last executing test programs: 12m7.394884527s ago: executing program 32 (id=5933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="4f0201fde63d627040adae3b2ee2bebde5594968f67613d41eb6e3b42d39916b8d59f59cdf84c77723d0ee739f1dc28cf188833bcd22ce16053bb107205c07b111773435b0e5e31cacb605a8fc75b82ba3"], 0x38}}, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80044038}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000"/24], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRES16=r1], 0xa0}, 0x1, 0x0, 0x0, 0x4040041}, 0x24000800) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000f80)='kyber_latency\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x5, 0xb, &(0x7f0000000e40)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRES16, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000b80)='inet_sock_set_state\x00', r7}, 0x18) r8 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) msync(&(0x7f000004a000/0x2000)=nil, 0x2000, 0x3) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 8m7.192320733s ago: executing program 34 (id=10202): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) 7m7.233983631s ago: executing program 35 (id=11223): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @auto="e1c52b207231c0d8a79f1c5669bf4b54"}}) 7m6.227106173s ago: executing program 2 (id=11255): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80020) 7m5.903418649s ago: executing program 2 (id=11262): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x20044851) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x64) 7m5.576645005s ago: executing program 2 (id=11266): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/power/pm_async', 0x2080, 0x11) pread64(r0, &(0x7f0000000fc0)=""/102, 0x66, 0x6) 7m5.576227516s ago: executing program 2 (id=11268): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000}, 0x20) 7m5.551024767s ago: executing program 2 (id=11270): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfffffffc, 0xb152, 0x1, 0x1ff, 0xfffffffc, 0x5}}) 7m4.789573999s ago: executing program 2 (id=11287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000005c0)={[{@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@barrier}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 7m4.77429579s ago: executing program 36 (id=11287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000005c0)={[{@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@barrier}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 6m55.946206101s ago: executing program 9 (id=11791): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604", 0x43}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a0", 0x2b}], 0x2}}], 0x1, 0x20008000) 6m55.892146675s ago: executing program 9 (id=11794): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x4}, 0x50) 6m55.891925185s ago: executing program 9 (id=11795): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 6m55.882359786s ago: executing program 9 (id=11797): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20) 6m55.848661209s ago: executing program 9 (id=11799): mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101101, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m55.548450003s ago: executing program 9 (id=11811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) 6m55.544360523s ago: executing program 37 (id=11811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) 6m50.108366211s ago: executing program 1 (id=12015): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000940)='R', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4012011, r0, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB="100000000000000000"]) 6m50.096141152s ago: executing program 1 (id=12017): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m49.881828539s ago: executing program 1 (id=12022): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) 6m46.322281146s ago: executing program 3 (id=12121): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986f3", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 6m46.232027103s ago: executing program 1 (id=12027): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, 0x0, 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20) 6m46.229637754s ago: executing program 3 (id=12124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m46.209590425s ago: executing program 3 (id=12125): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee01) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6m46.195888386s ago: executing program 3 (id=12128): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) chroot(0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 6m46.136735711s ago: executing program 1 (id=12129): semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 6m46.0242451s ago: executing program 3 (id=12135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m45.720434974s ago: executing program 3 (id=12143): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) 6m45.720230135s ago: executing program 38 (id=12143): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) 6m45.246187043s ago: executing program 5 (id=12153): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 6m45.245650603s ago: executing program 5 (id=12154): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r2, &(0x7f00000000c0)=""/106, 0x6a, 0xfe) 6m45.199318476s ago: executing program 5 (id=12156): mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000002000)='./file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6m45.184950547s ago: executing program 1 (id=12157): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 6m45.184648898s ago: executing program 5 (id=12158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, 0x0, 0x0) 6m45.128219092s ago: executing program 5 (id=12160): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x9) dup2(r2, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2002}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001480)={0x200c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10}) 6m45.115782463s ago: executing program 39 (id=12157): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 6m44.935009428s ago: executing program 5 (id=12168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 6m44.885613042s ago: executing program 40 (id=12168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 3.427480354s ago: executing program 4 (id=19220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="f800000000000000000000000000000018010000afa3df28f031e00a91ac4acf4b4a7d2d75596c64026b5577de5af2984d00c070cd846d1844f4ef57058b47cbaab292fa6f0632bb3736239bcd0b394e6c740fa24bf78c649de1f82241901c50dc8f8b5dc1dbf9587ab4e1b47aa9612cff49f28f8c28651c43767a7e42ed1850c4f453572027ba1bcf26bd6b35765a2870265db6e9602339210dfc5aa8610c5c1fdd21b5c24dd5a0a44985e28e9404fb582c19c572b7de33bc80d8ae9dc1d3f78ae0169962696153855a6ee66baf25e3d88a48", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0xfebe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) migrate_pages(0x0, 0x1, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400000b0000900010073797a3000000000080003"], 0x64}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000400000001000000090000003c00f27f0800030000000000140002040000006e3000000000005150000000000800010001f70000140000000000e1ffff00bef68d78de0d1dc7b0687a70ff96a85c4bc0ae7c0517f8a683b87c7abc3bb50d3443fc456181dc3a3cf9a6808356bd6566962af4228834ba6433f1886f3f83380bcec4942800"/143], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 3.419068345s ago: executing program 4 (id=19221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3.407307815s ago: executing program 4 (id=19222): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="a17f007db83619ac4ce1c2bf2d96ca94fc374c4e212c3b22ed3f30464f4f5a16757518da06c1523e02fadc01ff49ea8d160a129d528c939e98df5bc5544c924266303c0b3f4f22d02fe7fd90251dd9a93cb652127331b014ef3aab2baeb5af5b137dc48cdad4ae77af4a9a1a16869a649eff9b18", @ANYRES16=r4, @ANYRES64=r2], 0x50) syz_clone3(&(0x7f00000008c0)={0x208080, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0), {0xc}, &(0x7f0000000740)=""/106, 0x6a, &(0x7f0000000840)=""/108, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) pidfd_getfd(r5, r3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x0, 0x0, 0xb, 0x6, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xce}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.515474917s ago: executing program 4 (id=19235): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x36}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7f, 0x2, 0x800, 0x59}) prctl$PR_CAPBSET_DROP(0x18, 0x5) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r7}}, 0x10) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) 2.416668795s ago: executing program 4 (id=19237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000066200000850000001b000000b70000000000000095000000000000001923f73c0d8d9e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="d8b2f07c1991b0ed2349fdaaf5172ce3e404e0321376e8abfe72b4834e6f581d668126abd4ebe5cc1d7cfd0306d5b28a715e6518a879a03c13dd88b4289f8f7567a550c86d25f98e0c60fc09f2c76e470db92d53a023bf69830723454d5210abd5994892a604aa6409e291e954585739d24bdb1470964dae38b1dd82f6abc46373a61efaf6b9bae6b7f88596d5337e617db82abbbfef4f4cc6910e8f8f5bb7e558c9989d7c840542e290a68ebed5279c", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xa, 0xb}, 0x1, 0xfffffffffffffffc, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000001000)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="07010307570300004401000008000000e801000005000000000000000000000078d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c664f5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed00000000000000"], 0xb8) waitid(0x0, r2, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) r7 = openat(r5, &(0x7f0000000440)='./file1\x00', 0x40, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000400)={0x200, 0xc41d}) r8 = openat(r5, &(0x7f00000002c0)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r8, r7, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000), 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r8, r7, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2.330068272s ago: executing program 8 (id=19238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.276520646s ago: executing program 8 (id=19239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8001, r1, &(0x7f0000000a00)="b237bc21e038c9cc8febff7f1873ca6b912e66520fc7a53efc16647848cbff880ce7256d2d7b9dcc862ed3956ee9a7e3c14c1d4c29336509d0461a75bcbb00bb1a96e811fb38a2ca16c0cb3b717ea942d3d8afc43bf427ce5371fee8b19a54689efb21e8174db2f6732c0e2f77e931d38adfc9415194017543718a2ace0a8b97ab1aa7ac4ca8e0879209c33393bb436af96b8f9e66172cb4caa6874a8a3a488c573bcc02eb1678e1bf02c578bcfb88e087834008d92054a064d421325c0f07d727ce10a4c114dd", 0xc7, 0x3d52, 0x0, 0x2, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x60, r0, &(0x7f0000001a40)="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", 0x1000, 0x5, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xff, r1, 0x0, 0x0, 0xffffffff, 0x0, 0x3, r1}]) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.258668318s ago: executing program 4 (id=19241): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.166352545s ago: executing program 8 (id=19242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.040294806s ago: executing program 7 (id=19245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.036790736s ago: executing program 7 (id=19246): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="a17f007db83619ac4ce1c2bf2d96ca94fc374c4e212c3b22ed3f30464f4f5a16757518da06c1523e02fadc01ff49ea8d160a129d528c939e98df5bc5544c924266303c0b3f4f22d02fe7fd90251dd9a93cb652127331b014ef3aab2baeb5af5b137dc48cdad4ae77af4a9a1a16869a649eff9b18", @ANYRES16=r4, @ANYRES64=r2], 0x50) syz_clone3(&(0x7f00000008c0)={0x208080, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0), {0xc}, &(0x7f0000000740)=""/106, 0x6a, &(0x7f0000000840)=""/108, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) pidfd_getfd(r5, r3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x0, 0x0, 0xb, 0x6, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xce}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.772430387s ago: executing program 0 (id=19249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095", @ANYBLOB="36f4708ffcd6cbe0b264bcd5647d40a7d7c8338a85c6d2831ce437b1fab626c0526644fd0d3b05eb13b4cbebcee2b3259b03dcb2ee441b37ea271cb6c1953ba0bac7c09cec9090f0e12f68ffb0a4fe6cf40e99e655741619f6c8baa4244d26f3b964eae414f8c43634a1ce73e146c1c1018b503d6e45286b4d6da0009721845a9a5376d3adc6432e3ee285918447bb4952", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) 1.759048959s ago: executing program 0 (id=19250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.747928029s ago: executing program 0 (id=19251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000066200000850000001b000000b70000000000000095000000000000001923f73c0d8d9e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="d8b2f07c1991b0ed2349fdaaf5172ce3e404e0321376e8abfe72b4834e6f581d668126abd4ebe5cc1d7cfd0306d5b28a715e6518a879a03c13dd88b4289f8f7567a550c86d25f98e0c60fc09f2c76e470db92d53a023bf69830723454d5210abd5994892a604aa6409e291e954585739d24bdb1470964dae38b1dd82f6abc46373a61efaf6b9bae6b7f88596d5337e617db82abbbfef4f4cc6910e8f8f5bb7e558c9989d7c840542e290a68ebed5279c", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xa, 0xb}, 0x1, 0xfffffffffffffffc, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000001000)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="07010307570300004401000008000000e801000005000000000000000000000078d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c664f5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed00000000000000"], 0xb8) waitid(0x0, r2, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) r7 = openat(r5, &(0x7f0000000440)='./file1\x00', 0x40, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000400)={0x200, 0xc41d}) r8 = openat(r5, &(0x7f00000002c0)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r8, r7, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000), 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r8, r7, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 1.60951539s ago: executing program 0 (id=19254): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x4, 0x34a, &(0x7f0000000900)="$eJzs3UFrHGUYB/Cna5uUaLo5iKAgvtSLXpYkfgEXaUEMKGlXqgdhaja67HQ37CyVLWK9efVzFI/eBPEL5KB3b95y8dhD6cjuZjebGlGi6Rj6+8EwT3jzn3lflhney/Ac3Pr2Tne3aOxmw6i9naIWEbWHEWuTaurC4bk2qZfG5fJs7Ot4s37r11dvfPTxe82trWvbKV1v3nxrM6V05bUfv/jyu6s/DZ//8PsrPyzH/tonB79v/rb/0v7LB49vft4pUqdIvf4wZel2vz/MbufttNMpuo2UPsjbWdFOnV7RHhwb3837e3ujlPV2Vlf2Bu2iSFlvlLrtURr203AwStlnWaeXGo1GWl0J/k7rwfZ21qx6FpytwaCZXVh8aOdaDyqZEABQqVPu/+eq2P/PZmD/fyoL20D7/2fBeP+/dPj8Hmf/DwAAAAAAAAAAAAAA58HDsqyXZVmfncvZ1yGHf1c8Pc7Yn37/J46q58fZunF5/uHe5Yj8m7utu63peTre3I1O5NGO9ajHo/FrYWZaX39369p6GqtFxJ37k/zVnyNazx3Pb0Q91k7Ob6SpWD3MT65zKVYW85tRjxcX8veP8psn5pfijdcX8o2oxy+fRj/y2Jm83o7yX22k9M77W0/klyf/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCzoZHm1o73v5/27280/mp8mp/311+Pejw6ub//+on9+S/GKxerXTsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzBSje90sz9uD0xYXImJ8/NPUrOf/v7rp0y9q/9UFH5dlWf1yKi8uRcRTudcLEfH/WPI5Kyp+MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAFjpp+Vz0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqlSM7nWzPG8PzrCoeo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnyR8BAAD//6xbFvE=") ioprio_set$pid(0x3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x81) 1.553662725s ago: executing program 0 (id=19255): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) pidfd_getfd(0xffffffffffffffff, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.386883698s ago: executing program 6 (id=19261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) 1.36885968s ago: executing program 6 (id=19262): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chroot(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0002000000001000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66641c7212509d3537", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYRES8=r7, @ANYRESOCT, @ANYBLOB="0000000000000000b708000000000057ddb704000000000000000000000000000795000000000000000000000000000000bca64592859b1c2f4807d9a00494698314818b1ac706bc3e8052cc4b27b76a4c539f00d669ded2160ae7f17043eeb02303f187a5afc07a58b298efb928c928ad82c56ffe77f70342da98e62354d63b4a7e428c55b9e9766578e8b98a9e5815e142f07026bf55c9231728ae1ad106a998510029"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r11 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x40}) io_uring_enter(r11, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)) 1.255609609s ago: executing program 8 (id=19263): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="f7", 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19f2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 1.192616914s ago: executing program 8 (id=19264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1.150114628s ago: executing program 6 (id=19265): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x4, 0x34a, &(0x7f0000000900)="$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") ioprio_set$pid(0x3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x81) 1.104067981s ago: executing program 7 (id=19266): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.093032092s ago: executing program 6 (id=19267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 960.387753ms ago: executing program 8 (id=19268): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 960.088623ms ago: executing program 41 (id=19268): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 959.752963ms ago: executing program 7 (id=19270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="f800000000000000000000000000000018010000afa3df28f031e00a91ac4acf4b4a7d2d75596c64026b5577de5af2984d00c070cd846d1844f4ef57058b47cbaab292fa6f0632bb3736239bcd0b394e6c740fa24bf78c649de1f82241901c50dc8f8b5dc1dbf9587ab4e1b47aa9612cff49f28f8c28651c43767a7e42ed1850c4f453572027ba1bcf26bd6b35765a2870265db6e9602339210dfc5aa8610c5c1fdd21b5c24dd5a0a44985e28e9404fb582c19c572b7de33bc80d8ae9dc1d3f78ae0169962696153855a6ee66baf25e3d88a48", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0xfebe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) migrate_pages(0x0, 0x1, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400000b0000900010073797a3000000000080003"], 0x64}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000400000001000000090000003c00f27f0800030000000000140002040000006e3000000000005150000000000800010001f70000140000000000e1ffff00bef68d78de0d1dc7b0687a70ff96a85c4bc0ae7c0517f8a683b87c7abc3bb50d3443fc456181dc3a3cf9a6808356bd6566962af4228834ba6433f1886f3f83380bcec4942800"/143], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 860.79303ms ago: executing program 7 (id=19271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095", @ANYBLOB="36f4708ffcd6cbe0b264bcd5647d40a7d7c8338a85c6d2831ce437b1fab626c0526644fd0d3b05eb13b4cbebcee2b3259b03dcb2ee441b37ea271cb6c1953ba0bac7c09cec9090f0e12f68ffb0a4fe6cf40e99e655741619f6c8baa4244d26f3b964eae414f8c43634a1ce73e146c1c1018b503d6e45286b4d6da0009721845a9a5376d3adc6432e3ee285918447bb4952", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) 843.476252ms ago: executing program 7 (id=19272): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="a0a1", 0x2}], 0x1, 0x7ffd, 0xffffffff, 0x5) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010027bd", @ANYRES32, @ANYBLOB="288a0000be76240000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xd}, 0x604a, 0xe3b, 0x2, 0x0, 0x2, 0x240, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8932, &(0x7f0000000140)={'bridge0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x2, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[], 0x18c6) 687.549115ms ago: executing program 0 (id=19273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 144.381409ms ago: executing program 6 (id=19274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8001, r1, &(0x7f0000000a00)="b237bc21e038c9cc8febff7f1873ca6b912e66520fc7a53efc16647848cbff880ce7256d2d7b9dcc862ed3956ee9a7e3c14c1d4c29336509d0461a75bcbb00bb1a96e811fb38a2ca16c0cb3b717ea942d3d8afc43bf427ce5371fee8b19a54689efb21e8174db2f6732c0e2f77e931d38adfc9415194017543718a2ace0a8b97ab1aa7ac4ca8e0879209c33393bb436af96b8f9e66172cb4caa6874a8a3a488c573bcc02eb1678e1bf02c578bcfb88e087834008d92054a064d421325c0f07d727ce10a4c114dd", 0xc7, 0x3d52, 0x0, 0x2, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x60, r0, &(0x7f0000001a40)="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", 0x1000, 0x5, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xff, r1, 0x0, 0x0, 0xffffffff, 0x0, 0x3, r1}]) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 0s ago: executing program 6 (id=19275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x200440c0}, 0xc010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan4\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000011) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '^\xaf\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000084) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000840)=0x7fffffffffffffff, 0x6, 0x6) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r12, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) lsm_set_self_attr(0x65, &(0x7f0000000980)={0x67, 0xc, 0x3b, 0x1b, "dbb75c10a9aadd767a58383758ebf83fef15b09c94f47403e916bd"}, 0x3b, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r13, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r14, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0xffffca46, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r13, 0x80106720, &(0x7f0000000ec0)={0x4, &(0x7f0000000e40)=[{0x9, 0x90, &(0x7f0000000b00)="efaa73d078731b93349493c4abcd7b01a73f53a033daea53276faef9ea47ad9b0680d8df33615c982b522d758b4a5cb5c0eea008683dd0c0a0167746af4ada74dacc5bad152678866c1cd916e9da544609a92ed6cfbdea831bc098d7612706510a30b9c22d55556f60bd0fd8d1317f3c021fd9494d905fb53cee3830be6e820dd0c5b087a9dbc650ebf1181d9710511f", 0x0, 0x1}, {0x10000, 0xad, &(0x7f0000000bc0)="757bbf1b9599deabc653424187bf404032ff7671f31354e4d957b63738d906563137c930201d395a7d4fd2bd9a1343059eb4021bd163f4a4a79247a277576e169da1dbdb1bcdf998e00e859c8b8a7add1033316414aa0473f9d87a8bf1a43740a5f7e37ea41f0b46b2838d9bb0c401511cdc17da9b7c4108b32f0ef09881252398007ddde5dc57df2787c2825a12498f7196a646ffa383fe8333f5d38a3e09a4aa2e8df76f4656b3fa8037dbe6", 0x0, 0x1}, {0xfffffe00, 0xfe, &(0x7f0000000c80)="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", 0x1, 0x1}, {0x4, 0xb5, &(0x7f0000000d80)="b6f459e8c301f9c61ef542b2f4226cba6c64a681e75f6f6ffd878470540fc55476b9314f0e9f7902aaf7d618e6c4f394d0adad4298188a4a054281ea40c7f727dd8ec0b4b9b87a17e309631d70906bff46b700cba4aee79bdf4e9e1b9965957699283ab39ca959c54cf0b23184f8b4677a6f060584f42410453803463de00e7bcb6d2fc7f29ecef39a82377bd269acb71518035f9a43d42b08dc17868db18a657fbbd49bff0d932c72d98ae0d787695493a954efdb", 0x1, 0x1}]}) ioctl$sock_SIOCADDRT(r13, 0x890b, &(0x7f0000000f40)={0x0, @qipcrtr={0x2a, 0x1, 0xfffffffe}, @phonet={0x23, 0x7, 0x7f, 0xe7}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xc2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f00)='dummy0\x00', 0x7fff, 0xe8d, 0x8}) (async) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000fc0)=0x6, 0x18, 0x0) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x1, 0x7, 0x1, 0x8, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x64, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): { create } for pid=23754 comm="syz.0.18185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1137.363287][ T29] audit: type=1400 audit(1755736995.145:45325): avc: denied { read } for pid=23754 comm="syz.0.18185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1137.366296][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.383092][ T29] audit: type=1400 audit(1755736995.145:45326): avc: denied { unmount } for pid=16487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1137.446996][T23761] loop7: detected capacity change from 0 to 512 [ 1137.462551][T23761] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1137.478501][T23761] EXT4-fs (loop7): 1 truncate cleaned up [ 1137.484469][T23761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.490364][T23762] lo speed is unknown, defaulting to 1000 [ 1137.534686][T23761] 9pnet_fd: Insufficient options for proto=fd [ 1137.843851][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18190'. [ 1138.053862][T23777] loop4: detected capacity change from 0 to 512 [ 1138.060847][T23777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1138.072350][T23777] EXT4-fs (loop4): 1 truncate cleaned up [ 1138.078332][T23777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.101968][T23777] 9pnet_fd: Insufficient options for proto=fd [ 1138.224339][ T3488] hid_parser_main: 8 callbacks suppressed [ 1138.224351][ T3488] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 1138.237566][ T3488] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 1138.244953][ T3488] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 1138.253064][ T3488] hid-generic 0003:0004:0000.0055: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1138.272359][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.307706][T23788] loop7: detected capacity change from 0 to 512 [ 1138.315705][T23788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1138.385796][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.681108][T23809] loop8: detected capacity change from 0 to 512 [ 1138.689013][T23809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1138.756070][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.860588][T23821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.869228][T23821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.896528][T15498] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.142363][T23827] rdma_rxe: rxe_newlink: failed to add lo [ 1139.418751][T23842] loop6: detected capacity change from 0 to 164 [ 1139.425768][T23842] iso9660: Unknown parameter 'net/raw6' [ 1139.470690][T23850] __nla_validate_parse: 3 callbacks suppressed [ 1139.470705][T23850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18218'. [ 1139.514328][T23855] loop0: detected capacity change from 0 to 512 [ 1139.525738][T23855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1139.598643][T15775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.653685][ T10] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1139.661167][ T10] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1139.668705][ T10] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1139.677574][ T10] hid-generic 0003:0004:0000.0056: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1139.702812][T23868] loop7: detected capacity change from 0 to 512 [ 1139.715741][T23868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1139.871612][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.926307][T23886] netlink: 'syz.7.18230': attribute type 6 has an invalid length. [ 1139.943859][T23886] loop7: detected capacity change from 0 to 128 [ 1139.951460][T23886] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1139.964163][T23886] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1140.250513][T23890] lo speed is unknown, defaulting to 1000 [ 1140.333506][T23890] chnl_net:caif_netlink_parms(): no params data found [ 1140.366273][T23890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.373455][T23890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.380999][T23890] bridge_slave_0: entered allmulticast mode [ 1140.387482][T23890] bridge_slave_0: entered promiscuous mode [ 1140.394468][T23890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.401748][T23890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.409339][T23890] bridge_slave_1: entered allmulticast mode [ 1140.415957][T23890] bridge_slave_1: entered promiscuous mode [ 1140.423423][ T3969] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.448336][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18234'. [ 1140.460632][T23890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.475280][ T3969] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.489707][T23890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.499707][T20908] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1140.540227][ T3969] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.561259][T23890] team0: Port device team_slave_0 added [ 1140.573051][T23890] team0: Port device team_slave_1 added [ 1140.602195][T23925] loop7: detected capacity change from 0 to 512 [ 1140.613218][T23890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.620355][T23890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.646551][T23890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.658705][T23925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1140.674092][ T3969] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.697170][T23890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.704249][T23890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.731289][T23890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.747537][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18241'. [ 1140.783574][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.808216][T23890] hsr_slave_0: entered promiscuous mode [ 1140.816067][T23890] hsr_slave_1: entered promiscuous mode [ 1140.826639][T23890] debugfs: 'hsr0' already exists in 'hsr' [ 1140.832521][T23890] Cannot create hsr debugfs directory [ 1140.845747][T23939] loop0: detected capacity change from 0 to 512 [ 1140.854008][T23939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1140.867392][T23939] EXT4-fs (loop0): 1 truncate cleaned up [ 1140.873521][T23939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.896756][T23939] 9pnet_fd: Insufficient options for proto=fd [ 1140.927416][ T3969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.945969][ T3969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.956054][ T3969] bond0 (unregistering): Released all slaves [ 1141.019551][ T3969] tipc: Left network mode [ 1141.039805][ T3969] hsr_slave_0: left promiscuous mode [ 1141.045353][ T3969] hsr_slave_1: left promiscuous mode [ 1141.051229][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.058865][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.067359][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.074850][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.110979][ T3969] team0 (unregistering): Port device team_slave_1 removed [ 1141.362644][T23890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1141.373785][T23890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1141.383286][T23890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1141.393682][T23890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1141.432249][ T4056] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 1141.435808][T23890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.440144][ T4056] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 1141.440168][ T4056] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 1141.443214][ T4056] hid-generic 0003:0004:0000.0057: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1141.452078][T23890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.484530][T20908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.491736][T20908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.503661][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.510840][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.528272][T23890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1141.538901][T23890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1141.580894][T23967] netlink: 'syz.8.18251': attribute type 6 has an invalid length. [ 1141.596744][T23967] loop8: detected capacity change from 0 to 128 [ 1141.604296][T23967] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1141.611553][T23890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.617354][T23967] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1141.685072][T15775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.735846][T23890] veth0_vlan: entered promiscuous mode [ 1141.746605][T23890] veth1_vlan: entered promiscuous mode [ 1141.754736][T23986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18253'. [ 1141.768625][T23890] veth0_macvtap: entered promiscuous mode [ 1141.781810][T23890] veth1_macvtap: entered promiscuous mode [ 1141.792507][T23890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.801393][T23890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.813424][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.824881][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.838250][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.859567][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.886946][T23994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18256'. [ 1141.895771][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18257'. [ 1141.911361][T23996] netlink: 'syz.6.18231': attribute type 6 has an invalid length. [ 1141.926773][T23996] loop6: detected capacity change from 0 to 128 [ 1141.934126][T23996] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1141.946556][T23996] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.028526][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18261'. [ 1142.041985][T24003] loop7: detected capacity change from 0 to 128 [ 1142.048888][T24003] vfat: Unknown parameter '' [ 1142.058375][T24013] loop4: detected capacity change from 0 to 128 [ 1142.108628][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18263'. [ 1142.143312][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 1142.143325][ T29] audit: type=1400 audit(1755736999.935:45860): avc: denied { unmount } for pid=15498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1142.179987][ T41] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.195712][ T29] audit: type=1400 audit(1755736999.985:45861): avc: denied { create } for pid=24027 comm="syz.8.18267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1142.219505][ T29] audit: type=1326 audit(1755736999.995:45862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24029 comm="syz.4.18268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f983ab7ebe9 code=0x0 [ 1142.275693][ T29] audit: type=1400 audit(1755737000.065:45863): avc: denied { create } for pid=24033 comm="syz.8.18269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1142.310258][ T29] audit: type=1400 audit(1755737000.105:45864): avc: denied { write } for pid=24033 comm="syz.8.18269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1142.330035][ T29] audit: type=1400 audit(1755737000.105:45865): avc: denied { connect } for pid=24033 comm="syz.8.18269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1142.350004][ T29] audit: type=1400 audit(1755737000.105:45866): avc: denied { name_connect } for pid=24033 comm="syz.8.18269" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1142.477480][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.554522][ T4056] hid-generic 0003:0004:0000.0058: unknown main item tag 0x0 [ 1142.564522][ T4056] hid-generic 0003:0004:0000.0058: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1142.626548][ T29] audit: type=1326 audit(1755737000.415:45867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24046 comm="syz.6.18275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ad59ebe9 code=0x0 [ 1143.005308][T24058] loop7: detected capacity change from 0 to 128 [ 1143.044118][T24060] netlink: 'syz.0.18280': attribute type 6 has an invalid length. [ 1143.055729][ T29] audit: type=1326 audit(1755737000.845:45868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24059 comm="syz.0.18280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5c80ebe9 code=0x7ffc0000 [ 1143.084947][T24060] loop0: detected capacity change from 0 to 128 [ 1143.091432][ T29] audit: type=1326 audit(1755737000.875:45869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24059 comm="syz.0.18280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d5c80ebe9 code=0x7ffc0000 [ 1143.118196][T24060] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1143.130805][T24060] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1143.182656][T24068] loop4: detected capacity change from 0 to 1024 [ 1143.198841][T24068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.485749][T24082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18285'. [ 1143.654740][ T41] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1143.669551][T24090] FAULT_INJECTION: forcing a failure. [ 1143.669551][T24090] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.682377][T24090] CPU: 0 UID: 0 PID: 24090 Comm: syz.0.18287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1143.682431][T24090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1143.682442][T24090] Call Trace: [ 1143.682454][T24090] [ 1143.682462][T24090] __dump_stack+0x1d/0x30 [ 1143.682484][T24090] dump_stack_lvl+0xe8/0x140 [ 1143.682500][T24090] dump_stack+0x15/0x1b [ 1143.682513][T24090] should_fail_ex+0x265/0x280 [ 1143.682533][T24090] should_failslab+0x8c/0xb0 [ 1143.682674][T24090] kmem_cache_alloc_noprof+0x50/0x310 [ 1143.682697][T24090] ? getname_flags+0x80/0x3b0 [ 1143.682721][T24090] getname_flags+0x80/0x3b0 [ 1143.682743][T24090] getname_uflags+0x21/0x30 [ 1143.682810][T24090] __x64_sys_execveat+0x5d/0x90 [ 1143.682828][T24090] x64_sys_call+0x1fec/0x2ff0 [ 1143.682846][T24090] do_syscall_64+0xd2/0x200 [ 1143.682888][T24090] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1143.682908][T24090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1143.682929][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.682971][T24090] RIP: 0033:0x7f6d5c80ebe9 [ 1143.682981][T24090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.682991][T24090] RSP: 002b:00007f6d5b26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1143.683034][T24090] RAX: ffffffffffffffda RBX: 00007f6d5ca35fa0 RCX: 00007f6d5c80ebe9 [ 1143.683042][T24090] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1143.683049][T24090] RBP: 00007f6d5b26f090 R08: 0000000000001000 R09: 0000000000000000 [ 1143.683056][T24090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.683062][T24090] R13: 00007f6d5ca36038 R14: 00007f6d5ca35fa0 R15: 00007ffc03b20c18 [ 1143.683074][T24090] [ 1144.014707][T24097] loop7: detected capacity change from 0 to 512 [ 1144.022027][T24097] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1144.034997][T24097] EXT4-fs (loop7): 1 truncate cleaned up [ 1144.041639][T24097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.064058][T24097] 9pnet_fd: Insufficient options for proto=fd [ 1144.157774][T24105] loop8: detected capacity change from 0 to 128 [ 1144.270842][T24112] netlink: 'syz.8.18295': attribute type 6 has an invalid length. [ 1144.287543][T24112] loop8: detected capacity change from 0 to 128 [ 1144.296203][T24112] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1144.310084][T24112] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1144.337887][T24113] lo speed is unknown, defaulting to 1000 [ 1144.523209][T24122] loop6: detected capacity change from 0 to 512 [ 1144.532991][T24122] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1144.549026][T24122] EXT4-fs (loop6): 1 truncate cleaned up [ 1144.567605][T24122] 9pnet_fd: Insufficient options for proto=fd [ 1144.815433][T24128] loop0: detected capacity change from 0 to 512 [ 1144.828756][T24128] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1144.837314][T24128] FAT-fs (loop0): Filesystem has been set read-only [ 1144.857717][ T51] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1144.868769][T24128] lo speed is unknown, defaulting to 1000 [ 1145.023727][T24144] loop7: detected capacity change from 0 to 128 [ 1145.094949][T24148] lo speed is unknown, defaulting to 1000 [ 1145.313996][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18308'. [ 1145.453755][ T8658] hid_parser_main: 2 callbacks suppressed [ 1145.453772][ T8658] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1145.462673][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18312'. [ 1145.467462][ T8658] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1145.484309][ T8658] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1145.513372][ T8658] hid-generic 0003:0004:0000.0059: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1145.618204][T24183] loop7: detected capacity change from 0 to 512 [ 1145.625333][T24183] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1145.639532][T24183] EXT4-fs (loop7): 1 truncate cleaned up [ 1145.648341][T24177] loop0: detected capacity change from 0 to 128 [ 1145.654902][T24177] vfat: Unknown parameter '' [ 1145.664787][T24183] 9pnet_fd: Insufficient options for proto=fd [ 1145.672704][T24187] loop4: detected capacity change from 0 to 128 [ 1145.728300][T24189] loop0: detected capacity change from 0 to 512 [ 1145.736339][T24189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1145.752034][T24189] EXT4-fs (loop0): 1 truncate cleaned up [ 1145.773839][T24189] 9pnet_fd: Insufficient options for proto=fd [ 1145.826026][T24196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18325'. [ 1145.944113][T24214] netlink: 'syz.8.18331': attribute type 6 has an invalid length. [ 1145.962672][T24214] loop8: detected capacity change from 0 to 128 [ 1145.968034][T24216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18332'. [ 1145.972123][T24214] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1145.990408][T24214] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1146.022651][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18333'. [ 1146.105917][T24226] loop7: detected capacity change from 0 to 128 [ 1146.214220][T24228] loop7: detected capacity change from 0 to 512 [ 1146.221388][T24228] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1146.232947][T24228] EXT4-fs (loop7): 1 truncate cleaned up [ 1146.244466][T24228] 9pnet_fd: Insufficient options for proto=fd [ 1146.310925][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18336'. [ 1146.349098][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18337'. [ 1146.517992][ T51] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1146.612862][T24259] lo speed is unknown, defaulting to 1000 [ 1146.825690][T24262] loop6: detected capacity change from 0 to 128 [ 1146.952764][T24264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18348'. [ 1146.965085][T24272] loop8: detected capacity change from 0 to 512 [ 1146.970374][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18347'. [ 1146.975043][T24272] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1147.008352][T24272] EXT4-fs (loop8): 1 truncate cleaned up [ 1147.044483][T24272] 9pnet_fd: Insufficient options for proto=fd [ 1147.054386][T24283] loop6: detected capacity change from 0 to 512 [ 1147.071134][T24283] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.085344][T24283] EXT4-fs warning (device loop6): ext4_empty_dir:3089: inode #12: comm syz.6.18354: directory missing '.' [ 1147.097435][ T3488] IPVS: starting estimator thread 0... [ 1147.156560][T24291] loop0: detected capacity change from 0 to 512 [ 1147.187259][T24287] IPVS: using max 2880 ests per chain, 144000 per kthread [ 1147.204458][T24291] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1147.204922][T24299] tipc: Enabling of bearer rejected, failed to enable media [ 1147.213415][T24291] FAT-fs (loop0): Filesystem has been set read-only [ 1147.259496][T24297] loop6: detected capacity change from 0 to 128 [ 1147.269946][T24297] vfat: Unknown parameter '' [ 1147.284197][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18362'. [ 1147.327081][T24315] loop4: detected capacity change from 0 to 1024 [ 1147.378639][T24321] loop6: detected capacity change from 0 to 1024 [ 1147.386623][T24324] loop0: detected capacity change from 0 to 128 [ 1147.494055][T24337] loop8: detected capacity change from 0 to 512 [ 1147.503132][T24337] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1147.520245][T24337] EXT4-fs (loop8): 1 truncate cleaned up [ 1147.533847][T24337] 9pnet_fd: Insufficient options for proto=fd [ 1148.280221][T24352] loop6: detected capacity change from 0 to 128 [ 1148.286864][T24352] vfat: Unknown parameter '' [ 1148.333681][T24358] loop7: detected capacity change from 0 to 512 [ 1148.360531][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 1148.360546][ T29] audit: type=1400 audit(1755737006.155:46194): avc: denied { write } for pid=24357 comm="syz.7.18378" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1148.390835][ T29] audit: type=1400 audit(1755737006.155:46195): avc: denied { open } for pid=24357 comm="syz.7.18378" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1148.472594][ T29] audit: type=1400 audit(1755737006.225:46196): avc: denied { perfmon } for pid=24355 comm="syz.0.18377" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.494504][ T29] audit: type=1400 audit(1755737006.255:46197): avc: denied { execmem } for pid=24357 comm="syz.7.18378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1148.502694][T24367] lo speed is unknown, defaulting to 1000 [ 1148.514030][ T29] audit: type=1400 audit(1755737006.265:46198): avc: denied { map_create } for pid=24360 comm="syz.8.18379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.539234][ T29] audit: type=1400 audit(1755737006.265:46199): avc: denied { prog_load } for pid=24360 comm="syz.8.18379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.558900][ T29] audit: type=1400 audit(1755737006.265:46200): avc: denied { bpf } for pid=24360 comm="syz.8.18379" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.579794][ T29] audit: type=1400 audit(1755737006.265:46201): avc: denied { read write } for pid=24360 comm="syz.8.18379" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.603849][ T29] audit: type=1400 audit(1755737006.265:46202): avc: denied { open } for pid=24360 comm="syz.8.18379" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.627780][ T29] audit: type=1400 audit(1755737006.265:46203): avc: denied { ioctl } for pid=24360 comm="syz.8.18379" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.736796][T24356] loop0: detected capacity change from 0 to 128 [ 1148.743873][T24356] vfat: Unknown parameter '' [ 1148.763819][T24369] loop6: detected capacity change from 0 to 128 [ 1149.010056][T24373] netlink: 'syz.0.18382': attribute type 6 has an invalid length. [ 1149.035595][T24373] loop0: detected capacity change from 0 to 128 [ 1149.050349][T24373] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1149.073517][T24373] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1149.092412][T21241] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 1149.100130][T21241] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 1149.107543][T21241] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 1149.119153][T21241] hid-generic 0003:0004:0000.005A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1149.251345][T24401] loop6: detected capacity change from 0 to 512 [ 1149.374222][T24409] loop6: detected capacity change from 0 to 128 [ 1149.431267][T24417] netlink: 'syz.4.18398': attribute type 11 has an invalid length. [ 1149.537144][T24433] loop4: detected capacity change from 0 to 512 [ 1149.614043][T24437] lo speed is unknown, defaulting to 1000 [ 1149.961999][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1150.023170][T24443] netlink: 'syz.0.18405': attribute type 1 has an invalid length. [ 1150.063095][T24446] loop7: detected capacity change from 0 to 512 [ 1150.247938][T24460] netlink: 'syz.7.18412': attribute type 11 has an invalid length. [ 1150.270874][T24463] loop0: detected capacity change from 0 to 128 [ 1150.330570][T24471] __nla_validate_parse: 10 callbacks suppressed [ 1150.330584][T24471] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18415'. [ 1150.429607][T24479] lo speed is unknown, defaulting to 1000 [ 1150.771317][T24464] lo speed is unknown, defaulting to 1000 [ 1150.926059][T24490] loop6: detected capacity change from 0 to 512 [ 1151.026215][T24464] chnl_net:caif_netlink_parms(): no params data found [ 1151.057883][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.067988][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.110295][T24464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.117563][T24464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.125194][T24464] bridge_slave_0: entered allmulticast mode [ 1151.131922][T24464] bridge_slave_0: entered promiscuous mode [ 1151.139678][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.149617][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.160599][T24464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.167699][T24464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.176732][T24464] bridge_slave_1: entered allmulticast mode [ 1151.183836][T24464] bridge_slave_1: entered promiscuous mode [ 1151.204619][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.214649][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.226837][T24464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.238135][T24464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.257636][T24464] team0: Port device team_slave_0 added [ 1151.264346][T24464] team0: Port device team_slave_1 added [ 1151.275949][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.286128][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.303740][T24464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.310951][T24464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.337692][T24464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.353922][T24464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.361210][T24464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.387454][T24464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.430457][T24464] hsr_slave_0: entered promiscuous mode [ 1151.436937][T24464] hsr_slave_1: entered promiscuous mode [ 1151.453375][T24510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18424'. [ 1151.558615][ T41] bond0 (unregistering): Released all slaves [ 1151.565552][T24519] loop6: detected capacity change from 0 to 128 [ 1151.567727][ T41] bond1 (unregistering): Released all slaves [ 1151.583834][T24518] loop7: detected capacity change from 0 to 128 [ 1151.590602][T24518] vfat: Unknown parameter '' [ 1151.620628][ T41] tipc: Left network mode [ 1151.701138][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18428'. [ 1151.711753][ T41] hsr_slave_0: left promiscuous mode [ 1151.724076][ T41] hsr_slave_1: left promiscuous mode [ 1151.826976][T24542] netlink: 'syz.8.18436': attribute type 6 has an invalid length. [ 1151.842414][T24542] loop8: detected capacity change from 0 to 128 [ 1151.849546][T24542] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1151.864052][T24542] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1151.955981][T24551] FAULT_INJECTION: forcing a failure. [ 1151.955981][T24551] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.968780][T24551] CPU: 1 UID: 0 PID: 24551 Comm: syz.7.18440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1151.968828][T24551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1151.968838][T24551] Call Trace: [ 1151.968845][T24551] [ 1151.968853][T24551] __dump_stack+0x1d/0x30 [ 1151.968870][T24551] dump_stack_lvl+0xe8/0x140 [ 1151.968886][T24551] dump_stack+0x15/0x1b [ 1151.968902][T24551] should_fail_ex+0x265/0x280 [ 1151.968987][T24551] should_failslab+0x8c/0xb0 [ 1151.969006][T24551] __kmalloc_noprof+0xa5/0x3e0 [ 1151.969027][T24551] ? security_prepare_creds+0x52/0x120 [ 1151.969047][T24551] security_prepare_creds+0x52/0x120 [ 1151.969103][T24551] prepare_creds+0x34a/0x4c0 [ 1151.969183][T24551] lookup_user_key+0x12a/0xd10 [ 1151.969206][T24551] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1151.969232][T24551] __se_sys_add_key+0x263/0x350 [ 1151.969258][T24551] __x64_sys_add_key+0x67/0x80 [ 1151.969356][T24551] x64_sys_call+0x28c4/0x2ff0 [ 1151.969373][T24551] do_syscall_64+0xd2/0x200 [ 1151.969404][T24551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1151.969428][T24551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1151.969451][T24551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.969544][T24551] RIP: 0033:0x7ff86f90ebe9 [ 1151.969557][T24551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.969639][T24551] RSP: 002b:00007ff86e36f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1151.969660][T24551] RAX: ffffffffffffffda RBX: 00007ff86fb35fa0 RCX: 00007ff86f90ebe9 [ 1151.969711][T24551] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000100 [ 1151.969769][T24551] RBP: 00007ff86e36f090 R08: ffffffffffffffff R09: 0000000000000000 [ 1151.969781][T24551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.969793][T24551] R13: 00007ff86fb36038 R14: 00007ff86fb35fa0 R15: 00007fffeabe47e8 [ 1151.969813][T24551] [ 1152.229456][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18444'. [ 1152.255353][T24464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1152.265425][T24464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1152.274936][T24464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1152.284268][T24464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1152.319280][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18446'. [ 1152.335150][T24464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.351829][T24464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.362259][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.369371][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.381471][T20908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.388556][T20908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.399866][ T31] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1152.452927][T24582] netlink: 'syz.8.18450': attribute type 5 has an invalid length. [ 1152.492197][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18451'. [ 1152.516749][T24464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.544307][T24590] loop7: detected capacity change from 0 to 512 [ 1152.555477][T24582] lo speed is unknown, defaulting to 1000 [ 1152.570484][T24590] EXT4-fs mount: 30 callbacks suppressed [ 1152.570498][T24590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1152.612589][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18454'. [ 1152.732857][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.756459][T24605] loop0: detected capacity change from 0 to 512 [ 1152.780507][T24605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1152.846376][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18456'. [ 1152.901989][T15775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.903043][T24464] veth0_vlan: entered promiscuous mode [ 1152.940117][T24464] veth1_vlan: entered promiscuous mode [ 1152.988500][T24464] veth0_macvtap: entered promiscuous mode [ 1153.002890][T24464] veth1_macvtap: entered promiscuous mode [ 1153.028695][T24464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.058597][T24464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.071409][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.094268][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.112824][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.129961][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18464'. [ 1153.137864][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.226647][T24642] loop8: detected capacity change from 0 to 512 [ 1153.240243][T24642] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1153.381186][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 1153.381200][ T29] audit: type=1400 audit(1755737011.175:46631): avc: denied { unmount } for pid=19245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1153.409033][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.429554][T24653] loop4: detected capacity change from 0 to 128 [ 1153.429702][ T29] audit: type=1400 audit(1755737011.215:46632): avc: denied { open } for pid=24652 comm="syz.4.18470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1153.443963][T24653] vfat: Unknown parameter '' [ 1153.455499][ T29] audit: type=1400 audit(1755737011.215:46633): avc: denied { kernel } for pid=24652 comm="syz.4.18470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1153.480653][ T29] audit: type=1400 audit(1755737011.215:46634): avc: denied { tracepoint } for pid=24652 comm="syz.4.18470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1153.500878][ T29] audit: type=1400 audit(1755737011.215:46635): avc: denied { create } for pid=24655 comm="syz.8.18471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.521650][ T29] audit: type=1400 audit(1755737011.225:46636): avc: denied { bind } for pid=24655 comm="syz.8.18471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.542755][ T29] audit: type=1400 audit(1755737011.225:46637): avc: denied { mounton } for pid=24652 comm="syz.4.18470" path="/5/file2" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1153.546144][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18471'. [ 1153.565580][ T29] audit: type=1400 audit(1755737011.305:46638): avc: denied { append } for pid=24652 comm="syz.4.18470" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1153.598850][ T29] audit: type=1400 audit(1755737011.345:46639): avc: denied { write } for pid=24655 comm="syz.8.18471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.620070][ T29] audit: type=1400 audit(1755737011.345:46640): avc: denied { read } for pid=24655 comm="syz.8.18471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.772703][T24670] pimreg: entered allmulticast mode [ 1153.803139][T24670] pimreg: left allmulticast mode [ 1153.830525][T24675] FAULT_INJECTION: forcing a failure. [ 1153.830525][T24675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.843738][T24675] CPU: 0 UID: 0 PID: 24675 Comm: syz.0.18478 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1153.843778][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1153.843786][T24675] Call Trace: [ 1153.843790][T24675] [ 1153.843796][T24675] __dump_stack+0x1d/0x30 [ 1153.843900][T24675] dump_stack_lvl+0xe8/0x140 [ 1153.843911][T24675] dump_stack+0x15/0x1b [ 1153.843920][T24675] should_fail_ex+0x265/0x280 [ 1153.843995][T24675] should_fail+0xb/0x20 [ 1153.844004][T24675] should_fail_usercopy+0x1a/0x20 [ 1153.844016][T24675] _copy_from_user+0x1c/0xb0 [ 1153.844059][T24675] ___sys_sendmsg+0xc1/0x1d0 [ 1153.844123][T24675] __x64_sys_sendmsg+0xd4/0x160 [ 1153.844137][T24675] x64_sys_call+0x191e/0x2ff0 [ 1153.844149][T24675] do_syscall_64+0xd2/0x200 [ 1153.844163][T24675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1153.844201][T24675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1153.844220][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.844235][T24675] RIP: 0033:0x7f6d5c80ebe9 [ 1153.844244][T24675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.844254][T24675] RSP: 002b:00007f6d5b26f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.844287][T24675] RAX: ffffffffffffffda RBX: 00007f6d5ca35fa0 RCX: 00007f6d5c80ebe9 [ 1153.844314][T24675] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006 [ 1153.844321][T24675] RBP: 00007f6d5b26f090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.844378][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.844417][T24675] R13: 00007f6d5ca36038 R14: 00007f6d5ca35fa0 R15: 00007ffc03b20c18 [ 1153.844428][T24675] [ 1154.032347][T24673] loop7: detected capacity change from 0 to 512 [ 1154.061123][T24673] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1154.069788][T24673] FAT-fs (loop7): Filesystem has been set read-only [ 1154.283037][T24705] FAULT_INJECTION: forcing a failure. [ 1154.283037][T24705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.296176][T24705] CPU: 1 UID: 0 PID: 24705 Comm: syz.0.18492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1154.296199][T24705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1154.296305][T24705] Call Trace: [ 1154.296311][T24705] [ 1154.296318][T24705] __dump_stack+0x1d/0x30 [ 1154.296336][T24705] dump_stack_lvl+0xe8/0x140 [ 1154.296351][T24705] dump_stack+0x15/0x1b [ 1154.296364][T24705] should_fail_ex+0x265/0x280 [ 1154.296431][T24705] should_fail+0xb/0x20 [ 1154.296444][T24705] should_fail_usercopy+0x1a/0x20 [ 1154.296460][T24705] _copy_from_iter+0xcf/0xe40 [ 1154.296479][T24705] ? __build_skb_around+0x1a0/0x200 [ 1154.296526][T24705] ? __alloc_skb+0x223/0x320 [ 1154.296550][T24705] netlink_sendmsg+0x471/0x6b0 [ 1154.296569][T24705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.296614][T24705] __sock_sendmsg+0x142/0x180 [ 1154.296635][T24705] ____sys_sendmsg+0x345/0x4e0 [ 1154.296655][T24705] ___sys_sendmsg+0x17b/0x1d0 [ 1154.296750][T24705] __sys_sendmmsg+0x178/0x300 [ 1154.296776][T24705] __x64_sys_sendmmsg+0x57/0x70 [ 1154.296792][T24705] x64_sys_call+0x1c4a/0x2ff0 [ 1154.296808][T24705] do_syscall_64+0xd2/0x200 [ 1154.296853][T24705] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1154.296872][T24705] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1154.296922][T24705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.296944][T24705] RIP: 0033:0x7f6d5c80ebe9 [ 1154.296956][T24705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.297012][T24705] RSP: 002b:00007f6d5b26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1154.297077][T24705] RAX: ffffffffffffffda RBX: 00007f6d5ca35fa0 RCX: 00007f6d5c80ebe9 [ 1154.297098][T24705] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1154.297109][T24705] RBP: 00007f6d5b26f090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.297135][T24705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.297145][T24705] R13: 00007f6d5ca36038 R14: 00007f6d5ca35fa0 R15: 00007ffc03b20c18 [ 1154.297171][T24705] [ 1154.560939][T24687] loop7: detected capacity change from 0 to 32768 [ 1154.587892][T24708] loop7: p1 p2 p3 < p5 p6 > [ 1154.593762][T24708] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1154.601905][T24708] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1154.609053][T24707] loop4: detected capacity change from 0 to 512 [ 1154.641838][T24687] loop7: p1 p2 p3 < p5 p6 > [ 1154.648777][T24707] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1154.650404][T24687] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1154.657604][T24707] FAT-fs (loop4): Filesystem has been set read-only [ 1154.686044][T24687] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1154.875459][T24747] loop8: detected capacity change from 0 to 512 [ 1154.890694][T24747] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1154.899418][T24747] FAT-fs (loop8): Filesystem has been set read-only [ 1154.950560][T24687] tipc: Enabling of bearer rejected, failed to enable media [ 1154.965584][T24755] loop4: detected capacity change from 0 to 512 [ 1154.973453][T24755] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1154.985638][T24755] EXT4-fs (loop4): 1 truncate cleaned up [ 1154.997962][T24759] loop6: detected capacity change from 0 to 512 [ 1155.005484][T24755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.040202][T24759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1155.080312][T24755] 9pnet_fd: Insufficient options for proto=fd [ 1155.117595][T24773] FAULT_INJECTION: forcing a failure. [ 1155.117595][T24773] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.130439][T24773] CPU: 1 UID: 0 PID: 24773 Comm: syz.7.18519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1155.130464][T24773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1155.130474][T24773] Call Trace: [ 1155.130479][T24773] [ 1155.130488][T24773] __dump_stack+0x1d/0x30 [ 1155.130510][T24773] dump_stack_lvl+0xe8/0x140 [ 1155.130592][T24773] dump_stack+0x15/0x1b [ 1155.130609][T24773] should_fail_ex+0x265/0x280 [ 1155.130690][T24773] ? __se_sys_fsopen+0x10d/0x1e0 [ 1155.130711][T24773] should_failslab+0x8c/0xb0 [ 1155.130809][T24773] __kmalloc_cache_noprof+0x4c/0x320 [ 1155.130838][T24773] __se_sys_fsopen+0x10d/0x1e0 [ 1155.130900][T24773] __x64_sys_fsopen+0x31/0x40 [ 1155.130919][T24773] x64_sys_call+0x2a9d/0x2ff0 [ 1155.130939][T24773] do_syscall_64+0xd2/0x200 [ 1155.131041][T24773] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1155.131064][T24773] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1155.131110][T24773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.131130][T24773] RIP: 0033:0x7ff86f90ebe9 [ 1155.131143][T24773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.131157][T24773] RSP: 002b:00007ff86e36f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1155.131174][T24773] RAX: ffffffffffffffda RBX: 00007ff86fb35fa0 RCX: 00007ff86f90ebe9 [ 1155.131185][T24773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1155.131247][T24773] RBP: 00007ff86e36f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.131260][T24773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.131270][T24773] R13: 00007ff86fb36038 R14: 00007ff86fb35fa0 R15: 00007fffeabe47e8 [ 1155.131286][T24773] [ 1155.404552][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.405105][T24780] __nla_validate_parse: 3 callbacks suppressed [ 1155.405117][T24780] netlink: 2 bytes leftover after parsing attributes in process `syz.7.18520'. [ 1155.451013][T24783] loop6: detected capacity change from 0 to 128 [ 1155.485313][ T12] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 1155.493479][ T12] FAT-fs (loop6): Filesystem has been set read-only [ 1155.500229][ T12] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 1155.536303][T24793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18528'. [ 1155.583527][T24800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18530'. [ 1155.670552][T24819] FAULT_INJECTION: forcing a failure. [ 1155.670552][T24819] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.683267][T24819] CPU: 1 UID: 0 PID: 24819 Comm: syz.7.18538 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1155.683292][T24819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1155.683302][T24819] Call Trace: [ 1155.683308][T24819] [ 1155.683315][T24819] __dump_stack+0x1d/0x30 [ 1155.683414][T24819] dump_stack_lvl+0xe8/0x140 [ 1155.683508][T24819] dump_stack+0x15/0x1b [ 1155.683525][T24819] should_fail_ex+0x265/0x280 [ 1155.683552][T24819] ? audit_log_d_path+0x8d/0x150 [ 1155.683621][T24819] should_failslab+0x8c/0xb0 [ 1155.683645][T24819] __kmalloc_cache_noprof+0x4c/0x320 [ 1155.683674][T24819] audit_log_d_path+0x8d/0x150 [ 1155.683741][T24819] audit_log_d_path_exe+0x42/0x70 [ 1155.683806][T24819] audit_log_task+0x1e9/0x250 [ 1155.683835][T24819] audit_seccomp+0x61/0x100 [ 1155.683858][T24819] ? __seccomp_filter+0x68c/0x10d0 [ 1155.683881][T24819] __seccomp_filter+0x69d/0x10d0 [ 1155.683906][T24819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1155.683981][T24819] ? vfs_write+0x7e8/0x960 [ 1155.684009][T24819] ? __rcu_read_unlock+0x4f/0x70 [ 1155.684030][T24819] ? __fget_files+0x184/0x1c0 [ 1155.684119][T24819] __secure_computing+0x82/0x150 [ 1155.684140][T24819] syscall_trace_enter+0xcf/0x1e0 [ 1155.684192][T24819] do_syscall_64+0xac/0x200 [ 1155.684216][T24819] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1155.684238][T24819] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1155.684261][T24819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.684355][T24819] RIP: 0033:0x7ff86f90ebe9 [ 1155.684411][T24819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.684465][T24819] RSP: 002b:00007ff86e36f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1155.684488][T24819] RAX: ffffffffffffffda RBX: 00007ff86fb35fa0 RCX: 00007ff86f90ebe9 [ 1155.684500][T24819] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000003 [ 1155.684512][T24819] RBP: 00007ff86e36f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.684523][T24819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.684535][T24819] R13: 00007ff86fb36038 R14: 00007ff86fb35fa0 R15: 00007fffeabe47e8 [ 1155.684554][T24819] [ 1155.933537][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.982496][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18540'. [ 1155.997738][T24834] loop8: detected capacity change from 0 to 512 [ 1156.008182][T24834] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1156.034784][T24834] EXT4-fs (loop8): 1 truncate cleaned up [ 1156.041313][T24834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.075436][T24834] 9pnet_fd: Insufficient options for proto=fd [ 1156.080707][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18544'. [ 1156.244608][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.271974][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18550'. [ 1156.300959][T24862] loop4: detected capacity change from 0 to 512 [ 1156.327024][T24862] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1156.335666][T24862] FAT-fs (loop4): Filesystem has been set read-only [ 1156.481902][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18556'. [ 1156.521049][T24879] loop8: detected capacity change from 0 to 512 [ 1156.532027][T24879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1156.537078][T24873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.553892][T24873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.636329][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.689080][T24890] loop8: detected capacity change from 0 to 512 [ 1156.696160][T24890] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1156.708970][T24890] EXT4-fs (loop8): 1 truncate cleaned up [ 1156.715094][T24890] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.733699][T24890] 9pnet_fd: Insufficient options for proto=fd [ 1156.832251][T24895] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18561'. [ 1156.864768][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.891699][ T4056] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 1156.899344][ T4056] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 1156.906850][ T4056] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 1156.915093][ T4056] hid-generic 0003:0004:0000.005B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1157.002239][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18567'. [ 1157.014015][T24909] loop6: detected capacity change from 0 to 512 [ 1157.027418][T24909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1157.085846][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18571'. [ 1157.094605][T24920] loop7: detected capacity change from 0 to 512 [ 1157.106039][T24920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1157.157250][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.215635][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.345894][T24952] loop0: detected capacity change from 0 to 164 [ 1157.366493][T24952] syz.0.18585: attempt to access beyond end of device [ 1157.366493][T24952] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1157.397217][T24952] syz.0.18585: attempt to access beyond end of device [ 1157.397217][T24952] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1157.448370][T24950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.457227][T24950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.497029][T24962] loop0: detected capacity change from 0 to 512 [ 1157.504431][T24962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1157.516653][T24962] EXT4-fs (loop0): 1 truncate cleaned up [ 1157.522737][T24962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.541826][T24962] 9pnet_fd: Insufficient options for proto=fd [ 1157.730255][T24966] loop8: detected capacity change from 0 to 512 [ 1157.739087][T24966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1157.795552][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.019908][T24989] loop7: detected capacity change from 0 to 512 [ 1158.026717][T24989] ext2: Bad value for 'data' [ 1158.038260][T24989] loop7: detected capacity change from 0 to 1024 [ 1158.048867][T24989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.077245][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.094950][T24994] loop4: detected capacity change from 0 to 512 [ 1158.107763][T24994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1158.281729][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.324855][T25009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.334592][T25009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.364075][T15775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.396070][T25031] loop7: detected capacity change from 0 to 512 [ 1158.396138][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 1158.396149][ T29] audit: type=1400 audit(1755737016.185:47181): avc: denied { bind } for pid=25020 comm="syz.8.18609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1158.414513][T25031] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1158.428580][ T29] audit: type=1400 audit(1755737016.185:47182): avc: denied { name_bind } for pid=25020 comm="syz.8.18609" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1158.428622][ T29] audit: type=1400 audit(1755737016.185:47183): avc: denied { node_bind } for pid=25020 comm="syz.8.18609" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1158.442181][T25031] EXT4-fs (loop7): 1 truncate cleaned up [ 1158.463821][ T29] audit: type=1400 audit(1755737016.205:47184): avc: denied { mounton } for pid=25029 comm="syz.7.18611" path="/580/file2" dev="tmpfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1158.482704][T25031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.488018][ T29] audit: type=1400 audit(1755737016.255:47185): avc: denied { create } for pid=25035 comm="syz.0.18613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1158.525610][T25031] 9pnet_fd: Insufficient options for proto=fd [ 1158.542912][ T29] audit: type=1400 audit(1755737016.255:47186): avc: denied { write } for pid=25035 comm="syz.0.18613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1158.575108][ T29] audit: type=1400 audit(1755737016.315:47187): avc: denied { mount } for pid=25029 comm="syz.7.18611" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1158.597123][ T29] audit: type=1400 audit(1755737016.315:47188): avc: denied { setattr } for pid=25029 comm="syz.7.18611" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1158.620014][ T29] audit: type=1400 audit(1755737016.315:47189): avc: denied { remove_name } for pid=25029 comm="syz.7.18611" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.642948][ T29] audit: type=1400 audit(1755737016.315:47190): avc: denied { unlink } for pid=25029 comm="syz.7.18611" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1158.814205][T25053] lo speed is unknown, defaulting to 1000 [ 1158.880058][T25053] loop0: detected capacity change from 0 to 1024 [ 1158.886840][T25053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1159.244581][T16487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.254376][T25053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.273396][T25062] loop6: detected capacity change from 0 to 512 [ 1159.288149][ T1880] hid-generic 0003:0004:0000.005C: unknown main item tag 0x0 [ 1159.295612][ T1880] hid-generic 0003:0004:0000.005C: unknown main item tag 0x0 [ 1159.296676][T25062] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1159.303355][ T1880] hid-generic 0003:0004:0000.005C: unknown main item tag 0x0 [ 1159.312107][T25062] FAT-fs (loop6): Filesystem has been set read-only [ 1159.327314][ T1880] hid-generic 0003:0004:0000.005C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1159.493938][T21241] hid-generic 0003:0004:0000.005D: unknown main item tag 0x0 [ 1159.501592][T21241] hid-generic 0003:0004:0000.005D: unknown main item tag 0x0 [ 1159.509269][T21241] hid-generic 0003:0004:0000.005D: unknown main item tag 0x0 [ 1159.518058][T21241] hid-generic 0003:0004:0000.005D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1159.545261][T25101] netlink: 'syz.7.18637': attribute type 6 has an invalid length. [ 1159.560803][T25101] loop7: detected capacity change from 0 to 128 [ 1159.567782][T25101] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1159.579983][T25101] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1159.791468][T15775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.127151][ T51] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1160.175990][T17125] bond0: (slave syz_tun): Releasing backup interface [ 1160.223149][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.233759][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.270181][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.280515][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.303052][T25125] lo speed is unknown, defaulting to 1000 [ 1160.311622][T25139] netlink: 'syz.6.18650': attribute type 11 has an invalid length. [ 1160.325521][T25137] loop4: detected capacity change from 0 to 512 [ 1160.342262][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.352603][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.364049][T25137] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1160.382949][T25137] EXT4-fs (loop4): mount failed [ 1160.395952][T25137] loop4: detected capacity change from 0 to 512 [ 1160.407446][T25145] loop7: detected capacity change from 0 to 512 [ 1160.414887][T25137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.429653][T25145] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1160.438301][T25145] FAT-fs (loop7): Filesystem has been set read-only [ 1160.438511][T25137] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.477629][T25137] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #12: comm syz.4.18649: directory missing '.' [ 1160.490213][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.500494][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.537426][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.564929][T25157] __nla_validate_parse: 12 callbacks suppressed [ 1160.564944][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18656'. [ 1160.580397][T25125] chnl_net:caif_netlink_parms(): no params data found [ 1160.596857][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18658'. [ 1160.626955][T25169] loop4: detected capacity change from 0 to 512 [ 1160.636675][T25169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1160.655719][ T41] batadv5: left allmulticast mode [ 1160.660911][ T41] batadv5: left promiscuous mode [ 1160.666031][ T41] bridge0: port 7(batadv5) entered disabled state [ 1160.701096][ T41] batadv4: left allmulticast mode [ 1160.706183][ T41] batadv4: left promiscuous mode [ 1160.711469][ T41] bridge0: port 6(batadv4) entered disabled state [ 1160.759068][T25179] loop6: detected capacity change from 0 to 512 [ 1160.788582][T25179] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1160.803717][T25179] EXT4-fs (loop6): 1 truncate cleaned up [ 1160.809755][T25179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.831639][T25177] 9pnet_fd: Insufficient options for proto=fd [ 1160.847700][ T41] batadv3: left allmulticast mode [ 1160.852778][ T41] batadv3: left promiscuous mode [ 1160.857949][ T41] bridge0: port 5(batadv3) entered disabled state [ 1160.877359][ T41] batadv2: left allmulticast mode [ 1160.882406][ T41] batadv2: left promiscuous mode [ 1160.887531][ T41] bridge0: port 4(batadv2) entered disabled state [ 1160.901843][ T41] batadv1: left allmulticast mode [ 1160.906903][ T41] batadv1: left promiscuous mode [ 1160.912205][ T41] bridge0: port 3(batadv1) entered disabled state [ 1160.922904][ T41] bridge_slave_1: left allmulticast mode [ 1160.928650][ T41] bridge_slave_1: left promiscuous mode [ 1160.934342][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.944503][ T41] bridge_slave_0: left allmulticast mode [ 1160.950236][ T41] bridge_slave_0: left promiscuous mode [ 1160.956495][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.976607][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.049688][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.060331][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.070336][ T41] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1161.079448][ T41] bond0 (unregistering): Released all slaves [ 1161.087784][ T41] bond1 (unregistering): (slave veth3): Releasing active interface [ 1161.096580][ T41] bond1 (unregistering): Released all slaves [ 1161.115611][T25178] lo speed is unknown, defaulting to 1000 [ 1161.124300][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18662'. [ 1161.145341][T25125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.152642][T25125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.163272][T25125] bridge_slave_0: entered allmulticast mode [ 1161.172203][T25125] bridge_slave_0: entered promiscuous mode [ 1161.215832][ T41] tipc: Left network mode [ 1161.220666][T25125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.227891][T25125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.250693][T25125] bridge_slave_1: entered allmulticast mode [ 1161.259934][T25125] bridge_slave_1: entered promiscuous mode [ 1161.284274][T25199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18668'. [ 1161.315051][T25125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.327060][ T41] hsr_slave_0: left promiscuous mode [ 1161.333368][ T41] hsr_slave_1: left promiscuous mode [ 1161.339102][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.346554][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.354091][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.361647][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.415911][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1161.425911][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1161.456231][T20908] smc: removing ib device sz1 [ 1161.462668][T25125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.474721][ T10] lo speed is unknown, defaulting to 1000 [ 1161.480619][ T10] sz1: Port: 1 Link DOWN [ 1161.734512][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.765820][T25212] netlink: 'syz.4.18673': attribute type 6 has an invalid length. [ 1161.843986][T25212] loop4: detected capacity change from 0 to 128 [ 1161.871572][T25212] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1161.921538][T25212] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1161.997933][T25125] team0: Port device team_slave_0 added [ 1162.005390][T25125] team0: Port device team_slave_1 added [ 1162.023716][T25125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.031503][T25125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.057511][T25125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.070173][T25125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.077418][T25125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.103525][T25125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.129306][T25125] hsr_slave_0: entered promiscuous mode [ 1162.135545][T25125] hsr_slave_1: entered promiscuous mode [ 1162.141623][T25125] debugfs: 'hsr0' already exists in 'hsr' [ 1162.147481][T25125] Cannot create hsr debugfs directory [ 1162.202525][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18679'. [ 1162.294400][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18683'. [ 1162.413942][T25238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.422552][T25238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.450865][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18688'. [ 1162.485669][T25125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1162.495395][T25125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1162.499927][T25253] loop8: detected capacity change from 0 to 512 [ 1162.508956][T25253] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1162.510555][T25125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1162.528205][T25125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1162.536127][T25253] EXT4-fs (loop8): 1 truncate cleaned up [ 1162.542507][ T41] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1162.543152][T25253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.585786][T25253] 9pnet_fd: Insufficient options for proto=fd [ 1162.598171][T25125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.614009][T25125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.634094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.641204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.666913][T25125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1162.677509][T25125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.694883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.702045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.784639][T25125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.842181][T25125] veth0_vlan: entered promiscuous mode [ 1162.849793][T25125] veth1_vlan: entered promiscuous mode [ 1162.863799][T25125] veth0_macvtap: entered promiscuous mode [ 1162.871858][T25125] veth1_macvtap: entered promiscuous mode [ 1162.882289][T25125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.892964][T25125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.903589][ T3969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.918357][ T3969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.929044][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.943777][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.023676][T25293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18697'. [ 1163.126734][T25302] loop4: detected capacity change from 0 to 512 [ 1163.133865][T25302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1163.155948][T25302] EXT4-fs (loop4): 1 truncate cleaned up [ 1163.163698][T25302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.185290][T25302] 9pnet_fd: Insufficient options for proto=fd [ 1163.250575][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18702'. [ 1163.353963][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18703'. [ 1163.371679][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.384625][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.416225][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 1163.416237][ T29] audit: type=1326 audit(1755737021.205:47440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.449213][ T29] audit: type=1326 audit(1755737021.245:47441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.473222][ T29] audit: type=1326 audit(1755737021.245:47442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.497287][ T29] audit: type=1326 audit(1755737021.245:47443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.532617][T25318] loop4: detected capacity change from 0 to 512 [ 1163.539186][T25318] ext2: Bad value for 'data' [ 1163.549780][T25318] loop4: detected capacity change from 0 to 1024 [ 1163.557448][ T29] audit: type=1326 audit(1755737021.295:47444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.581195][ T29] audit: type=1326 audit(1755737021.295:47445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.605094][ T29] audit: type=1326 audit(1755737021.295:47446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25314 comm="syz.8.18704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1163.632655][T25318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.654915][ T29] audit: type=1400 audit(1755737021.445:47447): avc: denied { ioctl } for pid=25317 comm="syz.4.18705" path="socket:[237180]" dev="sockfs" ino=237180 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1163.681315][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.193273][ T29] audit: type=1400 audit(1755737021.985:47448): avc: denied { create } for pid=25336 comm="syz.4.18708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1164.233708][T25339] loop8: detected capacity change from 0 to 512 [ 1164.243473][T25339] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1164.262268][T25339] EXT4-fs (loop8): 1 truncate cleaned up [ 1164.269818][T25339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.287016][ T29] audit: type=1400 audit(1755737022.085:47449): avc: denied { bind } for pid=25340 comm="syz.4.18712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1164.695965][T25348] chnl_net:caif_netlink_parms(): no params data found [ 1164.737060][T25348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.744297][T25348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.751707][T25348] bridge_slave_0: entered allmulticast mode [ 1164.758173][T25348] bridge_slave_0: entered promiscuous mode [ 1164.764907][T25348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.772211][T25348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.780821][T25348] bridge_slave_1: entered allmulticast mode [ 1164.789381][T25348] bridge_slave_1: entered promiscuous mode [ 1164.812313][T25348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.828510][T25371] loop6: detected capacity change from 0 to 512 [ 1164.831744][T25348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.852032][T25371] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1164.860716][T25371] FAT-fs (loop6): Filesystem has been set read-only [ 1164.870319][ T384] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.882686][T25348] team0: Port device team_slave_0 added [ 1164.889510][T25348] team0: Port device team_slave_1 added [ 1164.906236][T25348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.913260][T25348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.939425][T25348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.954068][T25348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.961127][T25348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.987295][T25348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.005634][ T384] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.040016][T25348] hsr_slave_0: entered promiscuous mode [ 1165.046468][T25348] hsr_slave_1: entered promiscuous mode [ 1165.053168][T25348] debugfs: 'hsr0' already exists in 'hsr' [ 1165.059032][T25348] Cannot create hsr debugfs directory [ 1165.066947][ T384] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.089215][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.140522][ T384] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.171352][T25389] loop6: detected capacity change from 0 to 512 [ 1165.178379][T25389] ext2: Bad value for 'data' [ 1165.188827][T25391] loop4: detected capacity change from 0 to 512 [ 1165.195375][T25389] loop6: detected capacity change from 0 to 1024 [ 1165.195537][T25391] ext2: Bad value for 'data' [ 1165.222360][T25391] loop4: detected capacity change from 0 to 1024 [ 1165.232232][T25389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.240556][T25391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.260503][ T384] batadv1: left allmulticast mode [ 1165.265701][ T384] batadv1: left promiscuous mode [ 1165.270900][ T384] bridge0: port 3(batadv1) entered disabled state [ 1165.284884][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.294821][ T384] bridge_slave_1: left allmulticast mode [ 1165.300539][ T384] bridge_slave_1: left promiscuous mode [ 1165.306299][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.314359][ T384] bridge_slave_0: left allmulticast mode [ 1165.320098][ T384] bridge_slave_0: left promiscuous mode [ 1165.325726][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.389901][T25407] loop6: detected capacity change from 0 to 512 [ 1165.400773][T25407] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1165.409504][T25407] FAT-fs (loop6): Filesystem has been set read-only [ 1165.420082][ T384] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.429508][ T384] bond_slave_0: left promiscuous mode [ 1165.436202][ T384] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.445232][ T384] bond_slave_1: left promiscuous mode [ 1165.452784][ T384] $H (unregistering): Released all slaves [ 1165.480963][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.510060][ T384] tipc: Left network mode [ 1165.515233][ T384] hsr_slave_0: left promiscuous mode [ 1165.521933][ T384] hsr_slave_1: left promiscuous mode [ 1165.528231][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.535997][ T384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.560957][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.562765][T25418] loop8: detected capacity change from 0 to 512 [ 1165.569127][ T384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.576304][T25418] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1165.594566][T25418] EXT4-fs (loop8): 1 truncate cleaned up [ 1165.601008][T25418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.614961][T25425] __nla_validate_parse: 7 callbacks suppressed [ 1165.614975][T25425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18737'. [ 1165.643005][T25418] 9pnet_fd: Insufficient options for proto=fd [ 1165.649458][ T384] team0 (unregistering): Port device team_slave_1 removed [ 1165.693511][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18734'. [ 1165.752867][T25430] loop6: detected capacity change from 0 to 512 [ 1165.759467][T25430] ext2: Bad value for 'data' [ 1165.782930][T25430] loop6: detected capacity change from 0 to 1024 [ 1165.815315][T25430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.816311][T25434] netlink: 'syz.4.18741': attribute type 11 has an invalid length. [ 1165.839004][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18739'. [ 1165.857738][T25348] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1165.878331][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.890380][T25348] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1165.906676][T25439] loop0: detected capacity change from 0 to 512 [ 1165.907471][T25348] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1165.932372][T25439] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1165.941092][T25439] FAT-fs (loop0): Filesystem has been set read-only [ 1165.951325][T25348] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1166.022830][T25348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.038165][T25348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.049087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.051442][T25442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.056187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.061560][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.064867][T25442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.072382][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.139549][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18750'. [ 1166.162130][T25348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.232103][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18753'. [ 1166.267505][T25490] loop6: detected capacity change from 0 to 512 [ 1166.269785][T25348] veth0_vlan: entered promiscuous mode [ 1166.281905][T25348] veth1_vlan: entered promiscuous mode [ 1166.289414][T25490] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1166.297880][T25348] veth0_macvtap: entered promiscuous mode [ 1166.304500][T25490] EXT4-fs (loop6): mount failed [ 1166.320180][T25348] veth1_macvtap: entered promiscuous mode [ 1166.332811][T25348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.343641][T25348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.354290][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.366149][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.377345][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.391910][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.424468][T19245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.524639][T25512] loop0: detected capacity change from 0 to 512 [ 1166.531395][T25512] ext2: Bad value for 'data' [ 1166.543701][T25512] loop0: detected capacity change from 0 to 1024 [ 1166.558889][T25512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.573786][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18762'. [ 1166.597044][T25125] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.621677][T25520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18765'. [ 1166.694889][T25526] loop4: detected capacity change from 0 to 512 [ 1166.702602][T25526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1166.716510][T25526] EXT4-fs (loop4): 1 truncate cleaned up [ 1166.722944][T25526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.748018][T25531] loop0: detected capacity change from 0 to 512 [ 1166.748766][T25526] 9pnet_fd: Insufficient options for proto=fd [ 1166.771224][T25531] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1166.787624][T25531] EXT4-fs (loop0): mount failed [ 1166.823497][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18771'. [ 1166.940556][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.164547][T25553] loop4: detected capacity change from 0 to 512 [ 1167.171325][T25553] ext2: Bad value for 'data' [ 1167.182875][T25553] loop4: detected capacity change from 0 to 1024 [ 1167.198784][T25553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.212100][T25553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18778'. [ 1167.230554][T24464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.250765][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18780'. [ 1167.468863][T25567] loop4: detected capacity change from 0 to 1024 [ 1167.480424][T25567] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1167.496816][T25567] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1167.511663][T25567] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #32: comm syz.4.18784: iget: special inode unallocated [ 1167.533103][T25567] EXT4-fs (loop4): no journal found [ 1167.608901][T25587] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 1167.725863][T25607] loop7: detected capacity change from 0 to 1024 [ 1167.738909][T25607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.775346][T25607] team0: Port device team_slave_0 removed [ 1168.197563][T25613] loop6: detected capacity change from 0 to 512 [ 1168.204538][T25613] ext2: Bad value for 'data' [ 1168.214863][T25613] loop6: detected capacity change from 0 to 1024 [ 1168.232694][T25613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.258938][T23890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.298964][T25625] netlink: 'syz.6.18805': attribute type 11 has an invalid length. [ 1168.535168][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 1168.535181][ T29] audit: type=1400 audit(1755737026.325:47536): avc: denied { read write } for pid=25667 comm="syz.4.18822" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1168.584078][ T10] hid-generic 0003:0004:0000.005E: unknown main item tag 0x0 [ 1168.591830][ T10] hid-generic 0003:0004:0000.005E: unknown main item tag 0x0 [ 1168.592348][ T29] audit: type=1400 audit(1755737026.325:47537): avc: denied { open } for pid=25667 comm="syz.4.18822" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1168.599288][ T10] hid-generic 0003:0004:0000.005E: unknown main item tag 0x0 [ 1168.630684][ T29] audit: type=1400 audit(1755737026.375:47538): avc: denied { kexec_image_load } for pid=25667 comm="syz.4.18822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1168.632313][ T10] hid-generic 0003:0004:0000.005E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1168.687590][ T29] audit: type=1400 audit(1755737026.485:47539): avc: denied { read write } for pid=25667 comm="syz.4.18822" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1168.732046][ T29] audit: type=1400 audit(1755737026.485:47540): avc: denied { open } for pid=25667 comm="syz.4.18822" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1168.766296][ T29] audit: type=1326 audit(1755737026.555:47541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25683 comm="syz.0.18828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x0 [ 1168.833967][T25693] netlink: 'syz.6.18832': attribute type 1 has an invalid length. [ 1168.842074][T25690] loop4: detected capacity change from 0 to 512 [ 1168.847953][T25693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.858956][T25690] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1168.860805][ T29] audit: type=1400 audit(1755737026.655:47542): avc: denied { map } for pid=25692 comm="syz.6.18832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=239793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1168.869166][T25690] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1168.893890][ T29] audit: type=1400 audit(1755737026.655:47543): avc: denied { read write } for pid=25692 comm="syz.6.18832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=239793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1168.910638][T25690] EXT4-fs (loop4): mount failed [ 1168.945225][T25693] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1168.966698][T25693] bond1: (slave batadv1): making interface the new active one [ 1168.976005][T25693] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1168.997752][ T29] audit: type=1400 audit(1755737026.795:47544): avc: denied { create } for pid=25700 comm="syz.6.18834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1169.583499][T25710] loop8: detected capacity change from 0 to 512 [ 1169.591671][T25710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1169.846931][T25727] loop7: detected capacity change from 0 to 1024 [ 1169.854754][T25727] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1169.869405][T25727] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1169.885103][T25727] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #32: comm syz.7.18843: iget: special inode unallocated [ 1169.901220][T25727] EXT4-fs (loop7): no journal found [ 1169.979802][T25751] loop7: detected capacity change from 0 to 512 [ 1169.999467][T25751] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.014814][T25751] EXT4-fs (loop7): mount failed [ 1170.119411][T25770] loop6: detected capacity change from 0 to 512 [ 1170.130466][T25770] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.145516][T25770] EXT4-fs (loop6): mount failed [ 1170.177211][T25779] loop6: detected capacity change from 0 to 1024 [ 1170.190123][T25779] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1170.215409][T25779] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1170.230231][T25779] EXT4-fs error (device loop6): ext4_get_journal_inode:5800: inode #32: comm syz.6.18863: iget: special inode unallocated [ 1170.257441][T25779] EXT4-fs (loop6): no journal found [ 1170.380221][T25801] loop6: detected capacity change from 0 to 512 [ 1170.391101][T25801] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1170.399763][T25801] FAT-fs (loop6): Filesystem has been set read-only [ 1170.664437][T25815] loop8: detected capacity change from 0 to 128 [ 1170.715232][T25819] __nla_validate_parse: 20 callbacks suppressed [ 1170.715247][T25819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18878'. [ 1170.766442][T25821] loop0: detected capacity change from 0 to 512 [ 1170.836307][T25828] netlink: 'syz.0.18882': attribute type 11 has an invalid length. [ 1170.892212][T25834] loop0: detected capacity change from 0 to 512 [ 1170.918907][T25834] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.934025][T25834] EXT4-fs (loop0): mount failed [ 1170.956405][T25839] loop0: detected capacity change from 0 to 1024 [ 1170.963495][T25839] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1170.973460][T25839] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1170.986640][T25839] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.18886: iget: special inode unallocated [ 1171.000978][T25839] EXT4-fs (loop0): no journal found [ 1171.010657][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18887'. [ 1171.125379][T25854] loop7: detected capacity change from 0 to 540 [ 1171.128191][T25855] loop4: detected capacity change from 0 to 128 [ 1171.137643][T25854] EXT4-fs (loop7): failed to parse options in superblock: 8888888888888888888888888888888888888888888888888888888888888888 [ 1171.150958][T25854] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1171.160900][T25854] EXT4-fs (loop7): Unsupported encryption level 56 [ 1171.235428][T25859] loop0: detected capacity change from 0 to 1024 [ 1171.242276][T25859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1171.584838][T25872] loop6: detected capacity change from 0 to 512 [ 1171.646506][T25872] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1171.662959][T25872] EXT4-fs (loop6): mount failed [ 1171.669639][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18900'. [ 1171.705228][T25883] loop4: detected capacity change from 0 to 512 [ 1171.711091][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18903'. [ 1171.712442][T25883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1171.734374][T25883] EXT4-fs (loop4): 1 truncate cleaned up [ 1171.777741][T25893] loop6: detected capacity change from 0 to 512 [ 1171.784273][T25893] ext2: Bad value for 'data' [ 1171.833718][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18906'. [ 1172.537945][T25918] loop7: detected capacity change from 0 to 512 [ 1172.562438][T25920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18914'. [ 1172.568315][T25918] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1172.589476][T25918] EXT4-fs (loop7): mount failed [ 1172.658938][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18916'. [ 1172.688739][T25947] loop8: detected capacity change from 0 to 512 [ 1172.783527][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18927'. [ 1172.818644][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18929'. [ 1172.856201][T25964] loop0: detected capacity change from 0 to 512 [ 1172.878109][T25964] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1172.908730][T25964] EXT4-fs (loop0): mount failed [ 1173.138236][T25980] loop7: detected capacity change from 0 to 1024 [ 1173.143666][T25999] loop6: detected capacity change from 0 to 512 [ 1173.153734][T25980] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1173.157985][T25999] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1173.172088][T25999] FAT-fs (loop6): Filesystem has been set read-only [ 1173.173968][T25980] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1173.206415][T25980] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #32: comm syz.7.18936: iget: special inode unallocated [ 1173.224357][T25980] EXT4-fs (loop7): no journal found [ 1173.251702][T26007] loop6: detected capacity change from 0 to 512 [ 1173.282885][T26007] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1173.299347][T26007] EXT4-fs (loop6): mount failed [ 1173.308774][T26011] loop7: detected capacity change from 0 to 512 [ 1173.315911][T26011] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1173.337290][T26011] EXT4-fs (loop7): 1 truncate cleaned up [ 1173.526909][T26029] loop7: detected capacity change from 0 to 512 [ 1173.540305][T26029] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1173.548891][T26029] FAT-fs (loop7): Filesystem has been set read-only [ 1173.571506][T15987] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1173.579009][T15987] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1173.586476][T15987] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1173.601276][T15987] hid-generic 0003:0004:0000.005F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1173.607490][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18957'. [ 1173.750750][T26054] loop8: detected capacity change from 0 to 512 [ 1173.762566][T26054] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1173.772240][T26060] loop7: detected capacity change from 0 to 512 [ 1173.774197][T26054] EXT4-fs (loop8): 1 truncate cleaned up [ 1173.802482][T26060] __quota_error: 18 callbacks suppressed [ 1173.802524][T26060] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1173.828341][T26060] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1173.890324][T26060] EXT4-fs (loop7): mount failed [ 1173.957469][T26070] loop8: detected capacity change from 0 to 512 [ 1173.981525][T26069] loop7: detected capacity change from 0 to 512 [ 1173.998718][T26069] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1174.030521][T26069] EXT4-fs (loop7): 1 truncate cleaned up [ 1174.149803][ T29] audit: type=1400 audit(1755737031.945:47556): avc: denied { wake_alarm } for pid=26085 comm="syz.8.18975" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1174.249174][ T29] audit: type=1326 audit(1755737032.045:47557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.281329][T26087] loop8: detected capacity change from 0 to 1024 [ 1174.282031][ T29] audit: type=1326 audit(1755737032.045:47558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.311573][ T29] audit: type=1326 audit(1755737032.045:47559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.335559][ T29] audit: type=1326 audit(1755737032.045:47560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.359759][ T29] audit: type=1326 audit(1755737032.045:47561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.383714][ T29] audit: type=1326 audit(1755737032.045:47562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.407579][ T29] audit: type=1326 audit(1755737032.045:47563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.431745][ T29] audit: type=1326 audit(1755737032.045:47564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.18978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953f45ebe9 code=0x7ffc0000 [ 1174.457525][T26086] team0: Port device dummy0 removed [ 1174.466811][T26086] bridge_slave_0: left allmulticast mode [ 1174.472588][T26086] bridge_slave_0: left promiscuous mode [ 1174.478559][T26086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.487951][T26086] bridge_slave_1: left allmulticast mode [ 1174.493719][T26086] bridge_slave_1: left promiscuous mode [ 1174.500157][T26086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.509420][T26086] bond0: (slave bond_slave_0): Releasing backup interface [ 1174.519078][T26086] bond0: (slave bond_slave_1): Releasing backup interface [ 1174.530663][T26086] team0: Port device team_slave_1 removed [ 1174.537671][T26086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.545140][T26086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.654406][T26100] loop4: detected capacity change from 0 to 512 [ 1174.668094][T26105] loop0: detected capacity change from 0 to 512 [ 1174.674601][T26100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1174.692206][T26100] EXT4-fs (loop4): 1 truncate cleaned up [ 1175.162040][T26126] loop7: detected capacity change from 0 to 512 [ 1175.170964][T26124] netlink: 'syz.6.18989': attribute type 6 has an invalid length. [ 1175.206286][T26124] loop6: detected capacity change from 0 to 128 [ 1175.215929][T26124] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1175.230021][T26124] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1175.449985][T26155] loop7: detected capacity change from 0 to 512 [ 1175.559596][T26162] loop0: detected capacity change from 0 to 512 [ 1175.737422][T26180] __nla_validate_parse: 5 callbacks suppressed [ 1175.737435][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19010'. [ 1175.784692][ T4266] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1175.864398][T26205] loop0: detected capacity change from 0 to 128 [ 1175.914672][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19022'. [ 1176.077617][T26228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19030'. [ 1176.205339][T26238] loop0: detected capacity change from 0 to 128 [ 1176.329620][T26255] loop0: detected capacity change from 0 to 512 [ 1176.430256][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19043'. [ 1176.476051][T26266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19044'. [ 1176.610740][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19055'. [ 1176.624104][T26294] loop0: detected capacity change from 0 to 128 [ 1176.723552][T26300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19057'. [ 1176.865964][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19066'. [ 1177.034751][T26338] loop0: detected capacity change from 0 to 128 [ 1177.790833][T26353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19075'. [ 1177.880442][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19079'. [ 1177.987215][T26368] loop4: detected capacity change from 0 to 128 [ 1178.291959][T26380] loop0: detected capacity change from 0 to 1024 [ 1178.333093][T26380] team0: Port device team_slave_0 removed [ 1178.732997][T26391] loop6: detected capacity change from 0 to 1024 [ 1178.777039][T26391] team0: Port device team_slave_0 removed [ 1178.974620][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 1178.974632][ T29] audit: type=1400 audit(1755737036.765:47692): avc: denied { connect } for pid=26395 comm="syz.4.19088" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1179.058169][ T29] audit: type=1400 audit(1755737036.855:47693): avc: denied { write } for pid=26395 comm="syz.4.19088" path="socket:[241458]" dev="sockfs" ino=241458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1179.148173][T26402] loop4: detected capacity change from 0 to 512 [ 1179.158692][T26402] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1179.169097][T26402] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1179.184424][T26402] EXT4-fs (loop4): mount failed [ 1179.263997][T26412] loop4: detected capacity change from 0 to 128 [ 1179.399038][ T29] audit: type=1400 audit(1755737037.195:47694): avc: denied { append } for pid=26419 comm="syz.4.19095" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1179.423329][ T29] audit: type=1400 audit(1755737037.195:47695): avc: denied { open } for pid=26419 comm="syz.4.19095" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1179.456019][ T29] audit: type=1400 audit(1755737037.245:47696): avc: denied { ioctl } for pid=26419 comm="syz.4.19095" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1179.536911][ T29] audit: type=1400 audit(1755737037.325:47697): avc: denied { bind } for pid=26419 comm="syz.4.19095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1179.556957][ T29] audit: type=1400 audit(1755737037.325:47698): avc: denied { name_bind } for pid=26419 comm="syz.4.19095" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1179.578118][ T29] audit: type=1400 audit(1755737037.325:47699): avc: denied { node_bind } for pid=26419 comm="syz.4.19095" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1179.792460][ T29] audit: type=1400 audit(1755737037.585:47700): avc: denied { create } for pid=26440 comm="syz.7.19102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1179.865320][T26443] netem: change failed [ 1180.046601][T26447] lo speed is unknown, defaulting to 1000 [ 1180.053234][T26447] lo speed is unknown, defaulting to 1000 [ 1180.059466][T26447] lo speed is unknown, defaulting to 1000 [ 1180.111447][T26447] infiniband sz1: set active [ 1180.116208][T26447] infiniband sz1: added lo [ 1180.123417][ T1880] lo speed is unknown, defaulting to 1000 [ 1180.252806][T26447] RDS/IB: sz1: added [ 1180.256944][T26447] smc: adding ib device sz1 with port count 1 [ 1180.263186][T26447] smc: ib device sz1 port 1 has pnetid [ 1180.269371][T26447] lo speed is unknown, defaulting to 1000 [ 1180.301623][T26447] lo speed is unknown, defaulting to 1000 [ 1180.334262][T26447] lo speed is unknown, defaulting to 1000 [ 1180.345664][ T9] hid-generic 0003:0004:0000.0060: unknown main item tag 0x0 [ 1180.353225][ T9] hid-generic 0003:0004:0000.0060: unknown main item tag 0x0 [ 1180.360660][ T9] hid-generic 0003:0004:0000.0060: unknown main item tag 0x0 [ 1180.367403][T26447] lo speed is unknown, defaulting to 1000 [ 1180.396031][ T9] hid-generic 0003:0004:0000.0060: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1180.406262][ T1880] lo speed is unknown, defaulting to 1000 [ 1180.412204][T26447] lo speed is unknown, defaulting to 1000 [ 1180.575121][T26485] loop6: detected capacity change from 0 to 512 [ 1180.586728][T26485] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1180.595405][T26485] FAT-fs (loop6): Filesystem has been set read-only [ 1180.836673][T26504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.845324][T26504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.466903][T26529] __nla_validate_parse: 5 callbacks suppressed [ 1181.466918][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1181.650453][ T9] hid-generic 0003:0004:0000.0061: unknown main item tag 0x0 [ 1181.657921][ T9] hid-generic 0003:0004:0000.0061: unknown main item tag 0x0 [ 1181.665535][ T9] hid-generic 0003:0004:0000.0061: unknown main item tag 0x0 [ 1181.673767][ T9] hid-generic 0003:0004:0000.0061: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1181.790814][T26567] loop6: detected capacity change from 0 to 512 [ 1181.828569][T26567] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1181.843548][T26567] EXT4-fs (loop6): mount failed [ 1181.877540][T26575] loop6: detected capacity change from 0 to 512 [ 1181.888733][T26575] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1181.897419][T26575] FAT-fs (loop6): Filesystem has been set read-only [ 1182.459569][T26609] loop8: detected capacity change from 0 to 1024 [ 1182.466628][T26609] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1182.478111][T26609] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1182.488799][T26609] EXT4-fs error (device loop8): ext4_get_journal_inode:5800: inode #32: comm syz.8.19163: iget: special inode unallocated [ 1182.503662][T26609] EXT4-fs (loop8): no journal found [ 1182.775656][T26628] loop4: detected capacity change from 0 to 1024 [ 1183.009753][T26658] lo speed is unknown, defaulting to 1000 [ 1183.362421][T26661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19182'. [ 1183.555571][T26665] netlink: 'syz.0.19184': attribute type 11 has an invalid length. [ 1183.625712][T26677] loop8: detected capacity change from 0 to 512 [ 1183.642384][T26677] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1183.651045][T26677] FAT-fs (loop8): Filesystem has been set read-only [ 1183.696700][T26683] loop0: detected capacity change from 0 to 512 [ 1183.717897][T26683] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1183.748763][T26683] EXT4-fs (loop0): mount failed [ 1183.779704][T26697] netlink: 'syz.4.19198': attribute type 11 has an invalid length. [ 1183.864198][T26710] loop8: detected capacity change from 0 to 512 [ 1183.878041][T26710] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1183.886694][T26710] FAT-fs (loop8): Filesystem has been set read-only [ 1183.914329][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19204'. [ 1183.957647][T26714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19205'. [ 1183.984223][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19206'. [ 1184.011112][T26726] netlink: 'syz.6.19208': attribute type 11 has an invalid length. [ 1184.040227][T26729] netlink: 'syz.8.19209': attribute type 6 has an invalid length. [ 1184.051371][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 1184.051386][ T29] audit: type=1326 audit(1755737041.845:47779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.052790][T26732] netlink: 'syz.6.19211': attribute type 11 has an invalid length. [ 1184.067145][ T29] audit: type=1326 audit(1755737041.845:47780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.115232][ T29] audit: type=1326 audit(1755737041.885:47781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.138985][ T29] audit: type=1326 audit(1755737041.885:47782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.140089][T26729] loop8: detected capacity change from 0 to 128 [ 1184.162998][ T29] audit: type=1326 audit(1755737041.885:47783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.170029][T26729] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1184.193272][ T29] audit: type=1326 audit(1755737041.905:47784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.194978][T26736] loop6: detected capacity change from 0 to 128 [ 1184.207131][ T29] audit: type=1326 audit(1755737041.905:47785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.243497][T26729] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1184.259555][ T29] audit: type=1326 audit(1755737041.905:47786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.292920][ T29] audit: type=1326 audit(1755737041.905:47787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.316772][ T29] audit: type=1326 audit(1755737041.905:47788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.8.19209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bb2debe9 code=0x7ffc0000 [ 1184.415772][T26740] loop6: detected capacity change from 0 to 1024 [ 1184.422796][T26740] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1184.432690][T26740] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1184.442987][T26740] EXT4-fs error (device loop6): ext4_get_journal_inode:5800: inode #32: comm syz.6.19213: iget: special inode unallocated [ 1184.456327][T26740] EXT4-fs (loop6): no journal found [ 1184.505878][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19216'. [ 1184.728985][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19220'. [ 1184.857749][ T384] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1184.951529][T26770] loop0: detected capacity change from 0 to 512 [ 1184.977358][T26767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.984369][T26770] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1184.986083][T26767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.000826][T26770] EXT4-fs (loop0): mount failed [ 1185.588812][T26803] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19233'. [ 1185.595843][T26800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19232'. [ 1185.662479][T15987] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 1185.670051][T15987] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 1185.677582][T15987] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 1185.686373][T15987] hid-generic 0003:0004:0000.0062: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1185.808768][T26820] loop4: detected capacity change from 0 to 128 [ 1186.100076][T26839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19244'. [ 1186.136860][T26846] netem: change failed [ 1186.478002][T26862] loop0: detected capacity change from 0 to 128 [ 1186.569957][T26869] loop0: detected capacity change from 0 to 512 [ 1186.583373][T26869] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1186.592126][T26869] FAT-fs (loop0): Filesystem has been set read-only [ 1186.662035][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19256'. [ 1186.811426][T26890] 9pnet: Could not find request transport: fdrP570x0000000000000003 [ 1186.821543][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1186.830781][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1186.847502][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1186.857250][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1186.881076][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1186.890679][T26890] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19262'. [ 1187.034095][T26900] loop6: detected capacity change from 0 to 512 [ 1187.046156][T26900] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1187.054759][T26900] FAT-fs (loop6): Filesystem has been set read-only [ 1187.178911][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.235745][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.246866][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19270'. [ 1187.336826][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.337863][T26923] loop7: detected capacity change from 0 to 1024 [ 1187.359318][T26923] EXT4-fs mount: 34 callbacks suppressed [ 1187.359334][T26923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.392589][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.405655][T26914] lo speed is unknown, defaulting to 1000 [ 1187.608703][ T31] bond0 (unregistering): Released all slaves [ 1187.616358][T26914] chnl_net:caif_netlink_parms(): no params data found [ 1187.643340][ T31] IPVS: stopping master sync thread 20133 ... [ 1187.660759][T26914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.668008][T26914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.676509][T26914] bridge_slave_0: entered allmulticast mode [ 1187.694035][T26914] bridge_slave_0: entered promiscuous mode [ 1187.701211][T26914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.708366][T26914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.715616][T26914] bridge_slave_1: entered allmulticast mode [ 1187.723608][T26914] bridge_slave_1: entered promiscuous mode [ 1187.729945][ T31] hsr_slave_0: left promiscuous mode [ 1187.735698][ T31] hsr_slave_1: left promiscuous mode [ 1187.790120][T26914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.800797][T26914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.821200][T26914] team0: Port device team_slave_0 added [ 1187.827811][T26914] team0: Port device team_slave_1 added [ 1187.842414][T26914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.849406][T26914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.875390][T26914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.886625][T26914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.893880][T26914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.920038][T26914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.948708][T26914] hsr_slave_0: entered promiscuous mode [ 1187.954857][T26914] hsr_slave_1: entered promiscuous mode [ 1187.961077][T26914] debugfs: 'hsr0' already exists in 'hsr' [ 1187.966885][T26914] Cannot create hsr debugfs directory [ 1188.171882][T26946] ================================================================== [ 1188.180173][T26946] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 1188.186954][T26946] [ 1188.189279][T26946] write to 0xffff888103e66610 of 8 bytes by task 26944 on cpu 1: [ 1188.196991][T26946] call_rcu+0x44/0x3f0 [ 1188.201162][T26946] mas_wmb_replace+0xc6a/0x14a0 [ 1188.206027][T26946] mas_wr_store_entry+0x1773/0x2b50 [ 1188.211317][T26946] mas_store_prealloc+0x74d/0x9e0 [ 1188.216330][T26946] vma_iter_store_new+0x1c5/0x200 [ 1188.221348][T26946] vma_complete+0x125/0x580 [ 1188.225837][T26946] __split_vma+0x5d9/0x650 [ 1188.230417][T26946] vma_modify+0x3f2/0xc80 [ 1188.234727][T26946] vma_modify_flags+0x101/0x130 [ 1188.239555][T26946] mprotect_fixup+0x2cc/0x570 [ 1188.244209][T26946] do_mprotect_pkey+0x6d6/0x980 [ 1188.249043][T26946] __x64_sys_mprotect+0x48/0x60 [ 1188.253880][T26946] x64_sys_call+0x274e/0x2ff0 [ 1188.258547][T26946] do_syscall_64+0xd2/0x200 [ 1188.263139][T26946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.269020][T26946] [ 1188.271333][T26946] read to 0xffff888103e66610 of 8 bytes by task 26946 on cpu 0: [ 1188.279122][T26946] mas_state_walk+0x2f5/0x650 [ 1188.283884][T26946] mas_walk+0x60/0x150 [ 1188.288016][T26946] lock_vma_under_rcu+0x8d/0x160 [ 1188.292937][T26946] do_user_addr_fault+0x233/0x1090 [ 1188.298110][T26946] exc_page_fault+0x62/0xa0 [ 1188.302613][T26946] asm_exc_page_fault+0x26/0x30 [ 1188.307532][T26946] [ 1188.309849][T26946] value changed: 0x00007fe3ad40ffff -> 0xffffffff85645c50 [ 1188.317030][T26946] [ 1188.319334][T26946] Reported by Kernel Concurrency Sanitizer on: [ 1188.325471][T26946] CPU: 0 UID: 0 PID: 26946 Comm: syz.6.19275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1188.335954][T26946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1188.346173][T26946] ================================================================== [ 1188.371562][T25348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.472023][T26914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1188.480778][T26914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1188.489469][T26914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1188.498405][T26914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1188.530822][T26914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.542834][T26914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.552518][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.559680][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.569489][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.576769][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.599436][T26914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1188.610244][T26914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.651931][T26914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.705643][T26914] veth0_vlan: entered promiscuous mode [ 1188.713652][T26914] veth1_vlan: entered promiscuous mode [ 1188.730286][T26914] veth0_macvtap: entered promiscuous mode [ 1188.737858][T26914] veth1_macvtap: entered promiscuous mode [ 1188.748467][T26914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.759722][T26914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.770243][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.779389][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.788958][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.798387][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.828741][T26914] block device autoloading is deprecated and will be removed.