13a017f80b3011d715c8629b1a2b638d4e20cdd639ad3db15e85db21494fb5e6ea599f0412d2b238a8a93b9bc930a9e126942c04f26e27631a2a46ef3115c683494bf2d805d03f76b07ea99380725914d01de34b1a5ab51487ea4c70c9591d6f84db21bb1c65c29d47a61b4e227e8bd917e6ff9d8cc1027bd2cf453b49d59cc9d21b13533df66c76cade633aaea0345f8d6e3b14375cc99d0b3e4c0eab870c9bc7b6911014fa556c8db62c3fcfec23deb242278c49b743987d0f65969f2e517b8de7d0b2a74865246cb4f32d40e1a4ea050563f28d3b9f598cf16265b270183cbaf91a2ef96c5aaaf7223a0bdf83c9fbdb324497e11aa4ed8ef02c5c9b7556504c957f2123603c62df3098ba82cd8d9f9738af6067e509159689741a262afd436b8d21c6104d092e66e2fbefa0b7e2c84c6d8ed44410224929b5ff349bef8d9ed6df6193424858f58039e4437b01e12517c86056108c7e6bc21caa884b9f3fd116657b2c8ca30ea557e6c4b60641686d0edf7c49a1c26589f82715e2e1914385bb91100169cf509aa1f3372ab65ccb422d1db5ff6acfde3af9bc2aef6e01455ac94f9d9655dc6020e858f97bb69dce077215d1427f61aabe63786384a2195ce411207aea8af9e3a0e736bf1af08ce4aecf45ce79c46a7f3cb111b14c54de5ef13c54b68fa5fa11bfbbf6bfcde697b300a2bbc152260db6bd5d9e9a648d9e54531c4e16610b885dd9e2f620879ca8d126f843630f17ddc42fb502a0f51ee6c630eb734c54891094684f9e34e5331ccb5570bed0fc99361e681e9e2f9ee16c8d3d89ddc7b1e51c70942b0a890d69411f1e8a8e73c6415eeb848a6987f806af7ef5c62ec16b862164943325b8c5b3ae2d8df2e33bb5dac9546c2b32070d05bb2753c6ade48f1c54fb0e3333c2de138a736a19e895037090336bc5e7e3683f7cdf148d20f5bbcfaa458fb9a24faa62c7151577ac9ab8f10af0e70b35c8c2d5d30c53e394d1eda842fef1647ec686022df373ca10be06ab8d74b56f2c7108f08d56b6c9e3980c6f30e14a1a154c5fec893deb607868eeeb6f981cfd08056b54f3327bb733cbd64c7c79447489dd6950b07c079544da5f184e21dbe9478dc0b5ed245e0dc9f60b577d0230e4a92fe1d7c2d1cb354f65da8f28692159b103e6564c58854f8bedc969f4e1158b58a90f21aa67686fcd74a8cc8909fe8557662582bf916cb409af96267dc0cbb5232309c5934e152e758f28518f37fa1da83fdfefb0f2991a13aa4c03e4f8ba4e2721a7c5e78474c05581299f3e9d24c433685dcea029494a7b7bd74cc986b3a4a92b5f6a21a2f7dcee7605474e1508ab632a9a4aa1992c7bf3d9265bffb047cdd0ebce043e411a3260de73af0dcbf6197a60a81846b3ae05db1227d5fc2815a9a7572764bbcf83d47fe202ffff6bda074405bb6132e3063bfd0ebdca4b8f8074f784bb0823fba59188764a37f7", 0xa93}], 0x3}, 0x20000044) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x200, 0x8002}, 0xfd6f) 918.46644ms ago: executing program 0 (id=10358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00"], 0x3c}}, 0x0) 866.922866ms ago: executing program 0 (id=10359): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = gettid() tkill(r1, 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 722.12462ms ago: executing program 0 (id=10360): syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffb, 0x515d01) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f00000025c0)=ANY=[@ANYRES8], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 531.058788ms ago: executing program 4 (id=10363): perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0xd, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x8340, 0xc8, 0xffffffff, 0x0, 0x0, 0x341, 0x0, 0x0, 0x0, 0x0, 0xb6e}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32, @ANYBLOB="0000180000103100000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 121.261668ms ago: executing program 4 (id=10364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x20, 0x5, 0xffffffff, 0x0, 0x4, 0x0, 0xff, 0x28, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x45}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 0s ago: executing program 4 (id=10365): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): idraw0: USB HID v0.00 Device [syz0] on syz1 [ 430.405271][T30794] fido_id[30794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 430.436814][T30799] loop5: detected capacity change from 0 to 7 [ 430.477308][T27720] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 430.509974][ T1036] hid-generic 0003:0004:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 430.530008][T27720] EXT4-fs (loop2): Remounting filesystem read-only [ 430.536639][ T37] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 430.540002][ T407] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 430.581657][ T407] EXT4-fs (loop4): Remounting filesystem read-only [ 430.588338][ T12] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 430.594237][T30802] fido_id[30802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 430.663271][ T1036] hid-generic 0003:0004:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 430.698221][T21261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.793075][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.839831][T30817] loop2: detected capacity change from 0 to 8192 [ 430.936095][T30817] loop2: p1 p3 < > p4 < p5 > [ 430.940826][T30817] loop2: partition table partially beyond EOD, truncated [ 430.983531][T30817] loop2: p1 start 67108864 is beyond EOD, truncated [ 430.990200][T30817] loop2: p3 start 100859904 is beyond EOD, truncated [ 431.024672][T30817] loop2: p5 start 67108864 is beyond EOD, truncated [ 431.182098][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 431.292400][T30833] 9pnet_fd: Insufficient options for proto=fd [ 431.465445][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 431.465462][ T29] audit: type=1326 audit(1761574560.724:45888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.495316][ T29] audit: type=1326 audit(1761574560.724:45889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.522205][ T29] audit: type=1326 audit(1761574560.784:45890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.545875][ T29] audit: type=1326 audit(1761574560.784:45891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.569671][ T29] audit: type=1326 audit(1761574560.784:45892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.593293][ T29] audit: type=1326 audit(1761574560.784:45893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.617247][ T29] audit: type=1326 audit(1761574560.784:45894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.640870][ T29] audit: type=1326 audit(1761574560.784:45895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.664532][ T29] audit: type=1326 audit(1761574560.784:45896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.688211][ T29] audit: type=1326 audit(1761574560.784:45897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30837 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 431.746766][T30838] netlink: 'syz.4.9839': attribute type 30 has an invalid length. [ 431.920681][T30861] loop4: detected capacity change from 0 to 2048 [ 431.979240][T30861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.056998][T30861] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.340502][T21261] syz_tun (unregistering): left allmulticast mode [ 432.372486][T30880] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9849: bg 0: block 345: padding at end of block bitmap is not set [ 432.392324][T30880] EXT4-fs (loop4): Remounting filesystem read-only [ 432.399209][ T37] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 432.504407][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.514799][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.546367][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.597225][T30886] hub 2-0:1.0: USB hub found [ 432.603803][T30886] hub 2-0:1.0: 8 ports detected [ 432.611479][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.621902][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.740792][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.751151][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.794880][T30911] loop1: detected capacity change from 0 to 2048 [ 432.827665][T30911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.863804][T30911] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.013233][T30913] hub 2-0:1.0: USB hub found [ 433.057835][T30913] hub 2-0:1.0: 8 ports detected [ 433.130700][T30922] loop4: detected capacity change from 0 to 512 [ 433.216472][T30922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 433.226402][T30922] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 433.326402][T30923] __nla_validate_parse: 21 callbacks suppressed [ 433.326418][T30923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9867'. [ 433.376465][T30923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9867'. [ 433.399547][T30913] loop4: detected capacity change from 0 to 512 [ 433.408222][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.418699][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.430356][T30913] ext4: Unknown parameter 'smackfshat' [ 433.502502][T30888] chnl_net:caif_netlink_parms(): no params data found [ 433.560217][T30922] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9866'. [ 433.627076][ T3369] hid_parser_main: 80 callbacks suppressed [ 433.627098][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.640465][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.648058][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.655532][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.663043][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.670561][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.678579][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.686123][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.693581][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.701029][ T3369] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 433.716472][T30920] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9864: bg 0: block 345: padding at end of block bitmap is not set [ 433.731401][ T12] bridge_slave_1: left allmulticast mode [ 433.737164][ T12] bridge_slave_1: left promiscuous mode [ 433.742840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.750554][ T3369] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 433.781000][ T12] bridge_slave_0: left allmulticast mode [ 433.786727][ T12] bridge_slave_0: left promiscuous mode [ 433.790279][T30920] EXT4-fs (loop1): Remounting filesystem read-only [ 433.792476][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.826335][T30920] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.1.9864: cleanup dec ref error -117 [ 433.902828][T30958] FAULT_INJECTION: forcing a failure. [ 433.902828][T30958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.916043][T30958] CPU: 0 UID: 0 PID: 30958 Comm: syz.0.9874 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 433.916231][T30958] Tainted: [W]=WARN [ 433.916240][T30958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.916256][T30958] Call Trace: [ 433.916264][T30958] [ 433.916273][T30958] __dump_stack+0x1d/0x30 [ 433.916296][T30958] dump_stack_lvl+0xe8/0x140 [ 433.916316][T30958] dump_stack+0x15/0x1b [ 433.916335][T30958] should_fail_ex+0x265/0x280 [ 433.916382][T30958] should_fail+0xb/0x20 [ 433.916455][T30958] should_fail_usercopy+0x1a/0x20 [ 433.916481][T30958] _copy_from_user+0x1c/0xb0 [ 433.916512][T30958] __sys_connect+0xd0/0x2b0 [ 433.916554][T30958] __x64_sys_connect+0x3f/0x50 [ 433.916636][T30958] x64_sys_call+0x2c0c/0x3000 [ 433.916658][T30958] do_syscall_64+0xd2/0x200 [ 433.916681][T30958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 433.916785][T30958] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 433.916875][T30958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.916903][T30958] RIP: 0033:0x7f3f5200efc9 [ 433.916922][T30958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.916944][T30958] RSP: 002b:00007f3f50a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 433.916968][T30958] RAX: ffffffffffffffda RBX: 00007f3f52265fa0 RCX: 00007f3f5200efc9 [ 433.916982][T30958] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 433.917076][T30958] RBP: 00007f3f50a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 433.917090][T30958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.917102][T30958] R13: 00007f3f52266038 R14: 00007f3f52265fa0 R15: 00007ffe23b95a38 [ 433.917121][T30958] [ 433.959547][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.169597][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.183848][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.196459][ T12] bond0 (unregistering): Released all slaves [ 435.207849][ T12] bond1 (unregistering): Released all slaves [ 435.216742][ T12] bond2 (unregistering): Released all slaves [ 435.225992][ T12] bond3 (unregistering): Released all slaves [ 435.324241][T30977] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9873'. [ 435.365494][T30993] 9pnet_fd: Insufficient options for proto=fd [ 435.376578][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.384187][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.399521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.407024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.445794][T30999] loop0: detected capacity change from 0 to 2048 [ 435.480399][ T12] veth1_macvtap: left promiscuous mode [ 435.486221][ T12] veth0_macvtap: left promiscuous mode [ 435.491784][ T12] veth1_vlan: left promiscuous mode [ 435.498453][T30999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.511092][T30999] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.569521][T30999] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9883: bg 0: block 345: padding at end of block bitmap is not set [ 435.598093][T30999] EXT4-fs (loop0): Remounting filesystem read-only [ 435.622009][T30999] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.0.9883: cleanup dec ref error -117 [ 435.643935][T31000] SELinux: security_context_str_to_sid (Zh}{݌ʉ_ Fg+o6XVp/Fպbu>N2#׏"/󰅐?L*n#]2F>Qy䧟 1iG7(ެtqZ갴"9M`|S [ 436.724149][T31060] __dump_stack+0x1d/0x30 [ 436.724224][T31060] dump_stack_lvl+0xe8/0x140 [ 436.724247][T31060] dump_stack+0x15/0x1b [ 436.724317][T31060] should_fail_ex+0x265/0x280 [ 436.724342][T31060] should_fail+0xb/0x20 [ 436.724361][T31060] should_fail_usercopy+0x1a/0x20 [ 436.724387][T31060] _copy_to_user+0x20/0xa0 [ 436.724419][T31060] simple_read_from_buffer+0xb5/0x130 [ 436.724494][T31060] proc_fail_nth_read+0x10e/0x150 [ 436.724586][T31060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.724626][T31060] vfs_read+0x1a8/0x770 [ 436.724703][T31060] ? radix_tree_lookup+0xfa/0x140 [ 436.724738][T31060] ? __rcu_read_unlock+0x4f/0x70 [ 436.724791][T31060] ? __fget_files+0x184/0x1c0 [ 436.724821][T31060] ksys_read+0xda/0x1a0 [ 436.724852][T31060] __x64_sys_read+0x40/0x50 [ 436.724944][T31060] x64_sys_call+0x27c0/0x3000 [ 436.724973][T31060] do_syscall_64+0xd2/0x200 [ 436.725064][T31060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 436.725099][T31060] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 436.725137][T31060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.725218][T31060] RIP: 0033:0x7f3f5200d9dc [ 436.725237][T31060] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.725306][T31060] RSP: 002b:00007f3f50a6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.725331][T31060] RAX: ffffffffffffffda RBX: 00007f3f52265fa0 RCX: 00007f3f5200d9dc [ 436.725347][T31060] RDX: 000000000000000f RSI: 00007f3f50a6f0a0 RDI: 0000000000000003 [ 436.725362][T31060] RBP: 00007f3f50a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.725401][T31060] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 436.725415][T31060] R13: 00007f3f52266038 R14: 00007f3f52265fa0 R15: 00007ffe23b95a38 [ 436.725435][T31060] [ 436.966801][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.996049][T31065] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9898'. [ 437.011163][T31074] loop5: detected capacity change from 0 to 7 [ 437.088434][ T29] audit: type=1326 audit(1761574566.344:46078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.131960][ T29] audit: type=1326 audit(1761574566.344:46079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.155630][ T29] audit: type=1326 audit(1761574566.344:46080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.179270][ T29] audit: type=1326 audit(1761574566.344:46081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.202984][ T29] audit: type=1326 audit(1761574566.344:46082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.226580][ T29] audit: type=1326 audit(1761574566.344:46083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.250265][ T29] audit: type=1326 audit(1761574566.344:46084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.274056][ T29] audit: type=1326 audit(1761574566.344:46085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.297813][ T29] audit: type=1326 audit(1761574566.354:46086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31081 comm="syz.3.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2a79efc9 code=0x7ffc0000 [ 437.355428][ T3409] hid-generic 0003:0004:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 437.438546][T31082] loop3: detected capacity change from 0 to 512 [ 437.504919][T30888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.517017][T30888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.536530][T30888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.547033][T31082] EXT4-fs (loop3): 1 orphan inode deleted [ 437.553267][T31082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.579321][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9905'. [ 437.588413][T31096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9905'. [ 437.606813][T30888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.618097][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.633968][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9905'. [ 437.642871][T31096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9905'. [ 437.735780][T31111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9907'. [ 437.760302][T31117] netlink: 'syz.3.9909': attribute type 1 has an invalid length. [ 437.826061][T30888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.850718][T30888] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.862425][T27720] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.869554][T27720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.888715][T27720] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.895838][T27720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.929744][T31128] loop5: detected capacity change from 0 to 7 [ 437.944709][T31117] bond3: (slave veth3): Enslaving as an active interface with a down link [ 437.962023][T31129] bond3: entered promiscuous mode [ 437.967291][T31129] bond3: entered allmulticast mode [ 437.983777][T31129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.170258][T31162] loop5: detected capacity change from 0 to 7 [ 438.267896][T30888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.317057][T31185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31185 comm=syz.4.9923 [ 438.321817][T31169] hub 2-0:1.0: USB hub found [ 438.350590][T31169] hub 2-0:1.0: 8 ports detected [ 438.395913][T31193] __nla_validate_parse: 7 callbacks suppressed [ 438.395932][T31193] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9927'. [ 438.412922][T31194] loop3: detected capacity change from 0 to 512 [ 438.431626][T31194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.441540][T31194] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 438.461212][T31192] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.9926'. [ 438.520447][T31207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9929'. [ 438.533341][T31169] loop3: detected capacity change from 0 to 512 [ 438.555435][T31207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9929'. [ 438.565239][T31169] ext4: Unknown parameter 'smackfshat' [ 438.580113][T30888] veth0_vlan: entered promiscuous mode [ 438.592534][T30888] veth1_vlan: entered promiscuous mode [ 438.631764][T31218] loop4: detected capacity change from 0 to 2048 [ 438.641272][T30888] veth0_macvtap: entered promiscuous mode [ 438.664959][T31225] loop5: detected capacity change from 0 to 7 [ 438.688460][T30888] veth1_macvtap: entered promiscuous mode [ 438.714485][T31169] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9924'. [ 438.719098][T31229] loop1: detected capacity change from 0 to 2048 [ 438.751811][T30888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.778033][T31218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.785381][T30888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.821860][T27720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.834975][T31218] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.850537][T27720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.853956][T31229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.880742][T31218] EXT4-fs (loop4): shut down requested (2) [ 438.886852][T31229] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.909039][T27720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.922807][T27720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.946325][T31229] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9934: bg 0: block 345: padding at end of block bitmap is not set [ 438.952987][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 438.972391][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 438.981313][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 438.998320][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 439.008095][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 439.018703][T31246] loop5: detected capacity change from 0 to 7 [ 439.025044][T31218] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 439.037868][T31229] EXT4-fs (loop1): Remounting filesystem read-only [ 439.060798][T31229] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.1.9934: cleanup dec ref error -117 [ 439.094980][T31254] 9pnet_fd: Insufficient options for proto=fd [ 439.111164][T31256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9941'. [ 439.127819][T31256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9941'. [ 439.147900][T31218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9932'. [ 439.161885][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.211807][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.258813][T31264] loop1: detected capacity change from 0 to 512 [ 439.277486][T31266] loop2: detected capacity change from 0 to 2048 [ 439.287550][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9946'. [ 439.297831][T31264] EXT4-fs (loop1): 1 orphan inode deleted [ 439.304289][T31264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.321003][T31270] hub 2-0:1.0: USB hub found [ 439.322634][T31266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.337335][T31270] hub 2-0:1.0: 8 ports detected [ 439.347404][T31266] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.369271][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.379516][T31266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9947: bg 0: block 345: padding at end of block bitmap is not set [ 439.396303][T31266] EXT4-fs (loop2): Remounting filesystem read-only [ 439.410040][T31266] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.2.9947: cleanup dec ref error -117 [ 439.426251][T31280] loop5: detected capacity change from 0 to 7 [ 439.476087][T31282] netlink: 'syz.0.9952': attribute type 39 has an invalid length. [ 439.484629][T30888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.494823][T31284] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 439.559528][T31289] 9pnet_fd: Insufficient options for proto=fd [ 439.571032][T31293] loop4: detected capacity change from 0 to 1024 [ 439.587573][T31293] EXT4-fs: inline encryption not supported [ 439.614475][T31293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.621160][T31293] EXT4-fs: Ignoring removed bh option [ 439.633360][T31293] /dev/loop4: Can't open blockdev [ 439.727778][T31305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9962'. [ 439.765392][T31307] loop5: detected capacity change from 0 to 7 [ 439.779729][T31298] SELinux: security_context_str_to_sid (PJNw;) failed with errno=-22 [ 439.830919][T31311] loop1: detected capacity change from 0 to 2048 [ 439.855190][T31311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.889442][T31311] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.003215][T31320] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9965: bg 0: block 345: padding at end of block bitmap is not set [ 440.044435][T31320] EXT4-fs (loop1): Remounting filesystem read-only [ 440.051147][ T31] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 440.121489][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.144313][T31323] loop3: detected capacity change from 0 to 512 [ 440.191350][T31323] loop3: detected capacity change from 0 to 256 [ 440.210738][T31323] FAT-fs (loop3): Directory bread(block 1285) failed [ 440.239894][T31323] FAT-fs (loop3): Directory bread(block 1285) failed [ 440.294648][T31323] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 440.357148][T31335] sd 0:0:1:0: device reset [ 440.426970][T31338] hub 2-0:1.0: USB hub found [ 440.437387][T31342] loop5: detected capacity change from 0 to 7 [ 440.453915][T31338] hub 2-0:1.0: 8 ports detected [ 440.464980][T31338] loop1: detected capacity change from 0 to 512 [ 440.475515][T31338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 440.485550][T31338] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 440.563253][T31338] loop1: detected capacity change from 0 to 512 [ 440.576540][T31346] hub 2-0:1.0: USB hub found [ 440.579124][T31338] ext4: Unknown parameter 'smackfshat' [ 440.588355][T31349] tipc: Started in network mode [ 440.593256][T31349] tipc: Node identity 4, cluster identity 4711 [ 440.599507][T31349] tipc: Node number set to 4 [ 440.604619][T31346] hub 2-0:1.0: 8 ports detected [ 440.681237][T31355] syzkaller0: entered promiscuous mode [ 440.686789][T31355] syzkaller0: entered allmulticast mode [ 441.021731][T31362] SELinux: security_context_str_to_sid (8oې>T6lt&6F_}^jAis?";Wa&!yDBcJ[ \b:'//rgT.KxqJe6+zbfRhK ru涠aVT萫9@[/RvIrFW‘-qT: =DŽ0(Z98*E e\+XAV(~*K; Jj) failed with errno=-22 [ 441.085847][T31375] sd 0:0:1:0: device reset [ 441.495448][T31383] macvtap2: entered allmulticast mode [ 441.513061][T31383] batman_adv: batadv0: Adding interface: macvtap2 [ 441.519731][T31383] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.561040][T31383] batman_adv: batadv0: Interface activated: macvtap2 [ 441.617871][T31383] hub 1-0:1.0: USB hub found [ 441.624598][T31383] hub 1-0:1.0: 8 ports detected [ 441.644728][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 441.644745][ T29] audit: type=1326 audit(1761574570.894:46362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31382 comm="syz.4.9989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 441.674687][ T29] audit: type=1326 audit(1761574570.894:46363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31382 comm="syz.4.9989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 441.790153][T31396] hub 2-0:1.0: USB hub found [ 441.795014][T31396] hub 2-0:1.0: 8 ports detected [ 441.808077][T31396] loop3: detected capacity change from 0 to 512 [ 441.820257][T31396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 441.830254][T31396] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 441.844731][T31396] loop3: detected capacity change from 0 to 512 [ 441.852125][T31396] ext4: Unknown parameter 'smackfshat' [ 441.894939][ T29] audit: type=1326 audit(1761574571.154:46364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.1.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76642efc9 code=0x7ffc0000 [ 441.918766][ T29] audit: type=1326 audit(1761574571.154:46365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.1.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe76642efc9 code=0x7ffc0000 [ 441.942264][ T29] audit: type=1326 audit(1761574571.154:46366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.1.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76642efc9 code=0x7ffc0000 [ 441.965956][ T29] audit: type=1326 audit(1761574571.154:46367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.1.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe76642efc9 code=0x7ffc0000 [ 441.989700][ T29] audit: type=1326 audit(1761574571.154:46368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31391 comm="syz.1.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76642efc9 code=0x7ffc0000 [ 441.990847][T31398] SELinux: security_context_str_to_sid (غѺ [ 441.990847][T31398] p _jr\5FܘƑ|f֟.J#:IJ8=:>WXJ~S7\ǤjF_D{suu͹ {Xې g^Q!&kbU憫e ]q}ZrQe <=ro[aN$(<5܉ޅ++}Y][dzv4;;`xKa%e.ٯm$hrmuxf3 [ 449.193899][T31721] Hnޥn$ @gޞrb$l&a[= [ 449.193899][T31721] ǬzX) failed with errno=-22 [ 449.435894][T31728] netlink: 324 bytes leftover after parsing attributes in process `syz.1.10112'. [ 449.489681][T31728] hub 2-0:1.0: USB hub found [ 449.496482][T31728] hub 2-0:1.0: 8 ports detected [ 449.511548][T31728] loop1: detected capacity change from 0 to 512 [ 449.519664][T31728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 449.529570][T31728] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 449.589753][T31728] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10112'. [ 449.763487][T31736] 9pnet_fd: Insufficient options for proto=fd [ 449.831875][T31739] sd 0:0:1:0: device reset [ 449.860609][ T3490] hid_parser_main: 107 callbacks suppressed [ 449.860628][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.874096][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.881486][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.888943][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.896343][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.903755][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.911139][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.918570][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.925982][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 449.933395][ T3490] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 450.109325][T31742] veth0_to_team: entered promiscuous mode [ 450.220865][ T3490] hid-generic 0003:0004:0000.0032: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 450.232304][T31742] loop3: detected capacity change from 0 to 1024 [ 450.249766][T31742] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 450.250779][T31751] fido_id[31751]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.260752][T31742] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 450.291052][T31742] JBD2: no valid journal superblock found [ 450.296885][T31742] EXT4-fs (loop3): Could not load journal inode [ 450.365212][T31758] sd 0:0:1:0: device reset [ 450.423055][T31762] loop3: detected capacity change from 0 to 2048 [ 450.494254][T31762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.506512][T31762] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.520081][T31762] EXT4-fs (loop3): shut down requested (2) [ 450.529362][T31768] loop4: detected capacity change from 0 to 2048 [ 450.538900][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 450.548113][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 450.557506][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 450.567091][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 450.576571][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 450.586996][T31762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 450.834185][T31768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.852382][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.862864][T31768] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.890575][T31768] EXT4-fs (loop4): shut down requested (2) [ 450.910977][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 450.980164][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 451.003196][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 451.020814][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 451.031475][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 451.040822][T31768] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 451.083722][T31781] 9pnet_fd: Insufficient options for proto=fd [ 451.091631][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.111834][T31783] loop5: detected capacity change from 0 to 7 [ 451.168062][T31787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10129'. [ 451.200639][T31789] syzkaller0: entered promiscuous mode [ 451.206324][T31789] syzkaller0: entered allmulticast mode [ 451.244635][T31791] loop3: detected capacity change from 0 to 512 [ 451.260144][T31791] EXT4-fs (loop3): 1 orphan inode deleted [ 451.266592][T31791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.383626][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.452692][T31798] sd 0:0:1:0: device reset [ 451.530765][T31805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10140'. [ 451.583077][T31809] bridge0: entered promiscuous mode [ 451.588839][T31809] macvtap1: entered allmulticast mode [ 451.594909][T31809] bridge0: entered allmulticast mode [ 451.608204][T31809] batman_adv: batadv0: Adding interface: macvtap1 [ 451.614723][T31809] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.643801][T31809] batman_adv: batadv0: Interface activated: macvtap1 [ 451.650349][T31810] hub 2-0:1.0: USB hub found [ 451.650513][T31809] batadv0: mtu less than device minimum [ 451.655899][T31810] hub 2-0:1.0: 8 ports detected [ 451.661456][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.676603][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.687419][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.698140][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.708976][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.719741][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.722412][T31814] hub 1-0:1.0: USB hub found [ 451.730660][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.745706][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.756462][T31809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.783650][T31814] hub 1-0:1.0: 8 ports detected [ 451.999021][T31823] loop5: detected capacity change from 0 to 7 [ 452.173627][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 452.173642][ T29] audit: type=1326 audit(1761574581.044:46888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31808 comm="syz.0.10139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 452.203643][ T29] audit: type=1326 audit(1761574581.054:46889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31808 comm="syz.0.10139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 452.227405][ T29] audit: type=1326 audit(1761574581.054:46890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31808 comm="syz.0.10139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 452.251250][ T29] audit: type=1326 audit(1761574581.054:46891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31808 comm="syz.0.10139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 452.276031][ T29] audit: type=1326 audit(1761574581.154:46892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.299794][ T29] audit: type=1326 audit(1761574581.154:46893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.323507][ T29] audit: type=1326 audit(1761574581.154:46894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.347424][ T29] audit: type=1326 audit(1761574581.154:46895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.371266][ T29] audit: type=1326 audit(1761574581.154:46896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.395044][ T29] audit: type=1326 audit(1761574581.154:46897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31818 comm="syz.4.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 452.477516][T31830] FAULT_INJECTION: forcing a failure. [ 452.477516][T31830] name failslab, interval 1, probability 0, space 0, times 0 [ 452.490251][T31830] CPU: 1 UID: 0 PID: 31830 Comm: syz.1.10148 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.490306][T31830] Tainted: [W]=WARN [ 452.490315][T31830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.490329][T31830] Call Trace: [ 452.490336][T31830] [ 452.490348][T31830] __dump_stack+0x1d/0x30 [ 452.490377][T31830] dump_stack_lvl+0xe8/0x140 [ 452.490405][T31830] dump_stack+0x15/0x1b [ 452.490454][T31830] should_fail_ex+0x265/0x280 [ 452.490478][T31830] should_failslab+0x8c/0xb0 [ 452.490577][T31830] kmem_cache_alloc_noprof+0x50/0x480 [ 452.490611][T31830] ? getname_flags+0x80/0x3b0 [ 452.490673][T31830] getname_flags+0x80/0x3b0 [ 452.490710][T31830] __x64_sys_mkdir+0x33/0x50 [ 452.490752][T31830] x64_sys_call+0x2db9/0x3000 [ 452.490782][T31830] do_syscall_64+0xd2/0x200 [ 452.490805][T31830] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 452.490842][T31830] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 452.490898][T31830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.490926][T31830] RIP: 0033:0x7fe76642efc9 [ 452.490983][T31830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.491001][T31830] RSP: 002b:00007fe764e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 452.491019][T31830] RAX: ffffffffffffffda RBX: 00007fe766685fa0 RCX: 00007fe76642efc9 [ 452.491033][T31830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.491049][T31830] RBP: 00007fe764e97090 R08: 0000000000000000 R09: 0000000000000000 [ 452.491073][T31830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.491089][T31830] R13: 00007fe766686038 R14: 00007fe766685fa0 R15: 00007fff52807908 [ 452.491183][T31830] [ 452.499137][T31831] macvtap5: entered allmulticast mode [ 452.663111][T31835] sd 0:0:1:0: device reset [ 452.673532][T31831] batman_adv: batadv0: Adding interface: macvtap5 [ 452.684337][T31831] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.710179][T31831] batman_adv: batadv0: Interface activated: macvtap5 [ 452.724847][T31836] syzkaller0: entered promiscuous mode [ 452.730375][T31836] syzkaller0: entered allmulticast mode [ 452.780636][T31843] loop5: detected capacity change from 0 to 7 [ 452.823556][T31831] hub 1-0:1.0: USB hub found [ 452.839768][T31831] hub 1-0:1.0: 8 ports detected [ 452.928762][T31847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10154'. [ 452.931007][T31845] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10152'. [ 452.983959][T31855] loop1: detected capacity change from 0 to 2048 [ 452.986168][T31857] loop5: detected capacity change from 0 to 7 [ 453.033585][T31855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.074570][T31855] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.094997][ T3490] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 453.176034][T31872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10155: bg 0: block 345: padding at end of block bitmap is not set [ 453.200422][T31871] loop3: detected capacity change from 0 to 512 [ 453.207466][T31872] EXT4-fs (loop1): Remounting filesystem read-only [ 453.225864][ T31] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 453.262139][T31871] EXT4-fs (loop3): 1 orphan inode deleted [ 453.275613][T31871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.314034][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.333259][T31875] SELinux: failed to load policy [ 453.340947][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.385827][T31875] loop2: detected capacity change from 0 to 1024 [ 453.404265][T31875] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 453.439205][T31882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10165'. [ 453.515542][T31885] netlink: 'syz.3.10166': attribute type 39 has an invalid length. [ 453.581635][T31889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10167'. [ 453.625403][T31895] macvtap2: entered allmulticast mode [ 453.636428][T31895] batman_adv: batadv0: Adding interface: macvtap2 [ 453.642903][T31895] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.674827][T31895] batman_adv: batadv0: Interface activated: macvtap2 [ 453.789121][T31900] 9pnet_fd: Insufficient options for proto=fd [ 453.792652][T31895] hub 1-0:1.0: USB hub found [ 453.800117][T31895] hub 1-0:1.0: 8 ports detected [ 453.872428][T31905] loop4: detected capacity change from 0 to 2048 [ 454.306470][T31905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.322002][T31911] loop5: detected capacity change from 0 to 7 [ 454.325047][T31905] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.415622][T31916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10173: bg 0: block 345: padding at end of block bitmap is not set [ 454.430560][T31916] EXT4-fs (loop4): Remounting filesystem read-only [ 454.437210][ T12] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 454.491027][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.564003][T31921] loop2: detected capacity change from 0 to 2048 [ 454.627654][ T3490] hid-generic 0003:0004:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 454.641191][T31927] loop3: detected capacity change from 0 to 512 [ 454.654531][T31921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.668632][T31919] SELinux: security_context_str_to_sid ( Q3%cWV5cR9A"qL:M)(kFM\qV<*GP1RܮKd&RW:$ngbOp^ &85zRNvrGD GSS1t$%3q/) failed with errno=-22 [ 454.717408][T31927] EXT4-fs (loop3): 1 orphan inode deleted [ 454.729433][T31921] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.743204][T31927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.756758][T31935] loop5: detected capacity change from 0 to 7 [ 454.824907][T26359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.854397][T31939] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10179: bg 0: block 345: padding at end of block bitmap is not set [ 454.891532][T31939] EXT4-fs (loop2): Remounting filesystem read-only [ 454.899790][ T31] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 454.998117][T31943] loop3: detected capacity change from 0 to 512 [ 455.008951][T31943] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.10185: corrupted in-inode xattr: invalid ea_ino [ 455.022887][T30888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.042080][T31948] loop4: detected capacity change from 0 to 2048 [ 455.051218][T31943] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.10185: couldn't read orphan inode 15 (err -117) [ 455.092967][T31943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.139519][ T3306] loop4: p2 p3 p7 [ 455.155423][T31954] loop2: detected capacity change from 0 to 512 [ 455.179926][T31943] loop3: detected capacity change from 512 to 0 [ 455.186756][T31948] loop4: p2 p3 p7 [ 455.191816][T31955] EXT4-fs error (device loop3): ext4_get_inode_loc:4970: inode #12: block 7: comm syz.3.10185: unable to read itable block [ 455.204838][ C0] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.213927][T31955] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 455.225273][T31954] EXT4-fs (loop2): 1 orphan inode deleted [ 455.231754][T31954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.250137][T31955] EXT4-fs (loop3): I/O error while writing superblock [ 455.331730][T26359] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 455.342777][T31958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10192'. [ 455.356473][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 455.358149][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 455.382372][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 455.399431][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 455.399473][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 455.421073][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 455.432559][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4955: inode #18: block 9: comm kworker/u8:1: unable to read itable block [ 455.463781][ T31] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 455.482219][ T31] EXT4-fs (loop3): I/O error while writing superblock [ 455.506199][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4955: inode #12: block 7: comm kworker/u8:1: unable to read itable block [ 455.524146][ T31] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 455.527644][T31970] netlink: 324 bytes leftover after parsing attributes in process `syz.4.10197'. [ 455.532542][ T31] EXT4-fs (loop3): I/O error while writing superblock [ 455.549041][T31968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10196'. [ 455.561438][T31968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10196'. [ 455.573002][T26359] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 455.581417][T26359] EXT4-fs (loop3): I/O error while writing superblock [ 455.591724][T31970] hub 2-0:1.0: USB hub found [ 455.631040][T31970] hub 2-0:1.0: 8 ports detected [ 455.646429][T31978] loop4: detected capacity change from 0 to 512 [ 455.655625][T31978] /dev/loop4: Can't open blockdev [ 455.726804][T31982] loop0: detected capacity change from 0 to 512 [ 455.767167][T31978] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10197'. [ 455.779465][T31982] EXT4-fs (loop0): 1 orphan inode deleted [ 455.794355][T27720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.804914][T27720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.886407][T27720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.896784][T27720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.071892][T27720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.082411][T27720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.096164][T31995] loop0: detected capacity change from 0 to 512 [ 456.176772][T27720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.187143][T27720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.199043][T31995] EXT4-fs (loop0): 1 orphan inode deleted [ 456.203660][T31993] SELinux: security_context_str_to_sid (.xXZ|\@/MȐQesFԩ}mdȨFV8n) failed with errno=-22 [ 456.270039][T32002] loop0: detected capacity change from 0 to 2048 [ 456.327579][T32002] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.329682][T27720] bridge_slave_1: left allmulticast mode [ 456.344032][T27720] bridge_slave_1: left promiscuous mode [ 456.349682][T27720] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.355076][T32002] EXT4-fs (loop0): shut down requested (2) [ 456.364524][T27720] bridge_slave_0: left allmulticast mode [ 456.370301][T27720] bridge_slave_0: left promiscuous mode [ 456.376156][T27720] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.386079][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 456.397598][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 456.406772][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 456.415749][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 456.424937][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 456.435296][T32002] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 456.530682][ T36] hid_parser_main: 44 callbacks suppressed [ 456.530709][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.544035][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.551481][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.558990][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.566414][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.573836][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.581276][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.588695][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.596122][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.603610][ T36] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 456.641881][ T36] hid-generic 0003:0004:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 456.802851][T27720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.841806][T27720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.855062][T27720] bond0 (unregistering): Released all slaves [ 456.877125][T27720] bond1 (unregistering): Released all slaves [ 456.878118][T32039] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10212'. [ 456.898382][T27720] bond2 (unregistering): Released all slaves [ 456.907692][T27720] bond3 (unregistering): (slave veth3): Releasing active interface [ 456.917001][T27720] bond3 (unregistering): Released all slaves [ 456.925691][T27720] bond4 (unregistering): Released all slaves [ 456.942962][T32037] bridge0: entered promiscuous mode [ 456.948619][T32037] macvtap1: entered allmulticast mode [ 456.954131][T32037] bridge0: entered allmulticast mode [ 456.961349][T32043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10213'. [ 456.963034][T32037] batman_adv: batadv0: Adding interface: macvtap1 [ 456.976952][T32037] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.007605][T32039] loop0: detected capacity change from 0 to 512 [ 457.015898][T32039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 457.021332][T32037] batman_adv: batadv0: Interface activated: macvtap1 [ 457.025916][T32039] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 457.033495][T32047] hub 1-0:1.0: USB hub found [ 457.046073][T32047] hub 1-0:1.0: 8 ports detected [ 457.081910][T27720] hsr_slave_0: left promiscuous mode [ 457.093516][T27720] hsr_slave_1: left promiscuous mode [ 457.099420][T27720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.106973][T27720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.123402][T32045] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10212'. [ 457.139135][T27720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.146668][T27720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.159635][T27720] veth1_macvtap: left promiscuous mode [ 457.168701][T27720] veth0_macvtap: left promiscuous mode [ 457.175356][T27720] veth1_vlan: left promiscuous mode [ 457.181033][T32051] loop4: detected capacity change from 0 to 512 [ 457.181512][T27720] veth0_vlan: left promiscuous mode [ 457.192686][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 457.192702][ T29] audit: type=1326 audit(1761574586.444:47351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a694bdc2a code=0x7ffc0000 [ 457.208636][T32051] EXT4-fs (loop4): 1 orphan inode deleted [ 457.222632][ T29] audit: type=1326 audit(1761574586.444:47352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a694bdc2a code=0x7ffc0000 [ 457.251920][ T29] audit: type=1326 audit(1761574586.444:47353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7a694bd717 code=0x7ffc0000 [ 457.275774][ T29] audit: type=1326 audit(1761574586.444:47354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7a694c076a code=0x7ffc0000 [ 457.299547][ T29] audit: type=1326 audit(1761574586.494:47355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a694bd810 code=0x7ffc0000 [ 457.323320][ T29] audit: type=1326 audit(1761574586.494:47356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a694bd810 code=0x7ffc0000 [ 457.347079][ T29] audit: type=1326 audit(1761574586.494:47357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 457.371016][ T29] audit: type=1326 audit(1761574586.494:47358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32050 comm="syz.4.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a694befc9 code=0x7ffc0000 [ 457.387432][T32056] loop0: detected capacity change from 0 to 2048 [ 457.438413][T32056] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.462657][T32056] EXT4-fs (loop0): shut down requested (2) [ 457.468666][T32058] loop4: detected capacity change from 0 to 2048 [ 457.471610][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 457.484523][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 457.494253][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 457.503248][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 457.512141][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 457.521336][T32056] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 457.527219][T32058] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.545606][T32058] EXT4-fs (loop4): shut down requested (2) [ 457.554616][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 457.566385][T27720] team0 (unregistering): Port device team_slave_1 removed [ 457.566784][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 457.582797][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 457.591794][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 457.601026][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 457.601191][T27720] team0 (unregistering): Port device team_slave_0 removed [ 457.610518][T32058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 457.649467][ T29] audit: type=1326 audit(1761574586.904:47359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 457.673247][ T29] audit: type=1326 audit(1761574586.904:47360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 457.713169][T32064] loop0: detected capacity change from 0 to 512 [ 457.764208][T32064] EXT4-fs (loop0): 1 orphan inode deleted [ 457.825675][T32066] loop4: detected capacity change from 0 to 2048 [ 457.891639][T31987] chnl_net:caif_netlink_parms(): no params data found [ 457.906648][ T3306] loop4: p2 p3 p7 [ 457.926826][T32066] loop4: p2 p3 p7 [ 458.007084][T31987] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.014342][T31987] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.035322][T32098] netlink: 324 bytes leftover after parsing attributes in process `syz.2.10224'. [ 458.046214][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 458.047892][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 458.065946][T31987] bridge_slave_0: entered allmulticast mode [ 458.072245][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 458.079909][T31987] bridge_slave_0: entered promiscuous mode [ 458.089406][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 458.104615][T31987] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.111724][T31987] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.119143][T31987] bridge_slave_1: entered allmulticast mode [ 458.125873][T31987] bridge_slave_1: entered promiscuous mode [ 458.131835][T32098] loop2: detected capacity change from 0 to 512 [ 458.142759][T32098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 458.152694][T32098] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 458.169734][T32098] loop2: detected capacity change from 0 to 512 [ 458.176966][T32098] ext4: Unknown parameter 'smackfshat' [ 458.190058][T31987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.204874][T31987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.250132][T31987] team0: Port device team_slave_0 added [ 458.257108][T31987] team0: Port device team_slave_1 added [ 458.277953][T31987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.285044][T31987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.311227][T31987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.322954][T31987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.330101][T31987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.356078][T31987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.396573][T31987] hsr_slave_0: entered promiscuous mode [ 458.409086][T31987] hsr_slave_1: entered promiscuous mode [ 458.420600][T32123] macvtap3: entered allmulticast mode [ 458.427933][T32123] batman_adv: batadv0: Adding interface: macvtap3 [ 458.434443][T32123] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.459920][T32123] batman_adv: batadv0: Interface activated: macvtap3 [ 458.548138][T32132] hub 1-0:1.0: USB hub found [ 458.553527][T32132] hub 1-0:1.0: 8 ports detected [ 458.570871][T31987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.581380][T31987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.592476][T31987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.602108][T31987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.656238][T32147] loop5: detected capacity change from 0 to 7 [ 458.659877][T31987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.689642][T31987] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.700901][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.708390][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.740456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.747601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.783672][T32155] loop1: detected capacity change from 0 to 512 [ 458.798694][T32153] loop0: detected capacity change from 0 to 2048 [ 458.806003][T32155] EXT4-fs: Ignoring removed i_version option [ 458.812051][T32155] EXT4-fs: Ignoring removed bh option [ 458.813009][T31987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.827990][T31987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.857829][T32155] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.875764][T32153] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.995275][T32169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10230: bg 0: block 345: padding at end of block bitmap is not set [ 459.010959][T32169] EXT4-fs (loop0): Remounting filesystem read-only [ 459.017704][T27720] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 459.040591][T31987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.209983][T32190] __nla_validate_parse: 1 callbacks suppressed [ 459.210002][T32190] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10235'. [ 459.253551][T31987] veth0_vlan: entered promiscuous mode [ 459.263328][T31987] veth1_vlan: entered promiscuous mode [ 459.294164][T32190] hub 2-0:1.0: USB hub found [ 459.306226][ T37] bridge_slave_1: left allmulticast mode [ 459.307683][T32190] hub 2-0:1.0: 8 ports detected [ 459.311915][ T37] bridge_slave_1: left promiscuous mode [ 459.322579][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.343857][T32190] loop0: detected capacity change from 0 to 512 [ 459.352544][T32190] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 459.362564][T32190] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 459.385785][T32201] loop5: detected capacity change from 0 to 7 [ 459.395189][ T37] bridge_slave_0: left allmulticast mode [ 459.401367][ T37] bridge_slave_0: left promiscuous mode [ 459.407124][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.428714][T32190] loop0: detected capacity change from 0 to 512 [ 459.461971][T32190] ext4: Unknown parameter 'smackfshat' [ 459.509461][ T3369] hid-generic 0003:0004:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 459.547606][T32190] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10235'. [ 459.589765][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.610270][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.622996][T32211] loop0: detected capacity change from 0 to 512 [ 459.628064][ T3369] hid-generic 0003:0004:0000.0037: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 459.641147][T32211] EXT4-fs (loop0): 1 orphan inode deleted [ 459.652040][ T37] bond0 (unregistering): Released all slaves [ 459.675989][ T37] bond1 (unregistering): Released all slaves [ 459.685399][ T37] bond2 (unregistering): Released all slaves [ 459.701764][ T37] bond3 (unregistering): Released all slaves [ 459.708855][T32216] fido_id[32216]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.778689][T31987] veth0_macvtap: entered promiscuous mode [ 459.786506][T31987] veth1_macvtap: entered promiscuous mode [ 459.798037][T31987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.821845][T31987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.833808][T27720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.849532][ T37] hsr_slave_0: left promiscuous mode [ 459.864672][ T37] hsr_slave_1: left promiscuous mode [ 459.875932][ T37] veth1_macvtap: left promiscuous mode [ 459.881482][ T37] veth0_macvtap: left promiscuous mode [ 459.889516][T32224] loop0: detected capacity change from 0 to 2048 [ 459.896099][ T37] veth1_vlan: left promiscuous mode [ 459.901500][ T37] veth0_vlan: left promiscuous mode [ 459.933575][T32224] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.987562][ T3369] hid-generic 0003:0004:0000.0038: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 460.080001][T32233] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10243: bg 0: block 345: padding at end of block bitmap is not set [ 460.104839][T32233] EXT4-fs (loop0): Remounting filesystem read-only [ 460.113796][ T3442] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 460.154636][ T37] lo (unregistering): left allmulticast mode [ 460.170407][T32241] sd 0:0:1:0: device reset [ 460.176949][T27720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.193987][T27720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.224202][T27720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.258774][T32245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10252'. [ 460.260357][T32248] loop4: detected capacity change from 0 to 2048 [ 460.286225][T32250] netlink: 'syz.5.10202': attribute type 39 has an invalid length. [ 460.324868][ T3306] loop4: p2 p3 p7 [ 460.327752][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10253'. [ 460.346586][T32248] loop4: p2 p3 p7 [ 460.426738][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 460.438437][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 460.455993][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 460.505141][T32260] wireguard0: entered promiscuous mode [ 460.510690][T32260] wireguard0: entered allmulticast mode [ 460.516963][ T1036] hid-generic 0003:0004:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 460.571800][T32274] fido_id[32274]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 460.633982][T32280] loop4: detected capacity change from 0 to 2048 [ 460.650908][T32280] /dev/loop4: Can't open blockdev [ 460.773675][T32295] macvtap2: entered allmulticast mode [ 460.781570][T32295] batman_adv: batadv0: Adding interface: macvtap2 [ 460.788275][T32295] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.838358][T32295] batman_adv: batadv0: Interface activated: macvtap2 [ 460.845145][T32295] net_ratelimit: 10 callbacks suppressed [ 460.845160][T32295] batadv0: mtu less than device minimum [ 460.856152][T32301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10271'. [ 460.856862][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.876139][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.886876][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.897695][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.908565][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.919347][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.930504][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.941294][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.952079][T32295] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.992968][T32304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10272'. [ 461.042403][T32319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10276'. [ 461.056036][T32319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10276'. [ 461.095177][T32321] 9pnet_fd: Insufficient options for proto=fd [ 461.145562][T32325] netlink: 'syz.1.10279': attribute type 29 has an invalid length. [ 461.337126][T32349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10287'. [ 461.413714][T32351] loop1: detected capacity change from 0 to 512 [ 461.426997][T32351] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.10288: corrupted in-inode xattr: invalid ea_ino [ 461.441630][T32351] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10288: couldn't read orphan inode 15 (err -117) [ 461.454465][T32351] EXT4-fs mount: 24 callbacks suppressed [ 461.454484][T32351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.503575][T32351] loop1: detected capacity change from 512 to 0 [ 461.534106][T29484] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 461.556962][ T407] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4955: inode #18: block 9: comm kworker/u8:6: unable to read itable block [ 461.571045][ T407] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 461.579501][ T407] EXT4-fs (loop1): I/O error while writing superblock [ 461.586513][ T407] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4955: inode #12: block 7: comm kworker/u8:6: unable to read itable block [ 461.600568][ T407] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 461.608871][ T407] EXT4-fs (loop1): I/O error while writing superblock [ 461.616542][T29484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.626386][T29484] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 461.635442][T29484] EXT4-fs (loop1): I/O error while writing superblock [ 461.667794][ T3490] hid_parser_main: 80 callbacks suppressed [ 461.667816][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.681359][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.688831][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.696260][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.703769][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.711215][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.718633][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.726201][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.733806][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.741224][ T3490] hid-generic 0003:0004:0000.003A: unknown main item tag 0x0 [ 461.750343][ T3490] hid-generic 0003:0004:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 461.781245][T32358] fido_id[32358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.806539][T32360] loop0: detected capacity change from 0 to 2048 [ 461.825634][T32360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.838344][T32360] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.908991][T32363] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10291: bg 0: block 345: padding at end of block bitmap is not set [ 461.925564][T32363] EXT4-fs (loop0): Remounting filesystem read-only [ 461.932301][ T3442] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 461.956666][ T407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.056452][ T407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.094894][T32373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10295'. [ 462.095501][T27655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.122088][ T407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.235679][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 462.235741][ T29] audit: type=1400 audit(1761574591.474:47698): avc: denied { map } for pid=32380 comm="syz.5.10299" path="socket:[107016]" dev="sockfs" ino=107016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.320944][ T3490] hid-generic 0003:0004:0000.003B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 462.701602][ T407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.787878][ T29] audit: type=1400 audit(1761574592.034:47699): avc: denied { mounton } for pid=32395 comm="syz.0.10302" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 462.892902][ T29] audit: type=1326 audit(1761574592.114:47700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 462.916787][ T29] audit: type=1326 audit(1761574592.114:47701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 462.940517][ T29] audit: type=1326 audit(1761574592.114:47702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 462.964248][ T29] audit: type=1326 audit(1761574592.114:47703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 462.988029][ T29] audit: type=1326 audit(1761574592.114:47704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 462.998892][T32402] fido_id[32402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 463.011894][ T29] audit: type=1326 audit(1761574592.114:47705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 463.065057][ T407] bridge_slave_1: left allmulticast mode [ 463.070767][ T407] bridge_slave_1: left promiscuous mode [ 463.076677][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.093145][ T29] audit: type=1326 audit(1761574592.144:47706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 463.117432][ T29] audit: type=1326 audit(1761574592.144:47707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32395 comm="syz.0.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5200efc9 code=0x7ffc0000 [ 463.156645][T32406] loop4: detected capacity change from 0 to 2048 [ 463.204541][ T407] bridge_slave_0: left allmulticast mode [ 463.210231][ T407] bridge_slave_0: left promiscuous mode [ 463.216017][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.226953][T32406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.227393][T32415] FAULT_INJECTION: forcing a failure. [ 463.227393][T32415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.245403][T32410] loop5: detected capacity change from 0 to 2048 [ 463.252398][T32415] CPU: 0 UID: 0 PID: 32415 Comm: syz.2.10304 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 463.252468][T32415] Tainted: [W]=WARN [ 463.252477][T32415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.252496][T32415] Call Trace: [ 463.252506][T32415] [ 463.252517][T32415] __dump_stack+0x1d/0x30 [ 463.252548][T32415] dump_stack_lvl+0xe8/0x140 [ 463.252576][T32415] dump_stack+0x15/0x1b [ 463.252678][T32415] should_fail_ex+0x265/0x280 [ 463.252705][T32415] should_fail+0xb/0x20 [ 463.252747][T32415] should_fail_usercopy+0x1a/0x20 [ 463.252777][T32415] _copy_from_user+0x1c/0xb0 [ 463.252838][T32415] perf_copy_attr+0x145/0x610 [ 463.252951][T32415] __se_sys_perf_event_open+0x67/0x11c0 [ 463.252989][T32415] ? vfs_write+0x7e8/0x960 [ 463.253059][T32415] ? __rcu_read_unlock+0x4f/0x70 [ 463.253104][T32415] __x64_sys_perf_event_open+0x67/0x80 [ 463.253202][T32415] x64_sys_call+0x7bd/0x3000 [ 463.253233][T32415] do_syscall_64+0xd2/0x200 [ 463.253258][T32415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 463.253297][T32415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 463.253375][T32415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.253410][T32415] RIP: 0033:0x7f807f55efc9 [ 463.253432][T32415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.253495][T32415] RSP: 002b:00007f807dfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 463.253522][T32415] RAX: ffffffffffffffda RBX: 00007f807f7b5fa0 RCX: 00007f807f55efc9 [ 463.253540][T32415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 463.253557][T32415] RBP: 00007f807dfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.253575][T32415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 463.253592][T32415] R13: 00007f807f7b6038 R14: 00007f807f7b5fa0 R15: 00007fff5632f098 [ 463.253731][T32415] [ 463.261528][T32406] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.461265][T32406] FAULT_INJECTION: forcing a failure. [ 463.461265][T32406] name failslab, interval 1, probability 0, space 0, times 0 [ 463.473975][T32406] CPU: 1 UID: 0 PID: 32406 Comm: syz.4.10303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 463.474009][T32406] Tainted: [W]=WARN [ 463.474015][T32406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.474027][T32406] Call Trace: [ 463.474034][T32406] [ 463.474109][T32406] __dump_stack+0x1d/0x30 [ 463.474132][T32406] dump_stack_lvl+0xe8/0x140 [ 463.474152][T32406] dump_stack+0x15/0x1b [ 463.474168][T32406] should_fail_ex+0x265/0x280 [ 463.474187][T32406] should_failslab+0x8c/0xb0 [ 463.474218][T32406] kmem_cache_alloc_noprof+0x50/0x480 [ 463.474262][T32406] ? mb_cache_entry_create+0xf0/0x540 [ 463.474282][T32406] mb_cache_entry_create+0xf0/0x540 [ 463.474307][T32406] ext4_xattr_get+0x298/0x470 [ 463.474407][T32406] ext4_xattr_security_get+0x32/0x40 [ 463.474437][T32406] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 463.474471][T32406] __vfs_getxattr+0x2ad/0x2c0 [ 463.474549][T32406] cap_inode_need_killpriv+0x2e/0x50 [ 463.474582][T32406] security_inode_need_killpriv+0x36/0x70 [ 463.474681][T32406] file_remove_privs_flags+0x11f/0x320 [ 463.474740][T32406] ? terminate_walk+0x27f/0x2a0 [ 463.474782][T32406] ? path_openat+0x1bf8/0x2170 [ 463.474859][T32406] file_modified_flags+0x32/0x350 [ 463.474923][T32406] file_modified+0x17/0x20 [ 463.474961][T32406] ext4_buffered_write_iter+0x1d0/0x3c0 [ 463.474990][T32406] ? ext4_file_write_iter+0xfe/0xf60 [ 463.475051][T32406] ext4_file_write_iter+0x387/0xf60 [ 463.475075][T32406] ? kstrtouint+0x76/0xc0 [ 463.475120][T32406] ? kstrtouint_from_user+0x9f/0xf0 [ 463.475160][T32406] ? avc_policy_seqno+0x15/0x30 [ 463.475182][T32406] ? selinux_file_permission+0x1e4/0x320 [ 463.475222][T32406] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 463.475308][T32406] vfs_write+0x52a/0x960 [ 463.475336][T32406] ksys_write+0xda/0x1a0 [ 463.475363][T32406] __x64_sys_write+0x40/0x50 [ 463.475392][T32406] x64_sys_call+0x2802/0x3000 [ 463.475431][T32406] do_syscall_64+0xd2/0x200 [ 463.475459][T32406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 463.475486][T32406] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 463.475521][T32406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.475620][T32406] RIP: 0033:0x7f7a694befc9 [ 463.475639][T32406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.475730][T32406] RSP: 002b:00007f7a67f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.475749][T32406] RAX: ffffffffffffffda RBX: 00007f7a69715fa0 RCX: 00007f7a694befc9 [ 463.475767][T32406] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000005 [ 463.475832][T32406] RBP: 00007f7a67f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.475913][T32406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.475928][T32406] R13: 00007f7a69716038 R14: 00007f7a69715fa0 R15: 00007ffdc632ed68 [ 463.475950][T32406] [ 463.476610][T32410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.773698][T32410] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.844469][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 463.869655][ T31] EXT4-fs (loop4): Remounting filesystem read-only [ 463.873702][T32435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10305: bg 0: block 345: padding at end of block bitmap is not set [ 463.876372][ T37] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 463.904851][ T407] batman_adv: batadv0: Interface deactivated: macvtap1 [ 463.910626][T32437] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 463.926110][ T407] bridge0 (unregistering): left allmulticast mode [ 463.928361][T32435] EXT4-fs (loop5): Remounting filesystem read-only [ 463.940129][ T12] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 463.955306][ T407] batman_adv: batadv0: Removing interface: macvtap1 [ 464.004748][ T36] hid-generic 0003:0004:0000.003C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 464.021265][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.041300][T31987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.054072][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.060074][T28655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.072933][ T407] bond0 (unregistering): Released all slaves [ 464.080500][T32446] blktrace: Concurrent blktraces are not allowed on loop1 [ 464.129004][T32453] sd 0:0:1:0: device reset [ 464.130010][ T407] bond1 (unregistering): Released all slaves [ 464.162340][T32449] loop5: detected capacity change from 0 to 2048 [ 464.173386][ T407] bond2 (unregistering): Released all slaves [ 464.188220][ T407] bond3 (unregistering): Released all slaves [ 464.199471][ T407] bond4 (unregistering): Released all slaves [ 464.215001][ T407] bond5 (unregistering): Released all slaves [ 464.269409][T32449] loop5: p2 p3 p7 [ 464.281919][T32461] loop0: detected capacity change from 0 to 2048 [ 464.289653][T32467] __nla_validate_parse: 1 callbacks suppressed [ 464.289672][T32467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10318'. [ 464.338731][T32469] loop2: detected capacity change from 0 to 512 [ 464.370866][ T407] hsr_slave_0: left promiscuous mode [ 464.372743][ T3299] loop0: p2 p3 p7 [ 464.383983][T32469] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.10319: corrupted in-inode xattr: invalid ea_ino [ 464.397827][ T407] hsr_slave_1: left promiscuous mode [ 464.407251][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.414894][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.427500][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.435033][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.447643][T32469] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.10319: couldn't read orphan inode 15 (err -117) [ 464.457435][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 464.463708][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 464.480654][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 464.483529][T32461] loop0: p2 p3 p7 [ 464.498795][ T407] veth1_macvtap: left promiscuous mode [ 464.507073][ T407] veth0_macvtap: left promiscuous mode [ 464.512666][ T407] veth1_vlan: left promiscuous mode [ 464.528149][ T407] veth0_vlan: left promiscuous mode [ 464.528989][ T3003] loop0: p2 p3 p7 [ 464.536750][T32469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.648617][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 464.652625][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 464.674165][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 464.698465][T30888] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 464.737111][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 464.828837][T32501] netlink: 'syz.5.10323': attribute type 1 has an invalid length. [ 464.838059][ T407] team0 (unregistering): Port device team_slave_1 removed [ 464.852301][ T407] team0 (unregistering): Port device team_slave_0 removed [ 464.865616][T30888] EXT4-fs error (device loop2): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 464.900471][T30888] EXT4-fs error (device loop2): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 465.139436][ T10] hid-generic 0003:0004:0000.003D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 465.153911][T32501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.231399][T32367] chnl_net:caif_netlink_parms(): no params data found [ 465.241095][T32518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10330'. [ 465.270901][T32521] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10331'. [ 465.405216][T30888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.416066][T32540] loop0: detected capacity change from 0 to 512 [ 465.445648][T32540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 465.455531][T32540] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 465.467104][T32367] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.474399][T32367] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.488245][T32367] bridge_slave_0: entered allmulticast mode [ 465.505046][T32367] bridge_slave_0: entered promiscuous mode [ 465.512011][T32367] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.519303][T32367] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.531953][T32367] bridge_slave_1: entered allmulticast mode [ 465.542343][T32367] bridge_slave_1: entered promiscuous mode [ 465.548698][T32521] loop0: detected capacity change from 0 to 512 [ 465.559073][T32521] ext4: Unknown parameter 'smackfshat' [ 465.599416][T32521] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10331'. [ 465.665102][T32367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.689345][T32367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.703041][ T407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.726736][T32556] loop0: detected capacity change from 0 to 2048 [ 465.734319][T32559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10338'. [ 465.757203][T32556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.783599][T32367] team0: Port device team_slave_0 added [ 465.789872][T32556] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.805215][T32556] EXT4-fs (loop0): shut down requested (2) [ 465.807861][ T407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.812315][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 465.833587][T32367] team0: Port device team_slave_1 added [ 465.845494][T32559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10338'. [ 465.867568][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 465.879868][T32367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.886969][T32367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.896526][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 465.912946][T32367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.923141][T32578] sd 0:0:1:0: device reset [ 465.945384][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 465.963569][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 465.976148][T32582] loop5: detected capacity change from 0 to 7 [ 465.985918][ T407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.997075][T32556] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 466.012417][T32367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.019527][T32367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.045519][T32367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.107043][ T407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.118071][T27655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.141663][T32367] hsr_slave_0: entered promiscuous mode [ 466.152417][T32367] hsr_slave_1: entered promiscuous mode [ 466.158982][T32367] debugfs: 'hsr0' already exists in 'hsr' [ 466.164779][T32367] Cannot create hsr debugfs directory [ 466.231124][ T3395] hid-generic 0003:0004:0000.003E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 466.285638][ T407] bridge_slave_1: left allmulticast mode [ 466.291428][ T407] bridge_slave_1: left promiscuous mode [ 466.297244][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.313380][T32606] sd 0:0:1:0: device reset [ 466.349993][T32607] fido_id[32607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.366880][ T407] bridge_slave_0: left allmulticast mode [ 466.372579][ T407] bridge_slave_0: left promiscuous mode [ 466.378401][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.417821][T32616] loop5: detected capacity change from 0 to 7 [ 466.425595][T32614] sd 0:0:1:0: device reset [ 466.496477][ T407] batman_adv: batadv0: Interface deactivated: macvtap1 [ 466.510911][ T407] batman_adv: batadv0: Interface deactivated: macvtap2 [ 466.523779][ T407] batman_adv: batadv0: Interface deactivated: macvtap3 [ 466.533221][ T407] bridge0 (unregistering): left allmulticast mode [ 466.562992][ T407] batman_adv: batadv0: Removing interface: macvtap1 [ 466.572217][ T407] batman_adv: batadv0: Removing interface: macvtap2 [ 466.581949][ T407] batman_adv: batadv0: Removing interface: macvtap3 [ 466.615120][T32625] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10353'. [ 466.637196][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.664938][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.675237][ T407] bond0 (unregistering): Released all slaves [ 466.677459][T32625] hub 2-0:1.0: USB hub found [ 466.686463][T32625] hub 2-0:1.0: 8 ports detected [ 466.698492][T32625] loop0: detected capacity change from 0 to 512 [ 466.710649][T32625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 466.720605][T32625] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 466.766457][T32630] hid_parser_main: 80 callbacks suppressed [ 466.766479][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.779899][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.787386][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.794897][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.802316][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.809784][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.817400][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.824841][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.832329][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.839843][T32630] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 466.847434][T32625] loop0: detected capacity change from 0 to 512 [ 466.855369][T32630] hid-generic 0003:0004:0000.003F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 466.865469][T32625] ext4: Unknown parameter 'smackfshat' [ 466.911573][T32637] fido_id[32637]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.957415][T32625] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10353'. [ 466.985642][T32641] loop5: detected capacity change from 0 to 2048 [ 467.016032][T32641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.044103][T32641] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.099042][ T407] hsr_slave_0: left promiscuous mode [ 467.113167][ T407] hsr_slave_1: left promiscuous mode [ 467.122110][T32652] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10357: bg 0: block 345: padding at end of block bitmap is not set [ 467.131362][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.143993][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.159009][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.166566][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.174026][T32652] EXT4-fs (loop5): Remounting filesystem read-only [ 467.203630][ T407] veth1_macvtap: left promiscuous mode [ 467.213498][ T407] veth0_macvtap: left promiscuous mode [ 467.214299][T32652] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1602: inode #18: comm syz.5.10357: cleanup dec ref error -117 [ 467.219041][ T407] veth1_vlan: left promiscuous mode [ 467.256987][T32661] SELinux: security_context_str_to_sid (UB9<9 v8F#c@ylz$) failed with errno=-22 [ 467.283520][ T407] veth0_vlan: left promiscuous mode [ 467.289463][T31987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.575539][ T407] team0 (unregistering): Port device team_slave_1 removed [ 467.586080][ T407] team0 (unregistering): Port device team_slave_0 removed [ 467.839762][T32558] chnl_net:caif_netlink_parms(): no params data found [ 467.857165][T32678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10364'. [ 467.931099][T32367] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.961350][T32558] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.968542][T32558] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.975808][T32558] bridge_slave_0: entered allmulticast mode [ 467.975959][ T2992] ================================================================== [ 467.982518][T32558] bridge_slave_0: entered promiscuous mode [ 467.989811][ T2992] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 467.989836][ T2992] [ 467.989841][ T2992] write to 0xffffffff8687fbd8 of 8 bytes by task 32558 on cpu 0: [ 467.989858][ T2992] data_alloc+0x274/0x2e0 [ 467.989874][ T2992] prb_reserve+0x807/0xaf0 [ 467.989893][ T2992] vprintk_store+0x56d/0x860 [ 468.003651][T32367] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.004956][ T2992] vprintk_emit+0x10d/0x580 [ 468.037196][ T2992] vprintk_default+0x26/0x30 [ 468.041818][ T2992] vprintk+0x1d/0x30 [ 468.045747][ T2992] _printk+0x79/0xa0 [ 468.049675][ T2992] __netdev_printk+0x321/0x3e0 [ 468.054549][ T2992] netdev_info+0x9b/0xd0 [ 468.058826][ T2992] netif_set_allmulti+0x168/0x250 [ 468.063893][ T2992] dev_set_allmulti+0xcc/0x170 [ 468.068692][ T2992] br_add_if+0x25b/0xa60 [ 468.072947][ T2992] br_add_slave+0x2c/0x40 [ 468.077319][ T2992] do_set_master+0x390/0x460 [ 468.081936][ T2992] do_setlink+0xa43/0x2810 [ 468.086376][ T2992] rtnl_newlink+0xe75/0x12d0 [ 468.091010][ T2992] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 468.095981][ T2992] netlink_rcv_skb+0x123/0x220 [ 468.100140][ T3490] hid-generic 0003:0004:0000.0040: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 468.100787][ T2992] rtnetlink_rcv+0x1c/0x30 [ 468.114219][ T2992] netlink_unicast+0x5c0/0x690 [ 468.119021][ T2992] netlink_sendmsg+0x58b/0x6b0 [ 468.123796][ T2992] __sock_sendmsg+0x145/0x180 [ 468.128486][ T2992] __sys_sendto+0x268/0x330 [ 468.133010][ T2992] __x64_sys_sendto+0x76/0x90 [ 468.137703][ T2992] x64_sys_call+0x2d14/0x3000 [ 468.142391][ T2992] do_syscall_64+0xd2/0x200 [ 468.146899][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.152804][ T2992] [ 468.155135][ T2992] read to 0xffffffff8687fbd8 of 16 bytes by task 2992 on cpu 1: [ 468.162852][ T2992] _prb_read_valid+0x1bc/0x920 [ 468.167624][ T2992] prb_read_valid+0x3c/0x60 [ 468.172141][ T2992] syslog_print+0xeb/0x540 [ 468.176568][ T2992] do_syslog+0x52b/0x7e0 [ 468.180865][ T2992] __x64_sys_syslog+0x41/0x50 [ 468.185586][ T2992] x64_sys_call+0x2f45/0x3000 [ 468.190288][ T2992] do_syscall_64+0xd2/0x200 [ 468.194800][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.200699][ T2992] [ 468.203029][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 468.209185][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 468.220045][ T2992] Tainted: [W]=WARN [ 468.223859][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.233922][ T2992] ================================================================== [ 468.254583][T32367] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.282575][T32691] fido_id[32691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 468.332324][T32558] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.339464][T32558] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.347058][T32558] bridge_slave_1: entered allmulticast mode [ 468.353970][T32558] bridge_slave_1: entered promiscuous mode [ 468.365639][T32367] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.386421][T32558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.416957][T32558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.453751][T32558] team0: Port device team_slave_0 added [ 468.460561][T32558] team0: Port device team_slave_1 added [ 468.480012][T32367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.513058][T32367] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.520857][T32558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.527883][T32558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.553936][T32558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.565351][T32558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.572369][T32558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.598428][T32558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.614630][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.621760][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.634839][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.641927][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.665161][T32558] hsr_slave_0: entered promiscuous mode [ 468.671166][T32558] hsr_slave_1: entered promiscuous mode [ 468.677223][T32558] debugfs: 'hsr0' already exists in 'hsr' [ 468.682987][T32558] Cannot create hsr debugfs directory [ 468.710251][T32367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.720736][T32367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.816023][T32367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.837260][T32558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.849472][T32558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.858680][T32558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.869204][T32558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 468.925142][T32558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.944148][T32558] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.955320][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.962475][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.973272][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.980366][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.089327][T32558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.125401][T32367] veth0_vlan: entered promiscuous mode [ 469.137774][T32367] veth1_vlan: entered promiscuous mode [ 469.156222][T32367] veth0_macvtap: entered promiscuous mode [ 469.164127][T32367] veth1_macvtap: entered promiscuous mode [ 469.184772][T32367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.197846][T32367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.210201][ T407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.224448][ T407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.241592][T27720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.252580][T27720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.343741][T32558] veth0_vlan: entered promiscuous mode [ 469.351422][T32558] veth1_vlan: entered promiscuous mode [ 469.369327][T32558] veth0_macvtap: entered promiscuous mode [ 469.377011][T32558] veth1_macvtap: entered promiscuous mode [ 469.388309][T32558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.399767][T32558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.410937][ T3442] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.420120][ T3442] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.429380][ T3442] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.438529][ T3442] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0