last executing test programs: 41.591662107s ago: executing program 0 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r1 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001b0065f1741472b7388c6f0000000000000000000000400000000000000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c0015"], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000090000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0x800}, 0x18) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8e}}, &(0x7f0000000000)='GPL\x00'}, 0x94) getpid() r7 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x8, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r10, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 40.901817195s ago: executing program 0 (id=141): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="807132a0c4a6fdaf41c79df0639785567d4b5b2488f22e0caa3c473c9f00e133a2d9c8f5f4be58d8b256112d9a78da5c00bbc2586fec317348a39406fb2b6c8360a50ae23d79fbbc02fa2d5f8d56e9bad99919d3f4ed82ae0132878624f30223ca73de2612f0d4b89dff7510fc305b8bd8a5f6a463ec446cc2f1dba70ba88dd619278930ae5eecbdef95a28d0edc3e81b7149c5c323cc6c6818f1129504e2527468ec1d7f4e82232f9c419e5debf181b98aea78144b17a7a33e9f2b0fd75b4077de5fea528182d7c4eebf328dcfe145f6d7938c571ffc4c1a0bf0a24f87c725de2d3ac11791f13fadd79280b253d3ebc4c", @ANYBLOB="7275918541cf028736ca589fc010e81178d21cb8f63e467cd9488592d37f820b8aa985c1c80d44fba55b32febeccdc37060945c483d28752a4748c01"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 39.946791579s ago: executing program 0 (id=144): syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00'], 0xfe33) 39.82954385s ago: executing program 0 (id=146): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x6da1, &(0x7f0000001a40)={0x0, 0x20059c4, 0x6, 0x1000, 0x200005cc}, &(0x7f0000000300)=0x0, &(0x7f0000000240)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) io_setup(0x6, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='scmi_xfer_end\x00', r2, 0x0, 0xffffffffffffffff}, 0xfffffe72) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000001b00)={'syzkaller1\x00', {0x2, 0x0, @loopback}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="7fdf0000000000008ddbc0243a5308ae0be435f810a12c8774921821ad54e98d52345e201454d7982ab2383eb3363369f6f7d0f0019f453369bc0c2d67e682a7e347fdb904d7ce0b3d1cdf9bea1a554623026dd9eb2264e950e82631a6c7266fbf22764eaaa826000000000000"], 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000001ac0)=[{0x5, 0x4, 0x4, 0x2}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) move_mount(r10, &(0x7f0000000100)='./file0/file0\x00', r10, &(0x7f00000001c0)='./file0/file0\x00', 0x22) 39.300900647s ago: executing program 0 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004009eddd4d03bac00000a020000d90000c727235fa8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r6}, 0x18) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8001}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 39.021496061s ago: executing program 0 (id=153): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="807132a0c4a6fdaf41c79df0639785567d4b5b2488f22e0caa3c473c9f00e133a2d9c8f5f4be58d8b256112d9a78da5c00bbc2586fec317348a39406fb2b6c8360a50ae23d79fbbc02fa2d5f8d56e9bad99919d3f4ed82ae0132878624f30223ca73de2612f0d4b89dff7510fc305b8bd8a5f6a463ec446cc2f1dba70ba88dd619278930ae5eecbdef95a28d0edc3e81b7149c5c323cc6c6818f1129504e2527468ec1d7f4e82232f9c419e5debf181b98aea78144b17a7a33e9f2b0fd75b4077de5fea528182d7c4eebf328dcfe145f6d7938c571ffc4c1a0bf0a24f87c725de2d3ac11791f13fadd79280b253d3ebc4c", @ANYBLOB="7275918541cf028736ca589fc010e81178d21cb8f63e467cd9488592d37f820b8aa985c1c80d44fba55b32febeccdc37060945c483d28752a4748c01"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 39.010725931s ago: executing program 32 (id=153): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="807132a0c4a6fdaf41c79df0639785567d4b5b2488f22e0caa3c473c9f00e133a2d9c8f5f4be58d8b256112d9a78da5c00bbc2586fec317348a39406fb2b6c8360a50ae23d79fbbc02fa2d5f8d56e9bad99919d3f4ed82ae0132878624f30223ca73de2612f0d4b89dff7510fc305b8bd8a5f6a463ec446cc2f1dba70ba88dd619278930ae5eecbdef95a28d0edc3e81b7149c5c323cc6c6818f1129504e2527468ec1d7f4e82232f9c419e5debf181b98aea78144b17a7a33e9f2b0fd75b4077de5fea528182d7c4eebf328dcfe145f6d7938c571ffc4c1a0bf0a24f87c725de2d3ac11791f13fadd79280b253d3ebc4c", @ANYBLOB="7275918541cf028736ca589fc010e81178d21cb8f63e467cd9488592d37f820b8aa985c1c80d44fba55b32febeccdc37060945c483d28752a4748c01"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 35.169613213s ago: executing program 3 (id=195): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 35.160788433s ago: executing program 3 (id=196): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000040) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) fcntl$setsig(r2, 0xa, 0x12) r5 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005cb159aa8fdd65cc1e8bd71e3a1d666b8c549a13b7726fc816a92187c6ce2c386ef0bac9000000000000000400000000e42f779279fe72e2387bbd1b8e9e7f2bdf2461aca4d9fa0fa66ddf9ed207008f33f13fc3ff7d5949bd66213d3d9db53ac9613a574ce24edf092f314bf08549", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r9 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r10 = dup2(r2, r3) fcntl$setown(r10, 0x8, r1) tkill(r9, 0x13) 34.320525755s ago: executing program 3 (id=205): socket$pptp(0x18, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 34.172929097s ago: executing program 3 (id=208): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x6da1, &(0x7f0000001a40)={0x0, 0x20059c4, 0x6, 0x1000, 0x200005cc}, &(0x7f0000000300)=0x0, &(0x7f0000000240)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) io_setup(0x6, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='scmi_xfer_end\x00', r2, 0x0, 0xffffffffffffffff}, 0xfffffe72) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000001b00)={'syzkaller1\x00', {0x2, 0x0, @loopback}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="7fdf0000000000008ddbc0243a5308ae0be435f810a12c8774921821ad54e98d52345e201454d7982ab2383eb3363369f6f7d0f0019f453369bc0c2d67e682a7e347fdb904d7ce0b3d1cdf9bea1a554623026dd9eb2264e950e82631a6c7266fbf22764eaaa826000000000000"], 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000001ac0)=[{0x5, 0x4, 0x4, 0x2}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) move_mount(r10, &(0x7f0000000100)='./file0/file0\x00', r10, &(0x7f00000001c0)='./file0/file0\x00', 0x22) 33.862923751s ago: executing program 3 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{}, {}, {@local}, {@private}, {@multicast2}]}]}}}}}}}, 0x0) 33.517651486s ago: executing program 3 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 33.517488756s ago: executing program 33 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.651370987s ago: executing program 6 (id=665): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4.369756281s ago: executing program 1 (id=669): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) pipe(0x0) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209fd0902"], 0x10}}, 0x44884) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000000, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) 4.242560032s ago: executing program 6 (id=671): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) pipe(0x0) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 3.531213062s ago: executing program 5 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='skb_copy_datagram_iovec\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1159e4047a6348de, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$rds(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="001f04000000400700000a00000000000000342174", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000100008000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.417206734s ago: executing program 5 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") 3.386389014s ago: executing program 6 (id=679): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 3.380793304s ago: executing program 1 (id=680): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) lseek(r0, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz71NA0EYBNC55eCO4FohoQMqICGhGbohoA96ISG3LFuftSf/dGA7eC9YjTSzWm24rZZtVT3Wb6WGJE/9+Gp5yZw8p62jt3FO5k1V1ZQh+e/33ntT0/64SS/aX6Y1f74Ou6rLM8vDKX2Py3n/8XO9jwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/ToEAAD//zfUF2I=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = fsmount(r2, 0x0, 0x5) fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 3.247373666s ago: executing program 5 (id=683): syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x200020, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x40000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0x0, @mcast2, 0x7fff7fff}, 0xfffffffffffffe33) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff40", "8ce63ecbc640735f"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.171076827s ago: executing program 6 (id=685): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, 0x0, 0x0, 0x0, 0x0) 2.868580791s ago: executing program 6 (id=688): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) pipe(0x0) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209fd0902"], 0x10}}, 0x44884) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000000, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) 1.742451557s ago: executing program 5 (id=691): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) pipe(0x0) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209fd0902"], 0x10}}, 0x44884) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000000, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) 1.742170357s ago: executing program 1 (id=692): ftruncate(0xffffffffffffffff, 0xc17a) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="70020000", @ANYRES16=r8, @ANYBLOB="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"], 0x270}}, 0x2c0c4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.449290541s ago: executing program 4 (id=693): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0) 1.349603562s ago: executing program 2 (id=695): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 1.349383072s ago: executing program 2 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) 1.293106383s ago: executing program 2 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d6163736563000004000280", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.224083954s ago: executing program 4 (id=698): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) 1.221865464s ago: executing program 6 (id=699): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) 1.023130077s ago: executing program 4 (id=700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x24004090) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x10927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 949.009237ms ago: executing program 2 (id=701): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 828.286219ms ago: executing program 1 (id=702): ftruncate(0xffffffffffffffff, 0xc17a) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="70020000", @ANYRES16=r8, @ANYBLOB="000327bd7000fedbdf2509000000940002802c0003800800010008000000080002000e00000008000100090000000800020006000000080001000100000034000380080001000b000000080001000000000008000100050000000800020000040000080001000300000008000100000000001c00038008000100040000000800010001f0ffff0800010009000000140003800800010006000000080001000c7b00005c0006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000002f017f390ab75c59f553f2eb0deede364c72eddc8cdb5df985970f7c5cccd168c1aa64cb0400020008000100010000003400038008000200fcffffff0800020000000000080003000700000008000200ff03000008000200ffff0000080003004c03000044000380080002000400000008000200070000000800010000060000080003000e00000008000100ff0000000800030003000000080001000b00000008000100d2000000b00004801300010062726f6164636173742d6c696e6b00000900010073797a31000000000700010062726f6164636173742d6c696e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b00000c00078008000100090000004c000780080002000400000008000200400000000800010001000000080001001d000000080004000600000008000200000000240800020017cf000008000300000000000800020007000000280005802400028008000200050000000800040002000000080002000200000008000300ff7fffff1c0002800800020009000000080001000e0000000800010008000000"], 0x270}}, 0x2c0c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 546.780853ms ago: executing program 2 (id=703): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0) 521.347123ms ago: executing program 4 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='skb_copy_datagram_iovec\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 463.385124ms ago: executing program 2 (id=705): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) lseek(r0, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz71NA0EYBNC55eCO4FohoQMqICGhGbohoA96ISG3LFuftSf/dGA7eC9YjTSzWm24rZZtVT3Wb6WGJE/9+Gp5yZw8p62jt3FO5k1V1ZQh+e/33ntT0/64SS/aX6Y1f74Ou6rLM8vDKX2Py3n/8XO9jwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/ToEAAD//zfUF2I=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = fsmount(r2, 0x0, 0x5) fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 359.873485ms ago: executing program 5 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001140)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x800) 314.712646ms ago: executing program 4 (id=707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) 237.600757ms ago: executing program 4 (id=708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="e3605c328460aed34eb3ad6b39022b0f545a4984850e50fa9c2dfb9fca91c59518e99f87b29ab5361d6163ad4a4a8ccd0a9904abb3a28d9521bef9b5b4f474818199032a9c3ae70e8061d5eb59b054b5", 0x50}], 0x1, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, r2, 0xffffffffffffffff, r2, r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x48, 0x20040094}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000900)="0b30f85882a8178ff4d5fbc87272d66823fe27554a82b9d73bb1213ae78f21fe649475b5c7ddba42fa45b5a08d5a9775d994b1b9abe0763af35fe5715df5443d38ac73cff961fe5648b7d98d6296ffeea4816852b95c4d30505df6866d8b3fdeca7b0ef60984b3d088df89e123a94d0439378e26bc2e48f9d9aedb94656181d37e0f7dcfe105a5c11e0c12bcf21a0b31338aed42205ad5457bfc06a245acbd6cc4d17d93c71565062c77", 0xaa}, {&(0x7f0000000a00)="dc583fc16f26492cb1cbb87aa5c89129efb3e1e4d2ff8a62d08666887c9e3e6cb8b1a9313346289793b2ac58c07ed1412daf4c6d5f4589f8cb42a21399ec127ed8a705548779446fbdcdbd79474ecd69ba87404151c8dbe48e43760eac05554926f98c81b55a3169357611c84b8417d706184a638d95cf789d5479de45f537588e3d8da0deb2746da5100071d95fb2f512fb937ab7ba13e25597", 0x9a}, {&(0x7f0000000ac0)="ff71826f9307340824bfc0661aa5a5e691194920d01d9c69be2ec85a1037d6af03f0a75a4935b4045c968342d52fd86f45c660202b3238f6c9d093616325d0cb55d514b59f0f9506831956b095b77e2b00075a9544d0221cc0cc9080920eba2c19a42d9f04dd11adf4fa704e0847ec91d1c26778d0f4b46f91f02b6824c6d4bc5f599832852a7df03a137def3c9c80b12b79f08f61e1e3ea32befc4349498ff18db256f96bf0105fea3a9e6ea51ae4af15c2fd2bf94f3aceb2825733907c7f0c5025cbab89fd27", 0xc7}, {&(0x7f0000000bc0)="6047af1c18410fb5f888c0b51b50bc90498053ca8193086922c10ffaf0229cb574bb844c1d5803af2ad30aa2ce0d09d296c983584f9a1aec4cfa27dc262a3f26ca409d68729057c0b16e199f372d60a668d8f60e7aa0ae038c1f89f41bc4be09b181324ce9f8eaeb7fc959aec929b923733d85cf758e0fd320f79605c6e9af75b1099b5685b63db3ca58f3d8bc09d57c7b5506de6e57b8629e5a84e9518b6e7928ddb1e26cb1b287306c7ecf581fa4fe7f231e90267673f46cb57c092c43964d1e73", 0xc2}], 0x4, &(0x7f0000000e80)=[@rights={{0x20, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x10}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f00)="dc1c513cfc40f3a6d7b6b565052001c1a58ceda18fdd1f4a08875c70ddfc1172a6c3fa36a07121d626f824e0474af99c51d2fa5f7625667c0f07f085cbf5350bceedaa18051e09af9ad947ebfcf763872e3aa54e8f32fdaa24246d653c3248f07c19e525ec9f90442946e715a2542a31b3f6879e79a3a7ba4609e8aabde90c289a8efaf022f9167b98c11c62cd", 0x8d}, {&(0x7f0000000cc0)="349f7f368e49b6af738d7caa00eacd37afc48eeb41748402c7a3ec56b5e62c8d29955a1912b6ef6274effc7c462be0929b68a9c999030b90d20035110853c9e320142d4c49e6b205e5fd7f630550ad702d0e9ef76b2dc86cfa6c914e9f52a956e9180cb1234cbbabb52ce78df8000000000000000000000000009e7579b39bff84fdc1e78db37a6f5d5eb20d0e74722be3c284057e85dd855b1c1eef6f77bf3b5d112cbdae35cc6700624d8af1ce31c1db3f934ea8c206c31ff7131230936c33f05651a1574e8cbe", 0xc8}, {&(0x7f0000001040)="a5db873783bec512d2822efb74d1ee175d3a20267c1cff80e624d5f5ea3939a3c30f496897a3cab741d7d96ca97bc092b7", 0x31}], 0x3, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4}}], 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0xa, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="420cf297912ab3b7d4391781fd97bb41b134310b655b07367d9c09d730974f1ac8559564a794152d379da446cf076c147fa1410382c47ff9bd06838a9a884c96c2a8f0aebb65e9ce6e920df1bac8137801ba8b666108a1744a3c3b0ae852dc48af129eb90e1a6a98f04a3e13ae9c44187a0b848cb08bc0f9e35d162243c0d05d6d897f5ae2880b82f15b8521506896d4bf319f1ad1ae337779bea4420d92628c899b282aa5d05780af144ee710115fe063acc381d8e99b3235255f2ddd8c5683118d16a6864db54db43b36fda3cbe30654927ddf1bf8c78015b316dab6126351ca857e73db63408dea02fc1a0d71ed8c55347e34a11b2576b05ab7db1a3668ea"], 0x3c}}, 0x0) 234.145067ms ago: executing program 5 (id=709): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="e3605c328460aed34eb3ad6b39022b0f545a4984850e50fa9c2dfb9fca91c59518e99f87b29ab5361d6163ad4a4a8ccd0a9904abb3a28d9521bef9b5b4f474818199032a9c3ae70e8061d5eb59b054b5", 0x50}], 0x1, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x20040094}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000900)="0b30f85882a8178ff4d5fbc87272d66823fe27554a82b9d73bb1213ae78f21fe649475b5c7ddba42fa45b5a08d5a9775d994b1b9abe0763af35fe5715df5443d38ac73cff961fe5648b7d98d6296ffeea4816852b95c4d30505df6866d8b3fdeca7b0ef60984b3d088df89e123a94d0439378e26bc2e48f9d9aedb94656181d37e0f7dcfe105a5c11e0c12bcf21a0b31338aed42205ad5457bfc06a245acbd6cc4d17d93c71565062c77", 0xaa}, {&(0x7f0000000a00)="dc583fc16f26492cb1cbb87aa5c89129efb3e1e4d2ff8a62d08666887c9e3e6cb8b1a9313346289793b2ac58c07ed1412daf4c6d5f4589f8cb42a21399ec127ed8a705548779446fbdcdbd79474ecd69ba87404151c8dbe48e43760eac05554926f98c81b55a3169357611c84b8417d706184a638d95cf789d5479de45f537588e3d8da0deb2746da5100071d95fb2f512fb937ab7ba13e25597", 0x9a}, {&(0x7f0000000ac0)="ff71826f9307340824bfc0661aa5a5e691194920d01d9c69be2ec85a1037d6af03f0a75a4935b4045c968342d52fd86f45c660202b3238f6c9d093616325d0cb55d514b59f0f9506831956b095b77e2b00075a9544d0221cc0cc9080920eba2c19a42d9f04dd11adf4fa704e0847ec91d1c26778d0f4b46f91f02b6824c6d4bc5f599832852a7df03a137def3c9c80b12b79f08f61e1e3ea32befc4349498ff18db256f96bf0105fea3a9e6ea51ae4af15c2fd2bf94f3aceb2825733907c7f0c5025cbab89fd27", 0xc7}, {&(0x7f0000000bc0)="6047af1c18410fb5f888c0b51b50bc90498053ca8193086922c10ffaf0229cb574bb844c1d5803af2ad30aa2ce0d09d296c983584f9a1aec4cfa27dc262a3f26ca409d68729057c0b16e199f372d60a668d8f60e7aa0ae038c1f89f41bc4be09b181324ce9f8eaeb7fc959aec929b923733d85cf758e0fd320f79605c6e9af75b1099b5685b63db3ca58f3d8bc09d57c7b5506de6e57b8629e5a84e9518b6e7928ddb1e26cb1b287306c7ecf581fa4fe7f231e90267673f46cb57c092c43964d1e73", 0xc2}], 0x4, &(0x7f0000000e80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x10}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f00)="dc1c513cfc40f3a6d7b6b565052001c1a58ceda18fdd1f4a08875c70ddfc1172a6c3fa36a07121d626f824e0474af99c51d2fa5f7625667c0f07f085cbf5350bceedaa18051e09af9ad947ebfcf763872e3aa54e8f32fdaa24246d653c3248f07c19e525ec9f90442946e715a2542a31b3f6879e79a3a7ba4609e8aabde90c289a8efaf022f9167b98c11c62cd", 0x8d}, {&(0x7f0000000cc0)="349f7f368e49b6af738d7caa00eacd37afc48eeb41748402c7a3ec56b5e62c8d29955a1912b6ef6274effc7c462be0929b68a9c999030b90d20035110853c9e320142d4c49e6b205e5fd7f630550ad702d0e9ef76b2dc86cfa6c914e9f52a956e9180cb1234cbbabb52ce78df8000000000000000000000000009e7579b39bff84fdc1e78db37a6f5d5eb20d0e74722be3c284057e85dd855b1c1eef6f77bf3b5d112cbdae35cc6700624d8af1ce31c1db3f934ea8c206c31ff7131230936c33f05651a1574e8cbe", 0xc8}, {&(0x7f0000001040)="a5db873783bec512d2822efb74d1ee175d3a20267c1cff80e624d5f5ea3939a3c30f496897a3cab741d7d96ca97bc092b7", 0x31}], 0x3, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 157.095178ms ago: executing program 1 (id=710): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d61637365630000040002800800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) kernel console output (not intermixed with test programs): neric 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.829079][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.836814][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.844579][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.852245][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.859953][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.867685][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 55.880436][ T3386] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 55.905586][ T3933] team0 (unregistering): Port device team_slave_1 removed [ 55.923944][ T23] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 55.999291][ T4384] fido_id[4384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.016983][ T3933] team0 (unregistering): Port device team_slave_0 removed [ 56.075609][ T4375] loop1: detected capacity change from 0 to 128 [ 56.142934][ T4388] fido_id[4388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.176261][ T4375] EXT4-fs: Ignoring removed nobh option [ 56.229048][ T4375] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.368164][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 56.496279][ T4403] loop4: detected capacity change from 0 to 1024 [ 56.608522][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.615963][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.639992][ T4315] bridge_slave_0: entered allmulticast mode [ 56.655816][ T4315] bridge_slave_0: entered promiscuous mode [ 56.673441][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.680742][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.689665][ T4315] bridge_slave_1: entered allmulticast mode [ 56.700457][ T4315] bridge_slave_1: entered promiscuous mode [ 56.708243][ T4421] loop1: detected capacity change from 0 to 1024 [ 56.735079][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.749930][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.793737][ T4430] hub 9-0:1.0: USB hub found [ 56.798622][ T4430] hub 9-0:1.0: 8 ports detected [ 56.835587][ T4421] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.899499][ T4315] team0: Port device team_slave_0 added [ 56.907169][ T4315] team0: Port device team_slave_1 added [ 56.927440][ T4421] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 56.985743][ T4421] EXT4-fs (loop1): mount failed [ 57.029049][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.036146][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.062169][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.074807][ T4443] loop4: detected capacity change from 0 to 512 [ 57.106250][ T4443] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.130903][ T4443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.209046][ T4443] EXT4-fs (loop4): 1 truncate cleaned up [ 57.277647][ T4452] loop2: detected capacity change from 0 to 128 [ 57.333166][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.340202][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.366310][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.392105][ T4455] loop1: detected capacity change from 0 to 1024 [ 57.463319][ T4315] hsr_slave_0: entered promiscuous mode [ 57.475666][ T4315] hsr_slave_1: entered promiscuous mode [ 57.614821][ T3944] bio_check_eod: 53 callbacks suppressed [ 57.614839][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.614839][ T3944] loop2: rw=1, sector=129, nr_sectors = 8 limit=128 [ 57.639296][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.639296][ T3944] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 57.664921][ T4315] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.699826][ T4315] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.731927][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.731927][ T3944] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 57.734812][ T4315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.752255][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.752255][ T3944] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 57.752375][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.752375][ T3944] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 57.804991][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.804991][ T3944] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 57.835671][ T4315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.843333][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.843333][ T3944] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 57.861665][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.861665][ T3944] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 57.868086][ T4495] hub 9-0:1.0: USB hub found [ 57.880690][ T4495] hub 9-0:1.0: 8 ports detected [ 57.881636][ T4499] __nla_validate_parse: 8 callbacks suppressed [ 57.881655][ T4499] netlink: 3 bytes leftover after parsing attributes in process `syz.5.255'. [ 57.906717][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.906717][ T3944] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 57.920952][ T3944] kworker/u8:27: attempt to access beyond end of device [ 57.920952][ T3944] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 57.945182][ T4506] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 57.954703][ T4499] 0ªX¹¦À: renamed from caif0 [ 57.961398][ T4499] 0ªX¹¦À: entered allmulticast mode [ 57.961965][ T4507] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.257'. [ 57.966691][ T4499] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 58.026723][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.048212][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.084434][ T3934] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.091667][ T3934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.164138][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.171463][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.414902][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.698003][ T4539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4539 comm=syz.2.264 [ 58.748837][ T4539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.264'. [ 58.787083][ T4569] bridge0: port 3(batadv1) entered blocking state [ 58.793713][ T4569] bridge0: port 3(batadv1) entered disabled state [ 58.850373][ T4569] batadv1: entered allmulticast mode [ 58.867706][ T4547] loop1: detected capacity change from 0 to 128 [ 58.880157][ T4569] batadv1: entered promiscuous mode [ 58.898450][ T4547] EXT4-fs: Ignoring removed nobh option [ 58.920934][ T4315] veth0_vlan: entered promiscuous mode [ 58.927705][ T4547] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.006418][ T4315] veth1_vlan: entered promiscuous mode [ 59.038963][ T4315] veth0_macvtap: entered promiscuous mode [ 59.046848][ T4315] veth1_macvtap: entered promiscuous mode [ 59.088463][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.159226][ T4513] Set syz1 is full, maxelem 65536 reached [ 59.179377][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.196397][ T4315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.205372][ T4315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.214255][ T4315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.223262][ T4315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.270666][ T4595] hub 9-0:1.0: USB hub found [ 59.300043][ T3933] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 59.309373][ T3933] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 59.319493][ T4595] hub 9-0:1.0: 8 ports detected [ 59.351639][ T4601] warn_alloc: 1 callbacks suppressed [ 59.351657][ T4601] syz.6.214: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 59.371548][ T4601] CPU: 0 UID: 0 PID: 4601 Comm: syz.6.214 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 59.371613][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.371630][ T4601] Call Trace: [ 59.371638][ T4601] [ 59.371647][ T4601] __dump_stack+0x1d/0x30 [ 59.371668][ T4601] dump_stack_lvl+0xe8/0x140 [ 59.371685][ T4601] dump_stack+0x15/0x1b [ 59.371701][ T4601] warn_alloc+0x12b/0x1a0 [ 59.371790][ T4601] ? __account_obj_stock+0x211/0x350 [ 59.371816][ T4601] __vmalloc_node_range_noprof+0x9c/0xe00 [ 59.371852][ T4601] ? __cgroup_account_cputime+0x81/0xa0 [ 59.371998][ T4601] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 59.372063][ T4601] ? probe_sched_wakeup+0x85/0xa0 [ 59.372092][ T4601] ? __rcu_read_unlock+0x4f/0x70 [ 59.372176][ T4601] ? avc_has_perm_noaudit+0x1b1/0x200 [ 59.372272][ T4601] ? should_fail_ex+0x30/0x280 [ 59.372302][ T4601] ? xskq_create+0x36/0xe0 [ 59.372323][ T4601] vmalloc_user_noprof+0x7d/0xb0 [ 59.372359][ T4601] ? xskq_create+0x80/0xe0 [ 59.372403][ T4601] xskq_create+0x80/0xe0 [ 59.372422][ T4601] xsk_init_queue+0x95/0xf0 [ 59.372441][ T4601] xsk_setsockopt+0x35c/0x510 [ 59.372463][ T4601] ? __pfx_xsk_setsockopt+0x10/0x10 [ 59.372549][ T4601] __sys_setsockopt+0x184/0x200 [ 59.372589][ T4601] __x64_sys_setsockopt+0x64/0x80 [ 59.372627][ T4601] x64_sys_call+0x2bd5/0x2fb0 [ 59.372777][ T4601] do_syscall_64+0xd2/0x200 [ 59.372860][ T4601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.372884][ T4601] ? clear_bhb_loop+0x40/0x90 [ 59.372907][ T4601] ? clear_bhb_loop+0x40/0x90 [ 59.372934][ T4601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.372987][ T4601] RIP: 0033:0x7f6e6401e929 [ 59.373006][ T4601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.373026][ T4601] RSP: 002b:00007f6e62687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.373045][ T4601] RAX: ffffffffffffffda RBX: 00007f6e64245fa0 RCX: 00007f6e6401e929 [ 59.373057][ T4601] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 59.373096][ T4601] RBP: 00007f6e640a0b39 R08: 0000000000000004 R09: 0000000000000000 [ 59.373112][ T4601] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.373126][ T4601] R13: 0000000000000000 R14: 00007f6e64245fa0 R15: 00007ffd667466d8 [ 59.373147][ T4601] [ 59.611183][ T4601] Mem-Info: [ 59.614360][ T4601] active_anon:11194 inactive_anon:2 isolated_anon:11 [ 59.614360][ T4601] active_file:6097 inactive_file:2198 isolated_file:0 [ 59.614360][ T4601] unevictable:0 dirty:58 writeback:0 [ 59.614360][ T4601] slab_reclaimable:3091 slab_unreclaimable:15911 [ 59.614360][ T4601] mapped:32179 shmem:3843 pagetables:1187 [ 59.614360][ T4601] sec_pagetables:0 bounce:0 [ 59.614360][ T4601] kernel_misc_reclaimable:0 [ 59.614360][ T4601] free:1892925 free_pcp:7136 free_cma:0 [ 59.659426][ T4601] Node 0 active_anon:41760kB inactive_anon:8kB active_file:24388kB inactive_file:8792kB unevictable:0kB isolated(anon):44kB isolated(file):0kB mapped:128716kB dirty:232kB writeback:0kB shmem:12240kB writeback_tmp:0kB kernel_stack:3776kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 59.688443][ T4601] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 59.694383][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 59.717494][ T4601] lowmem_reserve[]: 0 2882 7860 7860 [ 59.725317][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 59.730598][ T4601] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 59.768733][ T4601] lowmem_reserve[]: 0 0 4978 4978 [ 59.774039][ T4601] Node 0 Normal free:4612456kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41760kB inactive_anon:8kB active_file:24388kB inactive_file:8792kB unevictable:0kB writepending:216kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:23872kB local_pcp:4628kB free_cma:0kB [ 59.783909][ T4607] loop1: detected capacity change from 0 to 1024 [ 59.805898][ T4601] lowmem_reserve[]: 0 0 0 0 [ 59.814053][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.816903][ T4601] Node 0 [ 59.824578][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.824671][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.827586][ T4601] DMA: 0*4kB [ 59.835266][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.835360][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.842964][ T4601] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 59.846341][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.853980][ T4601] 0*256kB [ 59.861699][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.867106][ T4601] 0*512kB [ 59.874775][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.877778][ T4601] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) [ 59.885563][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.888558][ T4601] = 15360kB [ 59.896227][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.901921][ T4601] Node 0 DMA32: [ 59.909895][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.909926][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.909953][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.909976][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 59.920895][ T23] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 59.921344][ T4601] 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 59.980897][ T4601] Node 0 Normal: 1582*4kB (UM) 650*8kB (UME) 270*16kB (UM) 233*32kB (UM) 78*64kB (UME) 35*128kB (UME) 33*256kB (UME) 12*512kB (UME) 8*1024kB (UM) 3*2048kB (ME) 1111*4096kB (UM) = 4612360kB [ 59.999834][ T4601] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 60.009241][ T4601] 11468 total pagecache pages [ 60.013968][ T4601] 2 pages in swap cache [ 60.018158][ T4601] Free swap = 124988kB [ 60.022333][ T4601] Total swap = 124996kB [ 60.026545][ T4601] 2097051 pages RAM [ 60.030426][ T4601] 0 pages HighMem/MovableOnly [ 60.035189][ T4601] 80812 pages reserved [ 60.038405][ T4616] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.276'. [ 60.092503][ T4617] fido_id[4617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.134274][ T4582] loop2: detected capacity change from 0 to 128 [ 60.141163][ T4582] EXT4-fs: Ignoring removed nobh option [ 60.162775][ T4607] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 60.175324][ T4607] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.175324][ T4607] [ 60.185129][ T4607] EXT4-fs (loop1): Total free blocks count 0 [ 60.191173][ T4607] EXT4-fs (loop1): Free/Dirty block details [ 60.197112][ T4607] EXT4-fs (loop1): free_blocks=0 [ 60.202147][ T4607] EXT4-fs (loop1): dirty_blocks=0 [ 60.207268][ T4607] EXT4-fs (loop1): Block reservation details [ 60.213376][ T4607] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 60.259296][ T4582] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.337307][ T4645] loop4: detected capacity change from 0 to 512 [ 60.345332][ T4643] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 60.373256][ T4645] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.452422][ T4645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.469853][ T4653] loop1: detected capacity change from 0 to 1024 [ 60.487649][ T4645] ext4: Bad value for 'resgid' [ 60.492586][ T4645] ext4: Bad value for 'resgid' [ 60.548849][ T4645] SELinux: failed to load policy [ 60.638953][ T4668] hub 9-0:1.0: USB hub found [ 60.664256][ T4668] hub 9-0:1.0: 8 ports detected [ 60.810984][ T4676] loop4: detected capacity change from 0 to 8192 [ 60.833342][ T4687] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.288'. [ 60.862151][ T4681] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.288'. [ 60.886336][ T4676] loop4: p1 p2 p4 [ 60.899555][ T4676] loop4: p1 size 65536 extends beyond EOD, truncated [ 60.938714][ T4676] loop4: p2 start 861536256 is beyond EOD, truncated [ 60.945709][ T4676] loop4: p4 size 65536 extends beyond EOD, truncated [ 61.148344][ T4708] loop1: detected capacity change from 0 to 1024 [ 61.281491][ T4713] loop2: detected capacity change from 0 to 512 [ 61.301308][ T4649] Set syz1 is full, maxelem 65536 reached [ 61.306261][ T4713] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.323385][ T4713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.333093][ T4713] ext4: Bad value for 'resgid' [ 61.338019][ T4713] ext4: Bad value for 'resgid' [ 61.412932][ T4713] SELinux: failed to load policy [ 61.533574][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 61.541389][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 61.555404][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.563254][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.570969][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.578990][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.586912][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.594625][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.602343][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.610091][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.617796][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.625764][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.633746][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.641428][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.649264][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.657157][ T23] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 61.674425][ T4740] hub 9-0:1.0: USB hub found [ 61.679342][ T4740] hub 9-0:1.0: 8 ports detected [ 61.695761][ T4736] loop5: detected capacity change from 0 to 128 [ 61.710068][ T23] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 61.719712][ T4736] EXT4-fs: Ignoring removed nobh option [ 61.734783][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 61.743756][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 61.756294][ T4743] fido_id[4743]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.847025][ T4736] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.904337][ T4759] loop2: detected capacity change from 0 to 512 [ 61.912172][ T4760] loop1: detected capacity change from 0 to 1024 [ 61.913265][ T4759] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.933832][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.943515][ T4759] ext4: Bad value for 'resgid' [ 61.948440][ T4759] ext4: Bad value for 'resgid' [ 62.017482][ T4759] SELinux: failed to load policy [ 62.045402][ T4769] bridge0: port 3(batadv1) entered blocking state [ 62.051986][ T4769] bridge0: port 3(batadv1) entered disabled state [ 62.068617][ T4771] loop2: detected capacity change from 0 to 2048 [ 62.077308][ T4769] batadv1: entered allmulticast mode [ 62.079257][ T4773] loop1: detected capacity change from 0 to 512 [ 62.083595][ T4769] batadv1: entered promiscuous mode [ 62.091734][ T4773] EXT4-fs: Ignoring removed nobh option [ 62.109183][ T4773] ext4: Unknown parameter 'noacl' [ 62.123513][ T3295] loop2: p1 < > p2 < > p3 p4 < > [ 62.128620][ T3295] loop2: partition table partially beyond EOD, truncated [ 62.142784][ T3295] loop2: p1 start 2305 is beyond EOD, truncated [ 62.149341][ T3295] loop2: p2 start 4294902784 is beyond EOD, truncated [ 62.156219][ T3295] loop2: p3 start 3724543488 is beyond EOD, truncated [ 62.168108][ T4771] loop2: p1 < > p2 < > p3 p4 < > [ 62.173344][ T4771] loop2: partition table partially beyond EOD, truncated [ 62.180682][ T4771] loop2: p1 start 2305 is beyond EOD, truncated [ 62.187002][ T4771] loop2: p2 start 4294902784 is beyond EOD, truncated [ 62.193988][ T4771] loop2: p3 start 3724543488 is beyond EOD, truncated [ 62.206093][ T4773] loop1: detected capacity change from 0 to 1024 [ 62.227833][ T4773] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.340195][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 62.340208][ T29] audit: type=1400 audit(1752447522.707:1110): avc: denied { read } for pid=4779 comm="syz.5.315" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.362400][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.369406][ T29] audit: type=1400 audit(1752447522.707:1111): avc: denied { open } for pid=4779 comm="syz.5.315" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.385368][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.468026][ T3944] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 62.501958][ T3944] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 62.515079][ T3944] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.515079][ T3944] [ 62.544855][ T3934] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 62.554839][ T3934] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 62.946576][ T4795] loop6: detected capacity change from 0 to 1024 [ 63.054027][ T4805] loop5: detected capacity change from 0 to 128 [ 63.085641][ T4807] __nla_validate_parse: 9 callbacks suppressed [ 63.085661][ T4807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 63.189693][ T4810] loop4: detected capacity change from 0 to 512 [ 63.219439][ T4810] EXT4-fs: Ignoring removed nobh option [ 63.267098][ T4810] ext4: Unknown parameter 'noacl' [ 63.320545][ T4810] loop4: detected capacity change from 0 to 1024 [ 63.372300][ T4810] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.404419][ T3933] bio_check_eod: 38 callbacks suppressed [ 63.404436][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.404436][ T3933] loop5: rw=1, sector=129, nr_sectors = 8 limit=128 [ 63.486960][ T3944] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 63.514654][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.514654][ T3933] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 63.590342][ T3944] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 63.602956][ T3944] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.602956][ T3944] [ 63.612742][ T3944] EXT4-fs (loop4): Total free blocks count 0 [ 63.618878][ T3944] EXT4-fs (loop4): Free/Dirty block details [ 63.624880][ T3944] EXT4-fs (loop4): free_blocks=0 [ 63.629932][ T3944] EXT4-fs (loop4): dirty_blocks=16 [ 63.635212][ T3944] EXT4-fs (loop4): Block reservation details [ 63.641216][ T3944] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 63.654761][ T4831] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 63.666281][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.666281][ T3933] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 63.720164][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.720164][ T3933] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 63.771739][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.771739][ T3933] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 63.830123][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.830123][ T3933] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 63.875200][ T3933] kworker/u8:16: attempt to access beyond end of device [ 63.875200][ T3933] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 64.130413][ T3933] kworker/u8:16: attempt to access beyond end of device [ 64.130413][ T3933] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 64.220225][ T3933] kworker/u8:16: attempt to access beyond end of device [ 64.220225][ T3933] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 64.273083][ T3933] kworker/u8:16: attempt to access beyond end of device [ 64.273083][ T3933] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 64.337618][ T4850] loop1: detected capacity change from 0 to 1024 [ 64.351724][ T4854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.336'. [ 64.454151][ T4859] loop2: detected capacity change from 0 to 128 [ 64.494035][ T4853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4853 comm=syz.5.327 [ 64.508249][ T4853] netlink: 60 bytes leftover after parsing attributes in process `syz.5.327'. [ 64.538393][ T29] audit: type=1326 audit(1752447524.907:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.562342][ T29] audit: type=1326 audit(1752447524.907:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.585829][ T29] audit: type=1326 audit(1752447524.907:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.609205][ T29] audit: type=1326 audit(1752447524.907:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.633236][ T29] audit: type=1326 audit(1752447524.907:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.656760][ T29] audit: type=1326 audit(1752447524.907:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.700168][ T29] audit: type=1326 audit(1752447524.917:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.723728][ T29] audit: type=1326 audit(1752447524.917:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 64.728747][ T4869] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 64.808969][ T4873] loop1: detected capacity change from 0 to 512 [ 64.823731][ T4873] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.835224][ T4873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.848024][ T4873] ext4: Bad value for 'resgid' [ 64.853046][ T4873] ext4: Bad value for 'resgid' [ 64.902918][ T4873] SELinux: failed to load policy [ 64.925460][ T4879] loop2: detected capacity change from 0 to 1024 [ 65.002959][ T4879] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 65.015494][ T4879] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.015494][ T4879] [ 65.025683][ T4879] EXT4-fs (loop2): Total free blocks count 0 [ 65.031705][ T4879] EXT4-fs (loop2): Free/Dirty block details [ 65.038082][ T4879] EXT4-fs (loop2): free_blocks=0 [ 65.043131][ T4879] EXT4-fs (loop2): dirty_blocks=0 [ 65.048254][ T4879] EXT4-fs (loop2): Block reservation details [ 65.054324][ T4879] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 65.066720][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'. [ 65.201803][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 65.210923][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.350'. [ 65.219859][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 65.231412][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.350'. [ 65.240360][ T4901] netlink: 'syz.5.350': attribute type 6 has an invalid length. [ 65.250416][ T4901] netlink: 'syz.5.350': attribute type 10 has an invalid length. [ 65.262597][ T4901] bond0: (slave dummy0): Releasing backup interface [ 65.309914][ T4908] netlink: 'syz.5.350': attribute type 10 has an invalid length. [ 65.321361][ T4901] team0: Port device dummy0 added [ 65.366089][ T4908] team0: Port device dummy0 removed [ 65.377712][ T4908] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.454221][ T4917] loop5: detected capacity change from 0 to 128 [ 65.566199][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 65.573996][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 65.587487][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.595247][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.603059][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.610751][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.618504][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.626358][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.634115][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.641831][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.649608][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.657370][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.665131][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.674021][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.682699][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.690521][ T802] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 65.711231][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 65.719131][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 65.729976][ T802] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 65.778624][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.786563][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.794307][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.801986][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.809785][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.810039][ T4936] fido_id[4936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.817484][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.838767][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.846580][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.854373][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.862074][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.869807][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.877537][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.885272][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.893062][ T4351] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 65.903286][ T4941] loop2: detected capacity change from 0 to 128 [ 65.955330][ T4941] EXT4-fs: Ignoring removed nobh option [ 66.013082][ T4948] loop6: detected capacity change from 0 to 1024 [ 66.022265][ T4949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4949 comm=syz.4.355 [ 66.078822][ T4351] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 66.093728][ T4941] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.201732][ T4968] loop6: detected capacity change from 0 to 1024 [ 66.244909][ T4959] fido_id[4959]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.350813][ T4968] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 66.363285][ T4968] EXT4-fs (loop6): This should not happen!! Data will be lost [ 66.363285][ T4968] [ 66.373082][ T4968] EXT4-fs (loop6): Total free blocks count 0 [ 66.379100][ T4968] EXT4-fs (loop6): Free/Dirty block details [ 66.385131][ T4968] EXT4-fs (loop6): free_blocks=0 [ 66.390199][ T4968] EXT4-fs (loop6): dirty_blocks=0 [ 66.395404][ T4968] EXT4-fs (loop6): Block reservation details [ 66.401510][ T4968] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 66.505807][ T5001] loop6: detected capacity change from 0 to 128 [ 66.864245][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 66.872067][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 66.889367][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.897939][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.905823][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.913565][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.921332][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.929041][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.936755][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.945006][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.952754][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.960527][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.968358][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.972475][ T5035] hub 9-0:1.0: USB hub found [ 66.976055][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.976103][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 66.976125][ T802] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 67.004416][ T802] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.007733][ T5035] hub 9-0:1.0: 8 ports detected [ 67.127572][ T5038] fido_id[5038]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.376981][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 67.376999][ T29] audit: type=1326 audit(1752447527.747:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.499000][ T29] audit: type=1326 audit(1752447527.777:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.522524][ T29] audit: type=1326 audit(1752447527.777:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.546073][ T29] audit: type=1326 audit(1752447527.777:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.569731][ T29] audit: type=1326 audit(1752447527.777:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.593135][ T29] audit: type=1326 audit(1752447527.777:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.616623][ T29] audit: type=1326 audit(1752447527.777:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.640246][ T29] audit: type=1326 audit(1752447527.777:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.663828][ T29] audit: type=1326 audit(1752447527.777:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 67.713182][ T5086] hub 9-0:1.0: USB hub found [ 67.744468][ T5086] hub 9-0:1.0: 8 ports detected [ 67.757765][ T5081] loop1: detected capacity change from 0 to 128 [ 67.945799][ T5100] loop2: detected capacity change from 0 to 8192 [ 67.993679][ T5100] loop2: p1 p2 p4 [ 67.999366][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 68.007146][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 68.019752][ T5100] loop2: p1 size 65536 extends beyond EOD, truncated [ 68.033055][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.040877][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.048658][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.056356][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.064101][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.071898][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.079671][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.087453][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.095181][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.103148][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.110949][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.118728][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.126527][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.134381][ T4351] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 68.146572][ T5100] loop2: p2 start 861536256 is beyond EOD, truncated [ 68.153395][ T5100] loop2: p4 size 65536 extends beyond EOD, truncated [ 68.164455][ T4351] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 68.206631][ T5109] fido_id[5109]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.393702][ T29] audit: type=1326 audit(1752447528.757:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e098e929 code=0x7ffc0000 [ 68.486166][ T5125] __nla_validate_parse: 4 callbacks suppressed [ 68.486185][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 68.501407][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 68.527831][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 68.595982][ T5137] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.397'. [ 68.606713][ T5125] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.397'. [ 68.659327][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.685472][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.693063][ T5139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.709825][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.717449][ T5139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.771637][ T5143] loop2: detected capacity change from 0 to 512 [ 68.798827][ T5143] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.808538][ T5143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.826857][ T5143] EXT4-fs (loop2): 1 truncate cleaned up [ 69.035168][ T5152] loop2: detected capacity change from 0 to 512 [ 69.049551][ T5152] journal_path: Lookup failure for './file0/../file0' [ 69.056548][ T5152] EXT4-fs: error: could not find journal device path [ 69.072264][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 69.080032][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 69.090230][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.098073][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.105865][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.113603][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.121456][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.129242][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.136973][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.144695][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.152380][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.160087][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.167788][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.175539][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.183361][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.191048][ T10] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 69.207227][ T10] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 69.263074][ T5156] fido_id[5156]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.302066][ T5160] loop2: detected capacity change from 0 to 512 [ 69.311499][ T5160] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.349321][ T5160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.370173][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.407'. [ 69.380269][ T5160] ext4: Bad value for 'resgid' [ 69.385164][ T5160] ext4: Bad value for 'resgid' [ 69.611420][ T5176] loop5: detected capacity change from 0 to 512 [ 69.626943][ T5174] loop2: detected capacity change from 0 to 512 [ 69.632359][ T5176] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.661709][ T5176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.702699][ T5176] EXT4-fs (loop5): 1 truncate cleaned up [ 69.714946][ T5170] infiniband syz!: set active [ 69.719813][ T5170] infiniband syz!: added team_slave_0 [ 69.776057][ T5176] EXT4-fs mount: 58 callbacks suppressed [ 69.776078][ T5176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.813110][ T5171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5171 comm=syz.1.410 [ 69.826002][ T5171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.410'. [ 69.865114][ T5170] RDS/IB: syz!: added [ 69.869418][ T5170] smc: adding ib device syz! with port count 1 [ 69.876063][ T5170] smc: ib device syz! port 1 has pnetid [ 69.894745][ T5174] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.959158][ T5174] EXT4-fs (loop2): mount failed [ 70.019719][ T5188] loop6: detected capacity change from 0 to 512 [ 70.036305][ T5188] EXT4-fs: Ignoring removed nobh option [ 70.042069][ T5188] ext4: Unknown parameter 'noacl' [ 70.067644][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 70.200057][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 70.272754][ T5202] loop1: detected capacity change from 0 to 1024 [ 70.281545][ T5202] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.296165][ T5202] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 70.311575][ T5202] EXT4-fs (loop1): mount failed [ 70.354704][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 70.443225][ T5210] warn_alloc: 2 callbacks suppressed [ 70.443309][ T5210] syz.1.424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.463326][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.1.424 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 70.463361][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.463377][ T5210] Call Trace: [ 70.463384][ T5210] [ 70.463399][ T5210] __dump_stack+0x1d/0x30 [ 70.463427][ T5210] dump_stack_lvl+0xe8/0x140 [ 70.463508][ T5210] dump_stack+0x15/0x1b [ 70.463530][ T5210] warn_alloc+0x12b/0x1a0 [ 70.463562][ T5210] ? __account_obj_stock+0x211/0x350 [ 70.463589][ T5210] __vmalloc_node_range_noprof+0x9c/0xe00 [ 70.463625][ T5210] ? __cgroup_account_cputime+0x81/0xa0 [ 70.463743][ T5210] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 70.463780][ T5210] ? probe_sched_wakeup+0x85/0xa0 [ 70.463811][ T5210] ? __rcu_read_unlock+0x4f/0x70 [ 70.463838][ T5210] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.463945][ T5210] ? should_fail_ex+0x30/0x280 [ 70.463980][ T5210] ? xskq_create+0x36/0xe0 [ 70.464021][ T5210] vmalloc_user_noprof+0x7d/0xb0 [ 70.464057][ T5210] ? xskq_create+0x80/0xe0 [ 70.464121][ T5210] xskq_create+0x80/0xe0 [ 70.464150][ T5210] xsk_init_queue+0x95/0xf0 [ 70.464177][ T5210] xsk_setsockopt+0x35c/0x510 [ 70.464229][ T5210] ? __pfx_xsk_setsockopt+0x10/0x10 [ 70.464296][ T5210] __sys_setsockopt+0x184/0x200 [ 70.464326][ T5210] __x64_sys_setsockopt+0x64/0x80 [ 70.464411][ T5210] x64_sys_call+0x2bd5/0x2fb0 [ 70.464440][ T5210] do_syscall_64+0xd2/0x200 [ 70.464474][ T5210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.464499][ T5210] ? clear_bhb_loop+0x40/0x90 [ 70.464518][ T5210] ? clear_bhb_loop+0x40/0x90 [ 70.464540][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.464632][ T5210] RIP: 0033:0x7ff3e098e929 [ 70.464647][ T5210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.464662][ T5210] RSP: 002b:00007ff3deff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.464679][ T5210] RAX: ffffffffffffffda RBX: 00007ff3e0bb5fa0 RCX: 00007ff3e098e929 [ 70.464690][ T5210] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 70.464710][ T5210] RBP: 00007ff3e0a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 70.464736][ T5210] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.464746][ T5210] R13: 0000000000000000 R14: 00007ff3e0bb5fa0 R15: 00007ffebb97f708 [ 70.464763][ T5210] [ 70.464832][ T5210] Mem-Info: [ 70.681024][ T5216] hub 9-0:1.0: USB hub found [ 70.686689][ T5210] active_anon:8045 inactive_anon:2 isolated_anon:0 [ 70.686689][ T5210] active_file:6097 inactive_file:2228 isolated_file:0 [ 70.686689][ T5210] unevictable:0 dirty:180 writeback:0 [ 70.686689][ T5210] slab_reclaimable:3138 slab_unreclaimable:18091 [ 70.686689][ T5210] mapped:29593 shmem:262 pagetables:1512 [ 70.686689][ T5210] sec_pagetables:0 bounce:0 [ 70.686689][ T5210] kernel_misc_reclaimable:0 [ 70.686689][ T5210] free:1882727 free_pcp:16162 free_cma:0 [ 70.697170][ T5216] hub 9-0:1.0: 8 ports detected [ 70.702753][ T5210] Node 0 active_anon:32180kB inactive_anon:8kB active_file:24388kB inactive_file:8912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118372kB dirty:720kB writeback:0kB shmem:1048kB writeback_tmp:0kB kernel_stack:4000kB pagetables:6048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 70.702812][ T5210] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.719628][ T5216] rdma_op ffff8881197f5980 conn xmit_rdma 0000000000000000 [ 70.758447][ T5210] lowmem_reserve[]: 0 2882 7860 7860 [ 70.758488][ T5210] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 70.864265][ T5210] lowmem_reserve[]: 0 0 4978 4978 [ 70.869332][ T5210] Node 0 Normal free:4567720kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32180kB inactive_anon:8kB active_file:24388kB inactive_file:8912kB unevictable:0kB writepending:720kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:61124kB local_pcp:33728kB free_cma:0kB [ 70.901546][ T5210] lowmem_reserve[]: 0 0 0 0 [ 70.906226][ T5210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 70.919221][ T5210] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 70.935521][ T5210] Node 0 Normal: 1641*4kB (UME) 595*8kB (UME) 194*16kB (UM) 151*32kB (UM) 51*64kB (UME) 18*128kB (UME) 18*256kB (UM) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 1107*4096kB (UM) = 4567804kB [ 70.954057][ T5210] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 70.963450][ T5210] 8584 total pagecache pages [ 70.968562][ T5210] 2 pages in swap cache [ 70.972717][ T5210] Free swap = 124988kB [ 70.976910][ T5210] Total swap = 124996kB [ 70.981085][ T5210] 2097051 pages RAM [ 70.985048][ T5210] 0 pages HighMem/MovableOnly [ 70.989813][ T5210] 80812 pages reserved [ 70.997546][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.149934][ T5229] hub 9-0:1.0: USB hub found [ 71.165202][ T5229] hub 9-0:1.0: 8 ports detected [ 71.243850][ T5239] netlink: 'syz.6.438': attribute type 10 has an invalid length. [ 71.253755][ T5235] loop5: detected capacity change from 0 to 512 [ 71.258256][ T5239] team0: Port device dummy0 added [ 71.265783][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.276653][ T5235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.287899][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 71.295716][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 71.299386][ T5239] netlink: 'syz.6.438': attribute type 10 has an invalid length. [ 71.306906][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.319729][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.324784][ T5235] EXT4-fs (loop5): 1 truncate cleaned up [ 71.327567][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.336089][ T5235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.341137][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.357281][ T5239] team0: Port device dummy0 removed [ 71.361396][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.369662][ T5239] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.374350][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.390709][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.398594][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.406309][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.414023][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.421766][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.429658][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.437499][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.445353][ T4351] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 71.463051][ T4351] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 71.563052][ T5253] loop2: detected capacity change from 0 to 512 [ 71.570012][ T5253] EXT4-fs: Ignoring removed nobh option [ 71.577069][ T5253] ext4: Unknown parameter 'noacl' [ 71.752610][ T5257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5257 comm=syz.4.443 [ 71.786154][ T5263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5263 comm=syz.6.446 [ 71.852436][ T5269] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 71.867575][ T5271] hub 9-0:1.0: USB hub found [ 71.872505][ T5271] hub 9-0:1.0: 8 ports detected [ 71.897801][ T5269] loop6: detected capacity change from 0 to 512 [ 71.905210][ T5273] loop2: detected capacity change from 0 to 1024 [ 71.929329][ T5273] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.929566][ T5275] loop1: detected capacity change from 0 to 128 [ 71.962621][ T5273] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 71.977474][ T5269] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.003506][ T5273] EXT4-fs (loop2): mount failed [ 72.012058][ T5269] EXT4-fs (loop6): mount failed [ 72.045977][ T5281] bridge0: entered promiscuous mode [ 72.051352][ T5281] macsec1: entered promiscuous mode [ 72.097567][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.189522][ T5300] loop5: detected capacity change from 0 to 512 [ 72.231277][ T5300] journal_path: Lookup failure for './file0/../file0' [ 72.238276][ T5300] EXT4-fs: error: could not find journal device path [ 72.258519][ T5307] loop6: detected capacity change from 0 to 1024 [ 72.267914][ T5310] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 72.306240][ T5310] team0: Port device dummy0 added [ 72.329384][ T5307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.342756][ T5310] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 72.383544][ T5318] hub 9-0:1.0: USB hub found [ 72.388346][ T5318] hub 9-0:1.0: 8 ports detected [ 72.394755][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 72.394771][ T29] audit: type=1326 audit(1752447532.747:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.424477][ T29] audit: type=1326 audit(1752447532.747:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.447919][ T29] audit: type=1326 audit(1752447532.747:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.462591][ T5307] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 72.471556][ T29] audit: type=1326 audit(1752447532.747:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.483791][ T5307] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.483791][ T5307] [ 72.483812][ T5307] EXT4-fs (loop6): Total free blocks count 0 [ 72.483828][ T5307] EXT4-fs (loop6): Free/Dirty block details [ 72.507186][ T29] audit: type=1326 audit(1752447532.747:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.516796][ T5307] EXT4-fs (loop6): free_blocks=0 [ 72.522791][ T29] audit: type=1326 audit(1752447532.747:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.528750][ T5307] EXT4-fs (loop6): dirty_blocks=0 [ 72.552144][ T29] audit: type=1326 audit(1752447532.747:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.552182][ T29] audit: type=1326 audit(1752447532.747:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.557206][ T5307] EXT4-fs (loop6): Block reservation details [ 72.581201][ T29] audit: type=1326 audit(1752447532.747:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.586185][ T5307] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 72.609492][ T29] audit: type=1326 audit(1752447532.747:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a6ffe929 code=0x7ffc0000 [ 72.714782][ T5310] team0: Port device dummy0 removed [ 72.723577][ T5310] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.732456][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.765589][ T5326] loop2: detected capacity change from 0 to 128 [ 72.838090][ T5328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.853306][ T5328] loop4: detected capacity change from 0 to 512 [ 72.978115][ T5328] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.040245][ T5328] EXT4-fs (loop4): mount failed [ 73.100284][ T5321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5321 comm=syz.5.463 [ 73.114379][ T5339] loop6: detected capacity change from 0 to 8192 [ 73.207340][ T3295] loop6: p1 p2 p4 [ 73.211392][ T3295] loop6: p1 size 65536 extends beyond EOD, truncated [ 73.214101][ T5291] Set syz1 is full, maxelem 65536 reached [ 73.252659][ T3295] loop6: p2 start 861536256 is beyond EOD, truncated [ 73.259520][ T3295] loop6: p4 size 65536 extends beyond EOD, truncated [ 73.299061][ T5339] loop6: p1 p2 p4 [ 73.303747][ T5363] loop5: detected capacity change from 0 to 512 [ 73.310774][ T5363] journal_path: Lookup failure for './file0/../file0' [ 73.315091][ T5339] loop6: p1 size 65536 extends beyond EOD, [ 73.317613][ T5363] EXT4-fs: error: could not find journal device path [ 73.330322][ T5339] truncated [ 73.345060][ T5366] loop5: detected capacity change from 0 to 1024 [ 73.369506][ T5339] loop6: p2 start 861536256 is beyond EOD, truncated [ 73.376490][ T5339] loop6: p4 size 65536 extends beyond EOD, truncated [ 73.412105][ T5366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.438267][ T5373] hub 9-0:1.0: USB hub found [ 73.451135][ T5373] hub 9-0:1.0: 8 ports detected [ 73.461533][ T5366] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 73.474009][ T5366] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.474009][ T5366] [ 73.483753][ T5366] EXT4-fs (loop5): Total free blocks count 0 [ 73.489777][ T5366] EXT4-fs (loop5): Free/Dirty block details [ 73.495763][ T5366] EXT4-fs (loop5): free_blocks=0 [ 73.500794][ T5366] EXT4-fs (loop5): dirty_blocks=0 [ 73.506054][ T5366] EXT4-fs (loop5): Block reservation details [ 73.512079][ T5366] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 73.532231][ T5386] loop4: detected capacity change from 0 to 128 [ 73.608393][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.673212][ T5397] __nla_validate_parse: 13 callbacks suppressed [ 73.673231][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 73.688612][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 73.724591][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 73.817235][ T5403] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.480'. [ 73.841466][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 73.854301][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 73.864539][ T5397] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.480'. [ 73.925045][ T5426] hub 9-0:1.0: USB hub found [ 73.946544][ T5426] hub 9-0:1.0: 8 ports detected [ 73.959928][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'. [ 74.091029][ T5446] loop6: detected capacity change from 0 to 512 [ 74.109125][ T5405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5405 comm=syz.2.482 [ 74.116442][ T5446] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.122040][ T5405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.482'. [ 74.174524][ T5446] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 74.212899][ T5446] EXT4-fs (loop6): 1 truncate cleaned up [ 74.219630][ T5446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.247111][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 74.256204][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 74.268417][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 74.396005][ T5479] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 74.413313][ T5479] bond0: (slave dummy0): Releasing backup interface [ 74.425705][ T5479] team0: Port device dummy0 added [ 74.444143][ T5479] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 74.455405][ T5479] team0: Port device dummy0 removed [ 74.473082][ T5479] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.535836][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 74.543720][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 74.551652][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.559415][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.567293][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.575014][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.582707][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.590447][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.598163][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.605879][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.613759][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.621456][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.629328][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.637159][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.644919][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.647097][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 74.652630][ T3386] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 74.660391][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 74.689124][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.696937][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.699941][ T3386] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 74.704668][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.722248][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.730036][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.737801][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.745675][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.753452][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.761127][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.768875][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.776600][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.784378][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.792101][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.799848][ T23] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 74.827952][ T5492] loop2: detected capacity change from 0 to 1024 [ 74.843066][ T5492] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.862644][ T5504] fido_id[5504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.901319][ T5503] loop5: detected capacity change from 0 to 128 [ 74.911975][ T5492] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 74.934365][ T5503] EXT4-fs: Ignoring removed nobh option [ 74.962439][ T5492] EXT4-fs (loop2): mount failed [ 74.986185][ T5503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.000997][ T5503] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.012604][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.073889][ T5521] loop2: detected capacity change from 0 to 1024 [ 75.102955][ T5521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.130639][ T23] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.150471][ T5533] hub 9-0:1.0: USB hub found [ 75.170010][ T5521] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 75.182620][ T5521] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.182620][ T5521] [ 75.192447][ T5521] EXT4-fs (loop2): Total free blocks count 0 [ 75.198560][ T5521] EXT4-fs (loop2): Free/Dirty block details [ 75.199287][ T5533] hub 9-0:1.0: 8 ports detected [ 75.204608][ T5521] EXT4-fs (loop2): free_blocks=0 [ 75.204626][ T5521] EXT4-fs (loop2): dirty_blocks=0 [ 75.204639][ T5521] EXT4-fs (loop2): Block reservation details [ 75.204658][ T5521] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 75.257242][ T5535] fido_id[5535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.317124][ T5543] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.330633][ T3998] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.350798][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.363335][ T5543] SELinux: failed to load policy [ 75.472795][ T5561] loop5: detected capacity change from 0 to 1024 [ 75.485324][ T5564] loop2: detected capacity change from 0 to 512 [ 75.494917][ T5564] journal_path: Lookup failure for './file0/../file0' [ 75.501769][ T5564] EXT4-fs: error: could not find journal device path [ 75.517310][ T5567] loop4: detected capacity change from 0 to 512 [ 75.526741][ T5561] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.561482][ T5561] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.581467][ T5567] EXT4-fs: Ignoring removed nobh option [ 75.596699][ T5567] ext4: Unknown parameter 'noacl' [ 75.605455][ T5561] EXT4-fs (loop5): mount failed [ 75.720837][ T5594] hub 9-0:1.0: USB hub found [ 75.733943][ T5594] hub 9-0:1.0: 8 ports detected [ 75.760661][ T5599] loop4: detected capacity change from 0 to 512 [ 75.768064][ T5599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.806184][ T5603] loop2: detected capacity change from 0 to 512 [ 75.832026][ T5609] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 75.841604][ T5606] loop5: detected capacity change from 0 to 512 [ 75.845369][ T5603] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.854819][ T5609] bond0: (slave dummy0): Releasing backup interface [ 75.864457][ T5609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.873565][ T5609] team0: Failed to send options change via netlink (err -105) [ 75.881214][ T5609] team0: Port device dummy0 added [ 75.882141][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.888146][ T5606] journal_path: Lookup failure for './file0/../file0' [ 75.904791][ T5603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.905665][ T5606] EXT4-fs: error: could not find journal device path [ 75.928764][ T5599] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.928824][ T5609] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 75.953347][ T5603] EXT4-fs (loop2): 1 truncate cleaned up [ 75.962338][ T5609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.962618][ T5603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.983794][ T5609] team0: Failed to send options change via netlink (err -105) [ 75.992583][ T5609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.996425][ T5599] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.009791][ T5609] team0: Port device dummy0 removed [ 76.017892][ T5609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.046192][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.093071][ T5620] loop1: detected capacity change from 0 to 1024 [ 76.100909][ T5620] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.121760][ T5620] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.139910][ T5620] EXT4-fs (loop1): mount failed [ 76.209255][ T5635] loop1: detected capacity change from 0 to 512 [ 76.225628][ T5635] EXT4-fs: Ignoring removed nobh option [ 76.232552][ T5635] ext4: Unknown parameter 'noacl' [ 76.417748][ T5636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5636 comm=syz.5.547 [ 76.542279][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 76.550155][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 76.558221][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.565979][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.574012][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.581856][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.589572][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.597398][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.600995][ T5659] loop5: detected capacity change from 0 to 1024 [ 76.605173][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.605202][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.627659][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.635678][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.643464][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.651217][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.655692][ T5659] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.658939][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.677521][ T23] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 76.750186][ T5669] loop4: detected capacity change from 0 to 512 [ 76.758793][ T5669] EXT4-fs: Ignoring removed nobh option [ 76.758920][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.764853][ T5669] ext4: Unknown parameter 'noacl' [ 76.801084][ T23] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.803331][ T5659] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.849604][ T5659] EXT4-fs (loop5): mount failed [ 76.891679][ T5674] fido_id[5674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.939635][ T5683] loop5: detected capacity change from 0 to 512 [ 76.968439][ T5683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.025011][ T5690] loop1: detected capacity change from 0 to 1024 [ 77.047338][ T5686] loop6: detected capacity change from 0 to 8192 [ 77.056324][ T5683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.070464][ T5690] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.079253][ T5683] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.091510][ T3295] loop6: p1 p2 p4 [ 77.096153][ T3295] loop6: p1 size 65536 extends beyond EOD, truncated [ 77.104327][ T3295] loop6: p2 start 861536256 is beyond EOD, truncated [ 77.111139][ T3295] loop6: p4 size 65536 extends beyond EOD, truncated [ 77.119625][ T5686] loop6: p1 p2 p4 [ 77.124694][ T5686] loop6: p1 size 65536 extends beyond EOD, truncated [ 77.132270][ T5686] loop6: p2 start 861536256 is beyond EOD, truncated [ 77.139165][ T5686] loop6: p4 size 65536 extends beyond EOD, truncated [ 77.150667][ T5683] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.195456][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.197927][ T5698] loop2: detected capacity change from 0 to 512 [ 77.211666][ T5698] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.246425][ T5698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.278534][ T5701] loop4: detected capacity change from 0 to 1024 [ 77.289795][ T5698] EXT4-fs (loop2): 1 truncate cleaned up [ 77.317610][ T5701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.322958][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.383323][ T5701] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 77.384239][ T5712] loop5: detected capacity change from 0 to 512 [ 77.395779][ T5701] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.395779][ T5701] [ 77.402676][ T5712] journal_path: Lookup failure for './file0/../file0' [ 77.411890][ T5701] EXT4-fs (loop4): Total free blocks count 0 [ 77.411911][ T5701] EXT4-fs (loop4): Free/Dirty block details [ 77.411972][ T5701] EXT4-fs (loop4): free_blocks=0 [ 77.418748][ T5712] EXT4-fs: error: could not find journal device path [ 77.442701][ T5701] EXT4-fs (loop4): dirty_blocks=0 [ 77.447953][ T5701] EXT4-fs (loop4): Block reservation details [ 77.448450][ T5715] loop5: detected capacity change from 0 to 1024 [ 77.454169][ T5701] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 77.517706][ T5715] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.532388][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.552798][ T5715] __quota_error: 159 callbacks suppressed [ 77.552817][ T5715] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (4243427694592 > 6144). [ 77.580289][ T5715] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.597130][ T5715] EXT4-fs (loop5): mount failed [ 77.684759][ T5724] loop5: detected capacity change from 0 to 1024 [ 77.691825][ T5724] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.702392][ T5710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5710 comm=syz.1.575 [ 77.797121][ T29] audit: type=1326 audit(1752447538.167:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.821932][ T29] audit: type=1326 audit(1752447538.167:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.845398][ T29] audit: type=1326 audit(1752447538.167:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.869034][ T29] audit: type=1326 audit(1752447538.167:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.892701][ T29] audit: type=1326 audit(1752447538.167:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.916683][ T29] audit: type=1326 audit(1752447538.167:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.958502][ T29] audit: type=1326 audit(1752447538.167:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.982333][ T29] audit: type=1326 audit(1752447538.167:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534c7e929 code=0x7ffc0000 [ 77.996254][ T5745] loop5: detected capacity change from 0 to 1024 [ 78.016382][ T5745] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.027947][ T5745] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (4243427694592 > 6144). [ 78.040835][ T5745] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.055786][ T5745] EXT4-fs (loop5): mount failed [ 78.109394][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.156793][ T5750] loop5: detected capacity change from 0 to 512 [ 78.161244][ T5752] loop1: detected capacity change from 0 to 1024 [ 78.163939][ T5749] SELinux: failed to load policy [ 78.192609][ T5750] journal_path: Lookup failure for './file0/../file0' [ 78.195246][ T5752] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 78.199498][ T5750] EXT4-fs: error: could not find journal device path [ 78.360296][ T5764] loop5: detected capacity change from 0 to 1024 [ 78.371184][ T5756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5756 comm=syz.6.596 [ 78.387300][ T5764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.408580][ T5764] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 78.420997][ T5764] EXT4-fs (loop5): This should not happen!! Data will be lost [ 78.420997][ T5764] [ 78.430797][ T5764] EXT4-fs (loop5): Total free blocks count 0 [ 78.436917][ T5764] EXT4-fs (loop5): Free/Dirty block details [ 78.442917][ T5764] EXT4-fs (loop5): free_blocks=0 [ 78.447920][ T5764] EXT4-fs (loop5): dirty_blocks=0 [ 78.453130][ T5764] EXT4-fs (loop5): Block reservation details [ 78.459162][ T5764] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 78.489488][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.592490][ T5781] loop6: detected capacity change from 0 to 2048 [ 78.651763][ T5781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.682258][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 78.690070][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 78.703423][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.711234][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.718993][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.726810][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.734535][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.742311][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.750024][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.757766][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.765529][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.773254][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.781012][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.788753][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.796544][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.804335][ T10] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 78.836745][ T5788] __nla_validate_parse: 26 callbacks suppressed [ 78.836760][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 78.852027][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 78.876362][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 78.885820][ T10] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.896559][ T5789] loop5: detected capacity change from 0 to 128 [ 78.919056][ T5789] EXT4-fs: Ignoring removed nobh option [ 78.921826][ T5790] fido_id[5790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.949002][ T5789] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.952550][ T5792] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.608'. [ 78.975735][ T5789] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.984360][ T5788] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.608'. [ 79.055695][ T3998] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.086647][ T5796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.610'. [ 79.095660][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 79.111879][ T5794] loop4: detected capacity change from 0 to 1024 [ 79.119989][ T5794] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 79.183591][ T5802] loop2: detected capacity change from 0 to 1024 [ 79.199014][ T5805] netlink: 'syz.5.614': attribute type 10 has an invalid length. [ 79.212513][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.221251][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.238635][ T5805] bond0: (slave dummy0): Releasing backup interface [ 79.272130][ T5810] netlink: 'syz.5.614': attribute type 10 has an invalid length. [ 79.291347][ T5805] team0: Port device dummy0 added [ 79.306400][ T5810] team0: Port device dummy0 removed [ 79.322772][ T5810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.352357][ T5816] hub 9-0:1.0: USB hub found [ 79.375938][ T5816] hub 9-0:1.0: 8 ports detected [ 79.388600][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 79.397653][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 79.426940][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 79.436226][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.443814][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.453045][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.460542][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.472226][ T5820] loop4: detected capacity change from 0 to 128 [ 79.616468][ T5828] loop4: detected capacity change from 0 to 2048 [ 79.654718][ T5827] loop5: detected capacity change from 0 to 1024 [ 79.673414][ T5827] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 79.691752][ T5828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.962692][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.059827][ T5841] loop6: detected capacity change from 0 to 512 [ 80.068372][ T5841] journal_path: Lookup failure for './file0/../file0' [ 80.075245][ T5841] EXT4-fs: error: could not find journal device path [ 80.126775][ T5845] loop6: detected capacity change from 0 to 512 [ 80.139362][ T5847] loop2: detected capacity change from 0 to 128 [ 80.147078][ T5845] journal_path: Lookup failure for './file0/../file0' [ 80.154026][ T5845] EXT4-fs: error: could not find journal device path [ 80.314180][ T5858] 0ªX¹¦À: renamed from caif0 [ 80.323489][ T5858] 0ªX¹¦À: entered allmulticast mode [ 80.328772][ T5858] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.426001][ T5861] 1ªX¹¦À: renamed from 60ªX¹¦À [ 80.433512][ T5861] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.485189][ T5852] bridge0: port 4(batadv0) entered blocking state [ 80.491836][ T5852] bridge0: port 4(batadv0) entered disabled state [ 80.501078][ T5852] batadv0: entered allmulticast mode [ 80.510276][ T5852] batadv0: entered promiscuous mode [ 80.519585][ T5865] loop6: detected capacity change from 0 to 1024 [ 80.527070][ T5867] loop1: detected capacity change from 0 to 1024 [ 80.556728][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.577655][ T5865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.579441][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.618115][ T5865] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 80.630603][ T5865] EXT4-fs (loop6): This should not happen!! Data will be lost [ 80.630603][ T5865] [ 80.640361][ T5865] EXT4-fs (loop6): Total free blocks count 0 [ 80.646436][ T5865] EXT4-fs (loop6): Free/Dirty block details [ 80.652428][ T5865] EXT4-fs (loop6): free_blocks=0 [ 80.657461][ T5865] EXT4-fs (loop6): dirty_blocks=0 [ 80.662623][ T5865] EXT4-fs (loop6): Block reservation details [ 80.668752][ T5865] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 80.682806][ T5871] warn_alloc: 2 callbacks suppressed [ 80.682820][ T5871] syz.2.642: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 80.702789][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.2.642 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 80.702844][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.702871][ T5871] Call Trace: [ 80.702878][ T5871] [ 80.702884][ T5871] __dump_stack+0x1d/0x30 [ 80.702910][ T5871] dump_stack_lvl+0xe8/0x140 [ 80.702935][ T5871] dump_stack+0x15/0x1b [ 80.702956][ T5871] warn_alloc+0x12b/0x1a0 [ 80.703003][ T5871] ? enqueue_task_fair+0x850/0x980 [ 80.703039][ T5871] __vmalloc_node_range_noprof+0x9c/0xe00 [ 80.703074][ T5871] ? probe_sched_wakeup+0x85/0xa0 [ 80.703108][ T5871] ? ttwu_do_activate+0x1cf/0x210 [ 80.703147][ T5871] ? __rcu_read_unlock+0x4f/0x70 [ 80.703273][ T5871] ? avc_has_perm_noaudit+0x1b1/0x200 [ 80.703301][ T5871] ? should_fail_ex+0x30/0x280 [ 80.703341][ T5871] ? xskq_create+0x36/0xe0 [ 80.703364][ T5871] vmalloc_user_noprof+0x7d/0xb0 [ 80.703470][ T5871] ? xskq_create+0x80/0xe0 [ 80.703499][ T5871] xskq_create+0x80/0xe0 [ 80.703522][ T5871] xsk_init_queue+0x95/0xf0 [ 80.703542][ T5871] xsk_setsockopt+0x35c/0x510 [ 80.703566][ T5871] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.703660][ T5871] __sys_setsockopt+0x184/0x200 [ 80.703699][ T5871] __x64_sys_setsockopt+0x64/0x80 [ 80.703737][ T5871] x64_sys_call+0x2bd5/0x2fb0 [ 80.703793][ T5871] do_syscall_64+0xd2/0x200 [ 80.703881][ T5871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.703906][ T5871] ? clear_bhb_loop+0x40/0x90 [ 80.704005][ T5871] ? clear_bhb_loop+0x40/0x90 [ 80.704084][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.704104][ T5871] RIP: 0033:0x7f15c28ce929 [ 80.704119][ T5871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.704151][ T5871] RSP: 002b:00007f15c0f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.704175][ T5871] RAX: ffffffffffffffda RBX: 00007f15c2af5fa0 RCX: 00007f15c28ce929 [ 80.704190][ T5871] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 80.704203][ T5871] RBP: 00007f15c2950b39 R08: 0000000000000004 R09: 0000000000000000 [ 80.704216][ T5871] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.704238][ T5871] R13: 0000000000000000 R14: 00007f15c2af5fa0 R15: 00007ffefecba6b8 [ 80.704257][ T5871] [ 80.936088][ T5871] Mem-Info: [ 80.939284][ T5871] active_anon:8370 inactive_anon:5 isolated_anon:0 [ 80.939284][ T5871] active_file:6097 inactive_file:2238 isolated_file:0 [ 80.939284][ T5871] unevictable:0 dirty:247 writeback:0 [ 80.939284][ T5871] slab_reclaimable:3179 slab_unreclaimable:19000 [ 80.939284][ T5871] mapped:29624 shmem:536 pagetables:1356 [ 80.939284][ T5871] sec_pagetables:0 bounce:0 [ 80.939284][ T5871] kernel_misc_reclaimable:0 [ 80.939284][ T5871] free:1886948 free_pcp:6643 free_cma:0 [ 80.984512][ T5871] Node 0 active_anon:33480kB inactive_anon:20kB active_file:24388kB inactive_file:8952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118380kB dirty:988kB writeback:0kB shmem:2144kB writeback_tmp:0kB kernel_stack:4048kB pagetables:5424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.013698][ T5871] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.042743][ T5871] lowmem_reserve[]: 0 2882 7860 7860 [ 81.048186][ T5871] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 81.078358][ T5871] lowmem_reserve[]: 0 0 4978 4978 [ 81.083500][ T5871] Node 0 Normal free:4584604kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33248kB inactive_anon:20kB active_file:24388kB inactive_file:8952kB unevictable:0kB writepending:988kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:25760kB local_pcp:17152kB free_cma:0kB [ 81.115669][ T5871] lowmem_reserve[]: 0 0 0 0 [ 81.120277][ T5871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.133097][ T5871] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 81.143083][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.149388][ T5871] Node 0 Normal: [ 81.156853][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.156831][ T5871] 529*4kB (UME) 1266*8kB (UM) 665*16kB (UME) 331*32kB (UM) 155*64kB (UME) 58*128kB (UME) 16*256kB (UME) 3*512kB (M) 0*1024kB 1*2048kB (E) 1105*4096kB (UM) = 4584580kB [ 81.184768][ T5871] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 81.194273][ T5871] 8874 total pagecache pages [ 81.199028][ T5871] 8 pages in swap cache [ 81.203347][ T5871] Free swap = 124964kB [ 81.207820][ T5871] Total swap = 124996kB [ 81.212092][ T5871] 2097051 pages RAM [ 81.216267][ T5871] 0 pages HighMem/MovableOnly [ 81.220983][ T5871] 80812 pages reserved [ 81.228090][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.235709][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.243819][ T3942] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 81.253092][ T3942] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 81.263033][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.263719][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.336109][ T5878] loop5: detected capacity change from 0 to 512 [ 81.343106][ T5878] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.352655][ T5878] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.373976][ T5878] EXT4-fs (loop5): 1 truncate cleaned up [ 81.390900][ T5878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.484970][ T5891] loop2: detected capacity change from 0 to 512 [ 81.500441][ T5891] journal_path: Lookup failure for './file0/../file0' [ 81.507403][ T5891] EXT4-fs: error: could not find journal device path [ 81.649217][ T5899] loop6: detected capacity change from 0 to 8192 [ 81.698481][ T5899] loop6: p1 p2 p4 [ 81.702521][ T5899] loop6: p1 size 65536 extends beyond EOD, truncated [ 81.711257][ T5899] loop6: p2 start 861536256 is beyond EOD, truncated [ 81.718248][ T5899] loop6: p4 size 65536 extends beyond EOD, truncated [ 81.791361][ T5903] loop2: detected capacity change from 0 to 2048 [ 81.818337][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.018176][ T5910] loop1: detected capacity change from 0 to 1024 [ 82.029525][ T5910] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.046371][ T5910] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.068472][ T5910] EXT4-fs (loop1): mount failed [ 82.191611][ T3998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.247414][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 82.255209][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 82.278265][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.286110][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.293829][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.301601][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.309588][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.317503][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.325277][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.333061][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.340750][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.348494][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.356248][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.364018][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.371699][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.379506][ T802] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 82.420505][ T802] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.478783][ T5927] loop5: detected capacity change from 0 to 512 [ 82.498168][ T5927] journal_path: Lookup failure for './file0/../file0' [ 82.505108][ T5927] EXT4-fs: error: could not find journal device path [ 82.933283][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.952724][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 82.960605][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 82.971841][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 82.979944][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 82.987712][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 82.995420][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.003160][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.010919][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.018740][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.026475][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.034345][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.042125][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.049945][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.057828][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.065545][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.073317][ T23] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 83.099228][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 83.107135][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 83.115697][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.123520][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.131281][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.139002][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.146750][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.154523][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.162286][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.169978][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.177683][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.185399][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.193141][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.200813][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.208526][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.216267][ T36] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 83.225916][ T23] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.235842][ T5946] loop1: detected capacity change from 0 to 128 [ 83.236276][ T5946] EXT4-fs: Ignoring removed nobh option [ 83.244355][ T36] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.315672][ T5943] loop6: detected capacity change from 0 to 128 [ 83.324429][ T5946] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.346054][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.353799][ T5943] EXT4-fs: Ignoring removed nobh option [ 83.365370][ T5946] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.395105][ T5957] netlink: 'syz.2.674': attribute type 6 has an invalid length. [ 83.409406][ T5957] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 83.425031][ T5957] bond0: (slave dummy0): Releasing backup interface [ 83.437113][ T5943] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.438586][ T5957] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.475497][ T5960] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 83.481482][ T5943] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.483804][ T5957] team0: Failed to send options change via netlink (err -105) [ 83.501232][ T5957] team0: Port device dummy0 added [ 83.507190][ T5958] fido_id[5958]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.537556][ T5960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.556561][ T5960] team0: Failed to send options change via netlink (err -105) [ 83.577107][ T5962] hub 9-0:1.0: USB hub found [ 83.581941][ T5962] hub 9-0:1.0: 8 ports detected [ 83.591224][ T5960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.620865][ T5960] team0: Port device dummy0 removed [ 83.638591][ T5960] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.695281][ T4315] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.708143][ T5968] loop5: detected capacity change from 0 to 512 [ 83.718785][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.720864][ T5966] loop4: detected capacity change from 0 to 1024 [ 83.735310][ T5968] journal_path: Lookup failure for './file0/../file0' [ 83.742145][ T5968] EXT4-fs: error: could not find journal device path [ 83.759563][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.790507][ T5966] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 83.802923][ T5966] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.802923][ T5966] [ 83.812657][ T5966] EXT4-fs (loop4): Total free blocks count 0 [ 83.818803][ T5966] EXT4-fs (loop4): Free/Dirty block details [ 83.824960][ T5966] EXT4-fs (loop4): free_blocks=0 [ 83.830124][ T5966] EXT4-fs (loop4): dirty_blocks=0 [ 83.835282][ T5966] EXT4-fs (loop4): Block reservation details [ 83.841538][ T5966] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 83.881353][ T5984] loop5: detected capacity change from 0 to 1024 [ 83.909235][ T5983] __nla_validate_parse: 21 callbacks suppressed [ 83.909256][ T5983] netlink: 3 bytes leftover after parsing attributes in process `syz.2.684'. [ 83.952536][ T5983] 0ªX¹¦À: renamed from caif0 [ 83.964595][ T5986] loop6: detected capacity change from 0 to 128 [ 83.972322][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.989884][ T5981] loop1: detected capacity change from 0 to 8192 [ 83.998172][ T5983] 0ªX¹¦À: entered allmulticast mode [ 84.003662][ T5983] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.076673][ T3295] loop1: p1 p2 p4 [ 84.084375][ T3295] loop1: p1 size 65536 extends beyond EOD, truncated [ 84.102307][ T3295] loop1: p2 start 861536256 is beyond EOD, truncated [ 84.109211][ T3295] loop1: p4 size 65536 extends beyond EOD, truncated [ 84.158230][ T3934] bio_check_eod: 357 callbacks suppressed [ 84.158245][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.158245][ T3934] loop6: rw=1, sector=137, nr_sectors = 8 limit=128 [ 84.178811][ T5981] loop1: p1 p2 p4 [ 84.182720][ T5981] loop1: p1 size 65536 extends beyond EOD, truncated [ 84.190184][ T5981] loop1: p2 start 861536256 is beyond EOD, truncated [ 84.196944][ T5981] loop1: p4 size 65536 extends beyond EOD, truncated [ 84.197892][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.197892][ T3934] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 84.241532][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.241532][ T3934] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 84.258387][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.267875][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.267875][ T3934] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 84.275939][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.295996][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.295996][ T3934] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 84.320887][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.320887][ T3934] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 84.324673][ T5995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5995 comm=syz.4.686 [ 84.336710][ T5991] bridge0: port 5(batadv2) entered blocking state [ 84.348340][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.348340][ T3934] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 84.353524][ T5991] bridge0: port 5(batadv2) entered disabled state [ 84.367031][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.367031][ T3934] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 84.378208][ T5991] batadv2: entered allmulticast mode [ 84.395044][ T5991] batadv2: entered promiscuous mode [ 84.396176][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.396176][ T3934] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 84.416218][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.686'. [ 84.425386][ T3934] kworker/u8:17: attempt to access beyond end of device [ 84.425386][ T3934] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 84.509671][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.517193][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.543827][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.551323][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.723647][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 84.731501][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 84.742831][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.750715][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.758459][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.766156][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.774059][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.781730][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.789467][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.797266][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.804984][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.812854][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.820652][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.828351][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.836086][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.843971][ T802] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 84.856951][ T3942] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 84.866254][ T3942] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 84.878765][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 84.886588][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 84.906575][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.914411][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.922141][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.929974][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.937707][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.945507][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.953286][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.960995][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.968730][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.976450][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.984159][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.991837][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 84.999658][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 85.000063][ T6006] loop6: detected capacity change from 0 to 128 [ 85.007364][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 85.049078][ T6006] EXT4-fs: Ignoring removed nobh option [ 85.055554][ T802] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 85.093092][ T6007] loop4: detected capacity change from 0 to 128 [ 85.099944][ T6007] EXT4-fs: Ignoring removed nobh option [ 85.116452][ T9] hid-generic 0000:3000000:0000.0019: hidraw1: HID v0.00 Device [sy] on syz0 [ 85.183389][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.309382][ T6007] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.346230][ T6006] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.370553][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 85.379521][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 85.388682][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 85.403275][ T6007] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.414994][ T6006] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.533108][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 85.542230][ T6015] netlink: 'syz.1.692': attribute type 6 has an invalid length. [ 85.598410][ T6000] Set syz1 is full, maxelem 65536 reached [ 85.614596][ T6015] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 85.636028][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.669651][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 85.677505][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 85.678927][ T6020] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 85.717391][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.725268][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.733112][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.740804][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.748717][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.756475][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.764197][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.771991][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.779757][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.787532][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.795269][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.803070][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.810767][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.818478][ T802] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 85.827892][ T6015] bond0: (slave dummy0): Releasing backup interface [ 85.838841][ T6015] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.851390][ T4315] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.855045][ T6030] loop4: detected capacity change from 0 to 128 [ 85.864140][ T6015] team0: Failed to send options change via netlink (err -105) [ 85.874286][ T6015] team0: Port device dummy0 added [ 85.881146][ T802] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 85.903471][ T6020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.943933][ T6016] loop5: detected capacity change from 0 to 128 [ 85.950651][ T6016] EXT4-fs: Ignoring removed nobh option [ 85.968300][ T6034] fido_id[6034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.984251][ T6020] team0: Failed to send options change via netlink (err -105) [ 86.020616][ T6016] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.033109][ T6020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 86.042696][ T6020] team0: Port device dummy0 removed [ 86.049814][ T6039] loop4: detected capacity change from 0 to 1024 [ 86.058063][ T6016] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.071976][ T6020] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.085749][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.132749][ T6035] loop6: detected capacity change from 0 to 2048 [ 86.142593][ T6039] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 86.155219][ T6039] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.155219][ T6039] [ 86.165057][ T6039] EXT4-fs (loop4): Total free blocks count 0 [ 86.171144][ T6039] EXT4-fs (loop4): Free/Dirty block details [ 86.177089][ T6039] EXT4-fs (loop4): free_blocks=0 [ 86.182059][ T6039] EXT4-fs (loop4): dirty_blocks=0 [ 86.187293][ T6039] EXT4-fs (loop4): Block reservation details [ 86.193330][ T6039] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 86.257670][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 86.257688][ T29] audit: type=1326 audit(1752447546.607:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.287162][ T29] audit: type=1326 audit(1752447546.607:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.310626][ T29] audit: type=1326 audit(1752447546.607:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.334106][ T29] audit: type=1326 audit(1752447546.607:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.357471][ T29] audit: type=1326 audit(1752447546.607:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.380836][ T29] audit: type=1326 audit(1752447546.607:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.404230][ T29] audit: type=1326 audit(1752447546.607:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.427573][ T29] audit: type=1326 audit(1752447546.607:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.431433][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 86.451009][ T29] audit: type=1326 audit(1752447546.607:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.459856][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 86.483051][ T29] audit: type=1326 audit(1752447546.607:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c28ce929 code=0x7ffc0000 [ 86.491890][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 86.533945][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 86.543132][ T6047] netlink: 'syz.1.702': attribute type 6 has an invalid length. [ 86.551812][ T6035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.567604][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.589678][ T6047] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 86.599954][ T6047] bond0: (slave dummy0): Releasing backup interface [ 86.611294][ T6047] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 86.652465][ T6054] hub 9-0:1.0: USB hub found [ 86.656781][ T6047] team0: Failed to send options change via netlink (err -105) [ 86.658779][ T6054] hub 9-0:1.0: 8 ports detected [ 86.664660][ T6047] team0: Port device dummy0 added [ 86.697240][ T6055] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 86.716101][ T3998] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.731573][ T6055] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 86.748062][ T6056] loop2: detected capacity change from 0 to 8192 [ 86.791319][ T6055] team0: Failed to send options change via netlink (err -105) [ 86.815039][ T3294] loop2: p1 p2 p4 [ 86.818925][ T3294] loop2: p1 size 65536 extends beyond EOD, truncated [ 86.820217][ T6055] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 86.841588][ T6055] team0: Port device dummy0 removed [ 86.852019][ T6055] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.853765][ T3294] loop2: p2 start 861536256 is beyond EOD, truncated [ 86.867403][ T3294] loop2: p4 size 65536 extends beyond EOD, truncated [ 86.925349][ T6056] loop2: p1 p2 p4 [ 86.929567][ T6056] loop2: p1 size 65536 extends beyond EOD, truncated [ 86.944996][ T6067] loop1: detected capacity change from 0 to 128 [ 86.946518][ T6056] loop2: p2 start 861536256 is beyond EOD, truncated [ 86.958183][ T6056] loop2: p4 size 65536 extends beyond EOD, truncated [ 87.101579][ T3295] ================================================================== [ 87.107116][ T6062] bridge0: port 3(batadv0) entered blocking state [ 87.109716][ T3295] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 87.116253][ T6062] bridge0: port 3(batadv0) entered disabled state [ 87.123093][ T3295] [ 87.123103][ T3295] write to 0xffff88810435a3d4 of 4 bytes by task 3294 on cpu 0: [ 87.123122][ T3295] shmem_mknod+0x137/0x180 [ 87.131616][ T6062] batadv0: entered allmulticast mode [ 87.131885][ T3295] shmem_create+0x34/0x50 [ 87.140360][ T6062] batadv0: entered promiscuous mode [ 87.143930][ T3295] path_openat+0x1105/0x2170 [ 87.143967][ T3295] do_filp_open+0x109/0x230 [ 87.143997][ T3295] do_sys_openat2+0xa6/0x110 [ 87.172655][ T3295] __x64_sys_openat+0xf2/0x120 [ 87.177459][ T3295] x64_sys_call+0x1af/0x2fb0 [ 87.182122][ T3295] do_syscall_64+0xd2/0x200 [ 87.186653][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.192664][ T3295] [ 87.195012][ T3295] read to 0xffff88810435a3d4 of 4 bytes by task 3295 on cpu 1: [ 87.202588][ T3295] fill_mg_cmtime+0x5b/0x260 [ 87.207211][ T3295] generic_fillattr+0x24a/0x340 [ 87.212089][ T3295] shmem_getattr+0x181/0x200 [ 87.216702][ T3295] vfs_getattr_nosec+0x146/0x1e0 [ 87.221659][ T3295] vfs_statx+0x113/0x390 [ 87.225931][ T3295] vfs_fstatat+0x115/0x170 [ 87.230378][ T3295] __se_sys_newfstatat+0x55/0x260 [ 87.235443][ T3295] __x64_sys_newfstatat+0x55/0x70 [ 87.240489][ T3295] x64_sys_call+0x2c22/0x2fb0 [ 87.245194][ T3295] do_syscall_64+0xd2/0x200 [ 87.249713][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.255626][ T3295] [ 87.257964][ T3295] value changed: 0x1ca0f42d -> 0x1cac91c2 [ 87.263696][ T3295] [ 87.266045][ T3295] Reported by Kernel Concurrency Sanitizer on: [ 87.272215][ T3295] CPU: 1 UID: 0 PID: 3295 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 87.284223][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.294312][ T3295] ================================================================== [ 87.407792][ T6064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6064 comm=syz.5.709 [ 87.585426][ T4315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.613197][ T3942] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 87.622490][ T3942] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled