last executing test programs: 10m20.620165696s ago: executing program 3 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = dup(r0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 10m20.604355348s ago: executing program 3 (id=1910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) tkill(0x0, 0x13) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 10m20.585951849s ago: executing program 3 (id=1911): socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x7, 0x804005, 0x0, 0x0, 0xffffffff) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) unshare(0x2040600) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNh0+pGrV5owUgRgx/5aEpssKCCl15ZX2BN0hLdNrZZwZZcKIh9APUBxMv6CF6Id4LgTfHaO6VQJMm1rMxmdjNudmO+ltHu7wcHzpnZ4Zz/zOyek3MOCWBgTUTEpxExEhEfREQlP57kKd7cTtnntjbWF7OURKNx+c+keX5zY30xCtdkTuWFyTQi/TyJZ7vUu3br9ofVWm35Zl6erl/7aHrt1u1XV65Vry5fXb4+N7OwMDN3cX5h/thi/T3u/Hbp3tuVL38+9+uP7787n7X3dH6uGMdxmYiJ9j3pNHXclZXskUI+GSqxIRxIGhEnImKo+f2vxInYeXiV+L5SauMAgL5oNN7oKAMAD79Enw8AA6b1d//mxvpiK5UxD1GWB29tL15t5mubW+34h9orIcMd61vHaSIivvv6teeyFH1ahwQAKPohG/9c7Db+S+Ns4XMnI2Is39t1OiIejYjHCvvFDmuio7x7/JPeP2IVe8rGf5cKe9u2CvHnxk/kpSzm8RhOrqzUlmfy+CdjeDQrz+5Rx9nLT//V61xx/JelrP7WWDBvx/2h0X9es1StV48Sc9GDzyKeGeoWf9Ie/ybNuA/v9Rt3n+p17t/j76/GNxEvdn3+Ozv3kr33J04334fp1lux252XXrjRq/6y48+e/9je8Y8nxf2aawev46cLK7/0OnfY938kea+ZH8mPfVKt12/ORowk7+w+fn7n2la59fks/slz3b//Z2LnTjweEU9ExJMRzeM9X+guXql9+/zh4++vLP6lAz3/g2fGvrh7r1f9+3v+F5q5yfzIfn7/9tvAo9w7AAAA+L9Im/O5STrVzqfp1NT2PO+ZGEtrq2v1l6+sfnx9aXvedzyG09ZMV6UwHzqbzxG2yuc7ynP5HMpXoyeb5anF1dpS2cEDwIA61aP/z/wxWnbrAIC+6dfmdgDgv0v/DwCDR/8PAINH/w8Ag0f/DwCDR/8PAAPlKP/XT0ZG5mHNlP3LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQrr8DAAD//3JA1T8=") prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 10m19.56522515s ago: executing program 3 (id=1927): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') unshare(0x22020600) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) syz_usbip_server_init(0x5) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r3, 0x80, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000200)={0x27}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x8000f28, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) 10m18.159894708s ago: executing program 3 (id=1950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1e8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xffffffff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 10m18.054186699s ago: executing program 3 (id=1952): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x4, 0x124, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x100, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = semget$private(0x0, 0x6, 0x10) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r4, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 10m18.033826601s ago: executing program 32 (id=1952): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x4, 0x124, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x100, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = semget$private(0x0, 0x6, 0x10) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r4, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 6m15.661635553s ago: executing program 4 (id=6115): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x9}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 6m15.174719391s ago: executing program 4 (id=6120): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg(r4, &(0x7f00000002c0)={&(0x7f0000000380)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)="d5d2014ab043b47e83a009f0a09b3a755477f2868c782e75951b49ee05cfd3475affe0d885eeb75ace587637f2882513d8d5476bdb9a93d6ede590fec9871a3bf23a2f3b0951a67a61a01e76cf9d48fb2c41245aca8167492fce59586f0c4f27f502a9ce926c30ca7546112676eb49f901bbba3421bedb74b67f98debd3f5f43b4", 0x81}, {&(0x7f00000005c0)="1501d6893443c9e7735006939f121fd0c5b078c7f13443cda059b8dd0dfa390239e482d7512e3f79a6b515229ec6aa6f4e55d079a5bcac34b0d8bb644340081c972b2fcfb6705c9c8c6e791ab24d7789eba12369e0d7275ee3a8290496e2e9622fd97bc77a1a16d779c991a52caeab5e853f19", 0x73}, {&(0x7f00000007c0)="8445c8a596eca5c197a7965ed6ec37c57da141cb3e6d66824cba3d9232116082b10ddfcc82e244f5af1f821fba9515d2ee3bdf93f3391fafdd91d6ae95cd969a348efaef47dec80d589c5346b5f59235722e5dbba32e68f2807326b69abcb3aea3e793ae1817fb10d5fcd603a31a9eea57985c6c169e4ae6247f8a7b29752011ef432377756e04518a21a620d1f2b2728454349170d014c2d7d657aaa18398f43d2409846a01c604e3ccaae849a3b9c51e17cbe4533c65ffb288992624c84e86e0bac9baf40cf0", 0xc7}, {&(0x7f0000000640)="9ee0889b3d912e7abefe3c034de865721ded1b0c43f5e267873da588c0d39f3da31f8f2c15717369eb6cb7d6fa263cf89d0d4b06bd5d52c24cbf57675bf94ffb22f2a4e4700438f86f1820424e461ae26db34755c6c043f970bfce3376466a3c8aff954a6ac43f4abf6f068acda9ff6ab07027fb8ceae3327916684ac8842f75c11a1edffbe8d5a3cdac0bd5ed93f40cb6593903909bf3cef2aa3d7900693c31b7da341e5cbc9e4482ce236c8fee976275047838", 0xb4}, {&(0x7f00000008c0)="5c682fb3709d2bbea96e41d5f7ce9649e2cc488a4d434bbc65bb39f7bfd743714edc4ecd620b43fee028fe240324b66b0dc1517f9642eb5eae4d11317872121d8e241a0b483e0ecd45f4caf1990f5fad56a613b4f5c7ab5807727a553f1bd570ecb91e41f11a365b7b74f4774f4f0ddc56b78ed0459ae0a465ee1be78060593e13c3a44ac5d0332876dc20e49d34fdd6f87861e2f62d05689e50f26c49a11d38e8d02b7d64835762b20d9c82fdc6235cd068e9da8180edcf55deae697622912222f2e8739d6cb70b2f442c38a115a3c15dfc0abc94f974e2b4", 0xd9}, {&(0x7f0000000200)="82a67f2e9d486398b196843b8a6b8c4670c90e3d349a3118a3fb4c247ac4e9ec95a00eca7e1005b067623e0e19822f9a8d0a2324", 0x34}], 0x6}, 0x41) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300)={0xfff, 0x0, 0x4, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 6m14.360750811s ago: executing program 4 (id=6129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@errors_remount}, {@block_validity}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r4 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 6m14.049898132s ago: executing program 4 (id=6133): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4010000041010000280032800e0001006970366772657461700004001400028006000300040000000600020008000061"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x8942, 0xc000, 0xa, 0x389, 0x0, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) tkill(r7, 0x12) io_uring_enter(r5, 0x2219, 0xf9c1, 0x16, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r8 = syz_open_pts(r0, 0x80) dup3(r8, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 6m13.637642602s ago: executing program 4 (id=6136): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 6m13.427845903s ago: executing program 4 (id=6139): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000effffffffffffffe7f000095000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000002c0)=ANY=[], 0x118) ioprio_set$pid(0x2, 0x0, 0xe008) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[]) 6m13.427624733s ago: executing program 33 (id=6139): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000effffffffffffffe7f000095000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000002c0)=ANY=[], 0x118) ioprio_set$pid(0x2, 0x0, 0xe008) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[]) 3.113026163s ago: executing program 5 (id=12419): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x4000054) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 3.077400786s ago: executing program 5 (id=12421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 3.058286078s ago: executing program 5 (id=12424): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dd\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\n\x1dm\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x1e24, 0x1, {{0xc, 0x4, 0x0, 0xf, 0x30, 0x65, 0xe0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x5f, 0x1, 0x9, [{@loopback, 0x3}]}, @lsrr={0x83, 0xf, 0x78, [@loopback, @empty, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000a40)}, 0x100002, 0x80000, 0xffffffff, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000080)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a8000010ca374e4ffb5c1fb55a94e13cfcc93307de7039ca337c5c872659efa406635f3d345a4736556d47a96087dd3fe55908d93c4264c211ee3082dbb9bcd7f8e4adc1729671cfa80041e1ec4aee5acbe0776e2e2c667cfbd624faa5ddb50000000097d094497d4bb263971fd97895ce66bd9f964dfd1eb8d615c1f27ef4431530c2f48bb624420df5d4e10ad7eb493881fdbd46358d1db1163ac25608e29088da485235c2e9a2c198f5e18d6e8493e4c1274b33bb6d60e0135a8825", @ANYRES16=r7, @ANYBLOB="200028bd7000fcdbdf2501000000940008800c00078008000500cdf64e0f1c00078008000600ab000000080005005e0f7822080006001b0000002400078008000600b10000000800060024000000080006004400000008000500d1a9774f4400078008000600620000000800050044484d60080005001818530908000500774eed4e08000600c40000000800060067000000080005008c5a634008000500820c5c3c"], 0xa8}}, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @dev={0xfe, 0x80, '\x00', 0x17}}}) 2.698508514s ago: executing program 1 (id=12439): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009bb04f0ae89d0c288e3b46831d6adb43c86d73dd7a35ea130d0ab478f61b219ca93b27ce831bf8dcccdbbf91603fced5bdf91b0d151ffffc85490152fd7834c46398a4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYBLOB="60cdfb2a6bf87e44d7e6ff2b103a9a9c958aaf9c7bec04638cb59f35e5d88c61f17cea8592ac6c55acc6adc512fa6d8f7630fe34d36983521574d3a469890bdd645a016ff33ac3c4f42e9b3b630bd69c9dff22ca9715f633df3454"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffeffff, &(0x7f0000000440)=[{&(0x7f00000003c0)="1a", 0x1}], 0x1, 0x6, 0x1, {0x1c}}) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 2.282688265s ago: executing program 5 (id=12442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2014, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x330, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0xffffffff}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x5, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x18, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @private=0xa010102, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40095505, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_io_uring_setup(0x3791, &(0x7f0000000e00)={0x0, 0xfec9, 0x0, 0x2000, 0xae0}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1.047470597s ago: executing program 1 (id=12466): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 780.431713ms ago: executing program 1 (id=12467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 727.792948ms ago: executing program 1 (id=12471): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x200}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) mount$9p_rdma(&(0x7f0000000480), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000001380)=ANY=[@ANYBLOB='trans=rdma']) 700.891651ms ago: executing program 1 (id=12473): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 693.071771ms ago: executing program 2 (id=12474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='gid_map\x00') write$selinux_create(r4, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4ebad30fa4b555b95000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c00028008000200feffffff140003007866726d3000"/56], 0x50}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, r5, 0x0, 0x4, 0x46, 0x3}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008880}, 0x40000) 613.222139ms ago: executing program 2 (id=12476): socket(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xbc, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_vlan={0xa4, 0x9, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x802}]}, {0x58, 0x6, "d2abc1259008a1cbe7a0d83945d876e5ade7574242b7003e36f9cb9397e7508b6af8a6e98ad5fea58d8b310c504ac3bf6ad07bb568f86e3c4e9bfd5a3afb7bb9494e7b4101ca1394951532fba21ed6fcf672bce2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x107a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, r9, 0xe01, 0x70bd2d, 0x25dfdbfb}, 0x1c}}, 0x24048004) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r7, @ANYBLOB="0000259c8b61f8012a65b8b6e5e943c9bd7000fcdbdf25070000000c0017000203aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) socket(0x10, 0x3, 0x0) 608.23639ms ago: executing program 1 (id=12478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x6005, 0x0, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) pipe2(0x0, 0x4080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100), 0x10) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r6, 0x53, 0x0) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8}, &(0x7f0000000000), &(0x7f0000000200)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_validatetrans(r7, 0x0, 0xa) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000000)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@discard}]}, 0x1, 0x59d, &(0x7f00000005c0)="$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") removexattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.upper\x00') write$binfmt_script(r6, &(0x7f0000000b80)={'#! ', './file0', [], 0xa, "3313f304ecf7fda507b70df49b8830ee43222cda3abe6acd1c9a26c5d63740f9bbacb90c7ab7bca40e5ec248cb67e65006a4a37c369d5e064f9402287137e33c543fa54feab7ab26bbaa9d6d4c45249df32f1e54d5e4ed5894ebcd95903a0b24caf157ab9854b2fe37e2871461c6bec33dac016cfe82dc1048141b74c26e1029ba279f27bb623a"}, 0x92) 580.877172ms ago: executing program 2 (id=12480): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xc, 0x6, 0x7ffc1ff8}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) fsync(0xffffffffffffffff) 542.916816ms ago: executing program 5 (id=12482): bpf$ENABLE_STATS(0x20, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_alloc\x00', r0, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x4c}, 0x94) 507.85414ms ago: executing program 5 (id=12484): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) pipe2$9p(0x0, 0x0) r3 = dup(0xffffffffffffffff) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000380)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)="d5d2014ab043b47e83a009f0a09b3a755477f2868c782e75951b49ee05cfd3475affe0d885eeb75ace587637f2882513d8d5476bdb9a93d6ede590fec9871a3bf23a2f3b0951a67a61a01e76cf9d48fb2c41245aca8167492fce59586f0c4f27f502a9ce926c30ca7546112676eb49f901bbba3421bedb74b67f98debd3f5f", 0x7f}, {&(0x7f00000005c0)="1501d6893443c9e7735006939f121fd0c5b078c7f13443cda059b8dd0dfa390239e482d7512e3f79a6b515229ec6aa6f4e55d079a5bcac34b0d8bb644340081c972b2fcfb6705c9c8c6e791ab24d7789eba12369e0d7275ee3a8290496e2e9622fd97bc77a1a16d779c991a52caeab5e853f19", 0x73}, {&(0x7f00000007c0)="8445c8a596eca5c197a7965ed6ec37c57da141cb3e6d66824cba3d9232116082b10ddfcc82e244f5af1f821fba9515d2ee3bdf93f3391fafdd91d6ae95cd969a348efaef47dec80d589c5346b5f59235722e5dbba32e68f2807326b69abcb3aea3e793ae1817fb10d5fcd603a31a9eea57985c6c169e4ae6247f8a7b29752011ef432377756e04518a21a620d1f2b2728454349170d014c2d7d657aaa18398f43d2409846a01c604e3ccaae849a3b9c51e17cbe4533c65ffb288992624c84e86e0bac9baf40cf0", 0xc7}, {&(0x7f0000000640)="9ee0889b3d912e7abefe3c034de865721ded1b0c43f5e267873da588c0d39f3da31f8f2c15717369eb6cb7d6fa263cf89d0d4b06bd5d52c24cbf57675bf94ffb22f2a4e4700438f86f1820424e461ae26db34755c6c043f970bfce3376466a3c8aff954a6ac43f4abf6f068acda9ff6ab07027fb8ceae3327916684ac8842f75c11a1edffbe8d5a3cdac0bd5ed93f40cb6593903909bf3cef2aa3d7900693c31b7da341e5cbc9e4482ce236c8fee976275047838", 0xb4}, {&(0x7f00000008c0)="5c682fb3709d2bbea96e41d5f7ce9649e2cc488a4d434bbc65bb39f7bfd743714edc4ecd620b43fee028fe240324b66b0dc1517f9642eb5eae4d11317872121d8e241a0b483e0ecd45f4caf1990f5fad56a613b4f5c7ab5807727a553f1bd570ecb91e41f11a365b7b74f4774f4f0ddc56b78ed0459ae0a465ee1be78060593e13c3a44ac5d0332876dc20e49d34fdd6f87861e2f62d05689e50f26c49a11d38e8d02b7d64835762b20d9c82fdc6235cd068e9da8180edcf55deae697622912222f2e8739d6cb70b2f442c38a115a3c15dfc0abc94f974e2b4", 0xd9}, {&(0x7f0000000200)="82a67f2e9d486398b196843b8a6b8c4670c90e3d349a3118a3fb4c247ac4e9ec95a00eca7e1005b067623e0e19822f9a8d0a2324", 0x34}], 0x6}, 0x41) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300)={0xfff, 0x0, 0x4, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 415.544229ms ago: executing program 0 (id=12486): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) 414.668669ms ago: executing program 0 (id=12487): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba6e6a869a636c008a123467d4ebde947f09e3e18471413aacf"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r2}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r5 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r2, r5) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f00000001c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64=r3, @ANYRES32=r5, @ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 297.03164ms ago: executing program 0 (id=12489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x7}, 0x18) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 289.723791ms ago: executing program 2 (id=12490): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='map\x00', 0xffffffffffffffff, 0x0, 0x2001}, 0x18) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=@delneigh={0x80, 0x1d, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, r4, 0x24c1a254c047b388, 0x70, 0x898b527047a14d9c}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004880) lstat(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000780)='nilfs2_collection_stage_transition\x00', r6, 0x0, 0xfffc}, 0x4a) set_tid_address(0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='svcrdma_decode_short_err\x00'}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25250000000e00a80066697273746e616d65000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) close(r9) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=ANY=[@ANYBLOB="140000001800010900"/20], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYRESDEC=r7, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES32=r4, @ANYRESOCT=r11], 0xe) 289.176581ms ago: executing program 6 (id=12491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0xfeaf) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRES64=r0], 0xe8}}, 0x20000050) 223.826427ms ago: executing program 0 (id=12492): open_by_handle_at(0xffffffffffffffff, 0x0, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="53b748bf412183542dd1cd69f07c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e0101000000000000000001001400"], 0x70}, 0x1, 0x7}, 0x0) 209.219959ms ago: executing program 0 (id=12493): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 172.598922ms ago: executing program 0 (id=12494): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYBLOB="6477803c549d0188586abc28d45d4b00e3ae05f371b0950712cabe31beb63f9e53fc01974549eb1d50dfaa1a3e1b52ce0fe1fad21a227189817de666697fa613dae6ea3ad3448bd7c3470516a698bebc5a7f570fa1c578a3b5b097401b41d2f60b4be2c09aa93de9fb3c64173d9fc9eb23765af9fcb6c63a6d50c0741eab2b4db3c7be5002b8a2d72f5adae537019fb18baccebecf77088ae15a279a5a002324d5d8be4df92b5cb3058918ea6b415a7d50c03a5494569adbcef177b9d1bc5083d1bb5e74812ad38ac8480d8536d19f0f3f5126acd029aff77dd57422a2f678edc615ea4c44ad36aaa6a713bb67378cec5eb7eec9abc8b82c7a6e8e9cc1", @ANYBLOB="60cdfb2a6bf87e44d7e6ff2b103a9a9c958aaf9c7bec04638cb59f35e5d88c61f17cea8592ac6c55acc6adc512fa6d8f7630fe34d36983521574d3a469890bdd645a016ff33ac3c4f42e9b3b630bd69c9dff22ca9715f633df3454"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffeffff, &(0x7f0000000440)=[{&(0x7f00000003c0)="1a", 0x1}], 0x1, 0x6, 0x1, {0x1c}}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 145.729085ms ago: executing program 6 (id=12495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000000010000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6e, 0x40, 0x7ffc1ff8}]}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 145.102075ms ago: executing program 2 (id=12496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fdatasync(r3) utimes(0x0, 0x0) 143.749625ms ago: executing program 2 (id=12497): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0xf, 0x4, 0x3}, {0x6, 0xe5, 0x0, 0x3}]}) fcntl$setstatus(r1, 0x4, 0x42000) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 125.043837ms ago: executing program 6 (id=12498): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 96.90428ms ago: executing program 6 (id=12499): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 57.868834ms ago: executing program 6 (id=12500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) 0s ago: executing program 6 (id=12501): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) dup2(r7, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f00000002c0)=0x1, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x10000}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) kernel console output (not intermixed with test programs): 7] Tainted: [W]=WARN [ 723.129441][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 723.129460][ T7097] Call Trace: [ 723.129471][ T7097] [ 723.129481][ T7097] __dump_stack+0x1d/0x30 [ 723.129514][ T7097] dump_stack_lvl+0xe8/0x140 [ 723.129543][ T7097] dump_stack+0x15/0x1b [ 723.129632][ T7097] should_fail_ex+0x265/0x280 [ 723.129683][ T7097] should_failslab+0x8c/0xb0 [ 723.129723][ T7097] kmem_cache_alloc_noprof+0x50/0x480 [ 723.129771][ T7097] ? ext4_init_io_end+0x31/0xb0 [ 723.129902][ T7097] ext4_init_io_end+0x31/0xb0 [ 723.129944][ T7097] ext4_do_writepages+0x6e3/0x2750 [ 723.130018][ T7097] ? get_perf_callchain+0x452/0x530 [ 723.130095][ T7097] ? __rcu_read_unlock+0x4f/0x70 [ 723.130131][ T7097] ? avc_has_perm_noaudit+0x1b1/0x200 [ 723.130250][ T7097] ? avc_has_perm+0xf7/0x180 [ 723.130299][ T7097] ? selinux_file_open+0x2df/0x330 [ 723.130339][ T7097] ? __rcu_read_unlock+0x34/0x70 [ 723.130429][ T7097] ext4_writepages+0x176/0x300 [ 723.130469][ T7097] ? __pfx_ext4_writepages+0x10/0x10 [ 723.130502][ T7097] do_writepages+0x1c6/0x310 [ 723.130532][ T7097] ? __bpf_get_stackid+0x7d4/0x800 [ 723.130584][ T7097] ? _raw_spin_unlock+0x26/0x50 [ 723.130693][ T7097] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 723.130771][ T7097] file_write_and_wait_range+0x156/0x2c0 [ 723.130855][ T7097] ? kstrtoull+0x111/0x140 [ 723.130927][ T7097] generic_buffers_fsync_noflush+0x45/0x120 [ 723.131042][ T7097] ext4_sync_file+0x1ab/0x690 [ 723.131144][ T7097] ? __pfx_ext4_sync_file+0x10/0x10 [ 723.131173][ T7097] __x64_sys_fdatasync+0x80/0xe0 [ 723.131210][ T7097] x64_sys_call+0x2f92/0x3000 [ 723.131313][ T7097] do_syscall_64+0xd2/0x200 [ 723.131346][ T7097] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 723.131387][ T7097] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 723.131451][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.131483][ T7097] RIP: 0033:0x7f930d36eec9 [ 723.131505][ T7097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.131533][ T7097] RSP: 002b:00007f930bd95038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 723.131562][ T7097] RAX: ffffffffffffffda RBX: 00007f930d5c6180 RCX: 00007f930d36eec9 [ 723.131581][ T7097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 723.131662][ T7097] RBP: 00007f930bd95090 R08: 0000000000000000 R09: 0000000000000000 [ 723.131680][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.131697][ T7097] R13: 00007f930d5c6218 R14: 00007f930d5c6180 R15: 00007fff2bebd6b8 [ 723.131725][ T7097] [ 723.248348][ T7097] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 723.289233][ T29] audit: type=1326 audit(2000000981.101:49249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 723.294243][ T7097] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 723.299247][ T29] audit: type=1326 audit(2000000981.112:49250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 723.313266][ T7041] vhci_hcd: connection reset by peer [ 723.314646][ T29] audit: type=1326 audit(2000000981.133:49251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 723.320173][T15097] vhci_hcd: stop threads [ 723.324476][ T29] audit: type=1326 audit(2000000981.143:49252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.5.11947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 723.329806][T15097] vhci_hcd: release socket [ 723.329844][T15097] vhci_hcd: disconnect device [ 723.366291][ T7097] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1292 with error 28 [ 723.369944][ T9] usb 11-1: enqueue for inactive port 0 [ 723.371679][ T7097] EXT4-fs (loop1): This should not happen!! Data will be lost [ 723.371679][ T7097] [ 723.376973][ T9] usb 11-1: enqueue for inactive port 0 [ 723.387060][T31106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.450648][ T9] vhci_hcd: vhci_device speed not set [ 723.451060][ T7097] EXT4-fs (loop1): Total free blocks count 0 [ 723.671963][ T7097] EXT4-fs (loop1): Free/Dirty block details [ 723.677880][ T7097] EXT4-fs (loop1): free_blocks=2415919504 [ 723.683730][ T7097] EXT4-fs (loop1): dirty_blocks=1296 [ 723.689060][ T7097] EXT4-fs (loop1): Block reservation details [ 723.695199][ T7097] EXT4-fs (loop1): i_reserved_data_blocks=81 [ 723.731427][ T7117] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 723.737983][ T7117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 723.745972][ T7117] vhci_hcd vhci_hcd.0: Device attached [ 723.814823][T31751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.898707][ T7130] netlink: 'syz.5.11980': attribute type 10 has an invalid length. [ 723.919929][ T7132] FAULT_INJECTION: forcing a failure. [ 723.919929][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.924492][ T7130] team0: Port device dummy0 added [ 723.933221][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.6.11981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 723.933298][ T7132] Tainted: [W]=WARN [ 723.933308][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 723.933325][ T7132] Call Trace: [ 723.933333][ T7132] [ 723.933340][ T7132] __dump_stack+0x1d/0x30 [ 723.933366][ T7132] dump_stack_lvl+0xe8/0x140 [ 723.933392][ T7132] dump_stack+0x15/0x1b [ 723.933451][ T7132] should_fail_ex+0x265/0x280 [ 723.933497][ T7132] should_fail+0xb/0x20 [ 723.933562][ T7132] should_fail_usercopy+0x1a/0x20 [ 723.933590][ T7132] _copy_to_user+0x20/0xa0 [ 723.933623][ T7132] simple_read_from_buffer+0xb5/0x130 [ 723.933659][ T7132] proc_fail_nth_read+0x10e/0x150 [ 723.933755][ T7132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.933807][ T7132] vfs_read+0x1a5/0x770 [ 723.933835][ T7132] ? __rcu_read_unlock+0x4f/0x70 [ 723.933864][ T7132] ? __fget_files+0x184/0x1c0 [ 723.933980][ T7132] ksys_read+0xda/0x1a0 [ 723.934014][ T7132] __x64_sys_read+0x40/0x50 [ 723.934047][ T7132] x64_sys_call+0x27c0/0x3000 [ 723.934141][ T7132] do_syscall_64+0xd2/0x200 [ 723.934176][ T7132] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 723.934214][ T7132] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 723.934248][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.934348][ T7132] RIP: 0033:0x7f51a4edd8dc [ 723.934371][ T7132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 723.934398][ T7132] RSP: 002b:00007f51a3947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.934426][ T7132] RAX: ffffffffffffffda RBX: 00007f51a5135fa0 RCX: 00007f51a4edd8dc [ 723.934444][ T7132] RDX: 000000000000000f RSI: 00007f51a39470a0 RDI: 0000000000000004 [ 723.934462][ T7132] RBP: 00007f51a3947090 R08: 0000000000000000 R09: 0000000000000000 [ 723.934480][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.934557][ T7132] R13: 00007f51a5136038 R14: 00007f51a5135fa0 R15: 00007fffd8e4ebe8 [ 723.934586][ T7132] [ 724.051356][ T7139] netlink: 'syz.5.11980': attribute type 10 has an invalid length. [ 724.164300][ T7139] team0: Port device dummy0 removed [ 724.186194][ T7139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 724.206634][ T7141] loop6: detected capacity change from 0 to 164 [ 724.358949][ T7154] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 724.377785][ T7156] netlink: 'syz.5.11991': attribute type 13 has an invalid length. [ 724.501963][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.511154][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.523812][ T7119] vhci_hcd: connection closed [ 724.544512][ T6002] vhci_hcd: stop threads [ 724.554139][ T6002] vhci_hcd: release socket [ 724.558279][ T7156] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 724.558695][ T6002] vhci_hcd: disconnect device [ 724.584408][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.594548][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.630237][ T23] lo speed is unknown, defaulting to 1000 [ 724.636618][ T23] syz2: Port: 1 Link DOWN [ 724.638206][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.650545][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11993'. [ 724.666091][ T6002] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.675260][ T6002] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.683908][ T6002] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.697728][ T6002] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.834561][ T7182] bridge0: port 1(batadv0) entered blocking state [ 724.836303][ T23] hid-generic 0003:0004:0000.0061: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 724.841098][ T7182] bridge0: port 1(batadv0) entered disabled state [ 724.856969][ T7182] batadv0: entered allmulticast mode [ 724.864146][ T7182] batadv0: entered promiscuous mode [ 724.951616][ T7196] netlink: 'syz.0.12007': attribute type 13 has an invalid length. [ 724.960385][ T7196] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 725.152581][ T7212] netlink: 5452 bytes leftover after parsing attributes in process `+}[@'. [ 725.181140][ T9] hid-generic 0003:0004:0000.0062: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 725.200746][ T7216] netlink: 'syz.0.12013': attribute type 2 has an invalid length. [ 725.210424][ T7216] netlink: 'syz.0.12013': attribute type 1 has an invalid length. [ 725.218394][ T7216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12013'. [ 725.236567][ T7218] bridge0: port 2(batadv3) entered blocking state [ 725.243210][ T7218] bridge0: port 2(batadv3) entered disabled state [ 725.262636][ T7218] batadv3: entered allmulticast mode [ 725.269031][ T7218] batadv3: entered promiscuous mode [ 725.308046][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 725.317447][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 725.346020][ T7223] netlink: 5452 bytes leftover after parsing attributes in process `+}[@'. [ 725.425040][ T7231] netlink: 'syz.6.12019': attribute type 10 has an invalid length. [ 725.437292][ T7232] Invalid ELF header magic: != ELF [ 725.504559][ T7235] loop2: detected capacity change from 0 to 1024 [ 725.511460][ T7233] netlink: 'syz.6.12019': attribute type 10 has an invalid length. [ 725.677817][ T7241] SELinux: policydb magic number 0x7637069 does not match expected magic number 0xf97cff8c [ 725.689566][ T7241] SELinux: failed to load policy [ 725.717597][T15097] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 725.726913][T15097] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 725.755941][ T1038] usb 5-1: enqueue for inactive port 0 [ 725.794456][ T1038] usb 5-1: enqueue for inactive port 0 [ 725.860290][ T7250] netlink: 'syz.2.12025': attribute type 10 has an invalid length. [ 725.888757][ T1038] vhci_hcd: vhci_device speed not set [ 725.921052][ T7231] bond0: (slave dummy0): Releasing backup interface [ 725.932975][ T7231] team0: Port device dummy0 added [ 725.944077][ T7233] team0: Port device dummy0 removed [ 725.953336][ T7233] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 726.110395][ T7247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 726.238566][ T7264] loop6: detected capacity change from 0 to 1024 [ 726.257562][ T7266] FAULT_INJECTION: forcing a failure. [ 726.257562][ T7266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.270702][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.5.12034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 726.270746][ T7266] Tainted: [W]=WARN [ 726.270806][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 726.270904][ T7266] Call Trace: [ 726.270912][ T7266] [ 726.270921][ T7266] __dump_stack+0x1d/0x30 [ 726.270951][ T7266] dump_stack_lvl+0xe8/0x140 [ 726.270978][ T7266] dump_stack+0x15/0x1b [ 726.271001][ T7266] should_fail_ex+0x265/0x280 [ 726.271091][ T7266] should_fail+0xb/0x20 [ 726.271131][ T7266] should_fail_usercopy+0x1a/0x20 [ 726.271152][ T7266] _copy_from_user+0x1c/0xb0 [ 726.271185][ T7266] addrconf_add_ifaddr+0x93/0x270 [ 726.271310][ T7266] inet6_ioctl+0xb0/0x190 [ 726.271354][ T7266] ? ioctl_has_perm+0x257/0x2a0 [ 726.271394][ T7266] sock_do_ioctl+0x70/0x220 [ 726.271463][ T7266] sock_ioctl+0x41b/0x610 [ 726.271498][ T7266] ? __pfx_sock_ioctl+0x10/0x10 [ 726.271534][ T7266] __se_sys_ioctl+0xce/0x140 [ 726.271600][ T7266] __x64_sys_ioctl+0x43/0x50 [ 726.271624][ T7266] x64_sys_call+0x1816/0x3000 [ 726.271655][ T7266] do_syscall_64+0xd2/0x200 [ 726.271687][ T7266] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 726.271722][ T7266] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 726.271827][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.271859][ T7266] RIP: 0033:0x7fcbbf73eec9 [ 726.271877][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.271896][ T7266] RSP: 002b:00007fcbbe19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.271919][ T7266] RAX: ffffffffffffffda RBX: 00007fcbbf995fa0 RCX: 00007fcbbf73eec9 [ 726.271936][ T7266] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 726.271954][ T7266] RBP: 00007fcbbe19f090 R08: 0000000000000000 R09: 0000000000000000 [ 726.271971][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.272004][ T7266] R13: 00007fcbbf996038 R14: 00007fcbbf995fa0 R15: 00007fffd4043e38 [ 726.272039][ T7266] [ 726.332589][ T37] usb 3-1: enqueue for inactive port 0 [ 726.379637][ T7264] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.12031: Failed to acquire dquot type 0 [ 726.506303][ T7269] bridge0: port 2(batadv2) entered blocking state [ 726.513413][ T7269] bridge0: port 2(batadv2) entered disabled state [ 726.520158][ T7269] batadv2: entered allmulticast mode [ 726.526077][ T7269] batadv2: entered promiscuous mode [ 726.539130][ T7274] loop5: detected capacity change from 0 to 1024 [ 726.555130][ T37] usb 3-1: enqueue for inactive port 0 [ 726.573311][ T7264] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 726.590252][ T7274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.602754][ T7264] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.12031: corrupted inode contents [ 726.615320][ T7264] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #13: comm syz.6.12031: mark_inode_dirty error [ 726.631724][ T37] vhci_hcd: vhci_device speed not set [ 726.648093][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.668340][ T7264] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.12031: corrupted inode contents [ 726.700304][ T7284] netlink: zone id is out of range [ 726.705464][ T7284] netlink: set zone limit has 8 unknown bytes [ 726.711969][ T7264] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.12031: mark_inode_dirty error [ 726.714996][ T7286] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 726.734634][ T7264] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.12031: corrupted inode contents [ 726.762468][ T7264] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 726.778273][ T7264] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.12031: corrupted inode contents [ 726.795778][ T1038] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz1 [ 726.805498][ T7264] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.12031: mark_inode_dirty error [ 726.808294][ T7293] loop5: detected capacity change from 0 to 1024 [ 726.817779][T15121] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 726.827615][ T7264] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 726.832806][T15121] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 726.836424][ T7277] program syz.0.12037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.862347][ T7293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 726.870721][ T7264] EXT4-fs (loop6): 1 truncate cleaned up [ 726.881018][ T7264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.884719][ T7293] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.917873][ T7293] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.12042: lblock 0 mapped to illegal pblock 0 (length 1) [ 726.951226][ T7293] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.12042: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 727.010571][ T7293] syzkaller0: entered promiscuous mode [ 727.016578][ T7293] syzkaller0: entered allmulticast mode [ 727.044473][ T7310] netlink: 'syz.1.12049': attribute type 13 has an invalid length. [ 727.053458][ T7299] netlink: 'syz.2.12045': attribute type 1 has an invalid length. [ 727.066021][T31106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.117183][ T7317] netlink: 'syz.6.12051': attribute type 10 has an invalid length. [ 727.166981][ T7320] netlink: 'syz.6.12051': attribute type 10 has an invalid length. [ 727.304387][ T7317] bond0: (slave dummy0): Releasing backup interface [ 727.316844][ T7317] team0: Port device dummy0 added [ 727.319094][ T7327] loop1: detected capacity change from 0 to 512 [ 727.333077][ T7327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.12056: error while reading EA inode 32 err=-116 [ 727.342266][ T7320] team0: Port device dummy0 removed [ 727.353774][ T7327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.12056: error while reading EA inode 32 err=-116 [ 727.358352][ T7320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 727.368222][ T7327] EXT4-fs (loop1): 1 orphan inode deleted [ 727.404116][T15097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.410772][ T7327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.430692][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 727.437155][ T7325] team0: Port device dummy0 added [ 727.448181][ T7335] netlink: zone id is out of range [ 727.454463][ T7328] team0: Port device dummy0 removed [ 727.460272][ T7335] netlink: set zone limit has 8 unknown bytes [ 727.474191][ T7328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 727.484785][ T7338] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.12056: unexpected EA_INODE flag [ 727.487434][T15097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.521866][T15097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.531339][T15097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.652803][T31751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.666696][ T7354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 727.673350][ T7354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 727.681100][ T7354] vhci_hcd vhci_hcd.0: Device attached [ 727.707431][ T7362] .`: (slave dummy0): Releasing backup interface [ 727.747165][ T7362] .`: (slave dummy0): Enslaving as an active interface with an up link [ 727.761524][ T23] hid_parser_main: 85 callbacks suppressed [ 727.761549][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.774927][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.782615][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.790073][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.797710][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.805447][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.812930][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.820478][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.827972][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.835515][ T23] hid-generic 0003:0004:0000.0064: unknown main item tag 0x0 [ 727.849491][ T29] kauditd_printk_skb: 821 callbacks suppressed [ 727.849507][ T29] audit: type=1326 audit(2000001753.929:50072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.2.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbe7e13eec9 code=0x7ffc0000 [ 727.887713][ T23] hid-generic 0003:0004:0000.0064: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 727.914166][T15097] team0: Port device netdevsim1 removed [ 727.930807][ T29] audit: type=1326 audit(2000001753.929:50073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.2.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e13eec9 code=0x7ffc0000 [ 727.954638][ T29] audit: type=1326 audit(2000001753.929:50074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.2.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e13eec9 code=0x7ffc0000 [ 727.978335][ T29] audit: type=1326 audit(2000001753.939:50075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.2.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e13eec9 code=0x7ffc0000 [ 728.002044][ T29] audit: type=1326 audit(2000001753.960:50076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.2.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7e13eec9 code=0x7ffc0000 [ 728.025739][ T29] audit: type=1326 audit(2000001753.971:50077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.1.12069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d36eec9 code=0x7ffc0000 [ 728.049386][ T29] audit: type=1326 audit(2000001753.971:50078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.1.12069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930d36eec9 code=0x7ffc0000 [ 728.059311][ T7380] loop1: detected capacity change from 0 to 164 [ 728.073066][ T29] audit: type=1326 audit(2000001753.971:50079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.1.12069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d36eec9 code=0x7ffc0000 [ 728.102998][ T29] audit: type=1326 audit(2000001753.971:50080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.1.12069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930d36eec9 code=0x7ffc0000 [ 728.127220][ T29] audit: type=1326 audit(2000001753.971:50081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.1.12069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930d36eec9 code=0x7ffc0000 [ 728.130227][ T7382] loop6: detected capacity change from 0 to 512 [ 728.151663][ T9] usb 5-1: new low-speed USB device number 13 using vhci_hcd [ 728.187854][ T7363] lo speed is unknown, defaulting to 1000 [ 728.194981][ T7363] lo speed is unknown, defaulting to 1000 [ 728.211459][ T7380] syz.1.12070: attempt to access beyond end of device [ 728.211459][ T7380] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 728.247729][ T7380] syz.1.12070: attempt to access beyond end of device [ 728.247729][ T7380] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 728.428847][ T7394] __nla_validate_parse: 4 callbacks suppressed [ 728.428864][ T7394] netlink: 160 bytes leftover after parsing attributes in process `syz.6.12072'. [ 728.444766][ T7394] netlink: zone id is out of range [ 728.450361][ T7394] netlink: set zone limit has 8 unknown bytes [ 728.456702][ T7357] vhci_hcd: connection reset by peer [ 728.463107][ T7393] bond0: (slave dummy0): Releasing backup interface [ 728.470320][ T5999] vhci_hcd: stop threads [ 728.474596][ T5999] vhci_hcd: release socket [ 728.479044][ T5999] vhci_hcd: disconnect device [ 728.485986][ T7393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.498838][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12074'. [ 728.515532][ T7397] bridge0: port 3(batadv4) entered blocking state [ 728.522191][ T7397] bridge0: port 3(batadv4) entered disabled state [ 728.529090][ T7397] batadv4: entered allmulticast mode [ 728.535135][ T7397] batadv4: entered promiscuous mode [ 728.541189][ T7395] veth1_vlan: left promiscuous mode [ 728.547084][ T7395] batman_adv: batadv0: Interface activated: veth1_vlan [ 728.556881][T15097] batadv3: left allmulticast mode [ 728.562057][T15097] batadv3: left promiscuous mode [ 728.567292][T15097] bridge0: port 2(batadv3) entered disabled state [ 728.588294][T15097] batadv2: left allmulticast mode [ 728.593385][T15097] batadv2: left promiscuous mode [ 728.598719][T15097] bridge0: port 1(batadv2) entered disabled state [ 728.698896][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12077'. [ 728.710966][T15097] .` (unregistering): Released all slaves [ 728.731262][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 728.742150][ T7402] bond0: (slave dummy0): Releasing backup interface [ 728.760059][ T7402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.781643][ T7403] batman_adv: batadv0: Interface activated: veth1_vlan [ 728.891575][ T1038] IPVS: starting estimator thread 0... [ 728.897633][ T7415] loop6: detected capacity change from 0 to 512 [ 728.915615][ T7415] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 728.930950][ T7415] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 728.947888][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.955117][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.962924][ T7363] bridge_slave_0: entered allmulticast mode [ 728.969245][ T7415] EXT4-fs (loop6): 1 truncate cleaned up [ 728.984793][ T7416] IPVS: using max 1728 ests per chain, 86400 per kthread [ 728.992687][ T7415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.019118][ T7363] bridge_slave_0: entered promiscuous mode [ 729.023574][T15120] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 729.034400][T15120] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 729.040742][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.050746][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.067576][ T7363] bridge_slave_1: entered allmulticast mode [ 729.079812][ T7363] bridge_slave_1: entered promiscuous mode [ 729.124400][ T7420] netlink: 100 bytes leftover after parsing attributes in process `syz.5.12082'. [ 729.150547][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.163645][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12083'. [ 729.169202][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.198495][T31106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.306519][ T7363] team0: Port device team_slave_0 added [ 729.328654][ T7363] team0: Port device team_slave_1 added [ 729.374535][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.381842][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.409114][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.422853][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.429975][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.456403][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.483617][ T7443] team0: Port device dummy0 added [ 729.513131][ T7443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 729.526299][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12092'. [ 729.535478][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12092'. [ 729.556552][ T7443] team0: Failed to send options change via netlink (err -105) [ 729.564374][ T7443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 729.573705][ T7443] team0: Port device dummy0 removed [ 729.581460][ T7443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 729.630922][ T7363] hsr_slave_0: entered promiscuous mode [ 729.637835][ T7363] hsr_slave_1: entered promiscuous mode [ 729.644120][ T7363] debugfs: 'hsr0' already exists in 'hsr' [ 729.649900][ T7363] Cannot create hsr debugfs directory [ 729.655846][ T7379] lo speed is unknown, defaulting to 1000 [ 729.679484][ T7451] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 729.686287][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 729.689327][ T7454] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 729.693839][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 729.700441][ T7454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 729.700566][ T7454] vhci_hcd vhci_hcd.0: Device attached [ 729.749958][ T7379] lo speed is unknown, defaulting to 1000 [ 729.775685][T15097] hsr_slave_0: left promiscuous mode [ 729.781580][T15097] hsr_slave_1: left promiscuous mode [ 729.788302][T15097] batman_adv: batadv0: Removing interface: veth1_vlan [ 729.946227][ T3392] usb 13-1: new low-speed USB device number 15 using vhci_hcd [ 729.950827][ T3406] usb 11-1: new low-speed USB device number 15 using vhci_hcd [ 729.972942][ T7463] loop2: detected capacity change from 0 to 1024 [ 730.115589][ T7468] loop2: detected capacity change from 0 to 164 [ 730.138376][ T7468] syz.2.12097: attempt to access beyond end of device [ 730.138376][ T7468] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 730.162146][ T7468] syz.2.12097: attempt to access beyond end of device [ 730.162146][ T7468] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 730.474352][ T7452] vhci_hcd: connection reset by peer [ 730.482435][ T5999] vhci_hcd: stop threads [ 730.486871][ T5999] vhci_hcd: release socket [ 730.491584][ T5999] vhci_hcd: disconnect device [ 730.497236][ T7455] vhci_hcd: connection reset by peer [ 730.503119][ T5999] vhci_hcd: stop threads [ 730.507526][ T5999] vhci_hcd: release socket [ 730.512016][ T5999] vhci_hcd: disconnect device [ 730.603668][ T7467] lo speed is unknown, defaulting to 1000 [ 730.725912][ T7467] lo speed is unknown, defaulting to 1000 [ 731.143890][ T7472] bridge0: port 2(batadv2) entered blocking state [ 731.150462][ T7472] bridge0: port 2(batadv2) entered disabled state [ 731.160282][ T7472] batadv2: entered allmulticast mode [ 731.181221][ T7472] batadv2: entered promiscuous mode [ 731.226262][ T7476] loop5: detected capacity change from 0 to 512 [ 731.235859][ T7476] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12101: error while reading EA inode 32 err=-116 [ 731.248951][ T7476] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12101: error while reading EA inode 32 err=-116 [ 731.263337][ T7476] EXT4-fs (loop5): 1 orphan inode deleted [ 731.289823][ T7476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.376340][ T7478] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.12101: unexpected EA_INODE flag [ 731.408840][ T7363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 731.508795][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.576286][ T7363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 731.578765][ T7488] loop5: detected capacity change from 0 to 1024 [ 731.622834][ T5999] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 731.632145][ T5999] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 731.661876][ T7363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.715270][ T7496] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 731.721851][ T7496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.729406][ T7496] vhci_hcd vhci_hcd.0: Device attached [ 731.797606][ T7363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.897518][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.935276][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.947224][T15097] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.954361][T15097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.982691][T15097] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.989897][T15097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.018945][ T7363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.029595][ T7363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.043656][ T7517] netlink: 160 bytes leftover after parsing attributes in process `syz.6.12112'. [ 732.053901][ T7517] netlink: zone id is out of range [ 732.059035][ T7517] netlink: set zone limit has 8 unknown bytes [ 732.159652][ T7522] loop6: detected capacity change from 0 to 512 [ 732.174132][ T7522] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12113: error while reading EA inode 32 err=-116 [ 732.202394][ T7522] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12113: error while reading EA inode 32 err=-116 [ 732.221218][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.230248][ T7522] EXT4-fs (loop6): 1 orphan inode deleted [ 732.266596][ T7522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.299854][ T7522] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.12113: unexpected EA_INODE flag [ 732.362884][T31106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.408437][ T7530] bridge0: port 4(batadv5) entered blocking state [ 732.415843][ T7530] bridge0: port 4(batadv5) entered disabled state [ 732.432089][ T7530] batadv5: entered allmulticast mode [ 732.442839][ T7530] batadv5: entered promiscuous mode [ 732.502016][ T7499] vhci_hcd: connection closed [ 732.503101][ T6002] vhci_hcd: stop threads [ 732.512181][ T6002] vhci_hcd: release socket [ 732.516691][ T6002] vhci_hcd: disconnect device [ 732.539103][ T7534] loop6: detected capacity change from 0 to 1024 [ 732.562583][ T7363] veth0_vlan: entered promiscuous mode [ 732.574068][ T7363] veth1_vlan: entered promiscuous mode [ 732.619710][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 732.619730][ T29] audit: type=1326 audit(2000001758.937:50489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.656488][ T29] audit: type=1326 audit(2000001758.979:50490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.660674][ T7363] veth0_macvtap: entered promiscuous mode [ 732.693392][ T29] audit: type=1326 audit(2000001759.010:50491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.718799][ T29] audit: type=1326 audit(2000001759.042:50492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.737469][ T7363] veth1_macvtap: entered promiscuous mode [ 732.748831][ T29] audit: type=1326 audit(2000001759.073:50493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.775300][ T29] audit: type=1326 audit(2000001759.105:50494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.808007][ T29] audit: type=1326 audit(2000001759.126:50495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.831460][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.844010][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.854766][ T29] audit: type=1326 audit(2000001759.168:50496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.878493][ T29] audit: type=1326 audit(2000001759.178:50497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.907552][ T29] audit: type=1326 audit(2000001759.241:50498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.5.12108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 732.932016][T15120] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 732.941234][ T5999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.941316][ T5999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.941372][ T5999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.941415][ T5999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.976716][T15120] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 732.986288][ T9] usb 5-1: enqueue for inactive port 0 [ 732.995374][ T9] usb 5-1: enqueue for inactive port 0 [ 733.080322][ T9] vhci_hcd: vhci_device speed not set [ 733.133309][ T7552] validate_nla: 8 callbacks suppressed [ 733.133328][ T7552] netlink: 'syz.1.12121': attribute type 13 has an invalid length. [ 733.200218][ T7559] loop6: detected capacity change from 0 to 512 [ 733.212966][ T7557] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 733.219587][ T7557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 733.227304][ T7557] vhci_hcd vhci_hcd.0: Device attached [ 733.239918][ T7559] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12123: error while reading EA inode 32 err=-116 [ 733.270853][ T7559] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12123: error while reading EA inode 32 err=-116 [ 733.290321][ T7559] EXT4-fs (loop6): 1 orphan inode deleted [ 733.311480][ T7559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.400746][T26106] hid_parser_main: 8 callbacks suppressed [ 733.400769][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.414613][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.422075][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.429518][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.437037][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.445132][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.452745][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.460159][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.467596][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.475361][T26106] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 733.475792][ T7570] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.12123: unexpected EA_INODE flag [ 733.487676][T26106] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz1 [ 733.509749][ T7561] program syz.5.12125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 733.546646][ T3399] usb 3-1: new low-speed USB device number 15 using vhci_hcd [ 733.556466][T31106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.641872][ T7577] bridge0: port 5(batadv6) entered blocking state [ 733.648430][ T7577] bridge0: port 5(batadv6) entered disabled state [ 733.655914][ T7577] batadv6: entered allmulticast mode [ 733.662853][ T7577] batadv6: entered promiscuous mode [ 733.669545][ T7575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 733.698959][ T7575] netlink: 'syz.5.12127': attribute type 10 has an invalid length. [ 733.707485][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12127'. [ 733.971610][ T7562] vhci_hcd: connection reset by peer [ 733.977672][ T12] vhci_hcd: stop threads [ 733.982068][ T12] vhci_hcd: release socket [ 733.986705][ T12] vhci_hcd: disconnect device [ 734.118644][ T12] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 734.128010][ T12] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 734.153939][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12138'. [ 734.403057][ T7601] lo speed is unknown, defaulting to 1000 [ 734.410223][ T7601] lo speed is unknown, defaulting to 1000 [ 734.654121][ T7601] chnl_net:caif_netlink_parms(): no params data found [ 734.685418][ T9] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz1 [ 734.703196][ T7627] program syz.0.12144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.705795][ T7633] bridge0: port 2(batadv2) entered blocking state [ 734.719247][ T7633] bridge0: port 2(batadv2) entered disabled state [ 734.727303][ T7633] batadv2: entered allmulticast mode [ 734.735078][ T7633] batadv2: entered promiscuous mode [ 734.737656][ T3392] usb 13-1: enqueue for inactive port 0 [ 734.775664][ T3392] usb 13-1: enqueue for inactive port 0 [ 734.809593][ T3406] usb 11-1: enqueue for inactive port 0 [ 734.838823][ T3406] usb 11-1: enqueue for inactive port 0 [ 734.860823][ T3392] vhci_hcd: vhci_device speed not set [ 734.883305][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.890531][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.928814][ T3406] vhci_hcd: vhci_device speed not set [ 734.934905][ T7601] bridge_slave_0: entered allmulticast mode [ 734.952909][ T7601] bridge_slave_0: entered promiscuous mode [ 734.986106][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.993236][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.011924][ T7601] bridge_slave_1: entered allmulticast mode [ 735.051444][ T7601] bridge_slave_1: entered promiscuous mode [ 735.184780][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 735.188653][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.194163][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 735.223016][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.333908][ T7601] team0: Port device team_slave_0 added [ 735.364864][ T7601] team0: Port device team_slave_1 added [ 735.443483][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.450477][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.476605][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.516394][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.523421][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.549521][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.664883][ T7601] hsr_slave_0: entered promiscuous mode [ 735.682680][ T7601] hsr_slave_1: entered promiscuous mode [ 735.700292][ T7601] debugfs: 'hsr0' already exists in 'hsr' [ 735.706090][ T7601] Cannot create hsr debugfs directory [ 735.758159][ T7667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 735.764737][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.772704][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 736.002071][ T7675] loop1: detected capacity change from 0 to 512 [ 736.008510][ T3392] usb 1-1: new low-speed USB device number 12 using vhci_hcd [ 736.036412][ T7675] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12159: bg 0: block 248: padding at end of block bitmap is not set [ 736.072782][ T7675] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12159: Failed to acquire dquot type 1 [ 736.101254][ T7675] EXT4-fs (loop1): 1 truncate cleaned up [ 736.112619][ T7675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.125923][ T7675] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.140575][ T7675] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.12159: deleted inode referenced: 12 [ 736.161805][ T7675] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.12159: deleted inode referenced: 12 [ 736.318034][T31751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.343112][ T7694] bridge0: port 3(batadv3) entered blocking state [ 736.350324][ T7694] bridge0: port 3(batadv3) entered disabled state [ 736.358207][ T7694] batadv3: entered allmulticast mode [ 736.365763][ T7694] batadv3: entered promiscuous mode [ 736.373710][ T7601] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 736.385028][ T7601] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 736.401253][ T7601] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 736.416958][ T7601] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 736.522000][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.544815][ T7668] vhci_hcd: connection reset by peer [ 736.549300][ T7709] lo speed is unknown, defaulting to 1000 [ 736.558695][ T7601] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.564843][ T7716] loop5: detected capacity change from 0 to 512 [ 736.570807][ T7709] lo speed is unknown, defaulting to 1000 [ 736.573554][ T5999] vhci_hcd: stop threads [ 736.580501][T15120] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.581763][ T5999] vhci_hcd: release socket [ 736.588823][T15120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.593279][ T5999] vhci_hcd: disconnect device [ 736.607598][ T7716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.621225][ T7716] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.626014][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.638782][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.643156][ T7716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.736716][ T7721] loop2: detected capacity change from 0 to 512 [ 736.758423][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.12174: error while reading EA inode 32 err=-116 [ 736.774746][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.12174: error while reading EA inode 32 err=-116 [ 736.806080][ T7721] EXT4-fs (loop2): 1 orphan inode deleted [ 736.820304][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.835727][T15120] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 736.845023][T15120] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 736.898396][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.916456][ T7730] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.12174: unexpected EA_INODE flag [ 736.956535][T30938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.994521][ T7737] bond0: (slave dummy0): Releasing backup interface [ 737.015350][ T7737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 737.113262][ T7745] bridge0: port 4(batadv4) entered blocking state [ 737.120496][ T7745] bridge0: port 4(batadv4) entered disabled state [ 737.127809][ T7745] batadv4: entered allmulticast mode [ 737.133962][ T7745] batadv4: entered promiscuous mode [ 737.160488][ T7746] bridge_slave_0: left allmulticast mode [ 737.166769][ T7746] bridge_slave_0: left promiscuous mode [ 737.172554][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.185840][ T7750] netlink: 'syz.2.12180': attribute type 13 has an invalid length. [ 737.197683][ T7746] bridge_slave_1: left allmulticast mode [ 737.203555][ T7746] bridge_slave_1: left promiscuous mode [ 737.210061][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.221838][ T7746] bond0: (slave bond_slave_0): Releasing backup interface [ 737.234079][ T7746] bond0: (slave bond_slave_1): Releasing backup interface [ 737.260523][ T7746] team0: Port device team_slave_0 removed [ 737.276558][ T7746] team0: Port device team_slave_1 removed [ 737.284977][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.292440][ T7746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.302751][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.311111][ T7746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.327086][ T7746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 737.432257][ T29] kauditd_printk_skb: 3136 callbacks suppressed [ 737.432276][ T29] audit: type=1326 audit(2000001763.987:53633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.464991][ T29] audit: type=1326 audit(2000001764.029:53634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.489029][ T29] audit: type=1326 audit(2000001764.029:53635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.491607][ T7754] loop1: detected capacity change from 0 to 512 [ 737.513252][ T29] audit: type=1326 audit(2000001764.029:53636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.513350][ T29] audit: type=1326 audit(2000001764.029:53637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.513403][ T29] audit: type=1326 audit(2000001764.029:53638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.513455][ T29] audit: type=1326 audit(2000001764.029:53639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.0.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a8eeec9 code=0x7ffc0000 [ 737.596440][ T6005] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 737.596479][ T6005] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 737.649949][ T7754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 737.663402][ T7754] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 737.671096][ T29] audit: type=1326 audit(2000001764.239:53640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.12183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc20a8eeec9 code=0x0 [ 737.746340][ T29] audit: type=1326 audit(2000001764.313:53641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 737.770474][ T29] audit: type=1326 audit(2000001764.313:53642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf73eec9 code=0x7ffc0000 [ 737.837931][ T7750] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 737.895078][ T6005] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.926497][ T6005] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.937521][ T6005] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.946602][ T6005] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.974542][ T7601] veth0_vlan: entered promiscuous mode [ 737.986366][ T7601] veth1_vlan: entered promiscuous mode [ 738.018129][ T7769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 738.038865][ T7601] veth0_macvtap: entered promiscuous mode [ 738.052518][ T7601] veth1_macvtap: entered promiscuous mode [ 738.071694][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.090007][ T7773] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 738.096595][ T7773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 738.104188][ T7773] vhci_hcd vhci_hcd.0: Device attached [ 738.110080][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.125642][T15120] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.138792][T15120] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.163091][T15120] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.178221][T15097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.190749][ T7782] loop1: detected capacity change from 0 to 512 [ 738.198723][ T7782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 738.211075][ T7782] EXT4-fs (loop1): 1 truncate cleaned up [ 738.217436][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.268616][T31751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.347191][ T23] usb 5-1: new low-speed USB device number 14 using vhci_hcd [ 738.395420][ T3399] usb 3-1: enqueue for inactive port 0 [ 738.407247][ T3399] usb 3-1: enqueue for inactive port 0 [ 738.426709][ T7801] loop6: detected capacity change from 0 to 512 [ 738.455950][ T7801] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 738.477783][ T7801] System zones: 0-2, 18-18, 34-35 [ 738.491470][ T7801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.504898][ T3399] vhci_hcd: vhci_device speed not set [ 738.511011][ T7801] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.584811][ T7814] netlink: 'syz.0.12195': attribute type 10 has an invalid length. [ 738.594178][ T7793] lo speed is unknown, defaulting to 1000 [ 738.611861][ T7814] team0: Port device dummy0 added [ 738.618721][ T7793] lo speed is unknown, defaulting to 1000 [ 738.628769][ T7814] netlink: 'syz.0.12195': attribute type 10 has an invalid length. [ 738.636985][ T7819] loop5: detected capacity change from 0 to 1024 [ 738.652939][ T7814] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 738.666198][ T7814] team0: Failed to send options change via netlink (err -105) [ 738.674248][ T7814] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 738.684920][ T7814] team0: Port device dummy0 removed [ 738.695720][ T7814] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 738.752962][ T7827] bridge0: port 3(batadv3) entered blocking state [ 738.760127][ T7827] bridge0: port 3(batadv3) entered disabled state [ 738.770024][ T7827] batadv3: entered allmulticast mode [ 738.776297][ T7827] batadv3: entered promiscuous mode [ 738.872656][ T7776] vhci_hcd: connection reset by peer [ 738.879530][ T6002] batadv2: left allmulticast mode [ 738.885005][ T6002] batadv2: left promiscuous mode [ 738.890275][ T6002] bridge0: port 2(batadv2) entered disabled state [ 738.897095][ T5999] vhci_hcd: stop threads [ 738.901434][ T5999] vhci_hcd: release socket [ 738.906286][ T5999] vhci_hcd: disconnect device [ 738.912892][ T7841] netlink: 'syz.5.12201': attribute type 13 has an invalid length. [ 738.922065][ T6002] batadv0: left allmulticast mode [ 738.927151][ T6002] batadv0: left promiscuous mode [ 738.932400][ T6002] bridge0: port 1(batadv0) entered disabled state [ 738.947660][ T6002] batadv1: left allmulticast mode [ 738.952914][ T6002] batadv1: left promiscuous mode [ 738.958047][ T6002] bridge0: port 3(batadv1) entered disabled state [ 739.036566][ T6002] .` (unregistering): (slave dummy0): Releasing backup interface [ 739.045373][ T6002] .` (unregistering): Released all slaves [ 739.061083][ T7841] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 739.112494][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 739.233298][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 739.242796][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 739.254517][ T7601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.324914][ T6002] hsr_slave_0: left promiscuous mode [ 739.336637][ T6002] hsr_slave_1: left promiscuous mode [ 739.449445][ T7899] loop2: detected capacity change from 0 to 1024 [ 739.492903][ T7902] netlink: 'syz.2.12209': attribute type 10 has an invalid length. [ 739.516282][ T7902] team0: Port device dummy0 added [ 739.527620][ T7902] netlink: 'syz.2.12209': attribute type 10 has an invalid length. [ 739.549104][ T7902] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 739.560347][ T7902] team0: Failed to send options change via netlink (err -105) [ 739.568786][ T7902] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 739.578131][ T7902] team0: Port device dummy0 removed [ 739.586142][ T7902] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 739.604782][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.611874][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.619977][ T7793] bridge_slave_0: entered allmulticast mode [ 739.626795][ T7793] bridge_slave_0: entered promiscuous mode [ 739.641605][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.649282][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.656744][ T7793] bridge_slave_1: entered allmulticast mode [ 739.664005][ T7793] bridge_slave_1: entered promiscuous mode [ 739.680057][ T7910] loop6: detected capacity change from 0 to 512 [ 739.688060][ T7910] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 739.698394][ T7910] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.12212: bg 0: block 104: invalid block bitmap [ 739.711552][ T7910] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 739.714925][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.732563][ T7910] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.12212: invalid indirect mapped block 1 (level 1) [ 739.743435][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.766193][ T7910] EXT4-fs (loop6): 1 truncate cleaned up [ 739.781078][ T7910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.810829][ T7793] team0: Port device team_slave_0 added [ 739.829382][ T7793] team0: Port device team_slave_1 added [ 739.854867][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.862178][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.888791][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.916788][ T7913] loop2: detected capacity change from 0 to 512 [ 739.924084][ T7913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 739.929254][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.934081][ T7913] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 739.941224][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.975732][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.044440][ T7923] loop5: detected capacity change from 0 to 512 [ 740.059269][ T7925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 740.064923][ T7923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.065817][ T7925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.078576][ T7923] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.086126][ T7925] vhci_hcd vhci_hcd.0: Device attached [ 740.100603][ T7923] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.12216: corrupted inode contents [ 740.114782][ T7923] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #2: comm syz.5.12216: mark_inode_dirty error [ 740.129014][ T7923] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.12216: corrupted inode contents [ 740.141963][ T7923] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.12216: mark_inode_dirty error [ 740.165974][ T7793] hsr_slave_0: entered promiscuous mode [ 740.175253][ T7793] hsr_slave_1: entered promiscuous mode [ 740.188657][ T7923] wireguard0: entered promiscuous mode [ 740.194220][ T7923] wireguard0: entered allmulticast mode [ 740.458561][ T7601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.524559][ T7793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.535075][ T7793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.547362][ T7793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.558259][ T7793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.620459][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.638628][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.650895][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.657698][ T3406] hid_parser_main: 72 callbacks suppressed [ 740.657725][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.658032][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.663935][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.685407][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.686482][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.693425][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.700874][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.715387][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.722949][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.730352][ T7793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.730754][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.741378][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.748838][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.765153][ T7948] program syz.6.12220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.766771][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.766802][ T3406] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 740.794244][ T3406] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz1 [ 740.824700][ T3392] usb 1-1: enqueue for inactive port 0 [ 740.837249][ T3392] usb 1-1: enqueue for inactive port 0 [ 740.845969][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.857867][ T7926] vhci_hcd: connection closed [ 740.858092][ T12] vhci_hcd: stop threads [ 740.867110][ T12] vhci_hcd: release socket [ 740.867544][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.871745][ T12] vhci_hcd: disconnect device [ 740.908929][ T3392] vhci_hcd: vhci_device speed not set [ 740.992804][ T7963] loop6: detected capacity change from 0 to 512 [ 741.011258][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.018570][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.025274][ T7963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 741.035654][ T7963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.037001][ T7971] FAULT_INJECTION: forcing a failure. [ 741.037001][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 741.044239][ T7963] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 741.048097][ T7793] veth0_vlan: entered promiscuous mode [ 741.059265][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.5.12226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 741.059320][ T7971] Tainted: [W]=WARN [ 741.059330][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.059350][ T7971] Call Trace: [ 741.059417][ T7971] [ 741.059427][ T7971] __dump_stack+0x1d/0x30 [ 741.059457][ T7971] dump_stack_lvl+0xe8/0x140 [ 741.059485][ T7971] dump_stack+0x15/0x1b [ 741.059511][ T7971] should_fail_ex+0x265/0x280 [ 741.059594][ T7971] should_failslab+0x8c/0xb0 [ 741.059634][ T7971] kmem_cache_alloc_noprof+0x50/0x480 [ 741.059672][ T7971] ? __kernfs_new_node+0x6d/0x350 [ 741.059744][ T7971] __kernfs_new_node+0x6d/0x350 [ 741.059786][ T7971] ? selinux_file_open+0x2df/0x330 [ 741.059850][ T7971] ? __rcu_read_unlock+0x34/0x70 [ 741.059896][ T7971] kernfs_new_node+0xd0/0x140 [ 741.059948][ T7971] kernfs_create_link+0x70/0x130 [ 741.060025][ T7971] sysfs_do_create_link_sd+0x6a/0x100 [ 741.060063][ T7971] sysfs_create_link+0x51/0x70 [ 741.060097][ T7971] driver_sysfs_add+0x54/0x160 [ 741.060131][ T7971] really_probe+0xf6/0x5c0 [ 741.060160][ T7971] ? __driver_probe_device+0x116/0x190 [ 741.060252][ T7971] __driver_probe_device+0x121/0x190 [ 741.060286][ T7971] driver_probe_device+0x37/0x2f0 [ 741.060318][ T7971] __device_attach_driver+0x205/0x310 [ 741.060349][ T7971] ? __pfx___device_attach_driver+0x10/0x10 [ 741.060382][ T7971] bus_for_each_drv+0x1bd/0x230 [ 741.060476][ T7971] __device_attach+0x1c7/0x290 [ 741.060508][ T7971] device_attach+0x17/0x20 [ 741.060533][ T7971] proc_ioctl+0x2f7/0x400 [ 741.060608][ T7971] proc_ioctl_default+0x71/0xa0 [ 741.060647][ T7971] usbdev_ioctl+0xe8b/0x1700 [ 741.060760][ T7971] ? __pfx_usbdev_ioctl+0x10/0x10 [ 741.060794][ T7971] __se_sys_ioctl+0xce/0x140 [ 741.060821][ T7971] __x64_sys_ioctl+0x43/0x50 [ 741.060848][ T7971] x64_sys_call+0x1816/0x3000 [ 741.060898][ T7971] do_syscall_64+0xd2/0x200 [ 741.060933][ T7971] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 741.060972][ T7971] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 741.061077][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.061110][ T7971] RIP: 0033:0x7fcbbf73eec9 [ 741.061134][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.061207][ T7971] RSP: 002b:00007fcbbe19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.061234][ T7971] RAX: ffffffffffffffda RBX: 00007fcbbf995fa0 RCX: 00007fcbbf73eec9 [ 741.061253][ T7971] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000005 [ 741.061310][ T7971] RBP: 00007fcbbe19f090 R08: 0000000000000000 R09: 0000000000000000 [ 741.061328][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.061350][ T7971] R13: 00007fcbbf996038 R14: 00007fcbbf995fa0 R15: 00007fffd4043e38 [ 741.061386][ T7971] [ 741.061487][ T7971] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 741.075182][ T7793] veth1_vlan: entered promiscuous mode [ 741.311835][ T7963] EXT4-fs (loop6): failed to initialize system zone (-117) [ 741.340944][ T7793] veth0_macvtap: entered promiscuous mode [ 741.357525][T22614] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz1 [ 741.364091][ T7963] EXT4-fs (loop6): mount failed [ 741.370230][ T7976] program syz.5.12227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 741.389279][ T7793] veth1_macvtap: entered promiscuous mode [ 741.501225][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.528910][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.568671][T15108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.587783][T15108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.596807][ T7963] lo speed is unknown, defaulting to 1000 [ 741.619794][T15108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.628921][ T7963] lo speed is unknown, defaulting to 1000 [ 741.635770][T15108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.660589][ T7994] loop2: detected capacity change from 0 to 164 [ 741.676090][ T7994] syz.2.12232: attempt to access beyond end of device [ 741.676090][ T7994] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 741.700515][ T7996] loop5: detected capacity change from 0 to 1024 [ 741.734351][ T7994] syz.2.12232: attempt to access beyond end of device [ 741.734351][ T7994] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 741.832439][ T8007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 741.839213][ T8007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 741.847061][ T8007] vhci_hcd vhci_hcd.0: Device attached [ 741.854906][ T8010] loop5: detected capacity change from 0 to 512 [ 741.864612][ T8010] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12239: error while reading EA inode 32 err=-116 [ 741.889499][ T8010] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12239: error while reading EA inode 32 err=-116 [ 741.938159][ T8010] EXT4-fs (loop5): 1 orphan inode deleted [ 741.954083][ T8018] siw: device registration error -23 [ 741.962452][ T8010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.036108][ T8021] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.12239: unexpected EA_INODE flag [ 742.075159][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.084301][ T3406] usb 3-1: new low-speed USB device number 16 using vhci_hcd [ 742.200452][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 742.200469][ T29] audit: type=1326 audit(2000001768.995:54176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.233503][ T29] audit: type=1326 audit(2000001769.027:54177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.258557][ T29] audit: type=1326 audit(2000001769.037:54178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.282394][ T29] audit: type=1326 audit(2000001769.048:54179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.311757][ T29] audit: type=1326 audit(2000001769.058:54180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.335461][ T29] audit: type=1326 audit(2000001769.079:54181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.359243][ T29] audit: type=1326 audit(2000001769.090:54182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.383165][ T29] audit: type=1326 audit(2000001769.100:54183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.407236][ T29] audit: type=1326 audit(2000001769.111:54184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.431689][ T29] audit: type=1326 audit(2000001769.111:54185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 742.462304][ T8036] netlink: 'syz.0.12247': attribute type 13 has an invalid length. [ 742.627584][ T8009] vhci_hcd: connection reset by peer [ 742.643544][T15108] vhci_hcd: stop threads [ 742.647946][T15108] vhci_hcd: release socket [ 742.652660][T15108] vhci_hcd: disconnect device [ 742.843504][ T7989] lo speed is unknown, defaulting to 1000 [ 742.849808][T15108] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.860700][T15108] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.869963][T15108] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.879224][T15108] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.898843][ T7989] lo speed is unknown, defaulting to 1000 [ 743.047361][ T8044] bond0: (slave dummy0): Releasing backup interface [ 743.055453][ T8044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.190544][ T23] usb 5-1: enqueue for inactive port 0 [ 743.198087][ T23] usb 5-1: enqueue for inactive port 0 [ 743.267275][ T23] vhci_hcd: vhci_device speed not set [ 743.513100][ T8063] bridge0: port 3(batadv1) entered blocking state [ 743.519637][ T8063] bridge0: port 3(batadv1) entered disabled state [ 743.539251][ T8063] batadv1: entered allmulticast mode [ 743.540214][ T8071] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12259'. [ 743.545952][ T8063] batadv1: entered promiscuous mode [ 743.564056][ T8071] hsr_slave_0: left promiscuous mode [ 743.639806][ T8071] hsr_slave_1: left promiscuous mode [ 743.646154][ T8077] netlink: 316 bytes leftover after parsing attributes in process `syz.0.12264'. [ 743.690037][ T8079] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 743.799607][ T8090] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 743.835067][ T8095] loop5: detected capacity change from 0 to 128 [ 743.869982][ T8098] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12272'. [ 743.960955][ T8113] loop5: detected capacity change from 0 to 1024 [ 743.987594][ T8113] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 743.998706][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 743.998726][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 744.017361][ T8113] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 744.028302][ T8113] JBD2: no valid journal superblock found [ 744.034226][ T8113] EXT4-fs (loop5): Could not load journal inode [ 744.040999][ T8119] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 744.135852][ T8096] lo speed is unknown, defaulting to 1000 [ 744.143815][ T8096] lo speed is unknown, defaulting to 1000 [ 744.160516][ T8138] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12287'. [ 744.192354][ T8142] loop6: detected capacity change from 0 to 164 [ 744.204053][ T8142] syz.6.12285: attempt to access beyond end of device [ 744.204053][ T8142] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 744.228553][ T8142] syz.6.12285: attempt to access beyond end of device [ 744.228553][ T8142] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 744.330659][ T8156] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12294'. [ 744.358343][ T8156] netlink: zone id is out of range [ 744.379502][ T8156] netlink: set zone limit has 8 unknown bytes [ 744.415275][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 744.426570][T15108] batadv4: left allmulticast mode [ 744.431763][T15108] batadv4: left promiscuous mode [ 744.436892][T15108] bridge0: port 4(batadv4) entered disabled state [ 744.469262][T15108] batadv3: left allmulticast mode [ 744.474511][T15108] batadv3: left promiscuous mode [ 744.479834][T15108] bridge0: port 3(batadv3) entered disabled state [ 744.500021][ T8166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 744.506654][ T8166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 744.514376][ T8166] vhci_hcd vhci_hcd.0: Device attached [ 744.525838][T15108] batadv2: left allmulticast mode [ 744.531006][T15108] batadv2: left promiscuous mode [ 744.536221][T15108] bridge0: port 2(batadv2) entered disabled state [ 744.544141][T15108] batadv1: left allmulticast mode [ 744.549285][T15108] batadv1: left promiscuous mode [ 744.554406][T15108] bridge0: port 1(batadv1) entered disabled state [ 744.561489][ T8175] netlink: 160 bytes leftover after parsing attributes in process `syz.5.12300'. [ 744.591336][ T8175] netlink: zone id is out of range [ 744.602570][ T8175] netlink: set zone limit has 8 unknown bytes [ 744.674800][T15108] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 744.692207][T15108] bond0 (unregistering): Released all slaves [ 744.718581][ T8182] netlink: 'syz.1.12304': attribute type 10 has an invalid length. [ 744.747599][ T23] usb 1-1: new low-speed USB device number 13 using vhci_hcd [ 744.755678][ T8182] team0: Port device dummy0 added [ 744.775614][ T8182] netlink: 'syz.1.12304': attribute type 10 has an invalid length. [ 744.822562][ T8182] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 744.836659][ T8182] team0: Failed to send options change via netlink (err -105) [ 744.855838][ T8182] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 744.856158][ T8189] FAULT_INJECTION: forcing a failure. [ 744.856158][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.873160][ T8182] team0: Port device dummy0 removed [ 744.878057][ T8189] CPU: 1 UID: 0 PID: 8189 Comm: syz.5.12306 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 744.878106][ T8189] Tainted: [W]=WARN [ 744.878117][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 744.878137][ T8189] Call Trace: [ 744.878146][ T8189] [ 744.878159][ T8189] __dump_stack+0x1d/0x30 [ 744.878201][ T8189] dump_stack_lvl+0xe8/0x140 [ 744.878229][ T8189] dump_stack+0x15/0x1b [ 744.878252][ T8189] should_fail_ex+0x265/0x280 [ 744.878356][ T8189] should_fail+0xb/0x20 [ 744.878407][ T8189] should_fail_usercopy+0x1a/0x20 [ 744.878438][ T8189] _copy_from_user+0x1c/0xb0 [ 744.878552][ T8189] snd_seq_ioctl+0x125/0x300 [ 744.878611][ T8189] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 744.878721][ T8189] __se_sys_ioctl+0xce/0x140 [ 744.878750][ T8189] __x64_sys_ioctl+0x43/0x50 [ 744.878776][ T8189] x64_sys_call+0x1816/0x3000 [ 744.878807][ T8189] do_syscall_64+0xd2/0x200 [ 744.878843][ T8189] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 744.878959][ T8189] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 744.878990][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.879022][ T8189] RIP: 0033:0x7fcbbf73eec9 [ 744.879043][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.879110][ T8189] RSP: 002b:00007fcbbe19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.879138][ T8189] RAX: ffffffffffffffda RBX: 00007fcbbf995fa0 RCX: 00007fcbbf73eec9 [ 744.879156][ T8189] RDX: 0000200000001140 RSI: 000000004058534c RDI: 0000000000000005 [ 744.879175][ T8189] RBP: 00007fcbbe19f090 R08: 0000000000000000 R09: 0000000000000000 [ 744.879193][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.879266][ T8189] R13: 00007fcbbf996038 R14: 00007fcbbf995fa0 R15: 00007fffd4043e38 [ 744.879294][ T8189] [ 745.042995][ T8196] netlink: 160 bytes leftover after parsing attributes in process `syz.5.12309'. [ 745.054105][ T8182] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 745.077958][ T8196] netlink: zone id is out of range [ 745.100422][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.107549][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.123300][ T8096] bridge_slave_0: entered allmulticast mode [ 745.130689][ T8096] bridge_slave_0: entered promiscuous mode [ 745.137885][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.145202][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.153001][ T8196] netlink: set zone limit has 8 unknown bytes [ 745.159881][ T8096] bridge_slave_1: entered allmulticast mode [ 745.167021][ T8096] bridge_slave_1: entered promiscuous mode [ 745.222507][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.251248][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.260652][ T8132] lo speed is unknown, defaulting to 1000 [ 745.268851][ T8168] vhci_hcd: connection reset by peer [ 745.276089][ T12] vhci_hcd: stop threads [ 745.280384][ T12] vhci_hcd: release socket [ 745.284856][ T12] vhci_hcd: disconnect device [ 745.310942][ T8203] loop1: detected capacity change from 0 to 1024 [ 745.312451][ T8096] team0: Port device team_slave_0 added [ 745.329803][ T8096] team0: Port device team_slave_1 added [ 745.336357][ T8132] lo speed is unknown, defaulting to 1000 [ 745.358986][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.365992][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.392156][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.399460][ T8209] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 745.404376][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.409497][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 745.409652][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 745.416509][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.416550][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.526360][T15108] hsr_slave_0: left promiscuous mode [ 745.532088][T15108] hsr_slave_1: left promiscuous mode [ 745.538110][T15108] batman_adv: batadv0: Removing interface: veth1_vlan [ 745.674446][ T8096] hsr_slave_0: entered promiscuous mode [ 745.682647][ T8096] hsr_slave_1: entered promiscuous mode [ 745.690298][ T8096] debugfs: 'hsr0' already exists in 'hsr' [ 745.696098][ T8096] Cannot create hsr debugfs directory [ 745.696210][ T8219] loop5: detected capacity change from 0 to 164 [ 745.711050][ T8219] syz.5.12317: attempt to access beyond end of device [ 745.711050][ T8219] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 745.725526][ T8219] syz.5.12317: attempt to access beyond end of device [ 745.725526][ T8219] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 745.865697][ T8226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 745.924988][ T8228] netlink: 'syz.0.12321': attribute type 10 has an invalid length. [ 745.975404][ T8229] netlink: 'syz.0.12321': attribute type 10 has an invalid length. [ 745.993618][ T8228] team0: Port device dummy0 added [ 746.020072][ T8229] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 746.030417][ T8229] team0: Failed to send options change via netlink (err -105) [ 746.038100][ T8229] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 746.047542][ T8229] team0: Port device dummy0 removed [ 746.054764][ T8229] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 746.192288][ T8210] vhci_hcd: connection closed [ 746.192477][ T6008] vhci_hcd: stop threads [ 746.201652][ T6008] vhci_hcd: release socket [ 746.206167][ T6008] vhci_hcd: disconnect device [ 746.364869][ T8096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 746.374642][ T8096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 746.386158][ T8096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 746.396543][ T8096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 746.473391][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.508337][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.524602][T15121] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.531822][T15121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.573418][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.580647][T15121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.603650][ T8096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.614282][ T8096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.766940][ T8251] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 746.773606][ T8251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.781226][ T8251] vhci_hcd vhci_hcd.0: Device attached [ 746.791227][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.966655][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 746.966674][ T29] audit: type=1400 audit(2000001774.003:54714): avc: denied { read write } for pid=8261 comm="syz.6.12327" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.969307][ T8262] loop6: detected capacity change from 0 to 512 [ 746.974361][ T29] audit: type=1400 audit(2000001774.003:54715): avc: denied { open } for pid=8261 comm="syz.6.12327" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 747.027355][ T8262] msdos: Unknown parameter 'allow_uƒime' [ 747.028423][ T29] audit: type=1400 audit(2000001774.003:54716): avc: denied { ioctl } for pid=8261 comm="syz.6.12327" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 747.105207][ T8096] veth0_vlan: entered promiscuous mode [ 747.111111][ T29] audit: type=1400 audit(2000001774.066:54717): avc: denied { mounton } for pid=8261 comm="syz.6.12327" path="/24/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 747.121318][ T8096] veth1_vlan: entered promiscuous mode [ 747.133830][ T29] audit: type=1326 audit(2000001774.098:54718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.12326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 747.163530][ T29] audit: type=1400 audit(2000001774.098:54719): avc: denied { sys_module } for pid=8096 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 747.163786][ T8268] netlink: 'syz.6.12329': attribute type 10 has an invalid length. [ 747.186061][ T29] audit: type=1400 audit(2000001774.098:54720): avc: denied { module_request } for pid=8096 comm="syz-executor" kmod="virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 747.215685][ T29] audit: type=1400 audit(2000001774.108:54721): avc: denied { create } for pid=8261 comm="syz.6.12327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 747.229764][ T8269] netlink: 'syz.6.12329': attribute type 10 has an invalid length. [ 747.235510][ T29] audit: type=1400 audit(2000001774.108:54722): avc: denied { write } for pid=8261 comm="syz.6.12327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 747.247298][ T8096] veth0_macvtap: entered promiscuous mode [ 747.263252][ T29] audit: type=1326 audit(2000001774.108:54723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.1.12326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 747.304780][ T8268] team0: Port device dummy0 added [ 747.323253][ T8269] team0: Port device dummy0 removed [ 747.331216][ T8269] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 747.340569][ T8271] bond0: (slave dummy0): Releasing backup interface [ 747.349009][ T8271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.366643][ T8218] lo speed is unknown, defaulting to 1000 [ 747.374379][ T8096] veth1_macvtap: entered promiscuous mode [ 747.415543][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.428792][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.456297][ T8218] lo speed is unknown, defaulting to 1000 [ 747.466971][ T6008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.480081][ T6008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.525844][ T8280] SELinux: Context  is not valid (left unmapped). [ 747.536507][ T6008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.559118][ T8252] vhci_hcd: connection reset by peer [ 747.564778][T15108] vhci_hcd: stop threads [ 747.569250][T15108] vhci_hcd: release socket [ 747.573743][T15108] vhci_hcd: disconnect device [ 747.629440][ T6008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.681041][T26106] hid_parser_main: 72 callbacks suppressed [ 747.681063][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.694527][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.701977][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.709471][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.716935][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.724541][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.732119][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.739782][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.747331][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.754884][T26106] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 747.767996][T26106] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz1 [ 747.789132][ T8278] program syz.6.12333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.814363][ T8280] lo speed is unknown, defaulting to 1000 [ 747.819253][ T8289] bridge0: port 3(batadv1) entered blocking state [ 747.826713][ T8289] bridge0: port 3(batadv1) entered disabled state [ 747.835506][ T8289] batadv1: entered allmulticast mode [ 747.841553][ T8289] batadv1: entered promiscuous mode [ 747.848876][ T8280] lo speed is unknown, defaulting to 1000 [ 747.921192][ T8291] loop2: detected capacity change from 0 to 164 [ 747.930957][ T8291] rock: directory entry would overflow storage [ 747.937183][ T8291] rock: sig=0x4543, size=28, remaining=18 [ 748.096587][ T8302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 748.103171][ T8302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.110876][ T8302] vhci_hcd vhci_hcd.0: Device attached [ 748.131291][ T8309] loop1: detected capacity change from 0 to 1024 [ 748.202432][ T8312] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12344'. [ 748.212198][ T8312] netlink: zone id is out of range [ 748.226429][ T8312] netlink: set zone limit has 8 unknown bytes [ 748.290071][ T8321] loop2: detected capacity change from 0 to 512 [ 748.302945][T15108] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 748.312509][T15108] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 748.333431][ T8321] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.12348: error while reading EA inode 32 err=-116 [ 748.382536][ T8321] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.12348: error while reading EA inode 32 err=-116 [ 748.394926][ T37] usb 13-1: new low-speed USB device number 16 using vhci_hcd [ 748.433407][ T8321] EXT4-fs (loop2): 1 orphan inode deleted [ 748.440978][ T8321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.522839][ T8332] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.12348: unexpected EA_INODE flag [ 748.569142][ T8334] bond0: (slave dummy0): Releasing backup interface [ 748.580110][ T8338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 748.584847][ T8334] bridge_slave_0: left allmulticast mode [ 748.586661][ T8338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.586728][ T8338] vhci_hcd vhci_hcd.0: Device attached [ 748.605589][ T8334] bridge_slave_0: left promiscuous mode [ 748.611286][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.621307][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12348'. [ 748.630356][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12348'. [ 748.641435][ T8334] bridge_slave_1: left allmulticast mode [ 748.647179][ T8334] bridge_slave_1: left promiscuous mode [ 748.653027][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.662602][ T8334] bond0: (slave bond_slave_0): Releasing backup interface [ 748.672643][ T8334] bond0: (slave bond_slave_1): Releasing backup interface [ 748.685313][ T8334] team0: Port device team_slave_0 removed [ 748.694139][ T8334] team0: Port device team_slave_1 removed [ 748.701169][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.708599][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.717457][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.724893][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.734966][ T8334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 748.784165][ T8096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.810234][ T8345] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 748.864429][ T8305] vhci_hcd: connection reset by peer [ 748.872013][T15108] vhci_hcd: stop threads [ 748.876302][T15108] vhci_hcd: release socket [ 748.880830][T15108] vhci_hcd: disconnect device [ 748.898244][ T8352] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12356'. [ 749.179681][ T8354] netlink: 'syz.1.12358': attribute type 13 has an invalid length. [ 749.231496][ T8354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.309016][ T8368] bridge0: port 4(batadv4) entered blocking state [ 749.315870][ T8368] bridge0: port 4(batadv4) entered disabled state [ 749.322583][ T8368] batadv4: entered allmulticast mode [ 749.329166][ T8368] batadv4: entered promiscuous mode [ 749.357013][ T8370] loop1: detected capacity change from 0 to 1024 [ 749.374362][ T8339] vhci_hcd: connection closed [ 749.374652][T15108] vhci_hcd: stop threads [ 749.383695][T15108] vhci_hcd: release socket [ 749.388153][T15108] vhci_hcd: disconnect device [ 749.433185][ T8376] loop6: detected capacity change from 0 to 1024 [ 749.442223][ T8376] EXT4-fs: inline encryption not supported [ 749.448201][ T8376] EXT4-fs: Ignoring removed i_version option [ 749.460769][ T8378] loop1: detected capacity change from 0 to 512 [ 749.467819][ T8378] EXT4-fs: Ignoring removed mblk_io_submit option [ 749.475258][ T8378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 749.483291][ T8376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 749.496298][ T8376] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.507334][ T8378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 749.515948][ T8378] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 749.521679][ T8376] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 749.537616][ T8378] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.12365: Allocating blocks 41-42 which overlap fs metadata [ 749.554200][ T8378] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.12365: Allocating blocks 41-42 which overlap fs metadata [ 749.554758][ T8376] EXT4-fs (loop6): Remounting filesystem read-only [ 749.569605][ T8378] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12365: Failed to acquire dquot type 1 [ 749.586129][ T23] usb 1-1: enqueue for inactive port 0 [ 749.591668][ T23] usb 1-1: enqueue for inactive port 0 [ 749.597719][ T8378] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 749.612865][ T8378] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.12365: corrupted inode contents [ 749.613457][ T7601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 749.634780][ T8378] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.12365: mark_inode_dirty error [ 749.652655][ T8378] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.12365: corrupted inode contents [ 749.665334][ T23] vhci_hcd: vhci_device speed not set [ 749.672743][ T8378] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.12365: mark_inode_dirty error [ 749.693547][ T8378] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.12365: corrupted inode contents [ 749.706250][ T8378] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 749.718928][ T8378] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.12365: corrupted inode contents [ 749.732892][ T8378] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.12365: mark_inode_dirty error [ 749.745980][ T8378] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 749.747045][ T8390] netlink: 160 bytes leftover after parsing attributes in process `syz.5.12369'. [ 749.755658][ T8378] EXT4-fs (loop1): 1 truncate cleaned up [ 749.771342][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.784470][ T8390] netlink: zone id is out of range [ 749.790655][T15121] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 749.792873][ T8390] netlink: set zone limit has 8 unknown bytes [ 749.800033][T15121] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 749.807917][ T8378] EXT4-fs (loop1): shut down requested (1) [ 749.824599][ T8395] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 749.854342][ T8378] netlink: 324 bytes leftover after parsing attributes in process `syz.1.12365'. [ 749.874317][ T7793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.896565][ T8401] bridge0: port 1(batadv2) entered blocking state [ 749.903580][ T8401] bridge0: port 1(batadv2) entered disabled state [ 749.913828][ T8401] batadv2: entered allmulticast mode [ 749.921579][ T8401] batadv2: entered promiscuous mode [ 749.948429][ T8409] netlink: 'syz.1.12376': attribute type 10 has an invalid length. [ 749.960023][ T8409] team0: Port device dummy0 added [ 749.970983][ T8409] netlink: 'syz.1.12376': attribute type 10 has an invalid length. [ 749.984154][ T8409] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 749.995859][ T8409] team0: Failed to send options change via netlink (err -105) [ 750.003574][ T8409] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 750.013505][ T8409] team0: Port device dummy0 removed [ 750.022024][ T8409] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 750.078466][T22620] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 750.149690][ T8424] FAULT_INJECTION: forcing a failure. [ 750.149690][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.162999][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.0.12382 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 750.163041][ T8424] Tainted: [W]=WARN [ 750.163049][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.163146][ T8424] Call Trace: [ 750.163155][ T8424] [ 750.163165][ T8424] __dump_stack+0x1d/0x30 [ 750.163213][ T8424] dump_stack_lvl+0xe8/0x140 [ 750.163233][ T8424] dump_stack+0x15/0x1b [ 750.163322][ T8424] should_fail_ex+0x265/0x280 [ 750.163367][ T8424] should_fail+0xb/0x20 [ 750.163455][ T8424] should_fail_usercopy+0x1a/0x20 [ 750.163483][ T8424] _copy_from_user+0x1c/0xb0 [ 750.163516][ T8424] kstrtouint_from_user+0x69/0xf0 [ 750.163575][ T8424] ? 0xffffffff81000000 [ 750.163655][ T8424] ? selinux_file_permission+0x1e4/0x320 [ 750.163699][ T8424] proc_fail_nth_write+0x50/0x160 [ 750.163765][ T8424] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 750.163932][ T8424] vfs_write+0x266/0x960 [ 750.163959][ T8424] ? vfs_read+0x4e6/0x770 [ 750.163985][ T8424] ? __rcu_read_unlock+0x4f/0x70 [ 750.164081][ T8424] ? __fget_files+0x184/0x1c0 [ 750.164169][ T8424] ksys_write+0xda/0x1a0 [ 750.164200][ T8424] __x64_sys_write+0x40/0x50 [ 750.164230][ T8424] x64_sys_call+0x2802/0x3000 [ 750.164292][ T8424] do_syscall_64+0xd2/0x200 [ 750.164323][ T8424] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 750.164356][ T8424] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 750.164433][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.164522][ T8424] RIP: 0033:0x7fc20a8ed97f [ 750.164538][ T8424] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 750.164570][ T8424] RSP: 002b:00007fc20934f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 750.164589][ T8424] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc20a8ed97f [ 750.164606][ T8424] RDX: 0000000000000001 RSI: 00007fc20934f0a0 RDI: 0000000000000006 [ 750.164623][ T8424] RBP: 00007fc20934f090 R08: 0000000000000000 R09: 0000000000000000 [ 750.164688][ T8424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 750.164701][ T8424] R13: 00007fc20ab46038 R14: 00007fc20ab45fa0 R15: 00007ffdf9cc47b8 [ 750.164744][ T8424] [ 750.167700][ T8425] loop1: detected capacity change from 0 to 512 [ 750.377327][T15108] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 750.386964][ T8425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 750.388408][T15108] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 750.397015][ T8425] EXT4-fs (loop1): 1 truncate cleaned up [ 750.429425][ T8425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.539063][ T8437] bridge0: port 1(batadv1) entered blocking state [ 750.545562][ T8437] bridge0: port 1(batadv1) entered disabled state [ 750.552371][ T8437] batadv1: entered allmulticast mode [ 750.558171][ T8437] batadv1: entered promiscuous mode [ 750.582133][ T8439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 750.631106][ T8443] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 750.771219][ T8447] loop5: detected capacity change from 0 to 512 [ 750.778116][ T8447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 750.788133][ T8447] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 750.929710][ T7793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.958679][ T8473] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12401'. [ 750.967896][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12401'. [ 750.994833][ T8478] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 751.014568][ T6008] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 751.023952][ T6008] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 751.065622][ T8485] loop5: detected capacity change from 0 to 1024 [ 751.172899][ T8503] bridge0: port 2(batadv2) entered blocking state [ 751.179716][ T8503] bridge0: port 2(batadv2) entered disabled state [ 751.187279][ T8504] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12416'. [ 751.196525][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12416'. [ 751.208267][ T8503] batadv2: entered allmulticast mode [ 751.214530][ T8503] batadv2: entered promiscuous mode [ 751.224040][ T8508] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 751.270918][ T8517] netlink: 'syz.2.12422': attribute type 39 has an invalid length. [ 751.301728][ T8523] loop5: detected capacity change from 0 to 512 [ 751.309878][ T8523] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 751.327820][ T8523] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 751.348608][ T8523] EXT4-fs (loop5): 1 truncate cleaned up [ 751.355261][ T8523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.421459][ T8537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12430'. [ 751.423560][ T8539] bridge0: port 4(batadv2) entered blocking state [ 751.437178][ T8539] bridge0: port 4(batadv2) entered disabled state [ 751.444071][ T8539] batadv2: entered allmulticast mode [ 751.450046][ T8539] batadv2: entered promiscuous mode [ 751.478575][ T8544] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 751.516075][ T8549] FAULT_INJECTION: forcing a failure. [ 751.516075][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.529431][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.1.12435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 751.529475][ T8549] Tainted: [W]=WARN [ 751.529485][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 751.529532][ T8549] Call Trace: [ 751.529540][ T8549] [ 751.529550][ T8549] __dump_stack+0x1d/0x30 [ 751.529578][ T8549] dump_stack_lvl+0xe8/0x140 [ 751.529604][ T8549] dump_stack+0x15/0x1b [ 751.529626][ T8549] should_fail_ex+0x265/0x280 [ 751.529699][ T8549] should_fail+0xb/0x20 [ 751.529741][ T8549] should_fail_usercopy+0x1a/0x20 [ 751.529769][ T8549] _copy_from_user+0x1c/0xb0 [ 751.529840][ T8549] ___sys_sendmsg+0xc1/0x1d0 [ 751.529912][ T8549] __x64_sys_sendmsg+0xd4/0x160 [ 751.530002][ T8549] x64_sys_call+0x191e/0x3000 [ 751.530114][ T8549] do_syscall_64+0xd2/0x200 [ 751.530148][ T8549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 751.530209][ T8549] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 751.530240][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.530270][ T8549] RIP: 0033:0x7f0c62e7eec9 [ 751.530291][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.530317][ T8549] RSP: 002b:00007f0c618df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.530343][ T8549] RAX: ffffffffffffffda RBX: 00007f0c630d5fa0 RCX: 00007f0c62e7eec9 [ 751.530373][ T8549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 751.530399][ T8549] RBP: 00007f0c618df090 R08: 0000000000000000 R09: 0000000000000000 [ 751.530417][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.530487][ T8549] R13: 00007f0c630d6038 R14: 00007f0c630d5fa0 R15: 00007ffd30c47748 [ 751.530506][ T8549] [ 751.534981][ T8552] loop2: detected capacity change from 0 to 512 [ 751.609880][ T8557] loop1: detected capacity change from 0 to 1024 [ 751.616275][ T8552] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.12436: corrupted in-inode xattr: invalid ea_ino [ 751.662807][T15108] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 751.669042][ T8552] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.12436: couldn't read orphan inode 15 (err -117) [ 751.676587][T15108] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 751.679885][ T8560] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 751.685463][ T8552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.692746][ T8560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 751.692856][ T8560] vhci_hcd vhci_hcd.0: Device attached [ 751.801823][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 751.801839][ T29] audit: type=1326 audit(2000001779.074:55371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c62e7db2a code=0x7ffc0000 [ 751.802172][ T8096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.808668][ T29] audit: type=1326 audit(2000001779.085:55372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.864444][ T29] audit: type=1326 audit(2000001779.085:55373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.886743][ T8565] loop6: detected capacity change from 0 to 256 [ 751.895638][ T29] audit: type=1326 audit(2000001779.148:55374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.900456][ T6008] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 751.919392][ T29] audit: type=1326 audit(2000001779.148:55375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.928678][ T6008] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 751.952279][ T29] audit: type=1326 audit(2000001779.148:55376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.952316][ T29] audit: type=1326 audit(2000001779.148:55377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.952354][ T29] audit: type=1326 audit(2000001779.179:55378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 751.952387][ T29] audit: type=1326 audit(2000001779.179:55379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.12439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c62e7eec9 code=0x7ffc0000 [ 752.057547][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.068874][ T29] audit: type=1400 audit(2000001779.305:55380): avc: denied { mount } for pid=8564 comm="syz.6.12441" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 752.103094][ T8573] x_tables: duplicate underflow at hook 1 [ 752.161193][ T8582] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 752.204621][ T8588] loop6: detected capacity change from 0 to 1024 [ 752.257807][ T8598] bridge0: port 3(batadv3) entered blocking state [ 752.264528][ T8598] bridge0: port 3(batadv3) entered disabled state [ 752.271413][ T8598] batadv3: entered allmulticast mode [ 752.277553][ T8598] batadv3: entered promiscuous mode [ 752.395850][ T8607] lo speed is unknown, defaulting to 1000 [ 752.402320][ T8607] lo speed is unknown, defaulting to 1000 [ 752.531709][ T8561] vhci_hcd: connection reset by peer [ 752.537251][ T6008] vhci_hcd: stop threads [ 752.541627][ T6008] vhci_hcd: release socket [ 752.546159][ T6008] vhci_hcd: disconnect device [ 752.551329][ T3406] usb 3-1: enqueue for inactive port 0 [ 752.625891][ T3406] vhci_hcd: vhci_device speed not set [ 752.644309][ T8615] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 752.738268][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 752.747709][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 752.833085][ T8619] loop2: detected capacity change from 0 to 1024 [ 753.030516][ T8628] FAULT_INJECTION: forcing a failure. [ 753.030516][ T8628] name failslab, interval 1, probability 0, space 0, times 0 [ 753.043565][ T8628] CPU: 1 UID: 0 PID: 8628 Comm: syz.0.12465 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 753.043657][ T8628] Tainted: [W]=WARN [ 753.043666][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 753.043684][ T8628] Call Trace: [ 753.043692][ T8628] [ 753.043701][ T8628] __dump_stack+0x1d/0x30 [ 753.043798][ T8628] dump_stack_lvl+0xe8/0x140 [ 753.043877][ T8628] dump_stack+0x15/0x1b [ 753.043966][ T8628] should_fail_ex+0x265/0x280 [ 753.044047][ T8628] should_failslab+0x8c/0xb0 [ 753.044085][ T8628] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 753.044134][ T8628] ? __alloc_skb+0x101/0x320 [ 753.044160][ T8628] __alloc_skb+0x101/0x320 [ 753.044186][ T8628] netlink_alloc_large_skb+0xbf/0xf0 [ 753.044278][ T8628] netlink_sendmsg+0x3cf/0x6b0 [ 753.044310][ T8628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.044341][ T8628] __sock_sendmsg+0x142/0x180 [ 753.044368][ T8628] ____sys_sendmsg+0x31e/0x4e0 [ 753.044423][ T8628] ___sys_sendmsg+0x17b/0x1d0 [ 753.044481][ T8628] __x64_sys_sendmsg+0xd4/0x160 [ 753.044532][ T8628] x64_sys_call+0x191e/0x3000 [ 753.044574][ T8628] do_syscall_64+0xd2/0x200 [ 753.044608][ T8628] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 753.044710][ T8628] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 753.044736][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.044758][ T8628] RIP: 0033:0x7fc20a8eeec9 [ 753.044776][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.044800][ T8628] RSP: 002b:00007fc20934f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.044871][ T8628] RAX: ffffffffffffffda RBX: 00007fc20ab45fa0 RCX: 00007fc20a8eeec9 [ 753.044885][ T8628] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000006 [ 753.044900][ T8628] RBP: 00007fc20934f090 R08: 0000000000000000 R09: 0000000000000000 [ 753.044927][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.044939][ T8628] R13: 00007fc20ab46038 R14: 00007fc20ab45fa0 R15: 00007ffdf9cc47b8 [ 753.044961][ T8628] [ 753.315006][ T37] usb 13-1: enqueue for inactive port 0 [ 753.321619][ T37] usb 13-1: enqueue for inactive port 0 [ 753.387243][ T37] vhci_hcd: vhci_device speed not set [ 753.396166][ T8631] netlink: 'syz.1.12466': attribute type 10 has an invalid length. [ 753.416916][ T8631] bond0: (slave dummy0): Releasing backup interface [ 753.440442][ T8631] team0: Port device dummy0 added [ 753.449506][ T8630] netlink: 'syz.1.12466': attribute type 10 has an invalid length. [ 753.474824][ T8630] team0: Port device dummy0 removed [ 753.495145][ T8630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 753.654844][ T8648] random: crng reseeded on system resumption [ 753.660099][ T8646] bridge0: port 2(batadv3) entered blocking state [ 753.667637][ T8646] bridge0: port 2(batadv3) entered disabled state [ 753.675115][ T8646] batadv3: entered allmulticast mode [ 753.681210][ T8646] batadv3: entered promiscuous mode [ 753.698771][ T8653] __nla_validate_parse: 7 callbacks suppressed [ 753.698802][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12475'. [ 753.788830][ T8668] loop6: detected capacity change from 0 to 164 [ 753.803345][ T8668] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12481'. [ 753.827048][ T8669] loop1: detected capacity change from 0 to 1024 [ 753.853450][ T8669] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12478: Failed to acquire dquot type 0 [ 753.870501][ T8669] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 753.885382][ T8669] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.12478: corrupted inode contents [ 753.900500][ T8669] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #13: comm syz.1.12478: mark_inode_dirty error [ 753.912347][ T8669] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.12478: corrupted inode contents [ 753.936184][ T8685] netlink: 'syz.0.12487': attribute type 1 has an invalid length. [ 753.943251][ T8669] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.12478: mark_inode_dirty error [ 753.944198][ T8685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12487'. [ 753.955720][ T8669] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.12478: corrupted inode contents [ 753.977450][ T8669] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 753.985557][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12488'. [ 753.986766][ T8669] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.12478: corrupted inode contents [ 754.009205][ T8669] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.12478: mark_inode_dirty error [ 754.033947][ T8669] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 754.050745][ T8669] EXT4-fs (loop1): 1 truncate cleaned up [ 754.057454][ T8669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.057697][ T8691] bridge0: port 4(batadv4) entered blocking state [ 754.076596][ T8691] bridge0: port 4(batadv4) entered disabled state [ 754.086549][ T8691] batadv4: entered allmulticast mode [ 754.092753][ T8691] batadv4: entered promiscuous mode [ 754.103377][ T8695] netlink: 200 bytes leftover after parsing attributes in process `syz.6.12491'. [ 754.138457][ T6015] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 754.148033][ T6015] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 754.195733][ T8706] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 754.202474][ T8706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 754.210103][ T8706] vhci_hcd vhci_hcd.0: Device attached [ 754.259654][ T8710] loop2: detected capacity change from 0 to 8192 [ 754.307518][ T8720] loop6: detected capacity change from 0 to 1024 [ 754.315300][ T8720] EXT4-fs: Ignoring removed orlov option [ 754.324377][ T8720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.443210][ T3392] usb 1-1: new low-speed USB device number 14 using vhci_hcd [ 754.523215][ T8723] ================================================================== [ 754.531357][ T8723] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 754.539735][ T8723] [ 754.541634][T15108] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 754.542127][ T8723] write to 0xffff88811a61e008 of 4 bytes by task 8720 on cpu 1: [ 754.551491][T15108] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 754.559050][ T8723] writeback_single_inode+0x150/0x3f0 [ 754.573738][ T8723] sync_inode_metadata+0x5b/0x90 [ 754.578715][ T8723] generic_buffers_fsync_noflush+0xd9/0x120 [ 754.584641][ T8723] ext4_sync_file+0x1ab/0x690 [ 754.589345][ T8723] vfs_fsync_range+0x10d/0x130 [ 754.594136][ T8723] ext4_buffered_write_iter+0x34f/0x3c0 [ 754.599717][ T8723] ext4_file_write_iter+0x387/0xf60 [ 754.604992][ T8723] iter_file_splice_write+0x663/0xa60 [ 754.610402][ T8723] direct_splice_actor+0x153/0x2a0 [ 754.615804][ T8723] splice_direct_to_actor+0x30f/0x680 [ 754.621321][ T8723] do_splice_direct+0xda/0x150 [ 754.626106][ T8723] do_sendfile+0x380/0x650 [ 754.630567][ T8723] __x64_sys_sendfile64+0x105/0x150 [ 754.635923][ T8723] x64_sys_call+0x2bb4/0x3000 [ 754.640681][ T8723] do_syscall_64+0xd2/0x200 [ 754.645233][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.651315][ T8723] [ 754.653660][ T8723] read to 0xffff88811a61e008 of 4 bytes by task 8723 on cpu 0: [ 754.661215][ T8723] __mark_inode_dirty+0x55/0x750 [ 754.666275][ T8723] ext4_write_inline_data_end+0x3e5/0x5f0 [ 754.672021][ T8723] ext4_write_end+0x3d7/0x730 [ 754.676717][ T8723] generic_perform_write+0x30f/0x490 [ 754.682035][ T8723] ext4_buffered_write_iter+0x1ee/0x3c0 [ 754.687639][ T8723] ext4_file_write_iter+0x387/0xf60 [ 754.692883][ T8723] iter_file_splice_write+0x663/0xa60 [ 754.698284][ T8723] direct_splice_actor+0x153/0x2a0 [ 754.703418][ T8723] splice_direct_to_actor+0x30f/0x680 [ 754.708815][ T8723] do_splice_direct+0xda/0x150 [ 754.713605][ T8723] do_sendfile+0x380/0x650 [ 754.718057][ T8723] __x64_sys_sendfile64+0x105/0x150 [ 754.723282][ T8723] x64_sys_call+0x2bb4/0x3000 [ 754.727979][ T8723] do_syscall_64+0xd2/0x200 [ 754.732523][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.738544][ T8723] [ 754.740913][ T8723] value changed: 0x00000070 -> 0x00000002 [ 754.746642][ T8723] [ 754.748996][ T8723] Reported by Kernel Concurrency Sanitizer on: [ 754.755165][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.6.12501 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 754.766653][ T8723] Tainted: [W]=WARN [ 754.770469][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 754.780549][ T8723] ================================================================== [ 754.801970][ T7793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.830563][ T7601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.976922][ T8707] vhci_hcd: connection reset by peer [ 754.982397][ T12] vhci_hcd: stop threads [ 754.986841][ T12] vhci_hcd: release socket [ 754.991476][ T12] vhci_hcd: disconnect device [ 759.263798][ T3392] usb 1-1: enqueue for inactive port 0 [ 759.269418][ T3392] usb 1-1: enqueue for inactive port 0 [ 759.339218][ T3392] vhci_hcd: vhci_device speed not set