last executing test programs: 1m23.464575095s ago: executing program 2 (id=632): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x17da, &(0x7f0000000100)={0x0, 0xa218, 0x400, 0xffc, 0x5cc, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) io_cancel(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) connect$inet6(r8, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) (async) sendto$inet6(r8, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) (async) close(r8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0xb}, 0x18) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) (async, rerun: 64) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (rerun: 64) 1m23.366390912s ago: executing program 2 (id=639): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 1m23.207138455s ago: executing program 2 (id=644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) (async) vmsplice(r1, 0x0, 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r2, r0, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x4da4, &(0x7f0000000300)={0x0, 0x4661, 0x0, 0x3, 0x1b0}, &(0x7f0000000000), &(0x7f0000000680)) (async) r6 = syz_io_uring_setup(0x4da4, &(0x7f0000000300)={0x0, 0x4661, 0x0, 0x3, 0x1b0}, &(0x7f0000000000)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) (async) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r4, r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x25, 0x6b]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x25, 0x6b]}}]}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) 1m22.792190759s ago: executing program 2 (id=658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000007b8af8ff000000fc11e066d15ed112007b8af0ff00000000bfa100000000000007010000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000001215248700b705000008000000850000006900080095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff09, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x10a41) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x2d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="38df9f10ca9e"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004401}, 0x48) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\t'], 0xa) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m22.303398458s ago: executing program 2 (id=661): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r1) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0xf, 0x8, 0x0, 0x44c}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0xffff, 0x2, 0x5, 0x6}, {0xf141, 0x3, 0x9, 0x9}, {0xff47, 0x6, 0x5, 0x5}]}, 0x10) r3 = io_uring_setup(0x4cdc, &(0x7f0000001400)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209, 0x0, r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xa000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) (async) io_uring_enter(r3, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) (async, rerun: 32) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) (async, rerun: 32) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x2000000, [{0x4, 0xf303}, {0x280, 0xffffffff}]}, 0x14, 0x0) (async) close(r4) 1m21.934291928s ago: executing program 2 (id=666): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/profiling', 0x30002, 0x85) copy_file_range(r0, &(0x7f0000000000)=0x401, r0, 0x0, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a0000fbffffff0000000000000000"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x9d, &(0x7f00000007c0)=""/157, 0x41000, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, 0xffffffffffffffff, r3, r0, r3], &(0x7f0000000900)=[{0x1, 0x4, 0x9, 0xc}, {0x3, 0x1, 0x1, 0x6}, {0x3, 0x5, 0xa}, {0x4, 0x4, 0xc, 0xa}, {0x0, 0x4, 0x1}], 0x10, 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x20050890) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0x5c, &(0x7f0000000300)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="35584bb45f5fdd75e07146c781", @ANYRES64=r8, @ANYRESOCT=r10, @ANYRES64, @ANYRES8=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x18400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10002}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xe4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x38, 0x1000, &(0x7f0000000f80)=""/4096, 0x40f00, 0x37, '\x00', 0x0, @fallback=0xe, r0, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xc, 0x1000000, 0x1}, 0x10, 0x0, r7, 0x0, &(0x7f0000000ac0)=[r1, r10, 0x1, r12, r1], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0x401, 0xe94, 0x808, r1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xc}, 0x50) write$selinux_user(r0, &(0x7f0000000300)={'system_u:object_r:smartcard_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x31) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) 1m21.933790208s ago: executing program 32 (id=666): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/profiling', 0x30002, 0x85) copy_file_range(r0, &(0x7f0000000000)=0x401, r0, 0x0, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a0000fbffffff0000000000000000"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x9d, &(0x7f00000007c0)=""/157, 0x41000, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, 0xffffffffffffffff, r3, r0, r3], &(0x7f0000000900)=[{0x1, 0x4, 0x9, 0xc}, {0x3, 0x1, 0x1, 0x6}, {0x3, 0x5, 0xa}, {0x4, 0x4, 0xc, 0xa}, {0x0, 0x4, 0x1}], 0x10, 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x20050890) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0x5c, &(0x7f0000000300)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="35584bb45f5fdd75e07146c781", @ANYRES64=r8, @ANYRESOCT=r10, @ANYRES64, @ANYRES8=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x18400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10002}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xe4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x38, 0x1000, &(0x7f0000000f80)=""/4096, 0x40f00, 0x37, '\x00', 0x0, @fallback=0xe, r0, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xc, 0x1000000, 0x1}, 0x10, 0x0, r7, 0x0, &(0x7f0000000ac0)=[r1, r10, 0x1, r12, r1], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0x401, 0xe94, 0x808, r1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xc}, 0x50) write$selinux_user(r0, &(0x7f0000000300)={'system_u:object_r:smartcard_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x31) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) 1m11.729083539s ago: executing program 4 (id=937): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendfile(r4, r3, 0x0, 0x10) 1m11.685489822s ago: executing program 4 (id=938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) 1m11.567610542s ago: executing program 4 (id=943): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xfff9, 0xbf, 0xfe, 0x8}, {0xc, 0x8, 0x20, 0x8001}]}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="faac959ff1a7eccf54f473641f7febd3e232ab61f3606fd895cf8e0076824694accb6733432209cf041064a05f47359cc217ff878df0138c3ed5b01a74f6d5fb668de0416a6a8e2d3cfba05367f3176517ff42e37badc83702ac088d02", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000180)={0x23, 0xa0, 0x8, 0x9}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='((!)') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1855000000bb00551a00000000000000b6327a5f007e526353184c5fd047f5130b7ef06eb1d7380b72bfdf36dc81efd3684e59d9018bce2fc3f93a281f342b6a8aeb12c1c505000000b0ac5e7911aedd6204e43ff0f4b8510735fd70c7c1c5670a56f0f4c771259a7f84e78690fd03373d3d6985f5a5f5d72f6f6c628fd9667291ffa7b015bd8bd63ba9d7b8a4040739746ec7170404e12a6e43866481f32cee3cfdfed4e2cbf0a142d92c57a8c332d6cf0bdb092bfc1695b50fa8d57fb372cc99a0d9c49cb9da500b1a0a46880fd0730ad250193cb8bef0f8717dac8ebe49df4b59297ea9dcec1630e9a858a528fcb9e7f367052fead785b3eca4611abbbbf671", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000240)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x45d, &(0x7f00000014c0)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31832abd7000000000001900a2a8180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r10}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f0000ffd000/0x2000)=nil, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'hsr0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r11}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000540), 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r11, 0x40, 0x8, 0x26f0, 0x0, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x64, 0x0, 0x81, 0x29, 0x0, @empty, @private=0xa010101, {[@generic={0x82, 0x2}]}}}}}) 1m10.689265043s ago: executing program 4 (id=959): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x70802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380), 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) sendfile(r4, r4, 0x0, 0x5) r6 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000004}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x100ef, 0x7fa962bfffff, 0x13012, r2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f00000003c0)="3700000f0000ff3f13000000170a001700000000288a1d824cfe040037000d00030001362564aa58b9a6c011f6bbf44cc4000000000000000000000000e29635da2a03c3674fb0b13b9c346ae0bb144f04c3ef", 0x53}], 0x1) 1m10.286898115s ago: executing program 4 (id=965): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d0001000000000000", @ANYRES32=r5, @ANYBLOB="000096000a000200"], 0x28}}, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, 0x0, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x4, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, 0x0, 0x0) r9 = gettid() r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r10, &(0x7f00000004c0)=""/218, 0xda) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f00000001c0)={0x2bd, @tick=0x400, 0xfd, {}, 0x0, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) tkill(r9, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r10, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) 1m10.039974565s ago: executing program 4 (id=972): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 1m10.025911106s ago: executing program 33 (id=972): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 3.137031898s ago: executing program 3 (id=2249): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ff00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.634260609s ago: executing program 3 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.450730573s ago: executing program 1 (id=2262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "b5a09e756d2188c74048426ada11f534aa4749eeb8ab0cc5e5170b9af57a3253a87b7b7dccbec911920036b0c35f7bc8f097d2a79aac6454f5aa1442e92cad970b402f3f597ceb4284c49afb4b9428f234d9f6ec791bb77bf20734f671ff37f64a32b691e43417e5c4baab437680627770b418d1865c21d8810011ce60e4ca96c707215c6231f8f3dd295e9d9c361891355fc5df8231e85d0019aae5f82f679d3849e268aba0891d4a392061c1547d259e5ceab22b402cf670f53543cf15b9e5f391abf7269e9758785acd40504ff40339ea9c832ef7741ded23e92cd59ce98d448b396e7ff1f7c5d965902b63484ac48c2acea8253fd1c052c400a2a339fd313d7695f2a168c30f8a77463311ea6e661a392f200c4062b6dfba6e88a4b3ddeac93a0781ec7962e3a67363411d4f4327680041390d17ce883c2702617b51cf6a6649339e79828dda7c485228bf065ac29d61137d7be623f68a1b292a3ce4ae8c4673d0fb9d9890a94222b0ef778ec451b9f3971516a9fca59326867e5326992fd27ee9e85c4de4537cb51a7c8f84eaa1e49df3e873ab048d6af07b7580b3dd67c7c91616f8c793ee5af2866603971c46890798efb9b36a72caa28e1c95b6ebfddd4b6b95aa058c6a1b9069e25400a2a11997d5286a0d21c1c191989c24a7494359d75fd45be17d428e4df30416660963ed800440b2e1e8c8b6bef7049162654f2178b5c6aad9625dee295f51fb9ac30750a13251302344a8c2fbab8c6f07a91575c467689d11a89083bb2e37f1cf9354d6a523020e20c869476234056f50e3ee536c80cb47dc7178cb504fbd59be91017dbabf638ca36879f5a67177ebb68a10633bd6819f03ae643fcd86033b321958d3906289a6aa5e75c14ebca569aae26dcd347163d3e0ba8ea6c9d649ddcfee8ac7a4268395c1a1d9fe90f803a93d1bf5e113dd4c655fee885204ebc60aa9a61241bdb59031af4386f58ee8f8653b8d677940997c23d0982f2c76e5059cf82d5cb2f61df1f1ccdd0e6a2d5ec9c61e9669a83bf3375a6300feea202e35d33c397fa31eb6e206433f7e5b3832ec337e0442acd0e8b0e03bfe3201d61fb8590f8703ab0c2be107d6d0d252236d2e67b57fb699fb9959f0c87bbc02903cfbdb630be30012479560122e96b46de804d4da5dd7df1013a2f405e6a2cfd78e984eba156f192114a60b199dc43dccf3f2f657efcf7713ac60cc50b3f2f13cda8361591ca54a925be3c101ba8d1fad552ab6191ce392db114e02088d05e92590daf5add14a6d0f6e7f7ba269f7b6a82b529aad3955d3fa42a005229b1d2150b9b80904ffb857f4915832885679a47c2f28abb835ed8511b85329c15986a8a57e6086298d465b1056af251f762c56b2f4392b3527ffdb9bdf793ed51f59c485aaee4db0c07b069b2367e35ef06aef6695afe9b0a40048b934afaa99319a70e29f368350c48e4a44bfa2634badc9d590f2b46e450c654f16a1d5e79341ec63bb06c22f0956994d6e24036611893d4d9b2d60a225a664ba5fe6a377de54bce4a772fe6bdd3d4a57e450c584dccd9c60c6db20fab30937e8cfe8bf806e768cee9c1eee8db95e3f70a965dd8410f875ee9cc8498a0b6f9269b1fbf9f46a923d494de447fa4a6df388b6dd206fcb71d4671d2aff2ad89c25b7eedbb65cec1a3547056684112caeb60f925dcf446d9c91c493c7a56e941462f42e75305ce1ed95462a806a5ac510087de89a5efd87371ad4654be80b68965b7acc742990e0ae1cf62dfcd1081ac0eea3011e743ae0ae1deabc88532b69a6a18fe4e788c6d2e7436fda2ca05890c3e5bdfd4a655fed20272959da057210b73dcee3c0e373fc7ada3fba958fad9ca1be5b6c0893a1c4a1ac19c185cde1c673ffd441a67e666710745d7cd0009ddba44a827142ede6b75cb0f51793a67c6f20ea1b40953000820ecf73807e352f82b6b54313b0ef965140c9af5bcb85a40c70f83a090355a500ccfa062a98a3ac95ee70a4b1475b0b220146ab3152b82257214d039c59d125556d40abf6b579ba3f48b547cc95e6cff9b057013af85cdb00fc25cabcf3291ff8608dcd9e1729ff8b395ef44f113732166e0c429c55368377a8a3e38e369d668a8c203f643f4195ddb3046ae94cefcbf9d864c5217f977e416f93e9e6a22397d6fed06da47492572a21fd96203d1a111c4c8bbf9e03d8588d7d49f676507327b873c8cda7b9612f0056124e2493e603e929d18d33f4c1c5d59b7d593be54768c11e6631c4b0d37da1417a9af8a889dd57d2ffdaf32bbab141dcec03b620ec871851cd92944d16f641fd6b2edae3f87cae4ce35f6635ed7b3be706cce5e99883d83da485b61dfa8ffba6be675f0d6a672f3d1a96338a3ac953f9a9d08b54be3a60dfe5ed1e2fbd965fa279325461ddaef3f2cd078716b02cc37630842f8c165445859ef4202985163a3f6dcf2f99783a176d4e2a96e7a1346e1da20ff04905a1c454b75927e34f81f16a315ac1afa568d85ff43e6a646a1932026bf3459fa8dbe62e1f6a2ba690c32cf87f2647b5e6913368c2643549e2266c8d152b0b5199fcfeb193b540095d9d6996fa3191d44dfa5ed3472e1890c4cac65bd1dfc24e23c7b1061ffe8905fcdb85c33f7f77af202817de0922ba17db3c2442d05e82816f5cc49b42da0794834a742699e94d1c7fd9a73f7a266d9ac026ad7fcb4fefbe56f5f7888b9ef5f5e2891dfa4372d4798b5d258457660a83fec002fa7aff0ddd74d177a39b97673328166d9d7c1a12793a759610d5fc81c4ac2cb74abdbac7846260bcc3654d85bd4632e379ba44351f2267950f35f9bfa6ce9187337a77d2853f7806127479c23a943723dfc254564c5528a20b00e8abe005a7a33f6ecdb392d5fbd6190beaf4e31eaa62e84938892c6ea28c3d305a62888291c052c33c1970d5def2c135607b5e486d60ca82653c4284b06a0af42f0a778cd5460d7a89682e3bd8877f12ac6d5a26a17ecac6ba2bb21a1d9f16cc417e20843e4b18ad26219b47f726e84cae974c6f055e22d8f19b9d928ba84f5be0dddfec11c7bd1d0f3ac043374d700d22e0cfc9c07dbfcdf0e2d5c1401ec815be93b7bbb7259a537e581ce14c7b8bb51b16dd019f027d9572a897bbcba4777d8fc221e569f25aa1323aff0053c763a36a4a97baed292278989dc00110aca023cb8273388119e945a02dcea2faa43994eb17ba35c937459ada843dec6eb521a9a704fd03e831ccaf4ea81586b50887f81e186876654a1c71c22e9040c8eda3209301a40fe121936d79c49f81b4282b325084e89fbcd12d22f2d591aaed4c41ebcc481d93b78b03da72af42e4490422641b125af87e4077673b380e9713387bbd7d10d77458a4e9be0b5ad48e004bbe81f7e70fe4b136cb3ff4db082d7a5fe94c81f77973dc93734ee4433599903d3b059be93b7d56a7c2efafe488bba20a949e26b2a4998f1c4e9f903e069c73463ec69fc38f92417b6519cb2e7944f82b85ad7033f11a25e2d3db18f317f37f66e6528423466c5a908c44ef4eb9d9a893428a11040abe686cf5726857f4b5f899373f18c165fd557b5d5b1a19b92bc87ffca09e6e167b38c3b245a8b7f80e641151b810db2c137185ade7c1c7e38b1cc5dd847ae2c4952eaf08d7384791f1fd8c52f1a65047d6f35bdbd7a398e70616c35d25f2f6527a26f04ca4f578150ab1ffc1baad06dd54b7964d5731be046a8654050b10fb18029bbdae451bce0d096d2c4366b2602e82d640ed214738c8761a3e7c19e48069a0a503f9075865b0e71f3b954ac8e040e7d4a715d98b27c7e5049b316a10127610c463224b57dd1f6042221d410c80d946175ae208ca4259233c8a127f44c047cdde5a288b3b6775706be0773345bca3f77848bbc477b586a39ccfc1c62f6410583318ae9c7eb092f12619a0656ae0cecb3b283ae5543d1834d4c1aff6d2cf7d1c23f0cfdbb336fb05a7533517b67c6fb57eb55925ed3f72c4b3dc8fe07b32c19606cb27df21c0c83653806847ce129db2be5128a175f948a29d9eaf1e741989c9f0dca07c05713be2aa5058493cad2c1bb26c8a2628326583bfd3a868beaa0ac58584459c004744ba720e4d232379727e4cb82f7174ac0fd6f6114cd768567010a369ae66e6e6b97d9f4570cd9dcc1f2672d225ecdcea0f9e3461276292e574f873d7818789cd0b10ea27004d7d6a0af5513bcb5d8465753399bee09a51e3f431eb0118ee629fd0596ffb0c0a6653a5f904a9991c674395f0d0542df92bbf307f8aec96a008ac4f17e1d7d45cb06be16600f6075d81066b35fbbbb7c6180f7a5de789c7ca245bda8c7a12874eb96262be9788099b0a2c7bf4302c01a54ba8969598519171190533f22a992e1403c29e1b26930f162edb9a71ca950a7a4cd9d1061eb3c390f869af413bd4dec8e0d917df454d38ba96be9c0361a6f1f7b8522865de64b132de2140c995108cb944ebbe7b4b336b0763e3d261804f93c705e80ea12e558f68b8059d0d624902f327b02c636b7f4151ffceecd041fc6a62c4ef464616be771a65f1f4c19df51bd4686f3a2c8ec12fb3458e379265ef321049966ca5b3ff81e62c916fe360dd2492fb8066ca72d82360262b16eb97eb14f08bd0f44afcfeb0f281182ab52c669ff6da6ba604269fc521c7cf9254b21242e46f277ca6ca22415f3ba167ae5719fcc346f15592b8c992920c7d7e16178d92cc0e01304118bf1444027f9de6d4a8604661eea00edd541608279fa9d0c1ec605e78141ad233d5308dc7c1ccc08a6bfb745a1aa40c2e599918ce119d8302eacab0985df53acf1529ecf191c4435796bea7742708a71b38899e7251e5f3a524f107eb0581c54672138dc82c1a25e1e89761daa39acdf256f6056101a73aab1168770cb1791c400bfb46c23bb097219a46a70ff00af9b2a1e4a04cca75b494465eda7f7235c0b0d45d2ffa8a48a9a1b2125689bc14b95de271f5923b6765f4acb48de86b900934203f0946e0a9b53107b8b1bdaaf7661c22eb8ddd91b65f1653c832db4f631adca8274feed3e07d7bb260c04f791ccde2957fc5c4b0d4006c37b34ea73a234093d1b7f531ddd7ed112398f920b3fa35eab2dc7b88976f6e3b02a28b05926d2afb73f41eb577b68aa7964911c95a7a1ac83a32b19432f6c87b41311383d4788c96f623be73a89d18968a388413fb1b8dc3d8b033196c85f570583c09500abda1f8aca9a3a4a643108dd339f5c98920a85956894168629de5bbeb63e43baba9b981b5e7ee6e1043e20f8ada48502490bf6a79c692055e3e123e1291fefa3856e95d63d3c3c18d940ac52100a2c63eee80f31bdcc113cdebc8f9347a183e985d420eed4a2afa2f48caaff7a0dc3d15cffc8875713fd733b0ebb19c6a7da104f10e24933d517fd2535454322831a2167bf2db0c5b6cdd2566466cadc3a956bc1fcfcd637cac57339334dd91c9afce0d059519b631de2147c86ed9261423c914fdf7339ba45e93b34c9bd4daf87cf7ac9794cac194bcee47cb699cea7bb8384600453c099a6d53fbe14ee177057805d96730552988303cf1bfb5a628564786433c344cd81db2b3b7525a9dd09e9ef8f0199af50eb4d1424d7605fced31b109e45b537d89e4500234232850b660bdffe0b8d7121bcdb5ff0c9445cdd93a72a5465f5fd49365b724caa296a8fcb9052602df7121e7024614a781392fb628eba8470335f206a8a5ed2ef3ccb1919654bbd9654f9904f2ac2ba16af4dc176eac8db731100884bc34"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r7 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.089653212s ago: executing program 5 (id=2269): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="b1", 0x1, 0x8801, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.020056648s ago: executing program 0 (id=2271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ff00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.789419777s ago: executing program 3 (id=2276): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x24406, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f0000000b40)="$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") open(&(0x7f0000000240)='./file2\x00', 0x165142, 0x148) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x437d}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000700)={@dev, @local, @broadcast}, &(0x7f0000000440)=0xc) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) 1.486850131s ago: executing program 1 (id=2279): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x8001}, 0x18) eventfd2(0x0, 0x0) 1.435208495s ago: executing program 1 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r9 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.434778175s ago: executing program 0 (id=2281): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 1.312097275s ago: executing program 0 (id=2283): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ff00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) pipe2$9p(&(0x7f0000000200), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.244223981s ago: executing program 5 (id=2284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x8d0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 1.223536512s ago: executing program 5 (id=2285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r6 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.044519736s ago: executing program 6 (id=2289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.044250456s ago: executing program 6 (id=2290): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x8001}, 0x18) eventfd2(0x0, 0x0) 1.043781336s ago: executing program 6 (id=2291): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400cce, &(0x7f0000000340), 0x4, 0x792, &(0x7f0000001180)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x20000000000000) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 930.232326ms ago: executing program 3 (id=2292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "b5a09e756d2188c74048426ada11f534aa4749eeb8ab0cc5e5170b9af57a3253a87b7b7dccbec911920036b0c35f7bc8f097d2a79aac6454f5aa1442e92cad970b402f3f597ceb4284c49afb4b9428f234d9f6ec791bb77bf20734f671ff37f64a32b691e43417e5c4baab437680627770b418d1865c21d8810011ce60e4ca96c707215c6231f8f3dd295e9d9c361891355fc5df8231e85d0019aae5f82f679d3849e268aba0891d4a392061c1547d259e5ceab22b402cf670f53543cf15b9e5f391abf7269e9758785acd40504ff40339ea9c832ef7741ded23e92cd59ce98d448b396e7ff1f7c5d965902b63484ac48c2acea8253fd1c052c400a2a339fd313d7695f2a168c30f8a77463311ea6e661a392f200c4062b6dfba6e88a4b3ddeac93a0781ec7962e3a67363411d4f4327680041390d17ce883c2702617b51cf6a6649339e79828dda7c485228bf065ac29d61137d7be623f68a1b292a3ce4ae8c4673d0fb9d9890a94222b0ef778ec451b9f3971516a9fca59326867e5326992fd27ee9e85c4de4537cb51a7c8f84eaa1e49df3e873ab048d6af07b7580b3dd67c7c91616f8c793ee5af2866603971c46890798efb9b36a72caa28e1c95b6ebfddd4b6b95aa058c6a1b9069e25400a2a11997d5286a0d21c1c191989c24a7494359d75fd45be17d428e4df30416660963ed800440b2e1e8c8b6bef7049162654f2178b5c6aad9625dee295f51fb9ac30750a13251302344a8c2fbab8c6f07a91575c467689d11a89083bb2e37f1cf9354d6a523020e20c869476234056f50e3ee536c80cb47dc7178cb504fbd59be91017dbabf638ca36879f5a67177ebb68a10633bd6819f03ae643fcd86033b321958d3906289a6aa5e75c14ebca569aae26dcd347163d3e0ba8ea6c9d649ddcfee8ac7a4268395c1a1d9fe90f803a93d1bf5e113dd4c655fee885204ebc60aa9a61241bdb59031af4386f58ee8f8653b8d677940997c23d0982f2c76e5059cf82d5cb2f61df1f1ccdd0e6a2d5ec9c61e9669a83bf3375a6300feea202e35d33c397fa31eb6e206433f7e5b3832ec337e0442acd0e8b0e03bfe3201d61fb8590f8703ab0c2be107d6d0d252236d2e67b57fb699fb9959f0c87bbc02903cfbdb630be30012479560122e96b46de804d4da5dd7df1013a2f405e6a2cfd78e984eba156f192114a60b199dc43dccf3f2f657efcf7713ac60cc50b3f2f13cda8361591ca54a925be3c101ba8d1fad552ab6191ce392db114e02088d05e92590daf5add14a6d0f6e7f7ba269f7b6a82b529aad3955d3fa42a005229b1d2150b9b80904ffb857f4915832885679a47c2f28abb835ed8511b85329c15986a8a57e6086298d465b1056af251f762c56b2f4392b3527ffdb9bdf793ed51f59c485aaee4db0c07b069b2367e35ef06aef6695afe9b0a40048b934afaa99319a70e29f368350c48e4a44bfa2634badc9d590f2b46e450c654f16a1d5e79341ec63bb06c22f0956994d6e24036611893d4d9b2d60a225a664ba5fe6a377de54bce4a772fe6bdd3d4a57e450c584dccd9c60c6db20fab30937e8cfe8bf806e768cee9c1eee8db95e3f70a965dd8410f875ee9cc8498a0b6f9269b1fbf9f46a923d494de447fa4a6df388b6dd206fcb71d4671d2aff2ad89c25b7eedbb65cec1a3547056684112caeb60f925dcf446d9c91c493c7a56e941462f42e75305ce1ed95462a806a5ac510087de89a5efd87371ad4654be80b68965b7acc742990e0ae1cf62dfcd1081ac0eea3011e743ae0ae1deabc88532b69a6a18fe4e788c6d2e7436fda2ca05890c3e5bdfd4a655fed20272959da057210b73dcee3c0e373fc7ada3fba958fad9ca1be5b6c0893a1c4a1ac19c185cde1c673ffd441a67e666710745d7cd0009ddba44a827142ede6b75cb0f51793a67c6f20ea1b40953000820ecf73807e352f82b6b54313b0ef965140c9af5bcb85a40c70f83a090355a500ccfa062a98a3ac95ee70a4b1475b0b220146ab3152b82257214d039c59d125556d40abf6b579ba3f48b547cc95e6cff9b057013af85cdb00fc25cabcf3291ff8608dcd9e1729ff8b395ef44f113732166e0c429c55368377a8a3e38e369d668a8c203f643f4195ddb3046ae94cefcbf9d864c5217f977e416f93e9e6a22397d6fed06da47492572a21fd96203d1a111c4c8bbf9e03d8588d7d49f676507327b873c8cda7b9612f0056124e2493e603e929d18d33f4c1c5d59b7d593be54768c11e6631c4b0d37da1417a9af8a889dd57d2ffdaf32bbab141dcec03b620ec871851cd92944d16f641fd6b2edae3f87cae4ce35f6635ed7b3be706cce5e99883d83da485b61dfa8ffba6be675f0d6a672f3d1a96338a3ac953f9a9d08b54be3a60dfe5ed1e2fbd965fa279325461ddaef3f2cd078716b02cc37630842f8c165445859ef4202985163a3f6dcf2f99783a176d4e2a96e7a1346e1da20ff04905a1c454b75927e34f81f16a315ac1afa568d85ff43e6a646a1932026bf3459fa8dbe62e1f6a2ba690c32cf87f2647b5e6913368c2643549e2266c8d152b0b5199fcfeb193b540095d9d6996fa3191d44dfa5ed3472e1890c4cac65bd1dfc24e23c7b1061ffe8905fcdb85c33f7f77af202817de0922ba17db3c2442d05e82816f5cc49b42da0794834a742699e94d1c7fd9a73f7a266d9ac026ad7fcb4fefbe56f5f7888b9ef5f5e2891dfa4372d4798b5d258457660a83fec002fa7aff0ddd74d177a39b97673328166d9d7c1a12793a759610d5fc81c4ac2cb74abdbac7846260bcc3654d85bd4632e379ba44351f2267950f35f9bfa6ce9187337a77d2853f7806127479c23a943723dfc254564c5528a20b00e8abe005a7a33f6ecdb392d5fbd6190beaf4e31eaa62e84938892c6ea28c3d305a62888291c052c33c1970d5def2c135607b5e486d60ca82653c4284b06a0af42f0a778cd5460d7a89682e3bd8877f12ac6d5a26a17ecac6ba2bb21a1d9f16cc417e20843e4b18ad26219b47f726e84cae974c6f055e22d8f19b9d928ba84f5be0dddfec11c7bd1d0f3ac043374d700d22e0cfc9c07dbfcdf0e2d5c1401ec815be93b7bbb7259a537e581ce14c7b8bb51b16dd019f027d9572a897bbcba4777d8fc221e569f25aa1323aff0053c763a36a4a97baed292278989dc00110aca023cb8273388119e945a02dcea2faa43994eb17ba35c937459ada843dec6eb521a9a704fd03e831ccaf4ea81586b50887f81e186876654a1c71c22e9040c8eda3209301a40fe121936d79c49f81b4282b325084e89fbcd12d22f2d591aaed4c41ebcc481d93b78b03da72af42e4490422641b125af87e4077673b380e9713387bbd7d10d77458a4e9be0b5ad48e004bbe81f7e70fe4b136cb3ff4db082d7a5fe94c81f77973dc93734ee4433599903d3b059be93b7d56a7c2efafe488bba20a949e26b2a4998f1c4e9f903e069c73463ec69fc38f92417b6519cb2e7944f82b85ad7033f11a25e2d3db18f317f37f66e6528423466c5a908c44ef4eb9d9a893428a11040abe686cf5726857f4b5f899373f18c165fd557b5d5b1a19b92bc87ffca09e6e167b38c3b245a8b7f80e641151b810db2c137185ade7c1c7e38b1cc5dd847ae2c4952eaf08d7384791f1fd8c52f1a65047d6f35bdbd7a398e70616c35d25f2f6527a26f04ca4f578150ab1ffc1baad06dd54b7964d5731be046a8654050b10fb18029bbdae451bce0d096d2c4366b2602e82d640ed214738c8761a3e7c19e48069a0a503f9075865b0e71f3b954ac8e040e7d4a715d98b27c7e5049b316a10127610c463224b57dd1f6042221d410c80d946175ae208ca4259233c8a127f44c047cdde5a288b3b6775706be0773345bca3f77848bbc477b586a39ccfc1c62f6410583318ae9c7eb092f12619a0656ae0cecb3b283ae5543d1834d4c1aff6d2cf7d1c23f0cfdbb336fb05a7533517b67c6fb57eb55925ed3f72c4b3dc8fe07b32c19606cb27df21c0c83653806847ce129db2be5128a175f948a29d9eaf1e741989c9f0dca07c05713be2aa5058493cad2c1bb26c8a2628326583bfd3a868beaa0ac58584459c004744ba720e4d232379727e4cb82f7174ac0fd6f6114cd768567010a369ae66e6e6b97d9f4570cd9dcc1f2672d225ecdcea0f9e3461276292e574f873d7818789cd0b10ea27004d7d6a0af5513bcb5d8465753399bee09a51e3f431eb0118ee629fd0596ffb0c0a6653a5f904a9991c674395f0d0542df92bbf307f8aec96a008ac4f17e1d7d45cb06be16600f6075d81066b35fbbbb7c6180f7a5de789c7ca245bda8c7a12874eb96262be9788099b0a2c7bf4302c01a54ba8969598519171190533f22a992e1403c29e1b26930f162edb9a71ca950a7a4cd9d1061eb3c390f869af413bd4dec8e0d917df454d38ba96be9c0361a6f1f7b8522865de64b132de2140c995108cb944ebbe7b4b336b0763e3d261804f93c705e80ea12e558f68b8059d0d624902f327b02c636b7f4151ffceecd041fc6a62c4ef464616be771a65f1f4c19df51bd4686f3a2c8ec12fb3458e379265ef321049966ca5b3ff81e62c916fe360dd2492fb8066ca72d82360262b16eb97eb14f08bd0f44afcfeb0f281182ab52c669ff6da6ba604269fc521c7cf9254b21242e46f277ca6ca22415f3ba167ae5719fcc346f15592b8c992920c7d7e16178d92cc0e01304118bf1444027f9de6d4a8604661eea00edd541608279fa9d0c1ec605e78141ad233d5308dc7c1ccc08a6bfb745a1aa40c2e599918ce119d8302eacab0985df53acf1529ecf191c4435796bea7742708a71b38899e7251e5f3a524f107eb0581c54672138dc82c1a25e1e89761daa39acdf256f6056101a73aab1168770cb1791c400bfb46c23bb097219a46a70ff00af9b2a1e4a04cca75b494465eda7f7235c0b0d45d2ffa8a48a9a1b2125689bc14b95de271f5923b6765f4acb48de86b900934203f0946e0a9b53107b8b1bdaaf7661c22eb8ddd91b65f1653c832db4f631adca8274feed3e07d7bb260c04f791ccde2957fc5c4b0d4006c37b34ea73a234093d1b7f531ddd7ed112398f920b3fa35eab2dc7b88976f6e3b02a28b05926d2afb73f41eb577b68aa7964911c95a7a1ac83a32b19432f6c87b41311383d4788c96f623be73a89d18968a388413fb1b8dc3d8b033196c85f570583c09500abda1f8aca9a3a4a643108dd339f5c98920a85956894168629de5bbeb63e43baba9b981b5e7ee6e1043e20f8ada48502490bf6a79c692055e3e123e1291fefa3856e95d63d3c3c18d940ac52100a2c63eee80f31bdcc113cdebc8f9347a183e985d420eed4a2afa2f48caaff7a0dc3d15cffc8875713fd733b0ebb19c6a7da104f10e24933d517fd2535454322831a2167bf2db0c5b6cdd2566466cadc3a956bc1fcfcd637cac57339334dd91c9afce0d059519b631de2147c86ed9261423c914fdf7339ba45e93b34c9bd4daf87cf7ac9794cac194bcee47cb699cea7bb8384600453c099a6d53fbe14ee177057805d96730552988303cf1bfb5a628564786433c344cd81db2b3b7525a9dd09e9ef8f0199af50eb4d1424d7605fced31b109e45b537d89e4500234232850b660bdffe0b8d7121bcdb5ff0c9445cdd93a72a5465f5fd49365b724caa296a8fcb9052602df7121e7024614a781392fb628eba8470335f206a8a5ed2ef3ccb1919654bbd9654f9904f2ac2ba16af4dc176eac8db731100884bc34"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r7 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 782.706608ms ago: executing program 0 (id=2293): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0x3, 0x30) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 760.248239ms ago: executing program 0 (id=2294): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x20008881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r8, 0x2004, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0x9, 0xfffffffe, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) chdir(0x0) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r12, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 583.370584ms ago: executing program 1 (id=2295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x8d0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 564.890915ms ago: executing program 1 (id=2296): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="b1", 0x1, 0x8801, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 349.907712ms ago: executing program 6 (id=2297): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) 318.204465ms ago: executing program 5 (id=2298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x0) 264.27504ms ago: executing program 5 (id=2299): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtclass={0x38, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0xffe0}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x78e3581aa788a1f6}, 0x800) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c460402044080000000000000000200d8279688000092000000000000004000000000000000900100000000000001f0ffff090038008000090002007800"], 0x40) close(r1) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000fe8000000000000000000000000000100135000000020000000000000300000000000000"], 0xfc}}, 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 245.542601ms ago: executing program 5 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 245.272431ms ago: executing program 6 (id=2301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 212.356544ms ago: executing program 6 (id=2302): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) sync() 211.457584ms ago: executing program 0 (id=2303): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ff00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) pipe2$9p(&(0x7f0000000200), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 68.461825ms ago: executing program 3 (id=2304): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0x3, 0x30) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 0s ago: executing program 3 (id=2305): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) kernel console output (not intermixed with test programs): own, defaulting to 1000 [ 87.538732][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 87.547686][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 87.571561][ T6959] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 87.571561][ T6959] program syz.3.1308 not setting count and/or reply_len properly [ 87.594022][ T6962] sctp: [Deprecated]: syz.1.1309 (pid 6962) Use of int in max_burst socket option. [ 87.594022][ T6962] Use struct sctp_assoc_value instead [ 87.611261][ T6964] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20003 [ 87.643849][ T6968] loop3: detected capacity change from 0 to 256 [ 87.651525][ T6968] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.682462][ T6973] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 87.839092][ T6990] lo speed is unknown, defaulting to 1000 [ 87.846807][ T6990] lo speed is unknown, defaulting to 1000 [ 87.928194][ T7002] loop1: detected capacity change from 0 to 128 [ 87.935170][ T7002] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.950388][ T7002] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.959612][ T7007] loop3: detected capacity change from 0 to 256 [ 87.979561][ T7007] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.026917][ T3630] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.044315][ T7015] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 88.050859][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.058514][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 88.076217][ T7016] vhci_hcd: connection closed [ 88.076373][ T3616] vhci_hcd: stop threads [ 88.085348][ T3616] vhci_hcd: release socket [ 88.089752][ T3616] vhci_hcd: disconnect device [ 88.187480][ T7034] loop1: detected capacity change from 0 to 512 [ 88.245404][ T7045] loop1: detected capacity change from 0 to 256 [ 88.253148][ T7045] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.296377][ T7049] loop1: detected capacity change from 0 to 2048 [ 88.315464][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.327630][ T7049] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.377883][ T7056] sctp: [Deprecated]: syz.5.1342 (pid 7056) Use of int in max_burst socket option. [ 88.377883][ T7056] Use struct sctp_assoc_value instead [ 88.435903][ T7063] IPv6: sit1: Disabled Multicast RS [ 88.542710][ T7085] FAULT_INJECTION: forcing a failure. [ 88.542710][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 88.555385][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.3.1354 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 88.555477][ T7085] Tainted: [W]=WARN [ 88.555483][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.555523][ T7085] Call Trace: [ 88.555528][ T7085] [ 88.555534][ T7085] __dump_stack+0x1d/0x30 [ 88.555556][ T7085] dump_stack_lvl+0xe8/0x140 [ 88.555576][ T7085] dump_stack+0x15/0x1b [ 88.555593][ T7085] should_fail_ex+0x265/0x280 [ 88.555696][ T7085] should_failslab+0x8c/0xb0 [ 88.555722][ T7085] __kmalloc_noprof+0xa5/0x3e0 [ 88.555825][ T7085] ? ___neigh_create+0x4c9/0x1290 [ 88.555880][ T7085] ___neigh_create+0x4c9/0x1290 [ 88.555902][ T7085] ? skb_copy_and_csum_bits+0x422/0x5c0 [ 88.555927][ T7085] ? netlbl_enabled+0x25/0x40 [ 88.555949][ T7085] ? selinux_ip_postroute+0x1b7/0xb50 [ 88.556016][ T7085] __neigh_create+0x54/0x70 [ 88.556037][ T7085] ip6_finish_output2+0x627/0xd30 [ 88.556070][ T7085] ? ip6_cork_release+0xc3/0xd0 [ 88.556104][ T7085] ? __rcu_read_unlock+0x34/0x70 [ 88.556175][ T7085] ? __pfx_ip6_mtu+0x10/0x10 [ 88.556202][ T7085] ip6_finish_output+0x3a4/0x540 [ 88.556285][ T7085] ip6_output+0xfd/0x240 [ 88.556310][ T7085] ? __pfx_ip6_finish_output+0x10/0x10 [ 88.556404][ T7085] ip6_local_out+0x79/0xe0 [ 88.556422][ T7085] ip6_push_pending_frames+0xd2/0x1b0 [ 88.556478][ T7085] icmpv6_push_pending_frames+0x1ef/0x220 [ 88.556515][ T7085] icmp6_send+0xe77/0x1050 [ 88.556547][ T7085] ? icmp6_send+0x674/0x1050 [ 88.556630][ T7085] ip6_pkt_drop+0x2f9/0x340 [ 88.556728][ T7085] ip6_pkt_discard+0x1c/0x30 [ 88.556799][ T7085] ip6_rcv_finish+0x336/0x340 [ 88.556817][ T7085] ipv6_rcv+0x72/0x150 [ 88.556863][ T7085] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 88.556885][ T7085] __netif_receive_skb+0x9e/0x270 [ 88.556909][ T7085] netif_receive_skb+0x4b/0x2e0 [ 88.556930][ T7085] ? tun_rx_batched+0xc7/0x430 [ 88.557023][ T7085] tun_rx_batched+0xfc/0x430 [ 88.557109][ T7085] tun_get_user+0x1eb6/0x2680 [ 88.557141][ T7085] ? ref_tracker_alloc+0x1f2/0x2f0 [ 88.557240][ T7085] tun_chr_write_iter+0x15e/0x210 [ 88.557270][ T7085] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 88.557297][ T7085] vfs_write+0x4a0/0x8e0 [ 88.557321][ T7085] ksys_write+0xda/0x1a0 [ 88.557418][ T7085] __x64_sys_write+0x40/0x50 [ 88.557443][ T7085] x64_sys_call+0x27fe/0x2ff0 [ 88.557511][ T7085] do_syscall_64+0xd2/0x200 [ 88.557536][ T7085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.557562][ T7085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.557580][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.557607][ T7085] RIP: 0033:0x7f090dd4d61f [ 88.557624][ T7085] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 88.557670][ T7085] RSP: 002b:00007f090c3b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 88.557689][ T7085] RAX: ffffffffffffffda RBX: 00007f090df75fa0 RCX: 00007f090dd4d61f [ 88.557767][ T7085] RDX: 000000000000007c RSI: 0000200000000580 RDI: 00000000000000c8 [ 88.557780][ T7085] RBP: 00007f090c3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.557793][ T7085] R10: 000000000000007c R11: 0000000000000293 R12: 0000000000000001 [ 88.557806][ T7085] R13: 0000000000000001 R14: 00007f090df75fa0 R15: 00007ffc83540da8 [ 88.557893][ T7085] [ 88.662935][ T7083] syzkaller0: entered promiscuous mode [ 88.663005][ T7083] syzkaller0: entered allmulticast mode [ 88.982702][ T7115] loop0: detected capacity change from 0 to 256 [ 88.990367][ T7115] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.057169][ T7127] sctp: [Deprecated]: syz.5.1369 (pid 7127) Use of int in max_burst socket option. [ 89.057169][ T7127] Use struct sctp_assoc_value instead [ 89.097237][ T7129] loop3: detected capacity change from 0 to 512 [ 89.105183][ T7129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.116890][ T7129] EXT4-fs (loop3): 1 truncate cleaned up [ 89.122953][ T7129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.158691][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.174571][ T7129] pimreg: entered allmulticast mode [ 89.191376][ T7129] pimreg: left allmulticast mode [ 89.206738][ T7141] loop1: detected capacity change from 0 to 512 [ 89.223558][ T7148] loop0: detected capacity change from 0 to 256 [ 89.224186][ T7141] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1375: bg 0: block 131: padding at end of block bitmap is not set [ 89.253464][ T7148] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.264853][ T7141] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 89.296153][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.315390][ T7141] EXT4-fs (loop1): 1 truncate cleaned up [ 89.326121][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.349470][ T7158] loop6: detected capacity change from 0 to 164 [ 89.367037][ T7162] loop3: detected capacity change from 0 to 512 [ 89.376261][ T7141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.385852][ T7158] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.395612][ T7158] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.404566][ T7158] Symlink component flag not implemented [ 89.410224][ T7158] Symlink component flag not implemented [ 89.441799][ T7158] Symlink component flag not implemented (7) [ 89.447838][ T7158] Symlink component flag not implemented (116) [ 89.465005][ T7166] loop0: detected capacity change from 0 to 512 [ 89.495129][ T7166] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.508501][ T3986] hid_parser_main: 17 callbacks suppressed [ 89.508516][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 89.514421][ T7166] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.515799][ T7166] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1385: corrupted inode contents [ 89.521832][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.521857][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.521877][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.521897][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.554761][ T7166] EXT4-fs (loop0): Remounting filesystem read-only [ 89.562054][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.572691][ T7166] EXT4-fs (loop0): 1 truncate cleaned up [ 89.576463][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.576492][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 89.576558][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.576582][ T3986] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 89.577624][ T3986] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.584919][ T3596] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.640647][ T3596] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.640810][ T3596] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 89.641432][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.656023][ T7171] 9pnet_fd: Insufficient options for proto=fd [ 89.697243][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.889841][ T7193] lo speed is unknown, defaulting to 1000 [ 89.904602][ T7193] lo speed is unknown, defaulting to 1000 [ 90.076796][ T7213] FAULT_INJECTION: forcing a failure. [ 90.076796][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 90.089484][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.1.1396 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 90.089521][ T7213] Tainted: [W]=WARN [ 90.089528][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.089574][ T7213] Call Trace: [ 90.089581][ T7213] [ 90.089589][ T7213] __dump_stack+0x1d/0x30 [ 90.089690][ T7213] dump_stack_lvl+0xe8/0x140 [ 90.089710][ T7213] dump_stack+0x15/0x1b [ 90.089770][ T7213] should_fail_ex+0x265/0x280 [ 90.089802][ T7213] should_failslab+0x8c/0xb0 [ 90.089825][ T7213] kmem_cache_alloc_noprof+0x50/0x310 [ 90.089866][ T7213] ? copy_sighand+0x52/0x1b0 [ 90.089893][ T7213] copy_sighand+0x52/0x1b0 [ 90.089915][ T7213] copy_process+0xcaf/0x2000 [ 90.089950][ T7213] kernel_clone+0x16c/0x5c0 [ 90.089977][ T7213] __se_sys_clone3+0x1c2/0x200 [ 90.090082][ T7213] ? fpregs_restore_userregs+0xad/0x1d0 [ 90.090178][ T7213] __x64_sys_clone3+0x31/0x40 [ 90.090271][ T7213] x64_sys_call+0x1fc9/0x2ff0 [ 90.090290][ T7213] do_syscall_64+0xd2/0x200 [ 90.090311][ T7213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.090337][ T7213] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.090360][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.090398][ T7213] RIP: 0033:0x7f02a7cbeb69 [ 90.090414][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.090430][ T7213] RSP: 002b:00007f02a62dcf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 90.090491][ T7213] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02a7cbeb69 [ 90.090503][ T7213] RDX: 00007f02a62dcf20 RSI: 0000000000000058 RDI: 00007f02a62dcf20 [ 90.090516][ T7213] RBP: 00007f02a62dd090 R08: 0000000000000000 R09: 0000000000000058 [ 90.090530][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.090543][ T7213] R13: 0000000000000000 R14: 00007f02a7ee6160 R15: 00007ffc2fbfee88 [ 90.090602][ T7213] [ 90.297969][ T7214] __nla_validate_parse: 22 callbacks suppressed [ 90.298054][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 90.313338][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 90.339089][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.378614][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1406'. [ 90.393513][ T7226] FAULT_INJECTION: forcing a failure. [ 90.393513][ T7226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.405540][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1406'. [ 90.407292][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.0.1407 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 90.407445][ T7226] Tainted: [W]=WARN [ 90.407451][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.407464][ T7226] Call Trace: [ 90.407469][ T7226] [ 90.407477][ T7226] __dump_stack+0x1d/0x30 [ 90.407526][ T7226] dump_stack_lvl+0xe8/0x140 [ 90.407546][ T7226] dump_stack+0x15/0x1b [ 90.407573][ T7226] should_fail_ex+0x265/0x280 [ 90.407607][ T7226] should_fail+0xb/0x20 [ 90.407643][ T7226] should_fail_usercopy+0x1a/0x20 [ 90.407685][ T7226] strncpy_from_user+0x25/0x230 [ 90.407712][ T7226] ? kmem_cache_alloc_noprof+0x186/0x310 [ 90.407740][ T7226] ? getname_flags+0x80/0x3b0 [ 90.407790][ T7226] getname_flags+0xae/0x3b0 [ 90.407884][ T7226] user_path_at+0x28/0x130 [ 90.407916][ T7226] __se_sys_mount+0x25b/0x2e0 [ 90.407938][ T7226] ? fput+0x8f/0xc0 [ 90.408080][ T7226] __x64_sys_mount+0x67/0x80 [ 90.408116][ T7226] x64_sys_call+0x2b4d/0x2ff0 [ 90.408136][ T7226] do_syscall_64+0xd2/0x200 [ 90.408160][ T7226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.408195][ T7226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.408217][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.408238][ T7226] RIP: 0033:0x7f994b97eb69 [ 90.408253][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.408327][ T7226] RSP: 002b:00007f9949fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.408343][ T7226] RAX: ffffffffffffffda RBX: 00007f994bba5fa0 RCX: 00007f994b97eb69 [ 90.408355][ T7226] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 90.408367][ T7226] RBP: 00007f9949fe7090 R08: 00002000000007c0 R09: 0000000000000000 [ 90.408380][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.408430][ T7226] R13: 0000000000000000 R14: 00007f994bba5fa0 R15: 00007ffe9f536918 [ 90.408450][ T7226] [ 90.637321][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1409'. [ 90.675764][ T7238] lo speed is unknown, defaulting to 1000 [ 90.681961][ T7238] lo speed is unknown, defaulting to 1000 [ 90.699308][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 90.708254][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 90.967770][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'. [ 90.987050][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 90.996069][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 91.015428][ T7268] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 91.211861][ T7264] lo speed is unknown, defaulting to 1000 [ 91.242445][ T7264] lo speed is unknown, defaulting to 1000 [ 91.339255][ T7281] lo speed is unknown, defaulting to 1000 [ 91.375812][ T7281] lo speed is unknown, defaulting to 1000 [ 91.620938][ T7261] loop0: detected capacity change from 0 to 1024 [ 91.627654][ T7261] /dev/loop0: Can't open blockdev [ 91.642696][ T7299] loop5: detected capacity change from 0 to 512 [ 91.649294][ T7299] EXT4-fs: Ignoring removed bh option [ 91.655706][ T7299] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.924937][ T3302] block device autoloading is deprecated and will be removed. [ 91.983434][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 91.983448][ T29] audit: type=1326 audit(1754235580.027:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.082459][ T29] audit: type=1326 audit(1754235580.067:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106505][ T29] audit: type=1326 audit(1754235580.067:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106532][ T29] audit: type=1326 audit(1754235580.067:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106559][ T29] audit: type=1326 audit(1754235580.067:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106645][ T29] audit: type=1326 audit(1754235580.067:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106668][ T29] audit: type=1326 audit(1754235580.067:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106734][ T29] audit: type=1326 audit(1754235580.067:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106762][ T29] audit: type=1326 audit(1754235580.067:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.106799][ T29] audit: type=1326 audit(1754235580.067:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 92.476004][ T7369] loop0: detected capacity change from 0 to 256 [ 92.513285][ T7369] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.681650][ T7385] loop0: detected capacity change from 0 to 164 [ 92.703818][ T7385] iso9660: Unknown parameter '184467440737095516150x0000000000000008' [ 93.377616][ T7392] hub 9-0:1.0: USB hub found [ 93.402660][ T7392] hub 9-0:1.0: 8 ports detected [ 93.416733][ T7396] netlink: 'syz.6.1464': attribute type 4 has an invalid length. [ 93.704936][ T7417] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 93.730251][ T7417] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 93.977539][ T7435] netlink: 'syz.6.1475': attribute type 4 has an invalid length. [ 94.804287][ T7443] sctp: [Deprecated]: syz.0.1482 (pid 7443) Use of int in max_burst socket option. [ 94.804287][ T7443] Use struct sctp_assoc_value instead [ 95.058909][ T7457] tipc: Started in network mode [ 95.063902][ T7457] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 95.072826][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 95.279449][ T7474] sctp: [Deprecated]: syz.1.1494 (pid 7474) Use of int in max_burst socket option. [ 95.279449][ T7474] Use struct sctp_assoc_value instead [ 95.375451][ T7466] lo speed is unknown, defaulting to 1000 [ 95.414262][ T7492] __nla_validate_parse: 10 callbacks suppressed [ 95.414276][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1500'. [ 95.435760][ T7466] lo speed is unknown, defaulting to 1000 [ 95.571589][ T7503] FAULT_INJECTION: forcing a failure. [ 95.571589][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.584720][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.6.1503 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 95.584752][ T7503] Tainted: [W]=WARN [ 95.584833][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.584844][ T7503] Call Trace: [ 95.584849][ T7503] [ 95.584856][ T7503] __dump_stack+0x1d/0x30 [ 95.584875][ T7503] dump_stack_lvl+0xe8/0x140 [ 95.584944][ T7503] dump_stack+0x15/0x1b [ 95.584958][ T7503] should_fail_ex+0x265/0x280 [ 95.584989][ T7503] should_fail+0xb/0x20 [ 95.585019][ T7503] should_fail_usercopy+0x1a/0x20 [ 95.585063][ T7503] _copy_to_user+0x20/0xa0 [ 95.585085][ T7503] simple_read_from_buffer+0xb5/0x130 [ 95.585150][ T7503] proc_fail_nth_read+0x10e/0x150 [ 95.585211][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.585247][ T7503] vfs_read+0x1a0/0x6f0 [ 95.585314][ T7503] ? __rcu_read_unlock+0x4f/0x70 [ 95.585332][ T7503] ? __rcu_read_unlock+0x4f/0x70 [ 95.585359][ T7503] ? __fget_files+0x184/0x1c0 [ 95.585459][ T7503] ksys_read+0xda/0x1a0 [ 95.585478][ T7503] __x64_sys_read+0x40/0x50 [ 95.585497][ T7503] x64_sys_call+0x27bc/0x2ff0 [ 95.585515][ T7503] do_syscall_64+0xd2/0x200 [ 95.585557][ T7503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.585582][ T7503] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.585604][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.585696][ T7503] RIP: 0033:0x7f6c44f3d57c [ 95.585709][ T7503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.585726][ T7503] RSP: 002b:00007f6c4359f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.585742][ T7503] RAX: ffffffffffffffda RBX: 00007f6c45165fa0 RCX: 00007f6c44f3d57c [ 95.585755][ T7503] RDX: 000000000000000f RSI: 00007f6c4359f0a0 RDI: 0000000000000006 [ 95.585766][ T7503] RBP: 00007f6c4359f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.585779][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.585806][ T7503] R13: 0000000000000000 R14: 00007f6c45165fa0 R15: 00007ffe88fd2208 [ 95.585823][ T7503] [ 95.622337][ T7505] loop1: detected capacity change from 0 to 1024 [ 95.665931][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 95.837556][ T7505] ext4: Unknown parameter 'noacl' [ 95.919754][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1504'. [ 95.986081][ T7520] sctp: [Deprecated]: syz.6.1510 (pid 7520) Use of int in max_burst socket option. [ 95.986081][ T7520] Use struct sctp_assoc_value instead [ 96.106675][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 96.115635][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 96.124879][ T7523] veth5: entered promiscuous mode [ 96.169771][ T7523] lo speed is unknown, defaulting to 1000 [ 96.183796][ T7523] lo speed is unknown, defaulting to 1000 [ 96.558192][ T7550] loop0: detected capacity change from 0 to 128 [ 96.589800][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.599064][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.621920][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 96.659078][ T3388] hid_parser_main: 27 callbacks suppressed [ 96.659146][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 96.690811][ T3388] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.790856][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 96.799791][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 96.933497][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 96.985431][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 97.001601][ T7592] loop6: detected capacity change from 0 to 512 [ 97.008681][ T7592] ext4: Unknown parameter 'audit' [ 97.024478][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 97.024508][ T29] audit: type=1326 audit(1754235585.068:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 97.062896][ T29] audit: type=1326 audit(1754235585.068:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 97.086916][ T29] audit: type=1326 audit(1754235585.068:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 97.115964][ T29] audit: type=1400 audit(1754235585.128:9016): avc: denied { accept } for pid=7599 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.153902][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.155075][ T7605] loop5: detected capacity change from 0 to 1024 [ 97.161766][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 97.181476][ T29] audit: type=1326 audit(1754235585.228:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.212189][ T29] audit: type=1326 audit(1754235585.248:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.236267][ T29] audit: type=1326 audit(1754235585.248:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.259689][ T29] audit: type=1326 audit(1754235585.248:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.283096][ T29] audit: type=1326 audit(1754235585.248:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.287269][ T7605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.307320][ T29] audit: type=1326 audit(1754235585.248:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 97.372869][ T7619] loop3: detected capacity change from 0 to 8192 [ 97.377055][ T7601] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1541: Allocating blocks 449-513 which overlap fs metadata [ 97.381249][ T7612] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 97.400930][ T7612] FAT-fs (loop3): Filesystem has been set read-only [ 97.431148][ T7601] SELinux: Context @ is not valid (left unmapped). [ 97.438952][ T7601] EXT4-fs (loop5): pa ffff88810735f850: logic 48, phys. 177, len 21 [ 97.446981][ T7601] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 97.487185][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.620117][ T7632] lo speed is unknown, defaulting to 1000 [ 97.626949][ T7632] lo speed is unknown, defaulting to 1000 [ 97.933570][ T7643] FAULT_INJECTION: forcing a failure. [ 97.933570][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 97.946361][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.3.1554 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 97.946397][ T7643] Tainted: [W]=WARN [ 97.946404][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.946418][ T7643] Call Trace: [ 97.946425][ T7643] [ 97.946434][ T7643] __dump_stack+0x1d/0x30 [ 97.946457][ T7643] dump_stack_lvl+0xe8/0x140 [ 97.946531][ T7643] dump_stack+0x15/0x1b [ 97.946546][ T7643] should_fail_ex+0x265/0x280 [ 97.946579][ T7643] should_failslab+0x8c/0xb0 [ 97.946605][ T7643] kmem_cache_alloc_node_noprof+0x57/0x320 [ 97.946637][ T7643] ? __alloc_skb+0x101/0x320 [ 97.946664][ T7643] __alloc_skb+0x101/0x320 [ 97.946690][ T7643] ? audit_log_start+0x365/0x6c0 [ 97.946799][ T7643] audit_log_start+0x380/0x6c0 [ 97.946832][ T7643] audit_seccomp+0x48/0x100 [ 97.946858][ T7643] ? __seccomp_filter+0x68c/0x10d0 [ 97.946958][ T7643] __seccomp_filter+0x69d/0x10d0 [ 97.947002][ T7643] ? _raw_spin_unlock+0x26/0x50 [ 97.947078][ T7643] __secure_computing+0x82/0x150 [ 97.947097][ T7643] syscall_trace_enter+0xcf/0x1e0 [ 97.947119][ T7643] do_syscall_64+0xac/0x200 [ 97.947140][ T7643] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.947238][ T7643] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.947261][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.947287][ T7643] RIP: 0033:0x7f090dd4d57c [ 97.947303][ T7643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.947393][ T7643] RSP: 002b:00007f090c3b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.947414][ T7643] RAX: ffffffffffffffda RBX: 00007f090df75fa0 RCX: 00007f090dd4d57c [ 97.947498][ T7643] RDX: 000000000000000f RSI: 00007f090c3b70a0 RDI: 0000000000000005 [ 97.947512][ T7643] RBP: 00007f090c3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.947526][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.947540][ T7643] R13: 0000000000000000 R14: 00007f090df75fa0 R15: 00007ffc83540da8 [ 97.947560][ T7643] [ 98.186172][ T7649] cgroup: name respecified [ 98.297418][ T7645] pim6reg: entered allmulticast mode [ 98.303321][ T7645] pim6reg: left allmulticast mode [ 98.403331][ T7664] loop6: detected capacity change from 0 to 512 [ 98.440913][ T7659] syzkaller0: entered promiscuous mode [ 98.447202][ T7659] syzkaller0: entered allmulticast mode [ 98.598819][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.606275][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.650768][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.658265][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.665726][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.673815][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.681290][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.688678][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.696068][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 98.893042][ T3381] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.149477][ T7689] sctp: [Deprecated]: syz.3.1568 (pid 7689) Use of int in max_burst socket option. [ 99.149477][ T7689] Use struct sctp_assoc_value instead [ 99.234310][ T7693] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 99.268835][ T7697] loop6: detected capacity change from 0 to 256 [ 99.282873][ T7697] msdos: Unknown parameter 'ÿ0xffffffffffffffffÿÿÿÿ18446744073709551615' [ 99.323654][ T7692] delete_channel: no stack [ 99.373532][ T7699] nfs4: Bad value for 'source' [ 99.410176][ T7699] hsr_slave_0: left promiscuous mode [ 99.419270][ T7699] hsr_slave_1: left promiscuous mode [ 99.713762][ T7720] sctp: [Deprecated]: syz.1.1580 (pid 7720) Use of int in max_burst socket option. [ 99.713762][ T7720] Use struct sctp_assoc_value instead [ 99.765745][ T7725] loop1: detected capacity change from 0 to 512 [ 99.837902][ T1046] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.879186][ T7730] loop5: detected capacity change from 0 to 256 [ 99.886535][ T7730] msdos: Unknown parameter 'ÿ0xffffffffffffffffÿÿÿÿ18446744073709551615' [ 100.291936][ T7742] loop6: detected capacity change from 0 to 1024 [ 100.298961][ T7742] EXT4-fs: Ignoring removed orlov option [ 100.308973][ T7742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.362388][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.524045][ T7753] __nla_validate_parse: 12 callbacks suppressed [ 100.524063][ T7753] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1592'. [ 100.589461][ T7753] bond1: (slave dummy0): Releasing active interface [ 100.646475][ T7765] loop1: detected capacity change from 0 to 256 [ 100.654388][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1594'. [ 100.671711][ T7765] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.726284][ T7766] lo speed is unknown, defaulting to 1000 [ 100.732342][ T7766] lo speed is unknown, defaulting to 1000 [ 100.774942][ T7769] loop0: detected capacity change from 0 to 1024 [ 100.793516][ T7769] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 100.848766][ T7769] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 101.046421][ T7780] lo speed is unknown, defaulting to 1000 [ 101.052521][ T7780] lo speed is unknown, defaulting to 1000 [ 101.170950][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 101.179961][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 101.303878][ T7792] loop0: detected capacity change from 0 to 512 [ 101.578793][ T7801] lo speed is unknown, defaulting to 1000 [ 101.585228][ T7801] lo speed is unknown, defaulting to 1000 [ 102.028038][ T7808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.333156][ T7823] loop6: detected capacity change from 0 to 256 [ 102.352662][ T7823] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.363581][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 102.372483][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 102.433413][ T7830] loop3: detected capacity change from 0 to 1024 [ 102.443688][ T7828] loop6: detected capacity change from 0 to 2048 [ 102.461450][ T7830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.485074][ T7830] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.513344][ T7828] loop6: p1 < > p4 [ 102.536891][ T7828] loop6: p4 size 8388608 extends beyond EOD, truncated [ 102.548520][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 102.548533][ T29] audit: type=1326 audit(1754235590.598:9337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.614525][ T29] audit: type=1326 audit(1754235590.658:9338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.638036][ T29] audit: type=1326 audit(1754235590.658:9339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.661707][ T29] audit: type=1326 audit(1754235590.658:9340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.685361][ T29] audit: type=1326 audit(1754235590.658:9341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.708809][ T29] audit: type=1326 audit(1754235590.658:9342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.732234][ T29] audit: type=1326 audit(1754235590.658:9343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.755663][ T29] audit: type=1326 audit(1754235590.658:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.779330][ T29] audit: type=1326 audit(1754235590.658:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.802737][ T29] audit: type=1326 audit(1754235590.658:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 102.896639][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.040068][ T7852] loop6: detected capacity change from 0 to 512 [ 103.147998][ T7858] loop3: detected capacity change from 0 to 256 [ 103.179179][ T3986] hid_parser_main: 45 callbacks suppressed [ 103.179195][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.187919][ T7858] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.192545][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.224103][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.231515][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.238988][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.246427][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.253906][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.261301][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.268717][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.276204][ T3986] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 103.313667][ T3986] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.384279][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 103.393817][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 103.429398][ T7871] netlink: '+}[@': attribute type 10 has an invalid length. [ 103.438687][ T7871] team0: Device hsr_slave_0 failed to register rx_handler [ 104.175605][ T3302] block device autoloading is deprecated and will be removed. [ 104.208068][ T7896] loop5: detected capacity change from 0 to 8192 [ 104.216551][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 104.225598][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 104.363543][ T7909] tipc: Can't bind to reserved service type 0 [ 104.437148][ T7914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=62960 sclass=netlink_tcpdiag_socket pid=7914 comm=syz.5.1646 [ 104.496866][ T7922] loop5: detected capacity change from 0 to 512 [ 104.644733][ T3986] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 104.998057][ T7941] futex_wake_op: syz.6.1656 tries to shift op by -1; fix this program [ 105.095477][ T7942] lo speed is unknown, defaulting to 1000 [ 105.105587][ T7948] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000007 [ 105.115931][ T7942] lo speed is unknown, defaulting to 1000 [ 105.339228][ T7961] loop5: detected capacity change from 0 to 1024 [ 105.352874][ T7962] loop0: detected capacity change from 0 to 1024 [ 105.367110][ T7951] delete_channel: no stack [ 105.374117][ T7962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.403305][ T7962] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.440198][ T7968] FAULT_INJECTION: forcing a failure. [ 105.440198][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 105.453016][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.1.1664 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 105.453109][ T7968] Tainted: [W]=WARN [ 105.453116][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.453128][ T7968] Call Trace: [ 105.453135][ T7968] [ 105.453144][ T7968] __dump_stack+0x1d/0x30 [ 105.453167][ T7968] dump_stack_lvl+0xe8/0x140 [ 105.453185][ T7968] dump_stack+0x15/0x1b [ 105.453199][ T7968] should_fail_ex+0x265/0x280 [ 105.453236][ T7968] should_failslab+0x8c/0xb0 [ 105.453262][ T7968] __kmalloc_noprof+0xa5/0x3e0 [ 105.453290][ T7968] ? sel_write_create+0x186/0x4f0 [ 105.453363][ T7968] sel_write_create+0x186/0x4f0 [ 105.453389][ T7968] selinux_transaction_write+0xc3/0x110 [ 105.453410][ T7968] ? __pfx_selinux_transaction_write+0x10/0x10 [ 105.453433][ T7968] vfs_write+0x269/0x8e0 [ 105.453456][ T7968] ? __rcu_read_unlock+0x4f/0x70 [ 105.453524][ T7968] ? __fget_files+0x184/0x1c0 [ 105.453552][ T7968] ksys_write+0xda/0x1a0 [ 105.453575][ T7968] __x64_sys_write+0x40/0x50 [ 105.453626][ T7968] x64_sys_call+0x27fe/0x2ff0 [ 105.453687][ T7968] do_syscall_64+0xd2/0x200 [ 105.453710][ T7968] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.453734][ T7968] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.453753][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.453801][ T7968] RIP: 0033:0x7f02a7cbeb69 [ 105.453816][ T7968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.453836][ T7968] RSP: 002b:00007f02a631f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.453854][ T7968] RAX: ffffffffffffffda RBX: 00007f02a7ee5fa0 RCX: 00007f02a7cbeb69 [ 105.453923][ T7968] RDX: 000000000000005a RSI: 0000200000000240 RDI: 0000000000000006 [ 105.453936][ T7968] RBP: 00007f02a631f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.453947][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.453957][ T7968] R13: 0000000000000000 R14: 00007f02a7ee5fa0 R15: 00007ffc2fbfee88 [ 105.453974][ T7968] [ 105.460690][ T7961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.480206][ T7962] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1661: Invalid block bitmap block 0 in block_group 0 [ 105.715092][ T7962] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1661: Failed to acquire dquot type 0 [ 105.728750][ T7962] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1661: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.745246][ T7962] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1661: Invalid inode bitmap blk 0 in block_group 0 [ 105.758183][ T7962] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 105.766868][ T3630] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0 [ 105.780234][ T7962] EXT4-fs (loop0): 1 orphan inode deleted [ 105.787417][ T7962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.023434][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.263625][ T7962] syz.0.1661 (7962) used greatest stack depth: 9256 bytes left [ 106.272519][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.305131][ T7999] __nla_validate_parse: 9 callbacks suppressed [ 106.305167][ T7999] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1672'. [ 106.333703][ T8001] loop3: detected capacity change from 0 to 512 [ 106.391594][ T7999] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 106.401557][ T7999] SELinux: failed to load policy [ 106.409159][ T3388] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 106.431162][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 106.440071][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 107.112666][ T8026] loop6: detected capacity change from 0 to 128 [ 107.122254][ T8026] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (18424!=39978) [ 107.131903][ T8026] EXT4-fs (loop6): group descriptors corrupted! [ 107.144200][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1682'. [ 107.298876][ T8036] loop1: detected capacity change from 0 to 512 [ 107.305693][ T8036] ext4: Unknown parameter 'obj_user' [ 107.320729][ T8036] loop1: detected capacity change from 0 to 2048 [ 107.363290][ T8036] EXT4-fs (loop1): failed to initialize system zone (-117) [ 107.376986][ T8036] EXT4-fs (loop1): mount failed [ 107.390212][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 107.399654][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 107.472434][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 107.481461][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 107.490543][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 107.518705][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 107.527770][ T8049] netlink: 'syz.1.1689': attribute type 6 has an invalid length. [ 107.537402][ T8054] netlink: 'syz.5.1691': attribute type 2 has an invalid length. [ 107.545966][ T8054] netlink: 'syz.5.1691': attribute type 9 has an invalid length. [ 107.565455][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 107.565476][ T29] audit: type=1326 audit(1754235595.609:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.595135][ T29] audit: type=1326 audit(1754235595.609:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.618649][ T29] audit: type=1326 audit(1754235595.609:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.642086][ T29] audit: type=1326 audit(1754235595.609:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.665565][ T29] audit: type=1326 audit(1754235595.609:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.689136][ T29] audit: type=1326 audit(1754235595.609:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 107.737838][ T29] audit: type=1400 audit(1754235595.779:9715): avc: denied { read write } for pid=8058 comm="syz.0.1693" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.761757][ T29] audit: type=1400 audit(1754235595.779:9716): avc: denied { open } for pid=8058 comm="syz.0.1693" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.788653][ T8064] syz_tun: entered allmulticast mode [ 107.804486][ T29] audit: type=1400 audit(1754235595.829:9717): avc: denied { setopt } for pid=8058 comm="syz.0.1693" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.824787][ T29] audit: type=1400 audit(1754235595.849:9718): avc: denied { bind } for pid=8058 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.858867][ T8066] loop1: detected capacity change from 0 to 512 [ 108.011470][ T3388] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.312855][ T8084] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 108.324363][ T8084] team0: Port device dummy0 added [ 108.331009][ T8084] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 108.339281][ T8084] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.352731][ T8084] team0: Failed to send options change via netlink (err -105) [ 108.360385][ T8084] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.369311][ T8084] team0: Port device dummy0 removed [ 108.380310][ T8084] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.412656][ T8092] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 108.470632][ T8102] lo speed is unknown, defaulting to 1000 [ 108.477446][ T8102] lo speed is unknown, defaulting to 1000 [ 108.577101][ T8113] loop5: detected capacity change from 0 to 512 [ 108.585612][ T8113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.135623][ T8144] lo speed is unknown, defaulting to 1000 [ 109.142656][ T8144] lo speed is unknown, defaulting to 1000 [ 109.591205][ T8162] loop3: detected capacity change from 0 to 512 [ 109.623834][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.824485][ T8190] lo speed is unknown, defaulting to 1000 [ 109.830587][ T8190] lo speed is unknown, defaulting to 1000 [ 109.918808][ T8196] loop0: detected capacity change from 0 to 1024 [ 109.931663][ T8196] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 110.159364][ T8224] lo speed is unknown, defaulting to 1000 [ 110.165466][ T8224] lo speed is unknown, defaulting to 1000 [ 110.199376][ T8227] loop1: detected capacity change from 0 to 512 [ 110.394810][ T8241] geneve2: entered promiscuous mode [ 110.400128][ T8241] geneve2: entered allmulticast mode [ 110.794869][ T8271] loop3: detected capacity change from 0 to 512 [ 110.805895][ T8269] lo speed is unknown, defaulting to 1000 [ 110.822737][ T8269] lo speed is unknown, defaulting to 1000 [ 111.487449][ T8312] lo speed is unknown, defaulting to 1000 [ 111.494395][ T8312] lo speed is unknown, defaulting to 1000 [ 111.642653][ T8318] __nla_validate_parse: 26 callbacks suppressed [ 111.642671][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 111.869603][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 111.879175][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 111.955030][ T8341] loop1: detected capacity change from 0 to 512 [ 111.978674][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 112.017758][ T8347] lo speed is unknown, defaulting to 1000 [ 112.045603][ T8347] lo speed is unknown, defaulting to 1000 [ 112.083415][ T1046] hid_parser_main: 98 callbacks suppressed [ 112.083456][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.096712][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.160417][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.167865][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.175376][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.182823][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.190213][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.197610][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.205011][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.212464][ T1046] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 112.235178][ T1046] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.338072][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 112.347712][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 112.829204][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 112.866704][ T8387] lo speed is unknown, defaulting to 1000 [ 112.872914][ T8387] lo speed is unknown, defaulting to 1000 [ 113.029712][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 113.029727][ T29] audit: type=1326 audit(1754235601.069:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.089936][ T29] audit: type=1326 audit(1754235601.109:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.114174][ T29] audit: type=1326 audit(1754235601.109:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.137682][ T29] audit: type=1326 audit(1754235601.109:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.161831][ T29] audit: type=1326 audit(1754235601.109:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.182076][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 113.185323][ T29] audit: type=1326 audit(1754235601.109:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.194193][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 113.227660][ T29] audit: type=1400 audit(1754235601.109:10026): avc: denied { setattr } for pid=8399 comm="syz.1.1813" name="" dev="pipefs" ino=24975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.249866][ T29] audit: type=1326 audit(1754235601.109:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.274172][ T29] audit: type=1326 audit(1754235601.109:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.297701][ T29] audit: type=1326 audit(1754235601.109:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 113.378203][ T8413] loop6: detected capacity change from 0 to 512 [ 113.536743][ T3388] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.631714][ T8433] loop0: detected capacity change from 0 to 128 [ 113.668324][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 113.676245][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 113.753654][ T8437] lo speed is unknown, defaulting to 1000 [ 113.759734][ T8437] lo speed is unknown, defaulting to 1000 [ 113.866281][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 113.955117][ T8447] loop1: detected capacity change from 0 to 164 [ 113.982730][ T8447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.006692][ T8447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.061526][ T8447] usb usb8: usbfs: process 8447 (syz.1.1827) did not claim interface 0 before use [ 114.244653][ T8467] IPv6: Can't replace route, no match found [ 114.254271][ T8467] loop3: detected capacity change from 0 to 512 [ 114.271064][ T8467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.292527][ T8473] loop6: detected capacity change from 0 to 1024 [ 114.405110][ T8473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.418170][ T8473] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.425155][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.441276][ T8467] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.475681][ T8473] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 13) [ 114.526459][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.555236][ T8473] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 114.567715][ T8473] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.567715][ T8473] [ 114.580157][ T8483] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.606952][ T8472] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.633953][ T8472] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.650930][ T8483] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.651286][ T8483] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.680398][ T8472] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.680660][ T8472] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.711200][ T8483] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.726377][ T8472] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.1839: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.831674][ T8493] loop3: detected capacity change from 0 to 128 [ 114.888457][ T8498] loop0: detected capacity change from 0 to 512 [ 114.947538][ T8473] lo speed is unknown, defaulting to 1000 [ 114.961608][ T8473] lo speed is unknown, defaulting to 1000 [ 115.747071][ T8511] loop0: detected capacity change from 0 to 512 [ 115.754495][ T8511] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 115.763897][ T8511] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1850: inode #1661: comm syz.0.1850: iget: illegal inode # [ 115.793078][ T8511] EXT4-fs (loop0): no journal found [ 115.798304][ T8511] EXT4-fs (loop0): can't get journal size [ 115.805054][ T8513] loop3: detected capacity change from 0 to 128 [ 115.822648][ T8513] msdos: Unknown parameter 'nodot9ä¹]kón¤jðâ?s' [ 115.853262][ T8511] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.874901][ T8511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002] [ 115.883722][ T8511] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 115.893651][ T8511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.981744][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.024110][ T8519] loop3: detected capacity change from 0 to 8192 [ 116.164129][ T8529] ref_ctr_offset mismatch. inode: 0x795 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 116.176004][ T8532] loop5: detected capacity change from 0 to 128 [ 116.220160][ T5221] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 116.228132][ T5221] FAT-fs (loop5): Filesystem has been set read-only [ 116.344825][ T8540] loop3: detected capacity change from 0 to 512 [ 116.565439][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.654364][ T8552] lo speed is unknown, defaulting to 1000 [ 116.660544][ T8552] lo speed is unknown, defaulting to 1000 [ 116.907629][ T8564] loop0: detected capacity change from 0 to 128 [ 116.936837][ T8564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.945441][ T8564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.105323][ T8571] loop6: detected capacity change from 0 to 512 [ 117.112576][ T8571] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.125785][ T8571] EXT4-fs (loop6): 1 truncate cleaned up [ 117.132669][ T8571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.163021][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.197208][ T8581] __nla_validate_parse: 14 callbacks suppressed [ 117.197222][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 117.306318][ T8594] sd 0:0:1:0: device reset [ 117.317464][ T8596] loop3: detected capacity change from 0 to 1024 [ 117.327598][ T8594] 9p: Unknown access argument ‚: -22 [ 117.335314][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.348124][ T8596] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.362687][ T8596] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1879: lblock 3 mapped to illegal pblock 3 (length 13) [ 117.378078][ T8596] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 117.390479][ T8596] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.390479][ T8596] [ 117.416578][ T8596] lo speed is unknown, defaulting to 1000 [ 117.423710][ T8596] lo speed is unknown, defaulting to 1000 [ 117.467716][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 117.475600][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 117.537720][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1882'. [ 117.737508][ T8618] loop5: detected capacity change from 0 to 512 [ 117.862656][ T3388] hid_parser_main: 44 callbacks suppressed [ 117.862674][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.876484][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.884740][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.892195][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.899917][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.907997][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.915414][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.922810][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.930193][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.938368][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 117.948030][ T3388] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 118.084059][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.138186][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 118.138200][ T29] audit: type=1400 audit(1754235606.180:10513): avc: denied { remount } for pid=8626 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.173139][ T29] audit: type=1400 audit(1754235606.210:10514): avc: denied { create } for pid=8626 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.193738][ T29] audit: type=1400 audit(1754235606.210:10515): avc: denied { connect } for pid=8626 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.213634][ T29] audit: type=1400 audit(1754235606.210:10516): avc: denied { write } for pid=8626 comm="syz.3.1888" path="socket:[25460]" dev="sockfs" ino=25460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.252261][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 118.298026][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 118.363383][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 118.372315][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 118.407282][ T29] audit: type=1400 audit(1754235606.450:10517): avc: denied { map } for pid=8636 comm="syz.1.1891" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 118.447156][ T8639] loop1: detected capacity change from 0 to 128 [ 118.473292][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.481946][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.731795][ T29] audit: type=1400 audit(1754235606.780:10518): avc: denied { read write } for pid=8640 comm="syz.5.1893" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.739782][ T8643] lo speed is unknown, defaulting to 1000 [ 118.757071][ T29] audit: type=1400 audit(1754235606.780:10519): avc: denied { open } for pid=8640 comm="syz.5.1893" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.762782][ T8643] lo speed is unknown, defaulting to 1000 [ 118.794613][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1893'. [ 118.940356][ T29] audit: type=1400 audit(1754235606.980:10520): avc: denied { read } for pid=8651 comm="syz.0.1897" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.964358][ T29] audit: type=1400 audit(1754235606.980:10521): avc: denied { open } for pid=8651 comm="syz.0.1897" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.988244][ T29] audit: type=1400 audit(1754235607.010:10522): avc: denied { ioctl } for pid=8651 comm="syz.0.1897" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.037662][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 119.046910][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.054431][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.062218][ T3309] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 119.070054][ T3309] FAT-fs (loop1): Filesystem has been set read-only [ 119.073286][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 119.085550][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 119.099065][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.107177][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.118220][ T8665] loop1: detected capacity change from 0 to 164 [ 119.125010][ T8667] loop3: detected capacity change from 0 to 1024 [ 119.151949][ T8667] EXT4-fs: Ignoring removed bh option [ 119.163706][ T8667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.179575][ T8665] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.199355][ T8673] loop6: detected capacity change from 0 to 512 [ 119.215595][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.310468][ T8682] lo speed is unknown, defaulting to 1000 [ 119.316595][ T8682] lo speed is unknown, defaulting to 1000 [ 119.320757][ T3388] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.553364][ T8693] loop0: detected capacity change from 0 to 128 [ 119.583361][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.591958][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.103990][ T8717] loop3: detected capacity change from 0 to 256 [ 120.111984][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 120.119844][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 120.128121][ T8717] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.140304][ T8719] loop0: detected capacity change from 0 to 128 [ 120.207900][ T8719] syz.0.1921: attempt to access beyond end of device [ 120.207900][ T8719] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 120.273365][ T8719] syz.0.1921: attempt to access beyond end of device [ 120.273365][ T8719] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 120.381508][ T8741] loop3: detected capacity change from 0 to 512 [ 120.484027][ T8755] loop0: detected capacity change from 0 to 128 [ 120.495749][ T3356] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 120.509552][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.518837][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.727223][ T8763] loop6: detected capacity change from 0 to 512 [ 120.735270][ T8763] EXT4-fs: Ignoring removed i_version option [ 120.741907][ T8763] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.753685][ T8763] EXT4-fs (loop6): 1 truncate cleaned up [ 120.759687][ T8763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.064299][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 121.072282][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 121.492855][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.545849][ T8804] loop3: detected capacity change from 0 to 128 [ 121.581746][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.592639][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.603279][ T8808] loop6: detected capacity change from 0 to 512 [ 121.716408][ T3395] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 121.830854][ T8815] wireguard0: entered promiscuous mode [ 121.836508][ T8815] wireguard0: entered allmulticast mode [ 122.111116][ T3305] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.118979][ T3305] FAT-fs (loop3): Filesystem has been set read-only [ 122.386784][ T8840] __nla_validate_parse: 16 callbacks suppressed [ 122.386800][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 122.524170][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1969'. [ 122.533166][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1969'. [ 122.587906][ T8860] loop0: detected capacity change from 0 to 128 [ 122.646717][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.655993][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.988646][ T8870] lo speed is unknown, defaulting to 1000 [ 122.996309][ T8870] lo speed is unknown, defaulting to 1000 [ 123.119228][ T8880] loop1: detected capacity change from 0 to 512 [ 123.140466][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 123.140480][ T29] audit: type=1326 audit(1754235611.181:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.170760][ T29] audit: type=1326 audit(1754235611.191:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.194476][ T29] audit: type=1326 audit(1754235611.191:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.218064][ T29] audit: type=1326 audit(1754235611.191:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.241880][ T29] audit: type=1326 audit(1754235611.191:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.265435][ T29] audit: type=1326 audit(1754235611.191:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.289181][ T29] audit: type=1326 audit(1754235611.191:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090dd4d4d0 code=0x7ffc0000 [ 123.297297][ T3388] hid_parser_main: 98 callbacks suppressed [ 123.297315][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.312760][ T29] audit: type=1326 audit(1754235611.191:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090dd4d4d0 code=0x7ffc0000 [ 123.312790][ T29] audit: type=1326 audit(1754235611.191:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.312842][ T29] audit: type=1326 audit(1754235611.191:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090dd4eb69 code=0x7ffc0000 [ 123.313787][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.319105][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.326458][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 123.419744][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.427148][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.435109][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.442596][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.449987][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.457383][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.465351][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.472766][ T3388] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.480543][ T3388] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 123.512732][ T8892] loop6: detected capacity change from 0 to 512 [ 123.520820][ T8892] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 123.552650][ T8899] sch_fq: defrate 4294967295 ignored. [ 123.558690][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 123.568300][ T8899] bridge_slave_1: left allmulticast mode [ 123.573979][ T8899] bridge_slave_1: left promiscuous mode [ 123.579713][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.588519][ T8899] bridge_slave_0: left allmulticast mode [ 123.594382][ T8899] bridge_slave_0: left promiscuous mode [ 123.600100][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.673897][ T8900] loop6: detected capacity change from 0 to 512 [ 123.681298][ T8900] EXT4-fs (loop6): orphan cleanup on readonly fs [ 123.687956][ T8900] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1982: Failed to acquire dquot type 1 [ 123.699882][ T8900] EXT4-fs (loop6): 1 truncate cleaned up [ 123.706425][ T8900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.726582][ T8892] lo speed is unknown, defaulting to 1000 [ 123.733355][ T8892] lo speed is unknown, defaulting to 1000 [ 123.818881][ T8908] lo speed is unknown, defaulting to 1000 [ 123.825704][ T8908] lo speed is unknown, defaulting to 1000 [ 123.831980][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.887755][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 123.896802][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 124.009201][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 124.014637][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 124.027717][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 124.069179][ T8944] serio: Serial port pts0 [ 124.144052][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 124.165960][ T8958] lo speed is unknown, defaulting to 1000 [ 124.185069][ T8958] lo speed is unknown, defaulting to 1000 [ 124.187930][ T8964] loop5: detected capacity change from 0 to 512 [ 124.225025][ T8968] loop3: detected capacity change from 0 to 512 [ 124.233524][ T8968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.245261][ T8968] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 124.261876][ T8968] EXT4-fs (loop3): 1 truncate cleaned up [ 124.267899][ T8968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.294202][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.324860][ T3356] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 124.431708][ T8992] serio: Serial port pts0 [ 124.441594][ T8981] loop1: detected capacity change from 0 to 764 [ 124.448855][ T8981] rock: directory entry would overflow storage [ 124.455095][ T8981] rock: sig=0x4654, size=5, remaining=4 [ 124.463394][ T8981] rock: directory entry would overflow storage [ 124.469574][ T8981] rock: sig=0x4f50, size=4, remaining=3 [ 124.475169][ T8981] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.481069][ T8999] loop6: detected capacity change from 0 to 512 [ 124.511814][ T8999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.525014][ T8999] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.538727][ T9004] lo speed is unknown, defaulting to 1000 [ 124.545293][ T9004] lo speed is unknown, defaulting to 1000 [ 124.640945][ T9012] loop1: detected capacity change from 0 to 512 [ 124.647737][ T9012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.664741][ T9012] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2019: casefold flag without casefold feature [ 124.680506][ T9012] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2019: couldn't read orphan inode 15 (err -117) [ 124.695145][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.708221][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.740771][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.759570][ T9018] loop6: detected capacity change from 0 to 128 [ 124.767252][ T9020] loop1: detected capacity change from 0 to 128 [ 124.768882][ T9018] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 124.787346][ T9018] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.807506][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.816228][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.816798][ T6020] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.892827][ T9029] loop0: detected capacity change from 0 to 2048 [ 124.921699][ T9029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.944072][ T9029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.960029][ T9029] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 124.972472][ T9029] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.972472][ T9029] [ 124.982757][ T9029] EXT4-fs (loop0): Total free blocks count 0 [ 124.988779][ T9029] EXT4-fs (loop0): Free/Dirty block details [ 124.994784][ T9029] EXT4-fs (loop0): free_blocks=2415919104 [ 125.000577][ T9029] EXT4-fs (loop0): dirty_blocks=32 [ 125.005708][ T9029] EXT4-fs (loop0): Block reservation details [ 125.012282][ T9029] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 125.031321][ T9043] netlink: 'syz.6.2031': attribute type 10 has an invalid length. [ 125.039256][ T9043] ipvlan0: entered allmulticast mode [ 125.045176][ T9043] veth0_vlan: entered allmulticast mode [ 125.052190][ T9043] team0: Device ipvlan0 failed to register rx_handler [ 125.068237][ T3596] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.133093][ T9054] FAULT_INJECTION: forcing a failure. [ 125.133093][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.147117][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.6.2036 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 125.147241][ T9054] Tainted: [W]=WARN [ 125.147247][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.147290][ T9054] Call Trace: [ 125.147297][ T9054] [ 125.147305][ T9054] __dump_stack+0x1d/0x30 [ 125.147335][ T9054] dump_stack_lvl+0xe8/0x140 [ 125.147356][ T9054] dump_stack+0x15/0x1b [ 125.147373][ T9054] should_fail_ex+0x265/0x280 [ 125.147426][ T9054] should_fail+0xb/0x20 [ 125.147453][ T9054] should_fail_usercopy+0x1a/0x20 [ 125.147530][ T9054] copy_fpstate_to_sigframe+0x628/0x7d0 [ 125.147565][ T9054] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 125.147597][ T9054] ? x86_task_fpu+0x36/0x60 [ 125.147690][ T9054] get_sigframe+0x34d/0x490 [ 125.147706][ T9054] ? get_signal+0xdc8/0xf70 [ 125.147743][ T9054] x64_setup_rt_frame+0xa8/0x580 [ 125.147763][ T9054] arch_do_signal_or_restart+0x27c/0x480 [ 125.147857][ T9054] exit_to_user_mode_loop+0x7a/0x100 [ 125.147926][ T9054] do_syscall_64+0x1d6/0x200 [ 125.147967][ T9054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.148030][ T9054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.148049][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.148068][ T9054] RIP: 0033:0x7f6c44f3d4ce [ 125.148088][ T9054] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 [ 125.148106][ T9054] RSP: 002b:00007f6c4359eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 125.148125][ T9054] RAX: 0000000000000101 RBX: 0000000000022081 RCX: 00007f6c44f3d4d0 [ 125.148168][ T9054] RDX: 0000000000022081 RSI: 00007f6c4359ec10 RDI: 00000000ffffff9c [ 125.148181][ T9054] RBP: 00007f6c4359ec10 R08: 0000000000000000 R09: 002367732f766564 [ 125.148194][ T9054] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 125.148207][ T9054] R13: 0000000000000000 R14: 00007f6c45165fa0 R15: 00007ffe88fd2208 [ 125.148226][ T9054] [ 125.463952][ T9070] loop3: detected capacity change from 0 to 512 [ 125.479197][ T3309] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 125.487913][ T3309] FAT-fs (loop1): Filesystem has been set read-only [ 125.495988][ T9068] lo speed is unknown, defaulting to 1000 [ 125.504825][ T9068] lo speed is unknown, defaulting to 1000 [ 125.642611][ T9082] dvmrp0: entered allmulticast mode [ 125.694420][ T9092] FAULT_INJECTION: forcing a failure. [ 125.694420][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.707606][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.6.2051 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 125.707680][ T9092] Tainted: [W]=WARN [ 125.707686][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.707697][ T9092] Call Trace: [ 125.707704][ T9092] [ 125.707712][ T9092] __dump_stack+0x1d/0x30 [ 125.707779][ T9092] dump_stack_lvl+0xe8/0x140 [ 125.707800][ T9092] dump_stack+0x15/0x1b [ 125.707855][ T9092] should_fail_ex+0x265/0x280 [ 125.707889][ T9092] should_fail+0xb/0x20 [ 125.707998][ T9092] should_fail_usercopy+0x1a/0x20 [ 125.708015][ T9092] _copy_to_user+0x20/0xa0 [ 125.708038][ T9092] simple_read_from_buffer+0xb5/0x130 [ 125.708057][ T9092] proc_fail_nth_read+0x10e/0x150 [ 125.708122][ T9092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.708150][ T9092] vfs_read+0x1a0/0x6f0 [ 125.708167][ T9092] ? __rcu_read_unlock+0x4f/0x70 [ 125.708232][ T9092] ? __fget_files+0x184/0x1c0 [ 125.708313][ T9092] ksys_read+0xda/0x1a0 [ 125.708334][ T9092] __x64_sys_read+0x40/0x50 [ 125.708413][ T9092] x64_sys_call+0x27bc/0x2ff0 [ 125.708436][ T9092] do_syscall_64+0xd2/0x200 [ 125.708462][ T9092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.708503][ T9092] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.708527][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.708558][ T9092] RIP: 0033:0x7f6c44f3d57c [ 125.708573][ T9092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.708654][ T9092] RSP: 002b:00007f6c4359f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.708674][ T9092] RAX: ffffffffffffffda RBX: 00007f6c45165fa0 RCX: 00007f6c44f3d57c [ 125.708688][ T9092] RDX: 000000000000000f RSI: 00007f6c4359f0a0 RDI: 0000000000000005 [ 125.708701][ T9092] RBP: 00007f6c4359f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.708711][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.708723][ T9092] R13: 0000000000000000 R14: 00007f6c45165fa0 R15: 00007ffe88fd2208 [ 125.708741][ T9092] [ 125.927712][ T9097] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 125.995675][ T9090] loop5: detected capacity change from 0 to 512 [ 126.015915][ T9090] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2050: corrupted inode contents [ 126.056305][ T9090] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2050: mark_inode_dirty error [ 126.101963][ T9090] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2050: corrupted inode contents [ 126.146250][ T9118] loop0: detected capacity change from 0 to 128 [ 126.153058][ T9090] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2050: mark_inode_dirty error [ 126.177924][ T9090] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2050: corrupted inode contents [ 126.192138][ T9118] FAT-fs (loop0): Directory bread(block 162) failed [ 126.198790][ T9118] FAT-fs (loop0): Directory bread(block 163) failed [ 126.206011][ T9118] FAT-fs (loop0): Directory bread(block 164) failed [ 126.213330][ T9122] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 126.219845][ T9122] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.222874][ T9118] FAT-fs (loop0): Directory bread(block 165) failed [ 126.227468][ T9122] vhci_hcd vhci_hcd.0: Device attached [ 126.235414][ T9118] FAT-fs (loop0): Directory bread(block 166) failed [ 126.240533][ T9090] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 126.246798][ T9118] FAT-fs (loop0): Directory bread(block 167) failed [ 126.262219][ T9118] FAT-fs (loop0): Directory bread(block 168) failed [ 126.262786][ T9090] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2050: corrupted inode contents [ 126.269006][ T9118] FAT-fs (loop0): Directory bread(block 169) failed [ 126.281697][ T9090] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2050: mark_inode_dirty error [ 126.305850][ T9090] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 126.315611][ T9090] EXT4-fs (loop5): 1 truncate cleaned up [ 126.318248][ T9118] FAT-fs (loop0): Directory bread(block 162) failed [ 126.322102][ T9090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.328199][ T9118] FAT-fs (loop0): Directory bread(block 163) failed [ 126.341722][ T9090] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.348028][ T9118] syz.0.2058: attempt to access beyond end of device [ 126.348028][ T9118] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 126.359263][ T3616] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 126.373315][ T9118] syz.0.2058: attempt to access beyond end of device [ 126.373315][ T9118] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 126.419457][ T1046] vhci_hcd: vhci_device speed not set [ 126.444712][ T9135] xfrm0: entered promiscuous mode [ 126.449901][ T9135] xfrm0: entered allmulticast mode [ 126.476448][ T9118] autofs4:pid:9118:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11), cmd(0xc0189375) [ 126.479061][ T9138] loop3: detected capacity change from 0 to 128 [ 126.490260][ T9118] autofs4:pid:9118:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 126.496144][ T1046] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 126.518996][ T9123] vhci_hcd: connection closed [ 126.521054][ T3616] vhci_hcd: stop threads [ 126.530302][ T3616] vhci_hcd: release socket [ 126.534737][ T3616] vhci_hcd: disconnect device [ 126.550196][ T1046] usb 13-1: enqueue for inactive port 0 [ 126.555808][ T1046] usb 13-1: enqueue for inactive port 0 [ 126.567015][ T9138] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.584050][ T9147] loop1: detected capacity change from 0 to 512 [ 126.591114][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.611344][ T9138] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.621956][ T1046] usb 13-1: enqueue for inactive port 0 [ 126.689970][ T9156] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 126.699462][ T1046] vhci_hcd: vhci_device speed not set [ 126.728852][ T9161] netlink: 'syz.6.2075': attribute type 12 has an invalid length. [ 126.780460][ T9165] loop6: detected capacity change from 0 to 512 [ 126.795797][ T9165] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 126.803902][ T9165] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 126.812953][ T9165] System zones: 0-1, 15-15, 18-18, 34-34 [ 126.818832][ T9165] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.825547][ T9165] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 126.840185][ T9165] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 126.849045][ T9165] EXT4-fs (loop6): 1 truncate cleaned up [ 126.855565][ T9165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.868476][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.083128][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.428049][ T9197] loop6: detected capacity change from 0 to 128 [ 127.442599][ T9197] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.456679][ T9197] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.471276][ T9197] FAULT_INJECTION: forcing a failure. [ 127.471276][ T9197] name failslab, interval 1, probability 0, space 0, times 0 [ 127.484492][ T9197] CPU: 0 UID: 0 PID: 9197 Comm: syz.6.2085 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 127.484575][ T9197] Tainted: [W]=WARN [ 127.484582][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.484594][ T9197] Call Trace: [ 127.484601][ T9197] [ 127.484608][ T9197] __dump_stack+0x1d/0x30 [ 127.484626][ T9197] dump_stack_lvl+0xe8/0x140 [ 127.484720][ T9197] dump_stack+0x15/0x1b [ 127.484734][ T9197] should_fail_ex+0x265/0x280 [ 127.484775][ T9197] ? audit_log_d_path+0x8d/0x150 [ 127.484802][ T9197] should_failslab+0x8c/0xb0 [ 127.484850][ T9197] __kmalloc_cache_noprof+0x4c/0x320 [ 127.484880][ T9197] audit_log_d_path+0x8d/0x150 [ 127.484912][ T9197] audit_log_d_path_exe+0x42/0x70 [ 127.485084][ T9197] audit_log_task+0x1e9/0x250 [ 127.485112][ T9197] audit_seccomp+0x61/0x100 [ 127.485135][ T9197] ? __seccomp_filter+0x68c/0x10d0 [ 127.485202][ T9197] __seccomp_filter+0x69d/0x10d0 [ 127.485221][ T9197] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.485392][ T9197] ? vfs_write+0x75e/0x8e0 [ 127.485414][ T9197] ? __rcu_read_unlock+0x4f/0x70 [ 127.485434][ T9197] ? __fget_files+0x184/0x1c0 [ 127.485458][ T9197] __secure_computing+0x82/0x150 [ 127.485556][ T9197] syscall_trace_enter+0xcf/0x1e0 [ 127.485590][ T9197] do_syscall_64+0xac/0x200 [ 127.485613][ T9197] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.485636][ T9197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.485659][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.485691][ T9197] RIP: 0033:0x7f6c44f3eb69 [ 127.485707][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.485726][ T9197] RSP: 002b:00007f6c4359f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.485769][ T9197] RAX: ffffffffffffffda RBX: 00007f6c45165fa0 RCX: 00007f6c44f3eb69 [ 127.485854][ T9197] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 127.485868][ T9197] RBP: 00007f6c4359f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.485912][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.485926][ T9197] R13: 0000000000000000 R14: 00007f6c45165fa0 R15: 00007ffe88fd2208 [ 127.486007][ T9197] [ 127.756983][ T6020] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.814315][ T9229] loop5: detected capacity change from 0 to 512 [ 127.930702][ T3356] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 128.200303][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 128.200317][ T29] audit: type=1400 audit(1754235616.251:11615): avc: denied { read } for pid=9244 comm="syz.3.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.269856][ T9245] FAULT_INJECTION: forcing a failure. [ 128.269856][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 128.282538][ T9245] CPU: 1 UID: 0 PID: 9245 Comm: syz.1.2102 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 128.282648][ T9245] Tainted: [W]=WARN [ 128.282655][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.282705][ T9245] Call Trace: [ 128.282712][ T9245] [ 128.282718][ T9245] __dump_stack+0x1d/0x30 [ 128.282745][ T9245] dump_stack_lvl+0xe8/0x140 [ 128.282799][ T9245] dump_stack+0x15/0x1b [ 128.282817][ T9245] should_fail_ex+0x265/0x280 [ 128.282852][ T9245] should_failslab+0x8c/0xb0 [ 128.282947][ T9245] __kmalloc_noprof+0xa5/0x3e0 [ 128.282976][ T9245] ? copy_splice_read+0xc2/0x5f0 [ 128.283023][ T9245] copy_splice_read+0xc2/0x5f0 [ 128.283072][ T9245] ? __pfx_copy_splice_read+0x10/0x10 [ 128.283107][ T9245] splice_direct_to_actor+0x26f/0x680 [ 128.283170][ T9245] ? __pfx_direct_splice_actor+0x10/0x10 [ 128.283190][ T9245] do_splice_direct+0xda/0x150 [ 128.283208][ T9245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 128.283231][ T9245] do_sendfile+0x380/0x650 [ 128.283332][ T9245] __x64_sys_sendfile64+0x105/0x150 [ 128.283366][ T9245] x64_sys_call+0x2bb0/0x2ff0 [ 128.283389][ T9245] do_syscall_64+0xd2/0x200 [ 128.283414][ T9245] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.283444][ T9245] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.283463][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.283482][ T9245] RIP: 0033:0x7f02a7cbeb69 [ 128.283496][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.283514][ T9245] RSP: 002b:00007f02a631f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 128.283553][ T9245] RAX: ffffffffffffffda RBX: 00007f02a7ee5fa0 RCX: 00007f02a7cbeb69 [ 128.283567][ T9245] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 128.283578][ T9245] RBP: 00007f02a631f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.283589][ T9245] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 128.283600][ T9245] R13: 0000000000000000 R14: 00007f02a7ee5fa0 R15: 00007ffc2fbfee88 [ 128.283744][ T9245] [ 128.542318][ T9253] 9pnet: Could not find request transport: f [ 128.577348][ T29] audit: type=1326 audit(1754235616.621:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.600922][ T29] audit: type=1326 audit(1754235616.621:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.626429][ T29] audit: type=1326 audit(1754235616.621:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.650007][ T29] audit: type=1326 audit(1754235616.621:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.673620][ T29] audit: type=1326 audit(1754235616.681:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.697175][ T29] audit: type=1326 audit(1754235616.681:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.720791][ T29] audit: type=1326 audit(1754235616.681:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.751768][ T29] audit: type=1326 audit(1754235616.731:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.1.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a7cbeb69 code=0x7ffc0000 [ 128.856454][ T29] audit: type=1400 audit(1754235616.901:11624): avc: denied { create } for pid=9281 comm="syz.0.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 128.891093][ T9285] Driver unsupported XDP return value 0 on prog (id 1423) dev N/A, expect packet loss! [ 129.056053][ T9285] infiniband syz1: set down [ 129.060634][ T9285] infiniband syz1: added syz_tun [ 129.063414][ T9304] loop6: detected capacity change from 0 to 512 [ 129.104642][ T9285] RDS/IB: syz1: added [ 129.114973][ T9285] smc: adding ib device syz1 with port count 1 [ 129.137676][ T9285] smc: ib device syz1 port 1 has pnetid [ 129.187005][ T3356] hid_parser_main: 71 callbacks suppressed [ 129.187086][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.200340][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.224244][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.231720][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.239843][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.247225][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.254690][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.262096][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.270249][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.277631][ T3356] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 129.394346][ T3356] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 129.446383][ T9312] loop3: detected capacity change from 0 to 256 [ 129.784403][ T9323] loop0: detected capacity change from 0 to 128 [ 129.837664][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.857238][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.097939][ T9335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9335 comm=syz.6.2134 [ 130.372241][ T9344] loop5: detected capacity change from 0 to 1024 [ 130.412004][ T9344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.863537][ T9379] loop6: detected capacity change from 0 to 128 [ 130.886840][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.895521][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.258955][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.464166][ T9408] loop5: detected capacity change from 0 to 1024 [ 131.502749][ T9408] ext3: Bad value for 'mb_optimize_scan' [ 131.516101][ T9410] __nla_validate_parse: 13 callbacks suppressed [ 131.516117][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2162'. [ 131.531950][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2162'. [ 131.672248][ T9416] loop3: detected capacity change from 0 to 512 [ 131.713344][ T9416] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.2166: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 131.763964][ T9416] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.2166: Bad quota inode: 3, type: 0 [ 131.775448][ T9416] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 131.822068][ T9416] EXT4-fs (loop3): mount failed [ 131.862697][ T9438] loop5: detected capacity change from 0 to 128 [ 131.906774][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.920361][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.947212][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 131.956179][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 132.169662][ T9450] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 132.226016][ T9458] lo speed is unknown, defaulting to 1000 [ 132.231995][ T9458] lo speed is unknown, defaulting to 1000 [ 132.317318][ T9461] loop3: detected capacity change from 0 to 2048 [ 132.359030][ T9461] loop3: p1 < > p4 [ 132.363588][ T9461] loop3: p4 size 8388608 extends beyond EOD, truncated [ 132.580263][ T9490] netlink: 'syz.6.2190': attribute type 13 has an invalid length. [ 132.618155][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.625399][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.669905][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.680491][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.729571][ T9481] netem: change failed [ 132.735535][ T3616] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.758026][ T3616] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.769953][ T3616] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.780461][ T3616] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.802198][ T9500] loop1: detected capacity change from 0 to 128 [ 132.861870][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.870867][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.891275][ T9503] loop0: detected capacity change from 0 to 512 [ 132.897987][ T9503] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 132.907438][ T9503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.914234][ T9503] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 132.929679][ T9503] EXT4-fs (loop0): Remounting filesystem read-only [ 132.936347][ T9503] EXT4-fs (loop0): 1 truncate cleaned up [ 132.942466][ T9503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.942481][ T9508] bond_slave_1: entered promiscuous mode [ 132.942785][ T9508] FAULT_INJECTION: forcing a failure. [ 132.942785][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 132.973381][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.5.2196 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 132.973404][ T9508] Tainted: [W]=WARN [ 132.973407][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.973477][ T9508] Call Trace: [ 132.973481][ T9508] [ 132.973486][ T9508] __dump_stack+0x1d/0x30 [ 132.973499][ T9508] dump_stack_lvl+0xe8/0x140 [ 132.973510][ T9508] dump_stack+0x15/0x1b [ 132.973522][ T9508] should_fail_ex+0x265/0x280 [ 132.973627][ T9508] should_failslab+0x8c/0xb0 [ 132.973641][ T9508] kmem_cache_alloc_noprof+0x50/0x310 [ 132.973658][ T9508] ? skb_clone+0x151/0x1f0 [ 132.973729][ T9508] skb_clone+0x151/0x1f0 [ 132.973747][ T9508] __netlink_deliver_tap+0x2c9/0x500 [ 132.973807][ T9508] netlink_unicast+0x66b/0x690 [ 132.973894][ T9508] netlink_sendmsg+0x58b/0x6b0 [ 132.973913][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.974025][ T9508] __sock_sendmsg+0x145/0x180 [ 132.974039][ T9508] ____sys_sendmsg+0x31e/0x4e0 [ 132.974058][ T9508] ___sys_sendmsg+0x17b/0x1d0 [ 132.974126][ T9508] __x64_sys_sendmsg+0xd4/0x160 [ 132.974147][ T9508] x64_sys_call+0x191e/0x2ff0 [ 132.974159][ T9508] do_syscall_64+0xd2/0x200 [ 132.974173][ T9508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.974221][ T9508] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.974303][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.974316][ T9508] RIP: 0033:0x7ff6eb48eb69 [ 132.974326][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.974336][ T9508] RSP: 002b:00007ff6e9af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.974347][ T9508] RAX: ffffffffffffffda RBX: 00007ff6eb6b5fa0 RCX: 00007ff6eb48eb69 [ 132.974359][ T9508] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 132.974366][ T9508] RBP: 00007ff6e9af7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.974391][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.974478][ T9508] R13: 0000000000000000 R14: 00007ff6eb6b5fa0 R15: 00007ffd74416e08 [ 132.974488][ T9508] [ 132.974500][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2196'. [ 133.202031][ T9508] bond0: (slave bond_slave_1): Releasing backup interface [ 133.210467][ T9508] bond_slave_1 (unregistering): left promiscuous mode [ 133.234095][ T9516] syzkaller0: Caught tx_queue_len zero misconfig [ 133.257472][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 133.257488][ T29] audit: type=1400 audit(1754235621.302:11884): avc: denied { setopt } for pid=9517 comm="syz.3.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.297324][ T29] audit: type=1326 audit(1754235621.342:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 133.320894][ T29] audit: type=1326 audit(1754235621.342:11886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 133.346003][ T9521] loop3: detected capacity change from 0 to 128 [ 133.352763][ T29] audit: type=1326 audit(1754235621.342:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 133.376308][ T29] audit: type=1326 audit(1754235621.342:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 133.399844][ T29] audit: type=1326 audit(1754235621.342:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb48eb69 code=0x7ffc0000 [ 133.443475][ T29] audit: type=1326 audit(1754235621.492:11890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.6.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 133.464970][ T9521] syz.3.2199: attempt to access beyond end of device [ 133.464970][ T9521] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 133.467120][ T29] audit: type=1326 audit(1754235621.492:11891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.6.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 133.503911][ T29] audit: type=1326 audit(1754235621.492:11892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.6.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 133.503946][ T29] audit: type=1326 audit(1754235621.492:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.6.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c44f3eb69 code=0x7ffc0000 [ 133.607363][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 133.616428][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 133.633681][ T3616] kworker/u8:42: attempt to access beyond end of device [ 133.633681][ T3616] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 133.673399][ T9536] lo speed is unknown, defaulting to 1000 [ 133.680189][ T9536] lo speed is unknown, defaulting to 1000 [ 133.680186][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.714880][ T9540] loop1: detected capacity change from 0 to 128 [ 133.730618][ T9540] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 133.738565][ T9540] FAT-fs (loop1): Filesystem has been set read-only [ 133.746942][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.746942][ T9540] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 133.761871][ T9540] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 133.769791][ T9540] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 133.777862][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.777862][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.792585][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.792585][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.806058][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.806058][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.820129][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.820129][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.833541][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.833541][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.846885][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.846885][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.861068][ T9540] syz.1.2209: attempt to access beyond end of device [ 133.861068][ T9540] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.997637][ T9557] loop3: detected capacity change from 0 to 128 [ 134.021679][ T9557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.030507][ T9557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.578328][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 134.587243][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 134.614912][ T9563] loop0: detected capacity change from 0 to 1024 [ 134.622451][ T9563] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 134.641547][ T9563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.658294][ T9563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2217: bg 0: block 88: padding at end of block bitmap is not set [ 134.685374][ T9578] lo speed is unknown, defaulting to 1000 [ 134.691482][ T9578] lo speed is unknown, defaulting to 1000 [ 134.700999][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.981998][ T9596] loop1: detected capacity change from 0 to 128 [ 135.000567][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.009050][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.140916][ T9598] loop6: detected capacity change from 0 to 512 [ 135.147614][ T9598] EXT4-fs: Ignoring removed oldalloc option [ 135.153679][ T9598] ext4: Unknown parameter 'uid' [ 135.211235][ T3395] hid_parser_main: 17 callbacks suppressed [ 135.211248][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.224499][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.231991][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.239391][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.246759][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.254156][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.261646][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.269128][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.276543][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.283953][ T3395] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 135.292106][ T3395] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.492468][ T9625] loop6: detected capacity change from 0 to 256 [ 135.499888][ T9625] FAT-fs (loop6): Directory bread(block 1285) failed [ 135.549412][ T9625] FAT-fs (loop6): Directory bread(block 1285) failed [ 135.605072][ T9641] loop0: detected capacity change from 0 to 512 [ 135.721221][ T3356] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.403280][ T9681] loop1: detected capacity change from 0 to 256 [ 136.410786][ T9681] FAT-fs (loop1): Directory bread(block 1285) failed [ 136.470021][ T9681] FAT-fs (loop1): Directory bread(block 1285) failed [ 136.484502][ T9687] loop0: detected capacity change from 0 to 1024 [ 136.509852][ T9687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.536215][ T9687] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2264: Allocating blocks 449-513 which overlap fs metadata [ 136.585286][ T9687] EXT4-fs (loop0): pa ffff8881071c30e0: logic 48, phys. 177, len 21 [ 136.593321][ T9687] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 136.619035][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.650887][ T9697] __nla_validate_parse: 7 callbacks suppressed [ 136.650902][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 136.666535][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 136.716689][ T9699] lo speed is unknown, defaulting to 1000 [ 136.723413][ T9699] lo speed is unknown, defaulting to 1000 [ 136.828597][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2270'. [ 136.886494][ T3356] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.066907][ T9722] loop3: detected capacity change from 0 to 512 [ 137.079240][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2277'. [ 137.205280][ T3356] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.429852][ T9734] lo speed is unknown, defaulting to 1000 [ 137.436043][ T9734] lo speed is unknown, defaulting to 1000 [ 137.735755][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 137.813075][ T9765] loop6: detected capacity change from 0 to 128 [ 137.848464][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.857006][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.069221][ T3986] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.296484][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 138.296498][ T29] audit: type=1326 audit(1754235626.342:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.327215][ T29] audit: type=1326 audit(1754235626.342:12738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.350926][ T29] audit: type=1326 audit(1754235626.382:12739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f994b97d4d0 code=0x7ffc0000 [ 138.375289][ T29] audit: type=1326 audit(1754235626.382:12740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.399557][ T29] audit: type=1326 audit(1754235626.382:12741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.422908][ T29] audit: type=1326 audit(1754235626.382:12742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.447064][ T29] audit: type=1326 audit(1754235626.382:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.471214][ T29] audit: type=1326 audit(1754235626.382:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.494793][ T29] audit: type=1326 audit(1754235626.382:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.518878][ T29] audit: type=1326 audit(1754235626.382:12746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9771 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b97eb69 code=0x7ffc0000 [ 138.563420][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2298'. [ 138.624487][ T9792] loop6: detected capacity change from 0 to 512 [ 138.633319][ T9792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.649447][ T9792] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2302'. [ 138.862282][ T9804] lo speed is unknown, defaulting to 1000 [ 138.869779][ T9804] lo speed is unknown, defaulting to 1000 [ 138.943773][ T9792] ================================================================== [ 138.951875][ T9792] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 138.959944][ T9792] [ 138.962271][ T9792] write to 0xffff8881041173a8 of 8 bytes by task 9797 on cpu 1: [ 138.969984][ T9792] filemap_splice_read+0x47e/0x6b0 [ 138.975101][ T9792] ext4_file_splice_read+0x8f/0xb0 [ 138.980230][ T9792] splice_direct_to_actor+0x26f/0x680 [ 138.985603][ T9792] do_splice_direct+0xda/0x150 [ 138.990377][ T9792] do_sendfile+0x380/0x650 [ 138.994801][ T9792] __x64_sys_sendfile64+0x105/0x150 [ 139.000021][ T9792] x64_sys_call+0x2bb0/0x2ff0 [ 139.004707][ T9792] do_syscall_64+0xd2/0x200 [ 139.009222][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.015117][ T9792] [ 139.017433][ T9792] write to 0xffff8881041173a8 of 8 bytes by task 9792 on cpu 0: [ 139.025051][ T9792] filemap_splice_read+0x47e/0x6b0 [ 139.030162][ T9792] ext4_file_splice_read+0x8f/0xb0 [ 139.035288][ T9792] splice_direct_to_actor+0x26f/0x680 [ 139.040660][ T9792] do_splice_direct+0xda/0x150 [ 139.045426][ T9792] do_sendfile+0x380/0x650 [ 139.049875][ T9792] __x64_sys_sendfile64+0x105/0x150 [ 139.055094][ T9792] x64_sys_call+0x2bb0/0x2ff0 [ 139.059790][ T9792] do_syscall_64+0xd2/0x200 [ 139.064303][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.070197][ T9792] [ 139.072507][ T9792] value changed: 0x00000000000001e6 -> 0x00000000000001e7 [ 139.079602][ T9792] [ 139.081918][ T9792] Reported by Kernel Concurrency Sanitizer on: [ 139.088066][ T9792] CPU: 0 UID: 0 PID: 9792 Comm: syz.6.2302 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 139.101702][ T9792] Tainted: [W]=WARN [ 139.105537][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.115597][ T9792] ================================================================== [ 139.247152][ T9797] ================================================================== [ 139.255262][ T9797] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 139.262648][ T9797] [ 139.264978][ T9797] write to 0xffff88810967adfc of 4 bytes by task 9792 on cpu 0: [ 139.272604][ T9797] xas_set_mark+0x12b/0x140 [ 139.277213][ T9797] tag_pages_for_writeback+0xc2/0x290 [ 139.282590][ T9797] ext4_do_writepages+0x6b2/0x2750 [ 139.287708][ T9797] ext4_writepages+0x176/0x300 [ 139.292471][ T9797] do_writepages+0x1c6/0x310 [ 139.297070][ T9797] filemap_write_and_wait_range+0x144/0x340 [ 139.302977][ T9797] filemap_invalidate_pages+0xa4/0x1a0 [ 139.308432][ T9797] kiocb_invalidate_pages+0x6e/0x80 [ 139.313626][ T9797] __iomap_dio_rw+0x5d4/0x1250 [ 139.318395][ T9797] iomap_dio_rw+0x40/0x90 [ 139.322724][ T9797] ext4_file_write_iter+0xad9/0xf00 [ 139.327927][ T9797] iter_file_splice_write+0x5f2/0x970 [ 139.333298][ T9797] direct_splice_actor+0x153/0x2a0 [ 139.338409][ T9797] splice_direct_to_actor+0x30f/0x680 [ 139.343785][ T9797] do_splice_direct+0xda/0x150 [ 139.348551][ T9797] do_sendfile+0x380/0x650 [ 139.352980][ T9797] __x64_sys_sendfile64+0x105/0x150 [ 139.358182][ T9797] x64_sys_call+0x2bb0/0x2ff0 [ 139.362857][ T9797] do_syscall_64+0xd2/0x200 [ 139.367454][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.373349][ T9797] [ 139.375665][ T9797] read to 0xffff88810967adfc of 4 bytes by task 9797 on cpu 1: [ 139.383202][ T9797] ext4_do_writepages+0xf6/0x2750 [ 139.388251][ T9797] ext4_writepages+0x176/0x300 [ 139.393034][ T9797] do_writepages+0x1c6/0x310 [ 139.397630][ T9797] file_write_and_wait_range+0x156/0x2c0 [ 139.403274][ T9797] generic_buffers_fsync_noflush+0x45/0x120 [ 139.409171][ T9797] ext4_sync_file+0x1ab/0x690 [ 139.413859][ T9797] vfs_fsync_range+0x10d/0x130 [ 139.418627][ T9797] ext4_buffered_write_iter+0x34f/0x3c0 [ 139.424187][ T9797] ext4_file_write_iter+0xdbf/0xf00 [ 139.429390][ T9797] iter_file_splice_write+0x5f2/0x970 [ 139.434768][ T9797] direct_splice_actor+0x153/0x2a0 [ 139.439892][ T9797] splice_direct_to_actor+0x30f/0x680 [ 139.445270][ T9797] do_splice_direct+0xda/0x150 [ 139.450027][ T9797] do_sendfile+0x380/0x650 [ 139.454456][ T9797] __x64_sys_sendfile64+0x105/0x150 [ 139.459657][ T9797] x64_sys_call+0x2bb0/0x2ff0 [ 139.464408][ T9797] do_syscall_64+0xd2/0x200 [ 139.468910][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.474799][ T9797] [ 139.477124][ T9797] value changed: 0x02000021 -> 0x04000021 [ 139.482834][ T9797] [ 139.485151][ T9797] Reported by Kernel Concurrency Sanitizer on: [ 139.491344][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.6.2302 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 139.505332][ T9797] Tainted: [W]=WARN [ 139.509161][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.519211][ T9797] ================================================================== [ 139.643760][ T6020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.