last executing test programs: 2.797780089s ago: executing program 1 (id=3334): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2.0132588s ago: executing program 2 (id=3354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)) 1.975903961s ago: executing program 2 (id=3355): r0 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 1.919776212s ago: executing program 2 (id=3356): r0 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.918457692s ago: executing program 2 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffff1a}}, {{0x0, 0x34, 0x0}}], 0x5, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r6}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x4000000000001, 0x35b281) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x2, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1.516269307s ago: executing program 4 (id=3361): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) msgget$private(0x0, 0x8) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}}}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r9 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.480504848s ago: executing program 4 (id=3362): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010027bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="140004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x20, 0x40, 0xf, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x64, 0xd5, 0x40, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x28, 0x3b, 0x0, 0x8, [0x8, 0x3ff, 0x8, 0x1, 0x80000000, 0x8, 0xe42, 0x3, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x100, 0x1924, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x19, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1b, 0x85, [@loopback, @loopback, @local, @local, @private=0xa010102, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64], 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x46c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8d8}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "cdaf3b8368a9a8b87c486450d1f51a945559e6a0d55bce18a78aaf48f529ebc342018248fc643090e60fc2697c37bef0dab4886953fe8a8e5e2c104998f2d235a642113fb607038e8d9e62b44af1655fca0d6e27a33da0deb88b59057f5150dc3f55bf1a179f80e77c43005a7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\xb4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$%*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@#,(*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.*\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^!!.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[.#'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&$i%)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/{,\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30d74193}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+)\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "f2b4bb3cfb5cc08c4ce93c736f2c05b675116d2feb26c8e8360cb5b2d266d240cfe9ec5d47b63f3273a9345e972f75e31c4304efb4ef4040a818875fd30ebd159dca25b64c3b1d674020387ba1499305a103e34f4be94ce018bbd4e8c4a4178740c1695015cea1b7a16e9612c02d9ab06eb09693795c4d1804eecd27f72af26e05bf61a6a85de1f04419ee29e885"}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "5c2f4e4ef2061fcc562c8698bbd14cd2471e800b768262715c568ebf21a1d16dbf86ca5d5208bb7656ce37d79fe82c93428167d278949d09be643c115ba6f0888bc9b23a26dfbe454722e598a420307f9ba933a1720ae46e56568d9cda67d7ecd03f2fd43f6372cf77f7b52fb2dcb6177410583314069ef08d835456e4c76b40c91b630a7f5855dd2670fa7e72f1cd6084b68e660daf01278cb2e52f62c8a54f"}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "24021e1086f988d6778fdf1336b516683b98a3e6788a886dae11d99b983e9f3ba29b75d5bf5d1fc1e021345dd256684979d422c8a9486efebb"}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.34960889s ago: executing program 4 (id=3364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read$usbfs(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) syz_pidfd_open(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007300)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x2, 0x4, 0x434, 0x6, 0x4, 0xffffdfa5, 0x4, 0xfff, 0x70, 0x7, 0xfffffffb, 0x0, 0x1, 0x400, 0x9, 0x998, 0x3, 0xff, 0x0, 0xc, 0x7, 0x80000000, 0x0, 0xffff, 0x2, 0x0, 0x2, 0x10, 0x1, 0x4dfc56a4, 0x3e67, 0x3, 0x9, 0x0, 0x1, 0x9, 0x9, 0xa, 0x10001, 0x7, 0x5, 0x4, 0x9, 0x1ff, 0xffffffed, 0x0, 0x0, 0x3, 0xb5a, 0x9, 0x2, 0x1fc, 0x4000, 0x0, 0x9, 0x800, 0x10000, 0x80, 0x8, 0x1, 0x2, 0x40, 0x4, 0x0, 0x7, 0x9, 0xac3, 0x3, 0x8767, 0x8, 0x3, 0x7, 0xffffff01, 0x3613, 0x10000, 0x7e, 0x5, 0x2dd4, 0x3, 0x81, 0x4, 0x6, 0x4, 0x4, 0x4, 0x9, 0x3, 0x2, 0x8, 0x0, 0x6, 0x3, 0x3, 0x1, 0xb, 0x9, 0xbc, 0xe, 0x5, 0x9, 0x5, 0x1, 0x7fff, 0x1, 0x0, 0x8, 0x7, 0x7, 0x4, 0x3, 0x7, 0x5f, 0x6, 0xfffffff7, 0x1000000, 0x48, 0x7, 0x81, 0x400, 0x1, 0x1, 0xe, 0x7, 0x7, 0x6, 0x3ce1, 0xffffffc0, 0x1, 0x5, 0x6, 0x100, 0xfd, 0x0, 0x8, 0x4, 0x7, 0x10, 0x4, 0x2, 0x3, 0x7, 0x3ff, 0x4, 0xf79, 0x9, 0x82, 0x7fffffff, 0x9, 0x7495, 0x3, 0x1000, 0x2, 0xe000000, 0x6039c791, 0xffffffff, 0xff, 0x3, 0x8, 0x10, 0x7, 0x100, 0x10, 0x3, 0x80000000, 0x7, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x8, 0x2, 0xffff106e, 0x1cccf7d2, 0x4, 0x8, 0x8, 0x80000001, 0x8000, 0x0, 0x3, 0x200, 0x8001, 0x7, 0x9, 0x5, 0x2, 0x727, 0xc, 0xc495, 0x0, 0x3ff, 0x1000000, 0xffff, 0xe, 0x8000, 0xfffffff9, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x5, 0x2, 0x10001, 0x1, 0x80000000, 0x9, 0x8, 0x100, 0x8, 0x3, 0xf8, 0x8, 0x2, 0xd, 0x8000, 0x3, 0x6, 0x200, 0x2, 0x3, 0x2, 0x1, 0xe, 0x100, 0x2, 0x9, 0xfffffff8, 0x7, 0x1000, 0x5, 0x3, 0x4, 0x2, 0x45, 0xa, 0x7fff, 0x9, 0x618, 0x6, 0x1, 0x5, 0x4, 0x5ace, 0x8, 0x3, 0x48d, 0x5f1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x5, 0x7f, 0xc, 0x800}, 0x6, 0x40000, 0x5}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe0, 0x1, 0xa, 0x1, 0x0, 0x3, 0x0, 0x8, 0xfffffffe, 0x7, 0x74d, 0x3, 0x0, 0x8, 0xc6, 0x4005, 0x4, 0x2, 0x4, 0xfffff800, 0x3, 0x1, 0x8, 0xb25a, 0x2, 0x5, 0x101, 0x9, 0xca, 0x7, 0x50000, 0xe, 0x8, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1, 0xfffffffd, 0x1ff, 0x80000001, 0xfff, 0x7, 0x40, 0x40, 0x86e, 0x40, 0x7, 0x8, 0x5, 0x0, 0x8000, 0x8, 0x8, 0x8, 0x5, 0x9, 0x6, 0x5, 0x9, 0x3, 0x8, 0x8, 0x5, 0x1000, 0xfffffffb, 0x5, 0x3, 0xf, 0x101, 0x5, 0x5, 0x7, 0x720f, 0x1, 0x8, 0x8, 0x5a1, 0x9, 0xe, 0xa684, 0xa000, 0x2, 0x5, 0xfffffffb, 0x4, 0x1000, 0x0, 0x41333142, 0x4, 0x2, 0xff, 0x605, 0x6, 0x4, 0x9f2b56b, 0xb0b7, 0xcd2, 0x6, 0x7, 0xb, 0x88, 0x1, 0x8000, 0x3, 0x8, 0x0, 0x2, 0x800, 0x5, 0x1c1c, 0xe0, 0xf06, 0x9, 0x7, 0xf6eb, 0x2, 0x2, 0x7, 0x8, 0x9, 0x6, 0x2, 0x1, 0x0, 0x4, 0x9600, 0xf8, 0x5, 0xfffffffc, 0x9, 0x2, 0x81, 0xc01f, 0x4, 0x1, 0xfffffffd, 0xc, 0xab, 0x7, 0x1, 0x7fff, 0xffffffff, 0x10000, 0x7, 0x6, 0x9, 0x2, 0x8, 0x48e, 0xb, 0xfffffffc, 0x200, 0x0, 0x5eea, 0x7, 0x5, 0x8, 0x0, 0x8, 0x9, 0xfffffff5, 0x6, 0x9, 0x3, 0xf9, 0x800, 0x8, 0xfffff76a, 0x4, 0x0, 0x30f1554e, 0x1, 0x8, 0xf9, 0x200, 0x4, 0x3, 0xd6a, 0xb, 0x3, 0x9, 0x1ff, 0xff, 0xef6, 0x800, 0x80, 0x2, 0x81, 0x8000, 0x4, 0x6, 0x9, 0x0, 0x3, 0x4d8f, 0x81, 0x9, 0x3, 0x7fff, 0x7f, 0x6, 0xc6a, 0x4, 0xfffffffb, 0x81a, 0xfffffffd, 0x1, 0xfffffffe, 0x952, 0x3, 0x40, 0x4, 0x8, 0x2, 0x2c, 0x60000, 0x0, 0xc0000000, 0x2, 0xfffffffb, 0x2000, 0x8, 0x4, 0x1381, 0x2, 0x6, 0x4fc4, 0x800, 0x7, 0x8, 0x5, 0x80000000, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0xb, 0x100, 0x4, 0x40, 0x53, 0x0, 0x0, 0x7, 0x7ff, 0x4, 0x8000, 0x70, 0x6, 0x7, 0x6, 0xfffffffc]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 1.293350501s ago: executing program 1 (id=3366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r2) socket$unix(0x1, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@dev}}, {{@in6=@initdev}}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@multicast1, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) getresuid(&(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\b'], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYBLOB="020002", @ANYRES64=r3, @ANYRES32=r7, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES64=r11, @ANYRES8=r6, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c63c2b6f8dd7d6cc6a3e158cf4553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r12, @ANYRES32=0x0, @ANYBLOB="080006", @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private0, @in6=@empty}}, {{}, 0x0, @in6}}, &(0x7f0000000580)=0xe8) statx(r2, &(0x7f0000000640)='./file1/../file0\x00', 0x0, 0x40, &(0x7f0000000d00)) 1.273590091s ago: executing program 3 (id=3368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.272904501s ago: executing program 1 (id=3369): r0 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.236645182s ago: executing program 1 (id=3370): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000800000d"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095", @ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x7fff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x4000001}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000240)=[{0x1f61, 0x4, 0x1, 0x8bac}, {0x7, 0x3, 0x62, 0x10000}, {0x6, 0x2, 0x0, 0x5bf2}, {0x0, 0x6a, 0x8, 0x2}, {0xfffd, 0x0, 0x4, 0x7}, {0x8, 0x4, 0xf7, 0x9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x51}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000300), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x40, 0x1}, 0x20040051) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000ffe400"/28], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.236139342s ago: executing program 3 (id=3371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.221301402s ago: executing program 3 (id=3372): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffff1a}}, {{0x0, 0x34, 0x0}}], 0x5, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x2, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1.218347082s ago: executing program 4 (id=3373): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @loopback}], 0x10) 1.130546883s ago: executing program 4 (id=3374): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000001a0000000000000085000000230000009500f4ff0000000000c0b6baf55a4e7389616c8ed8ab44b35142687cbf84ffb38ab87f73d859baccd35aa7e01794232568ba8f28c99b8a5df94973edda976a7299d40c0ff60d33ed5034312b274b73de0893951a9ec5edf62428a8534aea43e821307da5a7fcbf6750dc9b16fe671f341ead824e59ae18c64fdda592b0638adf627da7398eae97fe18a0b142dac9f59e87fd756b181bf8961e246fe6ff378f4e92e29f2897e61a4d244a94f6c6866e02ac86498275ace0142212e2d5fa73cdcd85c874d630710719ef5083f745fa5954b7b71313087c62553318cee79dc3a7b224fe9530b7f2add7db3d4850b2fb2ebddfbb77824eade41dda05808b3d2107c5932478b16f896de9bc7b0f60d844d0fd09fbf70979"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffff1a}}, {{0x0, 0x34, 0x0}}], 0x5, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r6}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x4000000000001, 0x35b281) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x2, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1.073628034s ago: executing program 2 (id=3375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) msgget$private(0x0, 0x8) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}}}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.070093524s ago: executing program 0 (id=3376): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x9, 0xbe, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x4000800}, 0x8810) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003840)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000038c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x2, r6}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.043591155s ago: executing program 2 (id=3377): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 943.373656ms ago: executing program 0 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{r0}, &(0x7f0000001100), &(0x7f0000001140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 899.004377ms ago: executing program 0 (id=3379): r0 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x18}], 0x1) 878.528897ms ago: executing program 0 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200008d1}, 0x3b6a04374709084e) 838.523407ms ago: executing program 0 (id=3381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001500000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x2, 0xfffffffd) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r4, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, &(0x7f0000000080)=""/179, 0xb3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) syz_usbip_server_init(0x5) 411.766544ms ago: executing program 1 (id=3382): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010027bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="140004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 356.677155ms ago: executing program 3 (id=3383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 326.677275ms ago: executing program 3 (id=3384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) unshare(0x2000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 275.614706ms ago: executing program 1 (id=3385): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 244.652676ms ago: executing program 0 (id=3386): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r5}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0xa3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r7, r1, r1, r2, r2, r2, r1], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf2525000073696d0000000f0002006e657464657673696d3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 243.496256ms ago: executing program 4 (id=3387): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000001a0000000000000085000000230000009500f4ff0000000000c0b6baf55a4e7389616c8ed8ab44b35142687cbf84ffb38ab87f73d859baccd35aa7e01794232568ba8f28c99b8a5df94973edda976a7299d40c0ff60d33ed5034312b274b73de0893951a9ec5edf62428a8534aea43e821307da5a7fcbf6750dc9b16fe671f341ead824e59ae18c64fdda592b0638adf627da7398eae97fe18a0b142dac9f59e87fd756b181bf8961e246fe6ff378f4e92e29f2897e61a4d244a94f6c6866e02ac86498275ace0142212e2d5fa73cdcd85c874d630710719ef5083f745fa5954b7b71313087c62553318cee79dc3a7b224fe9530b7f2add7db3d4850b2fb2ebddfbb77824eade41dda05808b3d2107c5932478b16f896de9bc7b0f60d844d0fd09fbf70979"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffff1a}}, {{0x0, 0x34, 0x0}}], 0x5, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r6}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x4000000000001, 0x35b281) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x2, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 0s ago: executing program 3 (id=3388): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") preadv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) move_mount(r0, 0x0, r1, 0x0, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x1) ustat(0x8, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): compat=0 ip=0x7f9c4e78e9b7 code=0x7ffc0000 [ 209.111175][ T29] audit: type=1326 audit(1752134853.892:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.3.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c4e78d290 code=0x7ffc0000 [ 209.185326][ T3424] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 209.197558][ T3424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.197558][ T3424] [ 209.306104][T16877] random: crng reseeded on system resumption [ 209.460321][T16883] lo speed is unknown, defaulting to 1000 [ 209.484181][T16901] random: crng reseeded on system resumption [ 209.510045][T16901] FAULT_INJECTION: forcing a failure. [ 209.510045][T16901] name failslab, interval 1, probability 0, space 0, times 0 [ 209.522798][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.1.2925 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 209.522828][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.522842][T16901] Call Trace: [ 209.522849][T16901] [ 209.522857][T16901] __dump_stack+0x1d/0x30 [ 209.522882][T16901] dump_stack_lvl+0xe8/0x140 [ 209.522901][T16901] dump_stack+0x15/0x1b [ 209.522996][T16901] should_fail_ex+0x265/0x280 [ 209.523023][T16901] should_failslab+0x8c/0xb0 [ 209.523041][T16901] __kmalloc_noprof+0xa5/0x3e0 [ 209.523062][T16901] ? tracepoint_probe_unregister+0x168/0x650 [ 209.523151][T16901] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 209.523189][T16901] tracepoint_probe_unregister+0x168/0x650 [ 209.523220][T16901] ? __pfx_bpf_link_release+0x10/0x10 [ 209.523305][T16901] bpf_probe_unregister+0x37/0x50 [ 209.523328][T16901] bpf_raw_tp_link_release+0x27/0x50 [ 209.523443][T16901] bpf_link_free+0xab/0x340 [ 209.523471][T16901] ? __pfx_bpf_link_release+0x10/0x10 [ 209.523496][T16901] bpf_link_release+0x45/0x60 [ 209.523571][T16901] __fput+0x298/0x650 [ 209.523660][T16901] ____fput+0x1c/0x30 [ 209.523682][T16901] task_work_run+0x131/0x1a0 [ 209.523726][T16901] exit_to_user_mode_loop+0xe4/0x100 [ 209.523746][T16901] do_syscall_64+0x1d6/0x200 [ 209.523772][T16901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.523800][T16901] ? clear_bhb_loop+0x40/0x90 [ 209.523880][T16901] ? clear_bhb_loop+0x40/0x90 [ 209.523904][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.523936][T16901] RIP: 0033:0x7f3d6727e929 [ 209.523949][T16901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.523964][T16901] RSP: 002b:00007f3d658e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 209.523981][T16901] RAX: 0000000000000000 RBX: 00007f3d674a5fa0 RCX: 00007f3d6727e929 [ 209.523995][T16901] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 209.524009][T16901] RBP: 00007f3d658e7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.524024][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.524112][T16901] R13: 0000000000000000 R14: 00007f3d674a5fa0 R15: 00007ffd6d01de68 [ 209.524128][T16901] [ 209.787249][T16906] loop4: detected capacity change from 0 to 512 [ 209.790831][T16908] loop0: detected capacity change from 0 to 512 [ 209.818060][T16908] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.832880][T16911] loop1: detected capacity change from 0 to 2048 [ 209.834054][T16906] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.861989][T16908] EXT4-fs (loop0): mount failed [ 209.862322][T16906] EXT4-fs (loop4): mount failed [ 209.870177][T16883] chnl_net:caif_netlink_parms(): no params data found [ 209.956049][T16883] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.963221][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.979955][T16883] bridge_slave_0: entered allmulticast mode [ 209.986443][T16883] bridge_slave_0: entered promiscuous mode [ 209.990268][T16911] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.993201][T16883] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.014194][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.021396][T16883] bridge_slave_1: entered allmulticast mode [ 210.027760][T16883] bridge_slave_1: entered promiscuous mode [ 210.034335][T16911] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 210.046831][T16911] EXT4-fs (loop1): This should not happen!! Data will be lost [ 210.046831][T16911] [ 210.048834][T16938] random: crng reseeded on system resumption [ 210.056582][T16911] EXT4-fs (loop1): Total free blocks count 0 [ 210.068568][T16911] EXT4-fs (loop1): Free/Dirty block details [ 210.074473][T16911] EXT4-fs (loop1): free_blocks=2415919104 [ 210.080300][T16911] EXT4-fs (loop1): dirty_blocks=2144 [ 210.085616][T16911] EXT4-fs (loop1): Block reservation details [ 210.091682][T16911] EXT4-fs (loop1): i_reserved_data_blocks=134 [ 210.098093][T16925] __nla_validate_parse: 10 callbacks suppressed [ 210.098104][T16925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2930'. [ 210.161276][T16943] loop3: detected capacity change from 0 to 512 [ 210.169495][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.180957][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.192200][T16943] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2934: iget: bad i_size value: 38620345925642 [ 210.206027][T16943] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2934: couldn't read orphan inode 15 (err -117) [ 210.229586][T16883] team0: Port device team_slave_0 added [ 210.242769][T16883] team0: Port device team_slave_1 added [ 210.256162][T16948] loop3: detected capacity change from 0 to 1024 [ 210.268250][T16948] EXT4-fs: Ignoring removed orlov option [ 210.283157][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.290159][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.316239][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.327485][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.334475][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.360566][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.372516][T16951] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 210.380319][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2937'. [ 210.389691][T16950] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 210.397454][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2937'. [ 210.430896][T16883] hsr_slave_0: entered promiscuous mode [ 210.436968][T16883] hsr_slave_1: entered promiscuous mode [ 210.442857][T16883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.450603][T16883] Cannot create hsr debugfs directory [ 210.510763][T16960] FAULT_INJECTION: forcing a failure. [ 210.510763][T16960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.524023][T16960] CPU: 0 UID: 0 PID: 16960 Comm: syz.0.2939 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 210.524056][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.524072][T16960] Call Trace: [ 210.524079][T16960] [ 210.524087][T16960] __dump_stack+0x1d/0x30 [ 210.524153][T16960] dump_stack_lvl+0xe8/0x140 [ 210.524176][T16960] dump_stack+0x15/0x1b [ 210.524195][T16960] should_fail_ex+0x265/0x280 [ 210.524301][T16960] should_fail+0xb/0x20 [ 210.524331][T16960] should_fail_usercopy+0x1a/0x20 [ 210.524415][T16960] _copy_from_user+0x1c/0xb0 [ 210.524438][T16960] ___sys_sendmsg+0xc1/0x1d0 [ 210.524491][T16960] __sys_sendmmsg+0x178/0x300 [ 210.524604][T16960] __x64_sys_sendmmsg+0x57/0x70 [ 210.524690][T16960] x64_sys_call+0x2f2f/0x2fb0 [ 210.524718][T16960] do_syscall_64+0xd2/0x200 [ 210.524758][T16960] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.524832][T16960] ? clear_bhb_loop+0x40/0x90 [ 210.524852][T16960] ? clear_bhb_loop+0x40/0x90 [ 210.524878][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.524913][T16960] RIP: 0033:0x7fa2b453e929 [ 210.524932][T16960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.524981][T16960] RSP: 002b:00007fa2b2ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.525000][T16960] RAX: ffffffffffffffda RBX: 00007fa2b4765fa0 RCX: 00007fa2b453e929 [ 210.525013][T16960] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000004 [ 210.525081][T16960] RBP: 00007fa2b2ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.525097][T16960] R10: 0000000024000001 R11: 0000000000000246 R12: 0000000000000001 [ 210.525113][T16960] R13: 0000000000000000 R14: 00007fa2b4765fa0 R15: 00007ffdd68a89b8 [ 210.525138][T16960] [ 210.720134][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 210.732406][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 210.732406][ T51] [ 210.762774][T16964] loop3: detected capacity change from 0 to 512 [ 210.784325][T16966] loop1: detected capacity change from 0 to 2048 [ 210.799394][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 210.816729][T16964] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.818436][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 210.854605][T16964] EXT4-fs (loop3): mount failed [ 210.913774][T16984] FAULT_INJECTION: forcing a failure. [ 210.913774][T16984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.927035][T16984] CPU: 0 UID: 0 PID: 16984 Comm: syz.4.2948 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 210.927066][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.927081][T16984] Call Trace: [ 210.927087][T16984] [ 210.927097][T16984] __dump_stack+0x1d/0x30 [ 210.927117][T16984] dump_stack_lvl+0xe8/0x140 [ 210.927176][T16984] dump_stack+0x15/0x1b [ 210.927194][T16984] should_fail_ex+0x265/0x280 [ 210.927224][T16984] should_fail+0xb/0x20 [ 210.927251][T16984] should_fail_usercopy+0x1a/0x20 [ 210.927329][T16984] strncpy_from_user+0x25/0x230 [ 210.927349][T16984] ? __fget_files+0x184/0x1c0 [ 210.927446][T16984] __se_sys_add_key+0x86/0x350 [ 210.927469][T16984] __x64_sys_add_key+0x67/0x80 [ 210.927492][T16984] x64_sys_call+0x1d0d/0x2fb0 [ 210.927516][T16984] do_syscall_64+0xd2/0x200 [ 210.927596][T16984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.927626][T16984] ? clear_bhb_loop+0x40/0x90 [ 210.927649][T16984] ? clear_bhb_loop+0x40/0x90 [ 210.927673][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.927773][T16984] RIP: 0033:0x7f337de1e929 [ 210.927790][T16984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.927810][T16984] RSP: 002b:00007f337c487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 210.927829][T16984] RAX: ffffffffffffffda RBX: 00007f337e045fa0 RCX: 00007f337de1e929 [ 210.927839][T16984] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 210.927856][T16984] RBP: 00007f337c487090 R08: 000000001314ef11 R09: 0000000000000000 [ 210.927895][T16984] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 210.927909][T16984] R13: 0000000000000000 R14: 00007f337e045fa0 R15: 00007ffce5a74848 [ 210.927931][T16984] [ 211.072266][T16966] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 211.102844][T16990] loop4: detected capacity change from 0 to 2048 [ 211.105975][T16966] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.122876][T16966] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 211.153015][T16966] EXT4-fs (loop1): This should not happen!! Data will be lost [ 211.153015][T16966] [ 211.162752][T16966] EXT4-fs (loop1): Total free blocks count 0 [ 211.168936][T16966] EXT4-fs (loop1): Free/Dirty block details [ 211.175116][T16966] EXT4-fs (loop1): free_blocks=2415919104 [ 211.180895][T16966] EXT4-fs (loop1): dirty_blocks=8208 [ 211.186200][T16966] EXT4-fs (loop1): Block reservation details [ 211.192227][T16966] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 211.213709][T16883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.225022][T16883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.240865][T16883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.266269][T16883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.279350][T16990] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.295263][T16990] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1984 with error 28 [ 211.307768][T16990] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.307768][T16990] [ 211.317639][T16990] EXT4-fs (loop4): Total free blocks count 0 [ 211.323639][T16990] EXT4-fs (loop4): Free/Dirty block details [ 211.329633][T16990] EXT4-fs (loop4): free_blocks=2415919104 [ 211.331342][T16883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.335421][T16990] EXT4-fs (loop4): dirty_blocks=2000 [ 211.335442][T16990] EXT4-fs (loop4): Block reservation details [ 211.353370][T16990] EXT4-fs (loop4): i_reserved_data_blocks=125 [ 211.370087][T16883] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.388684][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.395877][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.406100][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.413253][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.473273][T16883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.533068][T16883] veth0_vlan: entered promiscuous mode [ 211.540643][T16883] veth1_vlan: entered promiscuous mode [ 211.557402][T16883] veth0_macvtap: entered promiscuous mode [ 211.565065][T16883] veth1_macvtap: entered promiscuous mode [ 211.575941][T16883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.587160][T16883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.596594][T16883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.605314][T16883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.614294][T16883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.623022][T16883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.641870][ T389] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 211.654718][ T389] EXT4-fs (loop1): This should not happen!! Data will be lost [ 211.654718][ T389] [ 211.693732][T17026] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 211.700351][T17026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.707923][T17024] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 211.714543][T17024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.722204][T17026] vhci_hcd vhci_hcd.0: Device attached [ 211.722205][T17024] vhci_hcd vhci_hcd.0: Device attached [ 211.728216][T17025] loop2: detected capacity change from 0 to 764 [ 211.742796][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 211.751821][T17024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 211.761634][T17028] vhci_hcd: connection closed [ 211.761814][T17027] vhci_hcd: connection closed [ 211.766759][ T389] vhci_hcd: stop threads [ 211.775707][ T389] vhci_hcd: release socket [ 211.780253][ T389] vhci_hcd: disconnect device [ 211.785307][ T389] vhci_hcd: stop threads [ 211.789592][ T389] vhci_hcd: release socket [ 211.789601][ T389] vhci_hcd: disconnect device [ 211.799150][T17025] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 211.869091][T17025] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 211.875707][T17025] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 211.883393][T17025] vhci_hcd vhci_hcd.0: Device attached [ 211.889087][T17039] loop1: detected capacity change from 0 to 512 [ 211.890134][T17037] vhci_hcd: connection closed [ 211.895532][ T37] vhci_hcd: stop threads [ 211.904595][ T37] vhci_hcd: release socket [ 211.909050][ T37] vhci_hcd: disconnect device [ 211.917328][T17039] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.932468][T17039] EXT4-fs (loop1): mount failed [ 211.944534][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 211.956838][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.956838][ T37] [ 211.998522][T17045] FAULT_INJECTION: forcing a failure. [ 211.998522][T17045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.011731][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.4.2959 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 212.011832][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.011884][T17045] Call Trace: [ 212.011889][T17045] [ 212.011897][T17045] __dump_stack+0x1d/0x30 [ 212.011919][T17045] dump_stack_lvl+0xe8/0x140 [ 212.011938][T17045] dump_stack+0x15/0x1b [ 212.011955][T17045] should_fail_ex+0x265/0x280 [ 212.012057][T17045] should_fail+0xb/0x20 [ 212.012080][T17045] should_fail_usercopy+0x1a/0x20 [ 212.012120][T17045] _copy_to_user+0x20/0xa0 [ 212.012135][T17045] simple_read_from_buffer+0xb5/0x130 [ 212.012158][T17045] proc_fail_nth_read+0x100/0x140 [ 212.012184][T17045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.012237][T17045] vfs_read+0x1a0/0x6f0 [ 212.012258][T17045] ? __rcu_read_unlock+0x4f/0x70 [ 212.012275][T17045] ? __fget_files+0x184/0x1c0 [ 212.012352][T17045] ksys_read+0xda/0x1a0 [ 212.012375][T17045] __x64_sys_read+0x40/0x50 [ 212.012398][T17045] x64_sys_call+0x2d77/0x2fb0 [ 212.012472][T17045] do_syscall_64+0xd2/0x200 [ 212.012496][T17045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.012516][T17045] ? clear_bhb_loop+0x40/0x90 [ 212.012588][T17045] ? clear_bhb_loop+0x40/0x90 [ 212.012604][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.012620][T17045] RIP: 0033:0x7f337de1d33c [ 212.012632][T17045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.012645][T17045] RSP: 002b:00007f337c487030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.012665][T17045] RAX: ffffffffffffffda RBX: 00007f337e045fa0 RCX: 00007f337de1d33c [ 212.012675][T17045] RDX: 000000000000000f RSI: 00007f337c4870a0 RDI: 0000000000000005 [ 212.012684][T17045] RBP: 00007f337c487090 R08: 0000000000000000 R09: 0000000000000000 [ 212.012693][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.012773][T17045] R13: 0000000000000000 R14: 00007f337e045fa0 R15: 00007ffce5a74848 [ 212.012822][T17045] [ 212.294227][T17053] siw: device registration error -23 [ 212.315443][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 212.442903][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'. [ 212.457171][T17062] FAULT_INJECTION: forcing a failure. [ 212.457171][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 212.469842][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.0.2966 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 212.469872][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.469910][T17062] Call Trace: [ 212.469916][T17062] [ 212.469969][T17062] __dump_stack+0x1d/0x30 [ 212.469993][T17062] dump_stack_lvl+0xe8/0x140 [ 212.470015][T17062] dump_stack+0x15/0x1b [ 212.470033][T17062] should_fail_ex+0x265/0x280 [ 212.470134][T17062] should_failslab+0x8c/0xb0 [ 212.470159][T17062] kmem_cache_alloc_noprof+0x50/0x310 [ 212.470258][T17062] ? audit_log_start+0x365/0x6c0 [ 212.470308][T17062] audit_log_start+0x365/0x6c0 [ 212.470397][T17062] audit_seccomp+0x48/0x100 [ 212.470422][T17062] ? __seccomp_filter+0x68c/0x10d0 [ 212.470446][T17062] __seccomp_filter+0x69d/0x10d0 [ 212.470471][T17062] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.470567][T17062] ? vfs_write+0x75e/0x8e0 [ 212.470600][T17062] ? __rcu_read_unlock+0x4f/0x70 [ 212.470624][T17062] ? __fget_files+0x184/0x1c0 [ 212.470647][T17062] __secure_computing+0x82/0x150 [ 212.470703][T17062] syscall_trace_enter+0xcf/0x1e0 [ 212.470727][T17062] do_syscall_64+0xac/0x200 [ 212.470754][T17062] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.470776][T17062] ? clear_bhb_loop+0x40/0x90 [ 212.470856][T17062] ? clear_bhb_loop+0x40/0x90 [ 212.470907][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.470930][T17062] RIP: 0033:0x7fa2b453e929 [ 212.470947][T17062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.470967][T17062] RSP: 002b:00007fa2b2ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.470988][T17062] RAX: ffffffffffffffda RBX: 00007fa2b4765fa0 RCX: 00007fa2b453e929 [ 212.471053][T17062] RDX: 0000000020000080 RSI: 0000200000000380 RDI: 0000000000000006 [ 212.471138][T17062] RBP: 00007fa2b2ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.471201][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.471215][T17062] R13: 0000000000000000 R14: 00007fa2b4765fa0 R15: 00007ffdd68a89b8 [ 212.471237][T17062] [ 212.472378][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2966'. [ 212.474577][T17058] loop4: detected capacity change from 0 to 512 [ 212.594934][T17065] loop0: detected capacity change from 0 to 512 [ 212.608273][T17058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.638900][T17065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.724073][T17058] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.780256][T17065] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.795920][T17072] netlink: 'syz.1.2968': attribute type 6 has an invalid length. [ 212.882982][T17072] lo speed is unknown, defaulting to 1000 [ 212.930835][T17077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.940974][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.969872][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.973792][T17077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.122602][T17080] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 213.209268][T17086] hub 6-0:1.0: USB hub found [ 213.215179][T17086] hub 6-0:1.0: 8 ports detected [ 213.689112][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 213.689129][ T29] audit: type=1326 audit(1752134858.702:20096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.697070][T17148] loop1: detected capacity change from 0 to 764 [ 213.726701][T17148] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.733761][ T29] audit: type=1326 audit(1752134858.702:20097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.758230][ T29] audit: type=1326 audit(1752134858.702:20098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.781844][ T29] audit: type=1326 audit(1752134858.702:20099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.805778][ T29] audit: type=1326 audit(1752134858.702:20100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.829508][ T29] audit: type=1326 audit(1752134858.702:20101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.853111][ T29] audit: type=1326 audit(1752134858.702:20102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.876723][ T29] audit: type=1326 audit(1752134858.702:20103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.900318][ T29] audit: type=1326 audit(1752134858.702:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.923998][ T29] audit: type=1326 audit(1752134858.702:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 213.958454][T17161] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 213.965088][T17161] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 213.972801][T17161] vhci_hcd vhci_hcd.0: Device attached [ 213.986691][T17162] vhci_hcd: connection closed [ 213.987390][ T139] vhci_hcd: stop threads [ 213.996461][ T139] vhci_hcd: release socket [ 214.000918][ T139] vhci_hcd: disconnect device [ 214.027134][T17184] netlink: 'syz.4.2977': attribute type 3 has an invalid length. [ 214.036551][T17187] loop0: detected capacity change from 0 to 2048 [ 214.093831][T17199] lo speed is unknown, defaulting to 1000 [ 214.111471][T17205] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 214.214549][T17225] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 214.342287][T17245] loop0: detected capacity change from 0 to 512 [ 214.359327][T17245] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.436885][T17251] loop2: detected capacity change from 0 to 512 [ 214.447553][T17251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.472571][T17251] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.510124][T17261] netlink: 'syz.1.2989': attribute type 3 has an invalid length. [ 214.569046][T17265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.576599][T17265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.603217][T17265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.610663][T17265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.639072][T17261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.651792][T17261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.660232][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.669665][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.765087][T17272] loop0: detected capacity change from 0 to 2048 [ 214.944960][T17284] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 214.982524][T17288] loop4: detected capacity change from 0 to 512 [ 214.989270][T17288] ext4: Unknown parameter 'mask' [ 215.055098][T17291] loop4: detected capacity change from 0 to 512 [ 215.067844][T17291] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.207695][T17301] __nla_validate_parse: 7 callbacks suppressed [ 215.207712][T17301] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 215.266098][T17306] loop4: detected capacity change from 0 to 512 [ 215.278266][T17306] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.314076][T17312] netlink: 'syz.4.3004': attribute type 3 has an invalid length. [ 215.373361][T17312] loop4: detected capacity change from 0 to 512 [ 215.385755][T17312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.403075][T17312] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.479428][T17317] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 215.487616][T17317] veth1_macvtap: left promiscuous mode [ 215.530744][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.539944][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.642994][T17323] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 215.694379][T17329] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 215.790408][T17331] FAULT_INJECTION: forcing a failure. [ 215.790408][T17331] name failslab, interval 1, probability 0, space 0, times 0 [ 215.803157][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.3.3010 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 215.803272][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.803288][T17331] Call Trace: [ 215.803295][T17331] [ 215.803303][T17331] __dump_stack+0x1d/0x30 [ 215.803337][T17331] dump_stack_lvl+0xe8/0x140 [ 215.803360][T17331] dump_stack+0x15/0x1b [ 215.803385][T17331] should_fail_ex+0x265/0x280 [ 215.803420][T17331] should_failslab+0x8c/0xb0 [ 215.803443][T17331] __kmalloc_cache_node_noprof+0x54/0x320 [ 215.803472][T17331] ? __get_vm_area_node+0x106/0x1d0 [ 215.803620][T17331] __get_vm_area_node+0x106/0x1d0 [ 215.803656][T17331] __vmalloc_node_range_noprof+0x273/0xe00 [ 215.803828][T17331] ? sel_write_load+0x158/0x380 [ 215.803855][T17331] ? common_lsm_audit+0x1ca/0x230 [ 215.803874][T17331] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 215.803913][T17331] ? sel_write_load+0x158/0x380 [ 215.803941][T17331] vmalloc_noprof+0x82/0xc0 [ 215.804015][T17331] ? sel_write_load+0x158/0x380 [ 215.804069][T17331] sel_write_load+0x158/0x380 [ 215.804095][T17331] ? __pfx_sel_write_load+0x10/0x10 [ 215.804195][T17331] vfs_write+0x269/0x8e0 [ 215.804226][T17331] ? __rcu_read_unlock+0x4f/0x70 [ 215.804250][T17331] ? __fget_files+0x184/0x1c0 [ 215.804329][T17331] ksys_write+0xda/0x1a0 [ 215.804362][T17331] __x64_sys_write+0x40/0x50 [ 215.804446][T17331] x64_sys_call+0x2cdd/0x2fb0 [ 215.804471][T17331] do_syscall_64+0xd2/0x200 [ 215.804525][T17331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.804556][T17331] ? clear_bhb_loop+0x40/0x90 [ 215.804580][T17331] ? clear_bhb_loop+0x40/0x90 [ 215.804654][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.804678][T17331] RIP: 0033:0x7f9c4e78e929 [ 215.804695][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.804715][T17331] RSP: 002b:00007f9c4cdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.804734][T17331] RAX: ffffffffffffffda RBX: 00007f9c4e9b5fa0 RCX: 00007f9c4e78e929 [ 215.804749][T17331] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000007 [ 215.804796][T17331] RBP: 00007f9c4cdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.804812][T17331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.804827][T17331] R13: 0000000000000000 R14: 00007f9c4e9b5fa0 R15: 00007ffdc0ae9638 [ 215.804849][T17331] [ 215.805057][T17331] syz.3.3010: vmalloc error: size 65448, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 215.817568][T17329] loop0: detected capacity change from 0 to 512 [ 215.828784][T17329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.889877][T17329] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.890444][T17331] ,cpuset=/,mems_allowed=0 [ 215.890537][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.3.3010 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 215.890566][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.890577][T17331] Call Trace: [ 215.890584][T17331] [ 215.890592][T17331] __dump_stack+0x1d/0x30 [ 215.890614][T17331] dump_stack_lvl+0xe8/0x140 [ 215.890722][T17331] dump_stack+0x15/0x1b [ 215.890741][T17331] warn_alloc+0x12b/0x1a0 [ 215.890849][T17331] __vmalloc_node_range_noprof+0x297/0xe00 [ 215.890960][T17331] ? common_lsm_audit+0x1ca/0x230 [ 215.890983][T17331] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 215.891025][T17331] ? sel_write_load+0x158/0x380 [ 215.891055][T17331] vmalloc_noprof+0x82/0xc0 [ 215.891088][T17331] ? sel_write_load+0x158/0x380 [ 215.891122][T17331] sel_write_load+0x158/0x380 [ 215.891163][T17331] ? __pfx_sel_write_load+0x10/0x10 [ 215.891191][T17331] vfs_write+0x269/0x8e0 [ 215.891271][T17331] ? __rcu_read_unlock+0x4f/0x70 [ 215.891303][T17331] ? __fget_files+0x184/0x1c0 [ 215.891328][T17331] ksys_write+0xda/0x1a0 [ 215.891456][T17331] __x64_sys_write+0x40/0x50 [ 215.891492][T17331] x64_sys_call+0x2cdd/0x2fb0 [ 215.891595][T17331] do_syscall_64+0xd2/0x200 [ 215.891634][T17331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.891665][T17331] ? clear_bhb_loop+0x40/0x90 [ 215.891690][T17331] ? clear_bhb_loop+0x40/0x90 [ 215.891750][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.891767][T17331] RIP: 0033:0x7f9c4e78e929 [ 215.891779][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.891818][T17331] RSP: 002b:00007f9c4cdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.891834][T17331] RAX: ffffffffffffffda RBX: 00007f9c4e9b5fa0 RCX: 00007f9c4e78e929 [ 215.891849][T17331] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000007 [ 215.891864][T17331] RBP: 00007f9c4cdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.891879][T17331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.891894][T17331] R13: 0000000000000000 R14: 00007f9c4e9b5fa0 R15: 00007ffdc0ae9638 [ 215.891917][T17331] [ 215.891925][T17331] Mem-Info: [ 216.088552][T17338] netlink: 'syz.1.3011': attribute type 3 has an invalid length. [ 216.089954][T17331] active_anon:4033 inactive_anon:11 isolated_anon:0 [ 216.089954][T17331] active_file:6291 inactive_file:21243 isolated_file:0 [ 216.089954][T17331] unevictable:0 dirty:206 writeback:29 [ 216.089954][T17331] slab_reclaimable:3171 slab_unreclaimable:36723 [ 216.089954][T17331] mapped:29954 shmem:303 pagetables:1321 [ 216.089954][T17331] sec_pagetables:0 bounce:0 [ 216.089954][T17331] kernel_misc_reclaimable:0 [ 216.089954][T17331] free:1859660 free_pcp:9402 free_cma:0 [ 216.104773][T17336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.112625][T17331] Node 0 active_anon:16132kB inactive_anon:44kB active_file:25164kB inactive_file:84972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119816kB dirty:824kB writeback:116kB shmem:1212kB writeback_tmp:0kB kernel_stack:3552kB pagetables:5284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.156881][T17336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.158287][T17331] Node 0 [ 216.314117][T17338] loop1: detected capacity change from 0 to 512 [ 216.318093][T17331] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.318155][T17331] lowmem_reserve[]: 0 2882 7860 7860 [ 216.318243][T17331] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 216.318310][T17331] lowmem_reserve[]: 0 0 4978 4978 [ 216.318357][T17331] Node 0 Normal free:4475444kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16248kB inactive_anon:44kB active_file:25164kB inactive_file:84972kB unevictable:0kB writepending:708kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:34036kB local_pcp:15244kB free_cma:0kB [ 216.471669][T17338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.482881][T17331] lowmem_reserve[]: 0 0 0 0 [ 216.482958][T17331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.544566][T17331] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 216.560721][T17331] Node 0 Normal: 1061*4kB (UM) 334*8kB (UME) 123*16kB (UME) 272*32kB (UM) 220*64kB (UM) 63*128kB (UM) 17*256kB (UME) 25*512kB (UME) 51*1024kB (UM) 34*2048kB (U) 1049*4096kB (UM) = 4475444kB [ 216.579674][T17331] Node 0 hugepages_total=5 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 216.588998][T17331] 27929 total pagecache pages [ 216.593691][T17331] 11 pages in swap cache [ 216.597957][T17331] Free swap = 124952kB [ 216.602273][T17331] Total swap = 124996kB [ 216.606477][T17331] 2097051 pages RAM [ 216.610286][T17331] 0 pages HighMem/MovableOnly [ 216.614994][T17331] 80810 pages reserved [ 216.625083][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 216.634088][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'. [ 216.643130][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 216.660150][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'. [ 216.669269][T17344] netlink: 'syz.2.3015': attribute type 6 has an invalid length. [ 216.677457][T17346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17346 comm=syz.4.3014 [ 216.707002][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 216.749837][T17338] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.820708][T17355] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 216.858133][T17351] loop3: detected capacity change from 0 to 512 [ 216.875971][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 216.884763][T17344] lo speed is unknown, defaulting to 1000 [ 216.925260][T17351] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.953729][T17351] EXT4-fs (loop3): mount failed [ 217.054296][T17366] siw: device registration error -23 [ 217.144263][T17362] FAULT_INJECTION: forcing a failure. [ 217.144263][T17362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.157623][T17362] CPU: 0 UID: 0 PID: 17362 Comm: syz.4.3019 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 217.157688][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.157702][T17362] Call Trace: [ 217.157709][T17362] [ 217.157757][T17362] __dump_stack+0x1d/0x30 [ 217.157780][T17362] dump_stack_lvl+0xe8/0x140 [ 217.157863][T17362] dump_stack+0x15/0x1b [ 217.157877][T17362] should_fail_ex+0x265/0x280 [ 217.157903][T17362] should_fail_alloc_page+0xf2/0x100 [ 217.157981][T17362] __alloc_frozen_pages_noprof+0xff/0x360 [ 217.158111][T17362] alloc_pages_mpol+0xb3/0x250 [ 217.158151][T17362] vma_alloc_folio_noprof+0x1aa/0x300 [ 217.158186][T17362] handle_mm_fault+0xec2/0x2be0 [ 217.158262][T17362] ? __rcu_read_unlock+0x4f/0x70 [ 217.158297][T17362] do_user_addr_fault+0x3fe/0x1090 [ 217.158412][T17362] exc_page_fault+0x62/0xa0 [ 217.158509][T17362] asm_exc_page_fault+0x26/0x30 [ 217.158528][T17362] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 217.158580][T17362] Code: f1 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 217.158598][T17362] RSP: 0018:ffffc90010e23d50 EFLAGS: 00050206 [ 217.158661][T17362] RAX: ffff88811a19cb98 RBX: 0000000000001000 RCX: 0000000000000200 [ 217.158676][T17362] RDX: 0000000000000000 RSI: ffff888119447e00 RDI: 0000200000003000 [ 217.158690][T17362] RBP: ffff888119447000 R08: 00000000000002c5 R09: 0000000000000000 [ 217.158704][T17362] R10: 0001888119447000 R11: 0001888119447fff R12: 0000200000003200 [ 217.158767][T17362] R13: 00007ffffffff000 R14: 0000200000002200 R15: ffff888119447000 [ 217.158786][T17362] _copy_to_user+0x7c/0xa0 [ 217.158806][T17362] pagemap_read+0x379/0x5e0 [ 217.158882][T17362] ? __pfx_pagemap_read+0x10/0x10 [ 217.158915][T17362] vfs_read+0x1a0/0x6f0 [ 217.158978][T17362] ? __rcu_read_unlock+0x4f/0x70 [ 217.159001][T17362] ? __fget_files+0x184/0x1c0 [ 217.159022][T17362] __x64_sys_pread64+0xfd/0x150 [ 217.159127][T17362] x64_sys_call+0x296d/0x2fb0 [ 217.159157][T17362] do_syscall_64+0xd2/0x200 [ 217.159187][T17362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.159216][T17362] ? clear_bhb_loop+0x40/0x90 [ 217.159314][T17362] ? clear_bhb_loop+0x40/0x90 [ 217.159350][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.159374][T17362] RIP: 0033:0x7f337de1e929 [ 217.159390][T17362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.159409][T17362] RSP: 002b:00007f337c466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 217.159429][T17362] RAX: ffffffffffffffda RBX: 00007f337e046080 RCX: 00007f337de1e929 [ 217.159443][T17362] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000006 [ 217.159457][T17362] RBP: 00007f337c466090 R08: 0000000000000000 R09: 0000000000000000 [ 217.159470][T17362] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.159562][T17362] R13: 0000000000000000 R14: 00007f337e046080 R15: 00007ffce5a74848 [ 217.159584][T17362] [ 217.336794][T17373] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 217.708981][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 217.718110][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 217.727100][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 217.736484][T17381] netlink: 'syz.0.3025': attribute type 6 has an invalid length. [ 217.750061][T17383] loop4: detected capacity change from 0 to 2048 [ 217.791493][T17381] lo speed is unknown, defaulting to 1000 [ 217.835854][T17383] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.851509][T17383] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1894 with error 28 [ 217.864037][T17383] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.864037][T17383] [ 217.873711][T17383] EXT4-fs (loop4): Total free blocks count 0 [ 217.879773][T17383] EXT4-fs (loop4): Free/Dirty block details [ 217.885686][T17383] EXT4-fs (loop4): free_blocks=2415919104 [ 217.891431][T17383] EXT4-fs (loop4): dirty_blocks=1904 [ 217.896748][T17383] EXT4-fs (loop4): Block reservation details [ 217.902724][T17383] EXT4-fs (loop4): i_reserved_data_blocks=119 [ 217.963935][ T139] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 217.967101][T17395] siw: device registration error -23 [ 217.976381][ T139] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.976381][ T139] [ 218.032765][T17399] netlink: 'syz.2.3032': attribute type 6 has an invalid length. [ 218.081743][T17405] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 218.109309][T17407] loop0: detected capacity change from 0 to 512 [ 218.118808][T17414] lo speed is unknown, defaulting to 1000 [ 218.129065][T17407] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.213879][T17430] lo speed is unknown, defaulting to 1000 [ 218.238896][T17432] loop2: detected capacity change from 0 to 512 [ 218.245609][T17432] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.253004][T17434] netlink: 'syz.4.3042': attribute type 10 has an invalid length. [ 218.253022][T17432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.272069][T17432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 218.280106][T17432] System zones: 1-12 [ 218.284831][T17432] EXT4-fs (loop2): 1 truncate cleaned up [ 218.379519][T16883] EXT4-fs unmount: 75 callbacks suppressed [ 218.379581][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.493185][ T139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.528231][ T139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.561428][T17448] lo speed is unknown, defaulting to 1000 [ 218.569091][ T139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.625788][T17448] chnl_net:caif_netlink_parms(): no params data found [ 218.638839][ T139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.675584][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.682746][T17448] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.689936][T17448] bridge_slave_0: entered allmulticast mode [ 218.696264][T17448] bridge_slave_0: entered promiscuous mode [ 218.703066][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.710279][T17448] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.717665][T17448] bridge_slave_1: entered allmulticast mode [ 218.723994][T17448] bridge_slave_1: entered promiscuous mode [ 218.742749][T17448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.753028][T17448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.777389][T17448] team0: Port device team_slave_0 added [ 218.786321][T17448] team0: Port device team_slave_1 added [ 218.804542][ T139] bridge_slave_1: left allmulticast mode [ 218.810219][ T139] bridge_slave_1: left promiscuous mode [ 218.815906][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.823751][ T139] bridge_slave_0: left allmulticast mode [ 218.829467][ T139] bridge_slave_0: left promiscuous mode [ 218.835243][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.948672][T17448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.955698][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.961084][T17465] loop1: detected capacity change from 0 to 512 [ 218.981741][T17448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.999716][T17448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.006708][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.032736][T17448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.052595][T17465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.065996][T17465] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.080687][T17477] siw: device registration error -23 [ 219.094797][T17473] lo speed is unknown, defaulting to 1000 [ 219.119245][T17448] hsr_slave_0: entered promiscuous mode [ 219.125433][T17448] hsr_slave_1: entered promiscuous mode [ 219.131269][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 219.131283][ T29] audit: type=1400 audit(1752134864.132:20543): avc: denied { name_connect } for pid=17480 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 219.134367][T17448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.137511][ T29] audit: type=1400 audit(1752134864.132:20544): avc: denied { listen } for pid=17480 comm="syz.3.3057" lport=48957 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.137547][ T29] audit: type=1400 audit(1752134864.132:20545): avc: denied { accept } for pid=17480 comm="syz.3.3057" lport=48957 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.158403][T17448] Cannot create hsr debugfs directory [ 219.165476][ T29] audit: type=1400 audit(1752134864.132:20546): avc: denied { write } for pid=17480 comm="syz.3.3057" lport=48957 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 219.226111][T17486] random: crng reseeded on system resumption [ 219.241379][ T29] audit: type=1400 audit(1752134864.132:20547): avc: denied { setopt } for pid=17480 comm="syz.3.3057" lport=48957 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 219.273826][T16073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.316288][ T139] hsr_slave_0: left promiscuous mode [ 219.321851][ T139] hsr_slave_1: left promiscuous mode [ 219.331254][ T139] veth0_macvtap: left promiscuous mode [ 219.337024][ T139] veth1_vlan: left promiscuous mode [ 219.342298][ T139] veth0_vlan: left promiscuous mode [ 219.342375][T17493] loop3: detected capacity change from 0 to 512 [ 219.358734][T17493] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 219.369994][T17493] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.387501][T17493] EXT4-fs (loop3): mount failed [ 219.424804][ T139] team0 (unregistering): Port device team_slave_1 removed [ 219.431779][T17498] loop3: detected capacity change from 0 to 512 [ 219.440412][ T139] team0 (unregistering): Port device team_slave_0 removed [ 219.450026][T17498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.465215][T17498] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.493167][T17489] netlink: 'syz.2.3059': attribute type 6 has an invalid length. [ 219.506258][ T2959] infiniband syz5: ib_query_port failed (-19) [ 219.521765][ T3412] lo speed is unknown, defaulting to 1000 [ 219.527610][ T3412] infiniband syz0: ib_query_port failed (-19) [ 219.537865][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.581767][ T29] audit: type=1326 audit(1752134864.592:20548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 219.605423][ T29] audit: type=1326 audit(1752134864.592:20549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 219.629619][T17515] netlink: 'syz.3.3063': attribute type 10 has an invalid length. [ 219.638981][ T29] audit: type=1326 audit(1752134864.592:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 219.662668][ T29] audit: type=1326 audit(1752134864.592:20551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6727e929 code=0x7ffc0000 [ 219.698410][T17518] loop4: detected capacity change from 0 to 2048 [ 219.708247][T17518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 219.722496][T17513] loop1: detected capacity change from 0 to 512 [ 219.732706][T17513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.752352][T17513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.768147][T17513] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.812228][T17524] loop2: detected capacity change from 0 to 2048 [ 219.838213][T17524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 219.895358][T17527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.903894][T17527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.930734][T17524] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 219.948484][T17524] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1424 with error 28 [ 219.961039][T17524] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.961039][T17524] [ 219.970789][T17524] EXT4-fs (loop2): Total free blocks count 0 [ 219.976979][T17524] EXT4-fs (loop2): Free/Dirty block details [ 219.982979][T17524] EXT4-fs (loop2): free_blocks=2415919104 [ 219.988757][T17524] EXT4-fs (loop2): dirty_blocks=1440 [ 219.994055][T17524] EXT4-fs (loop2): Block reservation details [ 220.000109][T17524] EXT4-fs (loop2): i_reserved_data_blocks=90 [ 220.055585][ T389] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 220.096538][T17448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.112913][T17531] loop2: detected capacity change from 0 to 2048 [ 220.120521][T17448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.129481][T17448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.140033][T17448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.150167][T17531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 220.197750][T17448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.209437][T17448] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.229374][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.236501][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.260599][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.267696][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.278490][T17531] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.294501][T17531] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 220.301457][T17448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.306969][T17531] EXT4-fs (loop2): This should not happen!! Data will be lost [ 220.306969][T17531] [ 220.306983][T17531] EXT4-fs (loop2): Total free blocks count 0 [ 220.306993][T17531] EXT4-fs (loop2): Free/Dirty block details [ 220.307003][T17531] EXT4-fs (loop2): free_blocks=2415919104 [ 220.307013][T17531] EXT4-fs (loop2): dirty_blocks=2064 [ 220.307023][T17531] EXT4-fs (loop2): Block reservation details [ 220.317375][T17448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.327009][T17531] EXT4-fs (loop2): i_reserved_data_blocks=129 [ 220.425116][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.435275][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 220.520709][T17448] veth0_vlan: entered promiscuous mode [ 220.529521][T17448] veth1_vlan: entered promiscuous mode [ 220.537192][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 220.557290][T17448] veth0_macvtap: entered promiscuous mode [ 220.568563][T17549] loop2: detected capacity change from 0 to 512 [ 220.569789][T17448] veth1_macvtap: entered promiscuous mode [ 220.582737][T17549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.599808][T17448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.622158][T17448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.631470][T17549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.632148][T17448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.650036][T17549] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.653281][T17448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.672168][T17448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.681120][T17448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.693774][T17563] loop4: detected capacity change from 0 to 512 [ 220.713985][T17563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.728212][T17563] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.759761][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.813433][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.813801][T16073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.832002][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.841056][T17572] validate_nla: 1 callbacks suppressed [ 220.841088][T17572] netlink: 'syz.0.3049': attribute type 3 has an invalid length. [ 220.856820][T17574] netlink: 'syz.4.3073': attribute type 10 has an invalid length. [ 220.920452][T17572] loop0: detected capacity change from 0 to 512 [ 220.931879][T17572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.959653][T17576] lo speed is unknown, defaulting to 1000 [ 220.965591][T17576] lo speed is unknown, defaulting to 1000 [ 220.971814][T17576] lo speed is unknown, defaulting to 1000 [ 220.980776][T17576] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 220.995642][T17576] lo speed is unknown, defaulting to 1000 [ 221.002033][T17576] lo speed is unknown, defaulting to 1000 [ 221.009090][T17576] lo speed is unknown, defaulting to 1000 [ 221.015680][T17576] lo speed is unknown, defaulting to 1000 [ 221.022177][T17576] lo speed is unknown, defaulting to 1000 [ 221.030955][T17576] lo speed is unknown, defaulting to 1000 [ 221.054176][T17572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.078378][T17581] __nla_validate_parse: 12 callbacks suppressed [ 221.078394][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 221.093708][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'. [ 221.102846][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'. [ 221.113294][T17572] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.143144][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'. [ 221.152140][T17581] netlink: 'syz.1.3075': attribute type 6 has an invalid length. [ 221.160498][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 221.263712][T17582] lo speed is unknown, defaulting to 1000 [ 221.302426][T17585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.352327][T17585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.455115][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 221.464159][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3077'. [ 221.473149][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 221.484355][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3077'. [ 221.493352][T17598] netlink: 'syz.1.3077': attribute type 6 has an invalid length. [ 221.507062][T17588] lo speed is unknown, defaulting to 1000 [ 221.521092][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 221.571901][T17588] chnl_net:caif_netlink_parms(): no params data found [ 221.612479][T17598] lo speed is unknown, defaulting to 1000 [ 221.633074][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.640231][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.650005][T17588] bridge_slave_0: entered allmulticast mode [ 221.656626][T17588] bridge_slave_0: entered promiscuous mode [ 221.669594][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.676721][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.683900][T17588] bridge_slave_1: entered allmulticast mode [ 221.690505][T17588] bridge_slave_1: entered promiscuous mode [ 221.721387][T17588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.731775][T17588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.764586][T17588] team0: Port device team_slave_0 added [ 221.771036][T17612] netlink: 'syz.4.3079': attribute type 10 has an invalid length. [ 221.780252][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.780788][T17588] team0: Port device team_slave_1 added [ 221.809143][T17588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.816164][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.842321][T17588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.854188][T17588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.861284][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.887258][T17588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.921806][T17614] lo speed is unknown, defaulting to 1000 [ 221.924521][T17588] hsr_slave_0: entered promiscuous mode [ 221.933644][T17588] hsr_slave_1: entered promiscuous mode [ 221.939674][T17588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.948764][T17588] Cannot create hsr debugfs directory [ 221.956516][T17617] netlink: 'syz.1.3081': attribute type 6 has an invalid length. [ 222.042250][T17620] lo speed is unknown, defaulting to 1000 [ 222.051095][T17588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.089151][T17588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.121054][T17448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.139003][T17623] loop2: detected capacity change from 0 to 512 [ 222.158268][T17623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.158860][T17588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.176666][T17623] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.208732][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.228973][T17588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.268537][T17635] loop2: detected capacity change from 0 to 512 [ 222.272788][T17638] netlink: 'syz.1.3083': attribute type 10 has an invalid length. [ 222.284525][T17638] veth1_macvtap: left promiscuous mode [ 222.299342][T17635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.311913][T17635] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.343681][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.350764][T17588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.361734][T17588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.371408][T17588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.384536][T17588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.401019][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.408126][T17588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.415482][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.422566][T17588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.458488][T17588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.470569][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.478833][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.492165][T17588] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.504468][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.511574][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.522598][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.529790][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.573075][T17588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.643902][T17588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.707771][T17672] loop4: detected capacity change from 0 to 764 [ 222.718599][T17672] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.752352][T17588] veth0_vlan: entered promiscuous mode [ 222.760372][T17588] veth1_vlan: entered promiscuous mode [ 222.777221][T17588] veth0_macvtap: entered promiscuous mode [ 222.785417][T17588] veth1_macvtap: entered promiscuous mode [ 222.795252][T17672] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 222.801907][T17672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.809668][T17672] vhci_hcd vhci_hcd.0: Device attached [ 222.819636][T17588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.831350][T17588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.841990][T17588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.850982][T17588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.859792][T17588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.868606][T17588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.881484][T17676] vhci_hcd: connection closed [ 222.881781][ T37] vhci_hcd: stop threads [ 222.890889][ T37] vhci_hcd: release socket [ 222.895336][ T37] vhci_hcd: disconnect device [ 222.943943][T17682] siw: device registration error -23 [ 222.969580][T17684] lo speed is unknown, defaulting to 1000 [ 222.978207][T17686] loop2: detected capacity change from 0 to 2048 [ 222.988449][T17686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 223.074684][T17693] loop0: detected capacity change from 0 to 1024 [ 223.085547][T17693] EXT4-fs: Ignoring removed orlov option [ 223.091581][T17686] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.107973][T17686] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1982 with error 28 [ 223.119684][T17693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.120438][T17686] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.120438][T17686] [ 223.120450][T17686] EXT4-fs (loop2): Total free blocks count 0 [ 223.120464][T17686] EXT4-fs (loop2): Free/Dirty block details [ 223.154502][T17686] EXT4-fs (loop2): free_blocks=2415919104 [ 223.160389][T17686] EXT4-fs (loop2): dirty_blocks=1984 [ 223.165722][T17686] EXT4-fs (loop2): Block reservation details [ 223.171931][T17686] EXT4-fs (loop2): i_reserved_data_blocks=124 [ 223.207246][T17448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.252934][T17705] loop3: detected capacity change from 0 to 512 [ 223.261346][T17705] ext4: Unknown parameter 'mask' [ 223.316151][ T139] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 223.359362][T17718] loop2: detected capacity change from 0 to 2048 [ 223.385662][T17718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 223.425722][T17725] loop0: detected capacity change from 0 to 2048 [ 223.508470][T17725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 223.546815][T17718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.548424][ T139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.586677][T17718] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1152 with error 28 [ 223.599332][T17718] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.599332][T17718] [ 223.609149][T17718] EXT4-fs (loop2): Total free blocks count 0 [ 223.615154][T17718] EXT4-fs (loop2): Free/Dirty block details [ 223.621167][T17718] EXT4-fs (loop2): free_blocks=2415919104 [ 223.626953][T17718] EXT4-fs (loop2): dirty_blocks=1168 [ 223.632419][T17718] EXT4-fs (loop2): Block reservation details [ 223.638465][T17718] EXT4-fs (loop2): i_reserved_data_blocks=73 [ 223.651775][T17725] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.675521][T17725] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1016 with error 28 [ 223.688217][T17725] EXT4-fs (loop0): This should not happen!! Data will be lost [ 223.688217][T17725] [ 223.697919][T17725] EXT4-fs (loop0): Total free blocks count 0 [ 223.703941][T17725] EXT4-fs (loop0): Free/Dirty block details [ 223.709891][T17725] EXT4-fs (loop0): free_blocks=2415919104 [ 223.715628][T17725] EXT4-fs (loop0): dirty_blocks=1024 [ 223.721026][T17725] EXT4-fs (loop0): Block reservation details [ 223.727034][T17725] EXT4-fs (loop0): i_reserved_data_blocks=64 [ 223.744521][ T139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.775676][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 223.790762][ T139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.823469][T17730] lo speed is unknown, defaulting to 1000 [ 223.844033][T17742] siw: device registration error -23 [ 223.853611][ T139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.915067][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 223.931527][T17746] loop1: detected capacity change from 0 to 1024 [ 223.941925][T17746] EXT4-fs: Ignoring removed orlov option [ 223.955463][T17746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.990522][T16073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.002574][T17730] chnl_net:caif_netlink_parms(): no params data found [ 224.017213][ T139] bridge_slave_1: left allmulticast mode [ 224.022874][ T139] bridge_slave_1: left promiscuous mode [ 224.028606][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.037322][ T139] bridge_slave_0: left allmulticast mode [ 224.043106][ T139] bridge_slave_0: left promiscuous mode [ 224.048839][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.052696][T17744] loop2: detected capacity change from 0 to 512 [ 224.067030][T17744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.103543][T17744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.116821][T17744] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.140404][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 224.140419][ T29] audit: type=1326 audit(1752134869.152:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.186378][ T29] audit: type=1326 audit(1752134869.152:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.210034][ T29] audit: type=1326 audit(1752134869.152:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.233691][ T29] audit: type=1326 audit(1752134869.152:20850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.257375][ T29] audit: type=1326 audit(1752134869.152:20851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.281018][ T29] audit: type=1326 audit(1752134869.162:20852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.304604][ T29] audit: type=1326 audit(1752134869.162:20853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.309427][T17758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.328257][ T29] audit: type=1326 audit(1752134869.162:20854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.328288][ T29] audit: type=1326 audit(1752134869.162:20855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.328350][ T29] audit: type=1326 audit(1752134869.162:20856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f194b0de929 code=0x7ffc0000 [ 224.411157][T17758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.454382][T17760] netlink: 'syz.3.3112': attribute type 3 has an invalid length. [ 224.476094][T17762] lo speed is unknown, defaulting to 1000 [ 224.489458][T17763] loop3: detected capacity change from 0 to 512 [ 224.496837][T17763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.510791][ T139] tipc: Disabling bearer [ 224.515870][ T139] tipc: Left network mode [ 224.561653][T17763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.582168][T17763] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.603767][ T139] hsr_slave_0: left promiscuous mode [ 224.609454][ T139] hsr_slave_1: left promiscuous mode [ 224.669617][ T139] veth0_macvtap: left promiscuous mode [ 224.681961][ T139] veth1_vlan: left promiscuous mode [ 224.682580][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.688232][ T139] veth0_vlan: left promiscuous mode [ 224.707246][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.834804][T17774] loop1: detected capacity change from 0 to 512 [ 224.868452][T17774] ext4: Unknown parameter 'mask' [ 224.896286][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.903467][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.914506][T17730] bridge_slave_0: entered allmulticast mode [ 224.923793][T17730] bridge_slave_0: entered promiscuous mode [ 224.983666][T17785] loop1: detected capacity change from 0 to 2048 [ 225.000515][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.007674][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.014895][T17730] bridge_slave_1: entered allmulticast mode [ 225.022547][T17730] bridge_slave_1: entered promiscuous mode [ 225.046298][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.051067][T17785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 225.069106][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.094904][T17730] team0: Port device team_slave_0 added [ 225.105933][T17730] team0: Port device team_slave_1 added [ 225.117779][T17793] siw: device registration error -23 [ 225.125212][T17785] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.143156][T17785] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 518 with error 28 [ 225.155619][T17785] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.155619][T17785] [ 225.165390][T17785] EXT4-fs (loop1): Total free blocks count 0 [ 225.171468][T17785] EXT4-fs (loop1): Free/Dirty block details [ 225.177547][T17785] EXT4-fs (loop1): free_blocks=2415919104 [ 225.183321][T17785] EXT4-fs (loop1): dirty_blocks=528 [ 225.188559][T17785] EXT4-fs (loop1): Block reservation details [ 225.194545][T17785] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 225.202397][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.209495][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.235656][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.257614][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.264699][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.290668][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.326710][T17730] hsr_slave_0: entered promiscuous mode [ 225.332853][T17730] hsr_slave_1: entered promiscuous mode [ 225.341272][T17730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.363794][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.366731][T17730] Cannot create hsr debugfs directory [ 225.378683][ T290] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 225.487584][T17803] netlink: 'syz.2.3125': attribute type 6 has an invalid length. [ 225.579158][T17804] lo speed is unknown, defaulting to 1000 [ 225.593046][T17801] loop1: detected capacity change from 0 to 512 [ 225.604535][T17801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.682637][T17801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.699391][T17801] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.793294][T17809] loop0: detected capacity change from 0 to 512 [ 225.803108][T17809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.833763][T17809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.874290][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.894668][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.937791][T17809] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.962033][T17588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.993812][T17819] loop3: detected capacity change from 0 to 512 [ 226.004602][T17730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.025462][T17730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.027309][T17819] ext4: Unknown parameter 'mask' [ 226.039571][T17730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.053606][T17730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.155162][T17828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.166415][T17830] __nla_validate_parse: 15 callbacks suppressed [ 226.166430][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3130'. [ 226.181923][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 226.188855][T17828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.203892][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.289303][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.327095][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 226.334088][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.336145][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 226.343193][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.449149][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.456250][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.624606][T17846] loop2: detected capacity change from 0 to 2048 [ 226.643006][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.653173][T17846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 226.731973][T17846] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.747584][T17846] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1840 with error 28 [ 226.760085][T17846] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.760085][T17846] [ 226.760104][T17846] EXT4-fs (loop2): Total free blocks count 0 [ 226.760116][T17846] EXT4-fs (loop2): Free/Dirty block details [ 226.760145][T17846] EXT4-fs (loop2): free_blocks=2415919104 [ 226.760161][T17846] EXT4-fs (loop2): dirty_blocks=1856 [ 226.792784][T17846] EXT4-fs (loop2): Block reservation details [ 226.798904][T17846] EXT4-fs (loop2): i_reserved_data_blocks=116 [ 226.806111][T17850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3133'. [ 226.811250][T17730] veth0_vlan: entered promiscuous mode [ 226.822804][T17730] veth1_vlan: entered promiscuous mode [ 226.839874][T17730] veth0_macvtap: entered promiscuous mode [ 226.847400][T17730] veth1_macvtap: entered promiscuous mode [ 226.857822][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.872613][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.887768][T17730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.896791][T17730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.905674][T17730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.914639][T17730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.924202][ T139] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 226.941546][T16073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.973494][T17871] loop1: detected capacity change from 0 to 512 [ 226.991147][T17871] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.007998][T17871] EXT4-fs (loop1): mount failed [ 227.019644][T17882] loop3: detected capacity change from 0 to 1024 [ 227.026771][T17882] EXT4-fs: Ignoring removed orlov option [ 227.037147][T17881] lo speed is unknown, defaulting to 1000 [ 227.047611][T17884] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 227.056568][T17882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.090727][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 227.099756][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 227.108750][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 227.126974][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 227.136108][T17887] netlink: 'syz.1.3139': attribute type 6 has an invalid length. [ 227.145617][T17448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.145650][T17588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.157595][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 227.190401][T17891] siw: device registration error -23 [ 227.238038][T17896] siw: device registration error -23 [ 227.239772][T17888] lo speed is unknown, defaulting to 1000 [ 227.313135][T17905] loop4: detected capacity change from 0 to 2048 [ 227.338754][T17905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 227.413712][T17905] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.429408][T17905] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1858 with error 28 [ 227.442130][T17905] EXT4-fs (loop4): This should not happen!! Data will be lost [ 227.442130][T17905] [ 227.452092][T17905] EXT4-fs (loop4): Total free blocks count 0 [ 227.458328][T17905] EXT4-fs (loop4): Free/Dirty block details [ 227.464272][T17905] EXT4-fs (loop4): free_blocks=2415919104 [ 227.470188][T17905] EXT4-fs (loop4): dirty_blocks=1872 [ 227.475088][T17924] loop0: detected capacity change from 0 to 764 [ 227.475665][T17905] EXT4-fs (loop4): Block reservation details [ 227.487858][T17905] EXT4-fs (loop4): i_reserved_data_blocks=117 [ 227.508596][T17924] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.556742][ T139] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 227.611697][T17924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 227.618424][T17924] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.626183][T17924] vhci_hcd vhci_hcd.0: Device attached [ 227.636196][T17929] vhci_hcd: connection closed [ 227.636538][ T290] vhci_hcd: stop threads [ 227.645499][ T290] vhci_hcd: release socket [ 227.650050][ T290] vhci_hcd: disconnect device [ 227.661989][T17927] loop4: detected capacity change from 0 to 512 [ 227.673061][T17927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.693842][T17927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.706976][T17927] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.839168][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.850348][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.178987][T17940] siw: device registration error -23 [ 228.391228][T17964] loop3: detected capacity change from 0 to 2048 [ 228.408754][T17964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 228.476979][T17964] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.493323][T17964] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 228.505995][T17964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 228.505995][T17964] [ 228.515854][T17964] EXT4-fs (loop3): Total free blocks count 0 [ 228.522005][T17964] EXT4-fs (loop3): Free/Dirty block details [ 228.527958][T17964] EXT4-fs (loop3): free_blocks=2415919104 [ 228.533826][T17964] EXT4-fs (loop3): dirty_blocks=2336 [ 228.539134][T17964] EXT4-fs (loop3): Block reservation details [ 228.545333][T17964] EXT4-fs (loop3): i_reserved_data_blocks=146 [ 228.553063][T17730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.582105][T17972] netlink: 'syz.4.3162': attribute type 3 has an invalid length. [ 228.619604][ T139] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 228.660768][T17974] loop3: detected capacity change from 0 to 1024 [ 228.667545][T17974] EXT4-fs: Ignoring removed orlov option [ 228.678134][T17974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.680853][T17972] loop4: detected capacity change from 0 to 512 [ 228.704441][T17972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.720990][T17977] netlink: 'syz.2.3164': attribute type 3 has an invalid length. [ 228.768539][T17972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.787286][T17972] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.792390][T17977] loop2: detected capacity change from 0 to 512 [ 228.815083][T17977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.848460][T17977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.862154][T17977] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.947994][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.966706][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.987435][T17588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.009341][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.105951][T17990] loop0: detected capacity change from 0 to 1024 [ 229.116670][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.125071][T17990] EXT4-fs: Ignoring removed orlov option [ 229.149350][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 229.149364][ T29] audit: type=1326 audit(1752134874.162:21231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.154545][T17993] netlink: 'syz.3.3167': attribute type 3 has an invalid length. [ 229.155581][ T29] audit: type=1326 audit(1752134874.162:21232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.171920][ T29] audit: type=1326 audit(1752134874.162:21233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.234897][ T29] audit: type=1326 audit(1752134874.162:21234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.258482][ T29] audit: type=1326 audit(1752134874.162:21235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.282059][ T29] audit: type=1326 audit(1752134874.162:21236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.305741][ T29] audit: type=1326 audit(1752134874.162:21237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.329379][ T29] audit: type=1326 audit(1752134874.162:21238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.352895][ T29] audit: type=1326 audit(1752134874.162:21239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.376502][ T29] audit: type=1326 audit(1752134874.162:21240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd6184ee929 code=0x7ffc0000 [ 229.398426][T17990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.414677][T17993] loop3: detected capacity change from 0 to 512 [ 229.485813][T17448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.502737][T17996] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 229.548282][T17993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.589460][T17993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.603526][T17993] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.735682][T18008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.785219][T18008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.082795][T17730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.129699][T18015] hub 6-0:1.0: USB hub found [ 230.134420][T18015] hub 6-0:1.0: 8 ports detected [ 230.340078][T16883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.439395][T18069] loop0: detected capacity change from 0 to 512 [ 230.458762][T18069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.471835][T18069] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.521729][T17588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.554694][T18092] netlink: 'syz.3.3177': attribute type 6 has an invalid length. [ 230.581891][T18089] loop0: detected capacity change from 0 to 512 [ 230.601888][T18089] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.621356][T18092] lo speed is unknown, defaulting to 1000 [ 230.708376][T18114] lo speed is unknown, defaulting to 1000 [ 230.768493][T18126] loop3: detected capacity change from 0 to 512 [ 230.783678][T18126] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.807403][T18131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.807632][T18126] EXT4-fs (loop3): mount failed [ 230.814854][T18131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.827723][T18131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.835151][T18131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.952136][T18142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.959672][T18142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.980788][T18142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.988468][T18142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.102768][T18175] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 231.115035][T18175] veth1_macvtap: left promiscuous mode [ 231.190620][T18182] loop1: detected capacity change from 0 to 512 [ 231.190873][T18187] loop0: detected capacity change from 0 to 2048 [ 231.210087][T18182] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.277718][T18187] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.294033][T18187] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 992 with error 28 [ 231.306625][T18187] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.306625][T18187] [ 231.316380][T18187] EXT4-fs (loop0): Total free blocks count 0 [ 231.322388][T18187] EXT4-fs (loop0): Free/Dirty block details [ 231.328327][T18187] EXT4-fs (loop0): free_blocks=2415919104 [ 231.334100][T18187] EXT4-fs (loop0): dirty_blocks=1936 [ 231.339473][T18187] EXT4-fs (loop0): Block reservation details [ 231.340229][T18207] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 231.345469][T18187] EXT4-fs (loop0): i_reserved_data_blocks=121 [ 231.389038][T18209] __nla_validate_parse: 12 callbacks suppressed [ 231.389051][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 231.404455][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 231.413482][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 231.422697][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 231.431736][T18209] netlink: 'syz.2.3194': attribute type 6 has an invalid length. [ 231.440833][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 231.502508][T18210] lo speed is unknown, defaulting to 1000 [ 231.674602][T18215] loop2: detected capacity change from 0 to 2048 [ 231.743910][T18215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.758783][T18215] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 231.771364][T18215] EXT4-fs (loop2): This should not happen!! Data will be lost [ 231.771364][T18215] [ 231.781275][T18215] EXT4-fs (loop2): Total free blocks count 0 [ 231.787266][T18215] EXT4-fs (loop2): Free/Dirty block details [ 231.793163][T18215] EXT4-fs (loop2): free_blocks=2415919104 [ 231.798972][T18215] EXT4-fs (loop2): dirty_blocks=2400 [ 231.804257][T18215] EXT4-fs (loop2): Block reservation details [ 231.810359][T18215] EXT4-fs (loop2): i_reserved_data_blocks=150 [ 231.952576][T18224] netlink: 'syz.3.3198': attribute type 10 has an invalid length. [ 231.967584][T18226] siw: device registration error -23 [ 232.015601][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 232.028240][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 232.028240][ T31] [ 232.048846][T18232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.056358][T18232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.064188][T18232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.071781][T18232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.287697][T18247] loop0: detected capacity change from 0 to 512 [ 232.297644][T18247] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.312859][T18247] EXT4-fs (loop0): mount failed [ 232.332258][T18251] hub 6-0:1.0: USB hub found [ 232.339813][T18251] hub 6-0:1.0: 8 ports detected [ 232.515804][ T389] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 232.528141][ T389] EXT4-fs (loop2): This should not happen!! Data will be lost [ 232.528141][ T389] [ 232.546833][T18289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3221'. [ 232.555940][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 232.634407][T18308] siw: device registration error -23 [ 232.699353][T18321] loop0: detected capacity change from 0 to 2048 [ 232.775396][T18321] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 232.790545][T18335] loop3: detected capacity change from 0 to 764 [ 232.797708][T18321] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1328 with error 28 [ 232.810218][T18321] EXT4-fs (loop0): This should not happen!! Data will be lost [ 232.810218][T18321] [ 232.810237][T18321] EXT4-fs (loop0): Total free blocks count 0 [ 232.810253][T18321] EXT4-fs (loop0): Free/Dirty block details [ 232.810266][T18321] EXT4-fs (loop0): free_blocks=2415919104 [ 232.810336][T18321] EXT4-fs (loop0): dirty_blocks=1344 [ 232.810349][T18321] EXT4-fs (loop0): Block reservation details [ 232.810363][T18321] EXT4-fs (loop0): i_reserved_data_blocks=84 [ 232.857463][T18335] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 232.938956][T18335] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 232.945658][T18335] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 232.953343][T18335] vhci_hcd vhci_hcd.0: Device attached [ 232.960601][T18352] vhci_hcd: connection closed [ 232.960654][ T290] vhci_hcd: stop threads [ 232.969732][ T290] vhci_hcd: release socket [ 232.974204][ T290] vhci_hcd: disconnect device [ 233.115349][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 233.124391][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3217'. [ 233.133484][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 233.142754][T18383] netlink: 'syz.4.3217': attribute type 6 has an invalid length. [ 233.192391][T18383] lo speed is unknown, defaulting to 1000 [ 233.413414][T18415] loop4: detected capacity change from 0 to 512 [ 233.427124][T18415] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.442029][T18415] EXT4-fs (loop4): mount failed [ 233.533230][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 233.545496][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 233.545496][ T31] [ 233.577459][T18425] siw: device registration error -23 [ 233.638539][T18430] lo speed is unknown, defaulting to 1000 [ 233.691521][T18443] netlink: 'syz.2.3229': attribute type 10 has an invalid length. [ 233.782099][T18446] loop3: detected capacity change from 0 to 512 [ 233.808441][T18446] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.849245][T18456] loop3: detected capacity change from 0 to 2048 [ 233.904541][T18462] loop4: detected capacity change from 0 to 1024 [ 233.911913][T18462] EXT4-fs: Ignoring removed orlov option [ 233.950065][T18456] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.967143][T18456] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1664 with error 28 [ 233.979746][T18456] EXT4-fs (loop3): This should not happen!! Data will be lost [ 233.979746][T18456] [ 233.989430][T18456] EXT4-fs (loop3): Total free blocks count 0 [ 233.995522][T18456] EXT4-fs (loop3): Free/Dirty block details [ 234.001454][T18456] EXT4-fs (loop3): free_blocks=2415919104 [ 234.007210][T18456] EXT4-fs (loop3): dirty_blocks=1984 [ 234.012542][T18456] EXT4-fs (loop3): Block reservation details [ 234.018562][T18456] EXT4-fs (loop3): i_reserved_data_blocks=124 [ 234.158799][T18477] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 234.298106][T18481] lo speed is unknown, defaulting to 1000 [ 234.405266][T18484] siw: device registration error -23 [ 234.428734][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 234.428751][ T29] audit: type=1326 audit(1752134879.442:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.458753][ T29] audit: type=1326 audit(1752134879.442:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.482565][ T29] audit: type=1326 audit(1752134879.442:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.506254][ T29] audit: type=1326 audit(1752134879.442:21785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.529951][ T29] audit: type=1326 audit(1752134879.442:21786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.553687][ T29] audit: type=1326 audit(1752134879.442:21787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.580780][ T29] audit: type=1326 audit(1752134879.472:21788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.604364][ T29] audit: type=1326 audit(1752134879.492:21789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.604818][T18487] netlink: 'syz.4.3244': attribute type 3 has an invalid length. [ 234.627841][ T29] audit: type=1326 audit(1752134879.502:21790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.627878][ T29] audit: type=1326 audit(1752134879.502:21791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1735e2e929 code=0x7ffc0000 [ 234.700559][ T290] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 234.705708][T18494] loop4: detected capacity change from 0 to 512 [ 234.712956][ T290] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.712956][ T290] [ 234.719482][T18494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.748621][T18494] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.807575][T18507] loop2: detected capacity change from 0 to 1024 [ 234.814319][T18507] EXT4-fs: Ignoring removed orlov option [ 234.846408][T18509] loop3: detected capacity change from 0 to 512 [ 234.858261][T18509] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 234.896878][T18509] EXT4-fs (loop3): mount failed [ 235.013755][T18514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.029877][T18514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.076748][T18518] loop1: detected capacity change from 0 to 128 [ 235.132313][T18522] lo speed is unknown, defaulting to 1000 [ 235.315313][T18529] siw: device registration error -23 [ 235.348215][T18531] random: crng reseeded on system resumption [ 235.410274][T18536] hub 6-0:1.0: USB hub found [ 235.415078][T18536] hub 6-0:1.0: 8 ports detected [ 235.513093][T18545] netlink: 'syz.2.3261': attribute type 6 has an invalid length. [ 235.578115][T18545] lo speed is unknown, defaulting to 1000 [ 235.680778][T18557] loop3: detected capacity change from 0 to 512 [ 235.699544][T18557] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.714778][T18557] EXT4-fs (loop3): mount failed [ 235.757892][T18566] netlink: 'syz.3.3268': attribute type 6 has an invalid length. [ 235.765802][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.773266][T18562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.785553][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.793177][T18562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.850226][T18576] netlink: 'syz.4.3270': attribute type 10 has an invalid length. [ 235.858783][T18576] veth1_macvtap: left promiscuous mode [ 235.928370][T18589] netlink: 'syz.3.3278': attribute type 6 has an invalid length. [ 235.952712][T18590] netlink: 'syz.2.3275': attribute type 10 has an invalid length. [ 235.998216][T18591] lo speed is unknown, defaulting to 1000 [ 236.147243][T18594] netlink: 'syz.3.3279': attribute type 3 has an invalid length. [ 236.219010][T18594] loop3: detected capacity change from 0 to 512 [ 236.231699][T18594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.252727][T18594] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.328513][T18598] loop1: detected capacity change from 0 to 512 [ 236.337748][T18598] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.353267][T18598] EXT4-fs (loop1): mount failed [ 236.380881][T18603] openvswitch: netlink: Message has 6 unknown bytes. [ 236.388695][T18604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.397209][T18604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.492877][T18606] __nla_validate_parse: 21 callbacks suppressed [ 236.492915][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'. [ 236.508336][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3282'. [ 236.517331][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'. [ 236.526596][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3282'. [ 236.714513][T18633] loop4: detected capacity change from 0 to 2048 [ 236.767823][T18640] lo speed is unknown, defaulting to 1000 [ 236.785489][T18633] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.800494][T18633] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1870 with error 28 [ 236.813006][T18633] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.813006][T18633] [ 236.822734][T18633] EXT4-fs (loop4): Total free blocks count 0 [ 236.828799][T18633] EXT4-fs (loop4): Free/Dirty block details [ 236.834732][T18633] EXT4-fs (loop4): free_blocks=2415919104 [ 236.840455][T18633] EXT4-fs (loop4): dirty_blocks=1872 [ 236.845764][T18633] EXT4-fs (loop4): Block reservation details [ 236.851761][T18633] EXT4-fs (loop4): i_reserved_data_blocks=117 [ 236.931662][T18647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 236.940720][T18647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3294'. [ 236.949685][T18647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 236.958703][T18647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3294'. [ 237.174279][T18657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.181916][T18657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.183873][T18650] hub 6-0:1.0: USB hub found [ 237.193833][T18650] hub 6-0:1.0: 8 ports detected [ 237.195074][T18657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.206326][T18657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.450681][T18708] loop0: detected capacity change from 0 to 1024 [ 237.459072][T18708] EXT4-fs: Ignoring removed orlov option [ 237.512536][T18701] loop3: detected capacity change from 0 to 512 [ 237.524679][T18701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.552090][ T389] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 237.564361][ T389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 237.564361][ T389] [ 237.580881][T18701] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.719296][T18730] loop4: detected capacity change from 0 to 512 [ 237.740885][T18730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.771462][T18738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.805859][T18738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.828792][T18730] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.868958][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3307'. [ 237.878148][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 238.037445][T18772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.073771][T18772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.115754][T18851] validate_nla: 4 callbacks suppressed [ 239.115774][T18851] netlink: 'syz.0.3320': attribute type 6 has an invalid length. [ 239.167847][T18859] xt_nfacct: accounting object `syz1' does not exists [ 239.175294][T18860] netlink: 'syz.4.3319': attribute type 10 has an invalid length. [ 239.179872][T18859] loop1: detected capacity change from 0 to 512 [ 239.193061][T18859] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.204544][T18864] netlink: 'syz.3.3324': attribute type 6 has an invalid length. [ 239.208647][T18859] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.3322: bad orphan inode 13 [ 239.223665][T18859] ext4_test_bit(bit=12, block=18) = 1 [ 239.229142][T18859] is_bad_inode(inode)=0 [ 239.233332][T18859] NEXT_ORPHAN(inode)=2130706432 [ 239.238250][T18859] max_ino=32 [ 239.241493][T18859] i_nlink=1 [ 239.247287][T18861] lo speed is unknown, defaulting to 1000 [ 239.289039][T18865] lo speed is unknown, defaulting to 1000 [ 239.389451][T18872] netlink: 'syz.0.3326': attribute type 3 has an invalid length. [ 239.445072][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 239.445088][ T29] audit: type=1326 audit(1752134884.452:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22ea34d3df code=0x7ffc0000 [ 239.476097][ T29] audit: type=1326 audit(1752134884.472:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22ea34e9b7 code=0x7ffc0000 [ 239.477942][T18872] loop0: detected capacity change from 0 to 512 [ 239.499603][ T29] audit: type=1326 audit(1752134884.482:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ea34d290 code=0x7ffc0000 [ 239.514366][T18872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.530252][ T29] audit: type=1326 audit(1752134884.482:22199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22ea34e52b code=0x7ffc0000 [ 239.530285][ T29] audit: type=1326 audit(1752134884.522:22200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22ea34d58a code=0x7ffc0000 [ 239.530327][ T29] audit: type=1326 audit(1752134884.522:22201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22ea34d58a code=0x7ffc0000 [ 239.530357][ T29] audit: type=1326 audit(1752134884.522:22202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f22ea34d197 code=0x7ffc0000 [ 239.530385][ T29] audit: type=1326 audit(1752134884.522:22203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f22ea3500ca code=0x7ffc0000 [ 239.678652][ T29] audit: type=1400 audit(1752134884.692:22204): avc: denied { read } for pid=18875 comm="syz.3.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.707811][T18872] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.719844][ T29] audit: type=1326 audit(1752134884.732:22205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18871 comm="syz.0.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ea34d290 code=0x7ffc0000 [ 239.751955][T18878] loop3: detected capacity change from 0 to 512 [ 239.770142][T18878] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.871537][T18888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.880321][T18888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.980103][T18891] netlink: 'syz.2.3341': attribute type 6 has an invalid length. [ 240.065147][T18891] lo speed is unknown, defaulting to 1000 [ 240.189487][T18906] hub 6-0:1.0: USB hub found [ 240.194292][T18906] hub 6-0:1.0: 8 ports detected [ 240.243340][T18921] netlink: 'syz.2.3336': attribute type 6 has an invalid length. [ 240.318222][T18936] lo speed is unknown, defaulting to 1000 [ 240.413574][T18951] loop4: detected capacity change from 0 to 512 [ 240.447463][T18951] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.561380][T18995] netlink: 'syz.4.3342': attribute type 10 has an invalid length. [ 240.663851][T19014] loop2: detected capacity change from 0 to 512 [ 240.678026][T19014] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.720282][T19014] EXT4-fs (loop2): mount failed [ 240.902963][T19069] netlink: 'syz.2.3353': attribute type 6 has an invalid length. [ 240.931532][T19065] loop0: detected capacity change from 0 to 512 [ 240.949695][T19065] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.370456][T19116] loop4: detected capacity change from 0 to 512 [ 241.387641][T19116] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 241.402603][T19116] EXT4-fs (loop4): mount failed [ 241.473983][T19125] lo speed is unknown, defaulting to 1000 [ 241.592900][T19130] __nla_validate_parse: 30 callbacks suppressed [ 241.592912][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3364'. [ 241.608457][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 241.731803][T19154] loop4: detected capacity change from 0 to 2048 [ 241.758837][T19154] lo speed is unknown, defaulting to 1000 [ 241.900537][T19168] lo speed is unknown, defaulting to 1000 [ 241.939216][T19170] hub 6-0:1.0: USB hub found [ 241.943886][T19170] hub 6-0:1.0: 8 ports detected [ 242.114130][T19208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 242.120678][T19208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 242.128492][T19208] vhci_hcd vhci_hcd.0: Device attached [ 242.134585][T19213] vhci_hcd: connection closed [ 242.134849][ T31] vhci_hcd: stop threads [ 242.144035][ T31] vhci_hcd: release socket [ 242.148553][ T31] vhci_hcd: disconnect device [ 242.534159][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'. [ 242.543195][T19291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'. [ 242.552186][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'. [ 242.579476][T19291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'. [ 242.588531][T19291] netlink: 'syz.1.3382': attribute type 6 has an invalid length. [ 242.625443][T19304] lo speed is unknown, defaulting to 1000 [ 242.703241][T19311] loop1: detected capacity change from 0 to 2048 [ 242.824583][T19328] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 242.844909][T19311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 242.872464][T19311] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1550 with max blocks 2 with error 28 [ 242.884943][T19311] EXT4-fs (loop1): This should not happen!! Data will be lost [ 242.884943][T19311] [ 242.894754][T19311] EXT4-fs (loop1): Total free blocks count 0 [ 242.900850][T19311] EXT4-fs (loop1): Free/Dirty block details [ 242.903205][T19331] loop3: detected capacity change from 0 to 1024 [ 242.906861][T19311] EXT4-fs (loop1): free_blocks=2415919104 [ 242.913491][T19331] EXT4-fs: Ignoring removed orlov option [ 242.918901][T19311] EXT4-fs (loop1): dirty_blocks=1984 [ 242.918918][T19311] EXT4-fs (loop1): Block reservation details [ 242.918931][T19311] EXT4-fs (loop1): i_reserved_data_blocks=124 [ 243.022389][T19331] ================================================================== [ 243.030602][T19331] BUG: KCSAN: data-race in filemap_read / filemap_read [ 243.037490][T19331] [ 243.039823][T19331] write to 0xffff888110e72be8 of 8 bytes by task 19333 on cpu 0: [ 243.047558][T19331] filemap_read+0x974/0xa00 [ 243.052098][T19331] generic_file_read_iter+0x79/0x330 [ 243.057409][T19331] ext4_file_read_iter+0x1cc/0x290 [ 243.062537][T19331] copy_splice_read+0x3c1/0x5f0 [ 243.067414][T19331] splice_direct_to_actor+0x290/0x680 [ 243.072818][T19331] do_splice_direct+0xda/0x150 [ 243.077614][T19331] do_sendfile+0x380/0x650 [ 243.082053][T19331] __x64_sys_sendfile64+0x105/0x150 [ 243.087283][T19331] x64_sys_call+0xb39/0x2fb0 [ 243.091910][T19331] do_syscall_64+0xd2/0x200 [ 243.096439][T19331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.102336][T19331] [ 243.104655][T19331] write to 0xffff888110e72be8 of 8 bytes by task 19331 on cpu 1: [ 243.112379][T19331] filemap_read+0x974/0xa00 [ 243.116885][T19331] generic_file_read_iter+0x79/0x330 [ 243.122192][T19331] ext4_file_read_iter+0x1cc/0x290 [ 243.127300][T19331] copy_splice_read+0x3c1/0x5f0 [ 243.132156][T19331] splice_direct_to_actor+0x290/0x680 [ 243.137537][T19331] do_splice_direct+0xda/0x150 [ 243.142327][T19331] do_sendfile+0x380/0x650 [ 243.146742][T19331] __x64_sys_sendfile64+0x105/0x150 [ 243.151937][T19331] x64_sys_call+0xb39/0x2fb0 [ 243.156526][T19331] do_syscall_64+0xd2/0x200 [ 243.161037][T19331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.166949][T19331] [ 243.169275][T19331] value changed: 0x0000000000000216 -> 0x0000000000000217 [ 243.176387][T19331] [ 243.178725][T19331] Reported by Kernel Concurrency Sanitizer on: [ 243.184900][T19331] CPU: 1 UID: 0 PID: 19331 Comm: syz.3.3388 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 243.197426][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.207506][T19331] ================================================================== [ 243.527900][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 243.540653][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 243.540653][ T51]