last executing test programs: 6.721050863s ago: executing program 0 (id=39): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 6.409014996s ago: executing program 0 (id=41): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e74d65d1285af96d1f7257bc733ebfb70870326bc85f5293fadd983c3606246abb6900490250a4342112654bdd5e237f760762525ded3bac525e47f53cc0272e7ff989282321fd992428009c5e2675337b5834bba6035dbcf30f1dafb1448f07d05fff02fa3e47f2a245df6c092d6283"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) close(0xffffffffffffffff) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='xen_cpu_set_ldt\x00'}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4800, 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.781415743s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=") 5.61775024s ago: executing program 2 (id=47): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f00000007c0)='./file0\x00', 0x40, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000a0000840800000008000000050000000f0200000c00000000000001070000000e00000001000000010100001000000005000000000000000600000004000000030000000700000001000000050000000c00000000000000010000000900000003000000508200000b00000001000000ab0000000500000001000000050000000400000000000009050000000e0000000000000a0000000006000000000000010000000003004a0007000000000000100c00000000e77d136761305f00"], &(0x7f00000003c0)=""/111, 0xd9, 0x6f, 0x1, 0x6, 0x10000, @value=r1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000fafffffff3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20"], 0x0, 0x96, 0x0, 0x1}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x80) r6 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000080)=ANY=[@ANYBLOB='check=relaxed,sbsector=0x0000000000000036,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c66696e6500000000000000023c00"/29, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=iso9660\x00,dont_appraise,context=staff_u,smackfsfloor=iso9660\x00,ro,,'], 0x3, 0x9fc, &(0x7f0000004980)="$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") 5.520738934s ago: executing program 0 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 4.378481743s ago: executing program 3 (id=50): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r1, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x48850) 4.358147353s ago: executing program 0 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 3.5156048s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.437155103s ago: executing program 0 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 3.382429975s ago: executing program 2 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 3.337891857s ago: executing program 3 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 2.972061733s ago: executing program 2 (id=56): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='target '], 0x15) 2.971861783s ago: executing program 3 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) unshare(0x22020600) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x4, 0x8}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.882382476s ago: executing program 1 (id=58): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$can_j1939(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.843878548s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() setpgid(r0, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={0x0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f00000002c0)={[{@resuid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@noblock_validity}], [{@seclabel}, {@context={'context', 0x3d, 'unconfined_u'}, 0x22}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xb6lt\xa7{\buY\xec(\xce\x9c:\xecv\xee_?\xb1\xc2\rBA\xd0\x90\x9f\x9c%\xef3\xc0\xf7\x0e\xd0\xd6\x8eRww/\xea\x14\x11\x1b\xe9\x94\xba\aJ\x82\xeb$\x8f\xe3b\xeb\x84\x06\x9f\xc5Je<\xd1'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x65, 0x37, 0x0, 0x39, 0x31, 0x38], 0x2d, [0x34, 0x38, 0x39, 0x35], 0x2d, [0x39, 0x38, 0x62, 0x65], 0x2d, [0x30, 0x31, 0x66, 0x38], 0x2d, [0x39, 0x62, 0x62, 0x64, 0x0, 0x62, 0x65, 0x39]}}}]}, 0x0, 0x54a, &(0x7f0000000540)="$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") 2.34341714s ago: executing program 0 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/disk', 0x8080, 0x42) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000400)={0x1, [0x0]}) setns(r4, 0x10000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='neigh_update\x00', r5}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) socketpair(0x8, 0x5, 0x8, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r7, 0x0, 0x0}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.855283011s ago: executing program 1 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.657226819s ago: executing program 2 (id=62): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0D9rU1EYx/Hvc87JnwpVouJQwQYsxhuqyb1VB6fgFKEXHFwEg4Y0NsVETW8GW1roIgWp9i3oVEcVdBJRcC4OgoNel27SDMVBHCSSm1PB1+D5DPd3nx/cew5PK+pGGeD33kqDCgnNQT4iGGBSRp1So3xt5+82N0fBJTtv2HxmcyJaWr5db7ebi/mLeXL/FMCPpPtbRS84pugLFeTz3kqjLjdDBhU6ai4kN0vxEbpG13vMhBnn6A00g8IGlxVdGd72UKnXuVeKlpbPLHTq88355p0gmLlQPlcunw9KtxbazfIrxHsoiies4oVkQsa8VVI1HmybA0wL4rVUrKXYJ11jc1ufPjndR3m7DBDeFfpkvppWXl3lFNnrKKhyRHiKDpmaZUxhSA6qIlfUS/HNJ/MzpciuaX22cbc9t35Nya/0VkV2s+LvkCr4BEWfmeFqOMx71mOmYqoxWzE735iUN8MV7e/VrA2fz+10nBOQ5n6911v00/BBTEhQCAlyMJ78TiX3ysFb+40Nvuy/OI7jOI7jOI7jOP+BPwEAAP//LiJjdw==") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f00000007c0)='./file0\x00', 0x40, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000a0000840800000008000000050000000f0200000c00000000000001070000000e00000001000000010100001000000005000000000000000600000004000000030000000700000001000000050000000c00000000000000010000000900000003000000508200000b00000001000000ab0000000500000001000000050000000400000000000009050000000e0000000000000a0000000006000000000000010000000003004a0007000000000000100c00000000e77d136761305f00"], &(0x7f00000003c0)=""/111, 0xd9, 0x6f, 0x1, 0x6, 0x10000, @value=r1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000fafffffff3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20"], 0x0, 0x96, 0x0, 0x1}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x80) r6 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000080)=ANY=[@ANYBLOB='check=relaxed,sbsector=0x0000000000000036,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c66696e6500000000000000023c00"/29, @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=iso9660\x00,dont_appraise,context=staff_u,smackfsfloor=iso9660\x00,ro,,'], 0x3, 0x9fc, &(0x7f0000004980)="$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") 1.419539469s ago: executing program 1 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f000010d000/0x2000)=nil, 0x2000) 1.031379376s ago: executing program 3 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) 294.237147ms ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 199.610971ms ago: executing program 3 (id=66): mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1001a, &(0x7f0000000080)={[{@inlinecrypt}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x43b, &(0x7f00000003c0)="$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") sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x0) 173.719052ms ago: executing program 1 (id=67): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='target '], 0x15) 0s ago: executing program 1 (id=68): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 80.450743][ T5776] cgroup: Unknown subsys name 'net' [ 80.584082][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.279446][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.998112][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.010923][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.019010][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.028076][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.047921][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.056089][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.056801][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.072228][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.079560][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.079975][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.096082][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.096715][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.109495][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.110847][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.118986][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.127213][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.133207][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.141860][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.146974][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.153482][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.159732][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.169271][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.173785][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.188362][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.709110][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.818471][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.851746][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.922876][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.933565][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.941942][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.949412][ T5788] bridge_slave_0: entered allmulticast mode [ 84.957120][ T5788] bridge_slave_0: entered promiscuous mode [ 84.973026][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.980331][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.987656][ T5788] bridge_slave_1: entered allmulticast mode [ 84.994979][ T5788] bridge_slave_1: entered promiscuous mode [ 85.088646][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.096044][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.103415][ T5786] bridge_slave_0: entered allmulticast mode [ 85.110853][ T5786] bridge_slave_0: entered promiscuous mode [ 85.140522][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.148072][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.155450][ T5786] bridge_slave_1: entered allmulticast mode [ 85.162486][ T5786] bridge_slave_1: entered promiscuous mode [ 85.177963][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.217744][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.307262][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.319742][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.346546][ T5788] team0: Port device team_slave_0 added [ 85.352840][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.360224][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.367534][ T5795] bridge_slave_0: entered allmulticast mode [ 85.376693][ T5795] bridge_slave_0: entered promiscuous mode [ 85.384035][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.391587][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.398935][ T5787] bridge_slave_0: entered allmulticast mode [ 85.406563][ T5787] bridge_slave_0: entered promiscuous mode [ 85.414972][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.422108][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.429627][ T5787] bridge_slave_1: entered allmulticast mode [ 85.437189][ T5787] bridge_slave_1: entered promiscuous mode [ 85.469995][ T5788] team0: Port device team_slave_1 added [ 85.476203][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.483404][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.491744][ T5795] bridge_slave_1: entered allmulticast mode [ 85.499325][ T5795] bridge_slave_1: entered promiscuous mode [ 85.534148][ T5786] team0: Port device team_slave_0 added [ 85.591589][ T5786] team0: Port device team_slave_1 added [ 85.599404][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.607709][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.633809][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.647945][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.654989][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.681081][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.695238][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.709383][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.745871][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.757201][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.856295][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.863301][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.889499][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.903651][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.910914][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.937163][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.963307][ T5787] team0: Port device team_slave_0 added [ 85.972348][ T5795] team0: Port device team_slave_0 added [ 85.990584][ T5788] hsr_slave_0: entered promiscuous mode [ 85.997536][ T5788] hsr_slave_1: entered promiscuous mode [ 86.007115][ T5787] team0: Port device team_slave_1 added [ 86.026700][ T5795] team0: Port device team_slave_1 added [ 86.108979][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.116110][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.142155][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.167812][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.175174][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.201224][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.224691][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.231807][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.256235][ T5103] Bluetooth: hci0: command tx timeout [ 86.258067][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.263863][ T5803] Bluetooth: hci3: command tx timeout [ 86.273926][ T51] Bluetooth: hci1: command tx timeout [ 86.279813][ T5793] Bluetooth: hci2: command tx timeout [ 86.300457][ T5786] hsr_slave_0: entered promiscuous mode [ 86.307575][ T5786] hsr_slave_1: entered promiscuous mode [ 86.313932][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.322597][ T5786] Cannot create hsr debugfs directory [ 86.328967][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.336391][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.362634][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.450211][ T5795] hsr_slave_0: entered promiscuous mode [ 86.456830][ T5795] hsr_slave_1: entered promiscuous mode [ 86.462924][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.473354][ T5795] Cannot create hsr debugfs directory [ 86.517710][ T5787] hsr_slave_0: entered promiscuous mode [ 86.524141][ T5787] hsr_slave_1: entered promiscuous mode [ 86.531039][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.538759][ T5787] Cannot create hsr debugfs directory [ 86.927189][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.946294][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.957226][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.968762][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.039281][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.051476][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.065075][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.078979][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.186658][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.201341][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.231018][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.291739][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.393870][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.431920][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.443939][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.480690][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.500173][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.541789][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.629509][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.669159][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.682541][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.690267][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.720576][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.727789][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.790110][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.797436][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.826945][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.834093][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.910663][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.942337][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.009795][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.027891][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.051320][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.058530][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.084309][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.091529][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.159017][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.192324][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.199557][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.270082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.277350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.335498][ T5803] Bluetooth: hci3: command tx timeout [ 88.340981][ T5803] Bluetooth: hci2: command tx timeout [ 88.347558][ T5793] Bluetooth: hci0: command tx timeout [ 88.353102][ T5793] Bluetooth: hci1: command tx timeout [ 88.539996][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.598421][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.761139][ T5786] veth0_vlan: entered promiscuous mode [ 88.796155][ T5788] veth0_vlan: entered promiscuous mode [ 88.814717][ T5786] veth1_vlan: entered promiscuous mode [ 88.833024][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.854247][ T5788] veth1_vlan: entered promiscuous mode [ 88.938157][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.949087][ T5786] veth0_macvtap: entered promiscuous mode [ 88.973662][ T5786] veth1_macvtap: entered promiscuous mode [ 88.996464][ T5788] veth0_macvtap: entered promiscuous mode [ 89.027340][ T5788] veth1_macvtap: entered promiscuous mode [ 89.050168][ T5795] veth0_vlan: entered promiscuous mode [ 89.064373][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.096460][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.107613][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.119216][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.147199][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.159328][ T5795] veth1_vlan: entered promiscuous mode [ 89.182598][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.192153][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.202060][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.213456][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224462][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.236183][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.248558][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.280478][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.290087][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300890][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.309683][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.330776][ T5787] veth0_vlan: entered promiscuous mode [ 89.376050][ T5795] veth0_macvtap: entered promiscuous mode [ 89.403787][ T5787] veth1_vlan: entered promiscuous mode [ 89.449016][ T5795] veth1_macvtap: entered promiscuous mode [ 89.532637][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.545187][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.556397][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.567497][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.579482][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.600183][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.602567][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.622814][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.625366][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642289][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.653699][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.667351][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.700706][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.709818][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.719141][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.730919][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.766273][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.774126][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.797209][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.814641][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.817753][ T5787] veth0_macvtap: entered promiscuous mode [ 89.860777][ T5787] veth1_macvtap: entered promiscuous mode [ 89.889344][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.900084][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.911208][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.921839][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.932721][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.944219][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.957729][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.983922][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.003007][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.028697][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.043479][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.053501][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.068629][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.078936][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.089904][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.104106][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.159983][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.176313][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.187831][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.204506][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.214630][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259190][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.379808][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.401231][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.415211][ T5793] Bluetooth: hci1: command tx timeout [ 90.416621][ T5103] Bluetooth: hci3: command tx timeout [ 90.421437][ T5793] Bluetooth: hci2: command tx timeout [ 90.426358][ T5803] Bluetooth: hci0: command tx timeout [ 90.492909][ T5887] syz.0.5[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.508469][ T5887] loop0: detected capacity change from 0 to 128 [ 90.533714][ T5887] ======================================================= [ 90.533714][ T5887] WARNING: The mand mount option has been deprecated and [ 90.533714][ T5887] and is ignored by this kernel. Remove the mand [ 90.533714][ T5887] option from the mount to silence this warning. [ 90.533714][ T5887] ======================================================= [ 90.557261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.575973][ T5888] mmap: syz.1.2 (5888) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.626964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.761827][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.800671][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.101450][ T5895] loop0: detected capacity change from 0 to 128 [ 91.191907][ T27] audit: type=1804 audit(1764221279.054:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7" name="/newroot/2/file0/bus" dev="loop0" ino=1048593 res=1 errno=0 [ 91.333687][ T5901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9'. [ 91.632510][ T5906] loop3: detected capacity change from 0 to 512 [ 91.748644][ T5906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.834223][ T5906] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.846087][ T5906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.942701][ T5906] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #16: comm +}[@: corrupted inode contents [ 91.991669][ T5906] EXT4-fs (loop3): Remounting filesystem read-only [ 92.002657][ T5906] EXT4-fs (loop3): 1 truncate cleaned up [ 92.080897][ T2902] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.118399][ T5911] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.130880][ T27] audit: type=1326 audit(1764221279.994:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 92.175952][ T2902] Quota error (device loop3): write_blk: dquota write failed [ 92.183972][ T2902] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 92.194481][ T9] cfg80211: failed to load regulatory.db [ 92.203433][ T2902] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.214390][ T27] audit: type=1326 audit(1764221280.014:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 92.241089][ T27] audit: type=1326 audit(1764221280.014:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 92.272976][ T2902] Quota error (device loop3): write_blk: dquota write failed [ 92.283928][ T27] audit: type=1326 audit(1764221280.024:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 92.312555][ T2902] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 92.333911][ T2902] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 92.355537][ T27] audit: type=1326 audit(1764221280.104:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 92.380964][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.496642][ T5803] Bluetooth: hci2: command tx timeout [ 92.502217][ T5103] Bluetooth: hci1: command tx timeout [ 92.507817][ T51] Bluetooth: hci0: command tx timeout [ 92.507833][ T5793] Bluetooth: hci3: command tx timeout [ 92.588519][ T5912] loop2: detected capacity change from 0 to 512 [ 92.729559][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.815566][ T5912] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 92.906128][ T5912] EXT4-fs (loop2): mount failed [ 93.189481][ T5922] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 93.575455][ T5901] hub 9-0:1.0: USB hub found [ 93.586030][ T5901] hub 9-0:1.0: 1 port detected [ 94.509186][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 94.737174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.760296][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 95.046607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.136834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.148714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.251042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.261627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.296538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.354288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.376015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.384673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.542969][ T5941] lo speed is unknown, defaulting to 1000 [ 95.585392][ T5941] lo speed is unknown, defaulting to 1000 [ 95.624299][ T5941] lo speed is unknown, defaulting to 1000 [ 96.349983][ T5941] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.423087][ T5941] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.512771][ T5941] lo speed is unknown, defaulting to 1000 [ 96.523943][ T5941] lo speed is unknown, defaulting to 1000 [ 96.533035][ T5941] lo speed is unknown, defaulting to 1000 [ 96.557882][ T5941] lo speed is unknown, defaulting to 1000 [ 96.653961][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.666967][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.715664][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.723117][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.054557][ T5962] loop2: detected capacity change from 0 to 1024 [ 97.128413][ T5962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 97.241927][ T5964] loop3: detected capacity change from 0 to 512 [ 97.254655][ T5964] EXT4-fs: quotafile must be on filesystem root [ 97.593045][ T5962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 97.813893][ T5962] EXT4-fs (loop2): failed to initialize system zone (-117) [ 97.907985][ T5962] EXT4-fs (loop2): mount failed [ 97.964509][ T5969] pim6reg: entered allmulticast mode [ 97.973307][ T5969] pim6reg: left allmulticast mode [ 98.094572][ T5804] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.600767][ T5986] tipc: Started in network mode [ 99.616428][ T5986] tipc: Node identity 1a02445ffff5, cluster identity 4711 [ 99.636699][ T5986] tipc: Enabled bearer , priority 0 [ 99.667254][ T5985] siw: device registration error -23 [ 99.674654][ T5986] syzkaller0: entered promiscuous mode [ 99.704924][ T5986] syzkaller0: entered allmulticast mode [ 99.713747][ T5989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.823707][ T5991] tipc: Resetting bearer [ 99.878283][ T5984] tipc: Resetting bearer [ 100.143226][ T5984] tipc: Disabling bearer [ 100.151854][ T5996] loop1: detected capacity change from 0 to 512 [ 100.280679][ T5998] loop2: detected capacity change from 0 to 512 [ 100.294669][ T5998] EXT4-fs: quotafile must be on filesystem root [ 100.383483][ T5996] EXT4-fs: Ignoring removed i_version option [ 100.483314][ T5996] EXT4-fs: Ignoring removed bh option [ 100.842091][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.915598][ T5996] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.966974][ T6004] loop0: detected capacity change from 0 to 512 [ 100.981998][ T6004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.040530][ T6004] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.075630][ T6004] EXT4-fs (loop0): 1 truncate cleaned up [ 101.096394][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.204321][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.497739][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.031739][ T6038] loop2: detected capacity change from 0 to 8 [ 102.070632][ T6038] SQUASHFS error: lzo decompression failed, data probably corrupt [ 102.084184][ T6039] loop1: detected capacity change from 0 to 1024 [ 102.094612][ T6038] SQUASHFS error: Failed to read block 0x91: -5 [ 102.109116][ T6038] SQUASHFS error: Unable to read metadata cache entry [8f] [ 102.130575][ T6039] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 102.143349][ T6038] SQUASHFS error: Unable to read inode 0x11f [ 102.288911][ T6043] loop0: detected capacity change from 0 to 512 [ 102.312655][ T6039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 102.348314][ T6043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.371588][ T6039] EXT4-fs (loop1): failed to initialize system zone (-117) [ 102.379848][ T6039] EXT4-fs (loop1): mount failed [ 102.399423][ T6043] EXT4-fs (loop0): 1 truncate cleaned up [ 102.410001][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.523984][ T6047] loop3: detected capacity change from 0 to 512 [ 102.537348][ T6047] EXT4-fs: quotafile must be on filesystem root [ 103.029654][ T6038] loop2: detected capacity change from 0 to 1024 [ 103.116757][ T6038] EXT4-fs: Ignoring removed orlov option [ 103.182451][ T6038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.210226][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.288880][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.187675][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.333623][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 104.402701][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 104.402727][ T27] audit: type=1326 audit(1764221292.264:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 104.450926][ T27] audit: type=1326 audit(1764221292.264:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 104.476240][ T27] audit: type=1326 audit(1764221292.274:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 104.564900][ T27] audit: type=1326 audit(1764221292.274:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 104.645284][ T27] audit: type=1326 audit(1764221292.314:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d298f749 code=0x7ffc0000 [ 105.330794][ T6077] loop2: detected capacity change from 0 to 512 [ 105.343887][ T6077] EXT4-fs: quotafile must be on filesystem root [ 105.805275][ T6078] netlink: 96 bytes leftover after parsing attributes in process `syz.0.60'. [ 106.019577][ T6083] loop2: detected capacity change from 0 to 8 [ 106.030641][ T6083] SQUASHFS error: lzo decompression failed, data probably corrupt [ 106.041862][ T6083] SQUASHFS error: Failed to read block 0x91: -5 [ 106.049920][ T6083] SQUASHFS error: Unable to read metadata cache entry [8f] [ 106.060055][ T6083] SQUASHFS error: Unable to read inode 0x11f [ 106.232140][ T6083] loop2: detected capacity change from 0 to 1024 [ 106.293897][ T6083] EXT4-fs: Ignoring removed orlov option [ 106.358186][ T6083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.432058][ T6083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.296788][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.468135][ T6097] loop3: detected capacity change from 0 to 512 [ 107.482928][ T6097] EXT4-fs: inline encryption not supported [ 107.509403][ T6097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.559067][ T6097] EXT4-fs (loop3): 1 truncate cleaned up [ 107.572454][ T6101] loop2: detected capacity change from 0 to 512 [ 107.606697][ T6097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.661748][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 107.695356][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 107.704768][ T6101] ------------[ cut here ]------------ [ 107.712029][ T6101] EA inode 11 i_nlink=2 [ 107.712334][ T6101] WARNING: CPU: 0 PID: 6101 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.727456][ T6101] Modules linked in: [ 107.731421][ T6101] CPU: 0 PID: 6101 Comm: syz.2.65 Not tainted syzkaller #0 [ 107.738769][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.750335][ T6101] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 107.757280][ T6101] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 107.777153][ T6101] RSP: 0018:ffffc900055071c0 EFLAGS: 00010246 [ 107.783288][ T6101] RAX: 9551d397d4559900 RBX: 0000000000000002 RCX: 0000000000080000 [ 107.791537][ T6101] RDX: ffffc9000d05b000 RSI: 000000000002f4c2 RDI: 000000000002f4c3 [ 107.799646][ T6101] RBP: ffffc900055072b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 107.807774][ T6101] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 107.815869][ T6101] R13: ffff88805e10b6a8 R14: ffff88805e10b4b0 R15: ffff88805e10b500 [ 107.823908][ T6101] FS: 00007f77d38346c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 107.832967][ T6101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.839998][ T6101] CR2: 000000110c39279c CR3: 000000001e34b000 CR4: 00000000003506f0 [ 107.849438][ T6101] Call Trace: [ 107.852780][ T6101] [ 107.856414][ T6101] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 107.862171][ T6101] ? ext4_xattr_inode_iget+0x3df/0x600 [ 107.867851][ T6101] ext4_xattr_set_entry+0xcda/0x1e90 [ 107.873237][ T6101] ext4_xattr_ibody_set+0x254/0x6a0 [ 107.878630][ T6101] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 107.884629][ T6101] __ext4_expand_extra_isize+0x306/0x400 [ 107.890497][ T6101] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 107.896116][ T6101] ext4_evict_inode+0x7ed/0xea0 [ 107.901116][ T6101] ? _raw_spin_unlock+0x28/0x40 [ 107.906098][ T6101] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.912061][ T6101] ? do_raw_spin_unlock+0x121/0x230 [ 107.917422][ T6101] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.923903][ T6101] evict+0x486/0x870 [ 107.927930][ T6101] ? __lock_acquire+0x7c80/0x7c80 [ 107.933023][ T6101] ? proc_nr_inodes+0x230/0x230 [ 107.938031][ T6101] ? do_raw_spin_unlock+0x121/0x230 [ 107.943303][ T6101] ? _raw_spin_unlock+0x28/0x40 [ 107.949648][ T6101] ? iput+0x70a/0x920 [ 107.953718][ T6101] ext4_orphan_cleanup+0xbd4/0x1400 [ 107.959396][ T6101] ? ext4_orphan_del+0xba0/0xba0 [ 107.964424][ T6101] ? ext4_register_li_request+0x183/0x940 [ 107.970272][ T6101] ? errseq_check_and_advance+0x66/0x120 [ 107.976048][ T6101] ext4_fill_super+0x5de4/0x66c0 [ 107.981115][ T6101] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 107.987531][ T6101] ? __might_sleep+0xe0/0xe0 [ 107.992197][ T6101] ? read_lock_is_recursive+0x20/0x20 [ 107.997722][ T6101] ? snprintf+0xdb/0x120 [ 108.002051][ T6101] ? vscnprintf+0x80/0x80 [ 108.006675][ T6101] ? down_write+0x162/0x1f0 [ 108.011245][ T6101] ? down_read_killable+0x340/0x340 [ 108.016613][ T6101] ? setup_bdev_super+0x56b/0x660 [ 108.021719][ T6101] get_tree_bdev+0x3e4/0x510 [ 108.026612][ T6101] ? vfs_parse_fs_string+0x160/0x160 [ 108.032042][ T6101] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.038432][ T6101] ? setup_bdev_super+0x660/0x660 [ 108.043522][ T6101] ? apparmor_capable+0x137/0x1a0 [ 108.045995][ T6078] hub 9-0:1.0: USB hub found [ 108.048740][ T6101] ? bpf_lsm_capable+0x9/0x10 [ 108.055344][ T6078] hub 9-0:1.0: 1 port detected [ 108.059580][ T6101] ? security_capable+0x89/0xb0 [ 108.069451][ T6101] vfs_get_tree+0x8c/0x280 [ 108.073938][ T6101] do_new_mount+0x24b/0xa40 [ 108.078663][ T6101] __se_sys_mount+0x2da/0x3c0 [ 108.083415][ T6101] ? __x64_sys_mount+0xc0/0xc0 [ 108.088743][ T6101] ? lockdep_hardirqs_on+0x98/0x150 [ 108.094017][ T6101] ? __x64_sys_mount+0x20/0xc0 [ 108.099333][ T6101] do_syscall_64+0x55/0xb0 [ 108.103815][ T6101] ? clear_bhb_loop+0x40/0x90 [ 108.108599][ T6101] ? clear_bhb_loop+0x40/0x90 [ 108.113335][ T6101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.119422][ T6101] RIP: 0033:0x7f77d2990eea [ 108.123911][ T6101] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.143811][ T6101] RSP: 002b:00007f77d3833e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.153717][ T6101] RAX: ffffffffffffffda RBX: 00007f77d3833ef0 RCX: 00007f77d2990eea [ 108.162064][ T6101] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f77d3833eb0 [ 108.170204][ T6101] RBP: 0000200000000180 R08: 00007f77d3833ef0 R09: 0000000000800700 [ 108.178365][ T6101] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.186553][ T6101] R13: 00007f77d3833eb0 R14: 000000000000046f R15: 000000000000002c [ 108.194605][ T6101] [ 108.197839][ T6101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.205157][ T6101] CPU: 0 PID: 6101 Comm: syz.2.65 Not tainted syzkaller #0 [ 108.212387][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.222628][ T6101] Call Trace: [ 108.225941][ T6101] [ 108.228930][ T6101] dump_stack_lvl+0x16c/0x230 [ 108.233653][ T6101] ? show_regs_print_info+0x20/0x20 [ 108.238871][ T6101] ? load_image+0x3b0/0x3b0 [ 108.243394][ T6101] panic+0x2c0/0x710 [ 108.247311][ T6101] ? bpf_jit_dump+0xd0/0xd0 [ 108.251839][ T6101] __warn+0x2e0/0x470 [ 108.255846][ T6101] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 108.261879][ T6101] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 108.267904][ T6101] report_bug+0x2be/0x4f0 [ 108.272268][ T6101] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 108.278276][ T6101] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 108.284284][ T6101] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 108.290291][ T6101] handle_bug+0xcf/0x120 [ 108.294558][ T6101] exc_invalid_op+0x1a/0x50 [ 108.299085][ T6101] asm_exc_invalid_op+0x1a/0x20 [ 108.303958][ T6101] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 108.310573][ T6101] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 108.330283][ T6101] RSP: 0018:ffffc900055071c0 EFLAGS: 00010246 [ 108.336373][ T6101] RAX: 9551d397d4559900 RBX: 0000000000000002 RCX: 0000000000080000 [ 108.344361][ T6101] RDX: ffffc9000d05b000 RSI: 000000000002f4c2 RDI: 000000000002f4c3 [ 108.352344][ T6101] RBP: ffffc900055072b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 108.360328][ T6101] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 108.368322][ T6101] R13: ffff88805e10b6a8 R14: ffff88805e10b4b0 R15: ffff88805e10b500 [ 108.376326][ T6101] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 108.381984][ T6101] ? ext4_xattr_inode_iget+0x3df/0x600 [ 108.387489][ T6101] ext4_xattr_set_entry+0xcda/0x1e90 [ 108.392830][ T6101] ext4_xattr_ibody_set+0x254/0x6a0 [ 108.398092][ T6101] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 108.404034][ T6101] __ext4_expand_extra_isize+0x306/0x400 [ 108.409710][ T6101] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 108.415202][ T6101] ext4_evict_inode+0x7ed/0xea0 [ 108.420080][ T6101] ? _raw_spin_unlock+0x28/0x40 [ 108.424961][ T6101] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.430890][ T6101] ? do_raw_spin_unlock+0x121/0x230 [ 108.436107][ T6101] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.442044][ T6101] evict+0x486/0x870 [ 108.445955][ T6101] ? __lock_acquire+0x7c80/0x7c80 [ 108.451005][ T6101] ? proc_nr_inodes+0x230/0x230 [ 108.455885][ T6101] ? do_raw_spin_unlock+0x121/0x230 [ 108.461119][ T6101] ? _raw_spin_unlock+0x28/0x40 [ 108.465999][ T6101] ? iput+0x70a/0x920 [ 108.469998][ T6101] ext4_orphan_cleanup+0xbd4/0x1400 [ 108.475235][ T6101] ? ext4_orphan_del+0xba0/0xba0 [ 108.480216][ T6101] ? ext4_register_li_request+0x183/0x940 [ 108.485984][ T6101] ? errseq_check_and_advance+0x66/0x120 [ 108.491659][ T6101] ext4_fill_super+0x5de4/0x66c0 [ 108.496671][ T6101] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.502951][ T6101] ? __might_sleep+0xe0/0xe0 [ 108.507569][ T6101] ? read_lock_is_recursive+0x20/0x20 [ 108.512965][ T6101] ? snprintf+0xdb/0x120 [ 108.517330][ T6101] ? vscnprintf+0x80/0x80 [ 108.521693][ T6101] ? down_write+0x162/0x1f0 [ 108.526210][ T6101] ? down_read_killable+0x340/0x340 [ 108.531425][ T6101] ? setup_bdev_super+0x56b/0x660 [ 108.536467][ T6101] get_tree_bdev+0x3e4/0x510 [ 108.541078][ T6101] ? vfs_parse_fs_string+0x160/0x160 [ 108.546384][ T6101] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 108.552664][ T6101] ? setup_bdev_super+0x660/0x660 [ 108.557721][ T6101] ? apparmor_capable+0x137/0x1a0 [ 108.562776][ T6101] ? bpf_lsm_capable+0x9/0x10 [ 108.567487][ T6101] ? security_capable+0x89/0xb0 [ 108.572374][ T6101] vfs_get_tree+0x8c/0x280 [ 108.576818][ T6101] do_new_mount+0x24b/0xa40 [ 108.581380][ T6101] __se_sys_mount+0x2da/0x3c0 [ 108.586106][ T6101] ? __x64_sys_mount+0xc0/0xc0 [ 108.590911][ T6101] ? lockdep_hardirqs_on+0x98/0x150 [ 108.596134][ T6101] ? __x64_sys_mount+0x20/0xc0 [ 108.600910][ T6101] do_syscall_64+0x55/0xb0 [ 108.605356][ T6101] ? clear_bhb_loop+0x40/0x90 [ 108.610071][ T6101] ? clear_bhb_loop+0x40/0x90 [ 108.614772][ T6101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.620699][ T6101] RIP: 0033:0x7f77d2990eea [ 108.625132][ T6101] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.644750][ T6101] RSP: 002b:00007f77d3833e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.653195][ T6101] RAX: ffffffffffffffda RBX: 00007f77d3833ef0 RCX: 00007f77d2990eea [ 108.661208][ T6101] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f77d3833eb0 [ 108.669197][ T6101] RBP: 0000200000000180 R08: 00007f77d3833ef0 R09: 0000000000800700 [ 108.677186][ T6101] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.685238][ T6101] R13: 00007f77d3833eb0 R14: 000000000000046f R15: 000000000000002c [ 108.693235][ T6101] [ 108.696582][ T6101] Kernel Offset: disabled [ 108.700983][ T6101] Rebooting in 86400 seconds..