last executing test programs: 15.970855051s ago: executing program 4 (id=693): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="826bb66f", 0x4, 0x0, 0x0, 0x0) 15.848191077s ago: executing program 4 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x22, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r4, 0x4) mkdir(&(0x7f0000000040)='./control\x00', 0x10) 15.76035603s ago: executing program 4 (id=697): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x1000000, 0x1}) getrandom(0x0, 0x0, 0x2) 15.600766727s ago: executing program 4 (id=700): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000204002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x28}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000010080)='./file0\x00', 0x53) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r5], 0x18}, 0x20048044) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) 14.884761248s ago: executing program 4 (id=711): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @ptr={0xd}, @volatile={0x3}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x9, [{0xb, 0x7, 0x9}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/74, 0x70, 0x4a, 0x0, 0x682}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @ptr={0xd}, @volatile={0x3}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x9, [{0xb, 0x7, 0x9}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/74, 0x70, 0x4a, 0x0, 0x682}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) r5 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x2]}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaacf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaacf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x1, 0x4, 0xb, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000180)=""/246, 0x41000, 0x40, '\x00', r2, @fallback=0x1a, r3, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x10000, 0x1889542a}, 0x10, 0x0, r4, 0x5, &(0x7f0000000580)=[r5, r6], &(0x7f00000005c0)=[{0x0, 0x0, 0x4, 0x8}, {0x2, 0x2, 0xe, 0x5}, {0x5, 0x5, 0xb, 0xb}, {0x5, 0x3, 0x6, 0x3}, {0x2, 0x2, 0x0, 0x1}], 0x10, 0x80000000}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000700)={@remote, 0x5, 0x2, 0x3, 0x0, 0x8001, 0x5}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@cgroup=r0, 0x8, 0x0, 0x8001, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@cgroup=r5, r4, 0x22c4538f8425a59a, 0x8, r7, @void, @value=r4, @void, @void, r9}, 0x20) bind$packet(r0, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r5) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', r8, 0x2f, 0x9, 0x7, 0x0, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40, 0x40, 0x4, 0x98e}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', r8, 0x2f, 0x9, 0x7, 0x0, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40, 0x40, 0x4, 0x98e}}) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r10, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x28, 0x3, "079f3206675a1bd423e5beb4a5fab714c3032d43a2ba7380688877d08a48a3377369d042"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000850}, 0x20004010) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x17, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x6, 0xa, 0x1, 0x0, 0xff}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x2, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x0, 0x6, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='syzkaller\x00', 0x25, 0x2c, &(0x7f0000000d80)=""/44, 0x41000, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x1, 0x10, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[r1, r6, r1, r1, r5], &(0x7f0000000e40)=[{0x3, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x4, 0xa}, {0x5, 0x3, 0x8}, {0x5, 0x1, 0xe, 0x9}], 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000c40)='sched_kthread_work_execute_end\x00', r12, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000c40)='sched_kthread_work_execute_end\x00', r12, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0xefe26a874a6bf2a3, &(0x7f0000000fc0)={0x1, &(0x7f0000000f80)=[{0xffff, 0x9, 0x5, 0x1000}]}) pread64(r3, &(0x7f0000001000)=""/97, 0x61, 0xf5fc) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x2000000, &(0x7f0000001100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [{@flag='silent'}, {@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x61, 0x50, 0x65, 0x38, 0x30, 0x36], 0x2d, [0x66, 0x33, 0x63, 0x33], 0x2d, [0x38, 0x39, 0x36, 0x31], 0x2d, [0x0, 0x30, 0x62, 0x30], 0x2d, [0x31, 0x36, 0x37, 0x30, 0x38, 0x30, 0x62, 0x39]}}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_user={'obj_user', 0x3d, 'ethtool\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x2000000, &(0x7f0000001100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [{@flag='silent'}, {@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x61, 0x50, 0x65, 0x38, 0x30, 0x36], 0x2d, [0x66, 0x33, 0x63, 0x33], 0x2d, [0x38, 0x39, 0x36, 0x31], 0x2d, [0x0, 0x30, 0x62, 0x30], 0x2d, [0x31, 0x36, 0x37, 0x30, 0x38, 0x30, 0x62, 0x39]}}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_user={'obj_user', 0x3d, 'ethtool\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001200), 0x4) socket$inet6(0xa, 0xa, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5) sendmsg$NL80211_CMD_SET_BEACON(r13, &(0x7f0000004a00)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000049c0)={&(0x7f00000012c0)={0x3690, r14, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf3, 0x40}}]}, @NL80211_ATTR_BEACON_TAIL={0x1156, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x81, @device_a, 0xd9, @value, 0x4, 0x5, @device_b, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0xc, 0x1e, "f635b1b3e6538b23215c88695e551b5071568ff96b794df0b454032d7d41"}, @perr={0x84, 0xdc, {0x0, 0xe, [{{}, @device_b, 0x3, @void, 0x2a}, {{}, @device_a, 0xfff, @void, 0x21}, {{}, @device_a, 0x100, @void, 0x34}, {{}, @device_a, 0x6}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x8}, {{}, @device_a, 0x5, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x7}, {{}, @broadcast, 0x4, @void, 0x9}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x15}, {{}, @device_b, 0xda4, @void, 0x3c}, {{0x0, 0x1}, @broadcast, 0x100, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0xa, @value, 0xa}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x7}, {{}, @broadcast, 0xd, @void, 0x23}]}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb6, 0xc}}, @cf={0x4, 0x6, {0x3c, 0x81, 0xe01, 0x40}}, @measure_req={0x26, 0x1003, {0x80, 0x2, 0x42, "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"}}, @supported_rates={0x1, 0x8, [{0x48}, {0x18}, {0x60}, {0x12, 0x1}, {0x12}, {0x60, 0x1}, {0x6, 0x1}, {0x1, 0x1}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x36, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_chsw={0x76, 0x6, {0xa, 0x8, 0x1d, 0x1cd}}, @mesh_chsw={0x76, 0x6, {0xe2, 0xe, 0x39, 0x1}}, @mic={0x8c, 0x18, {0x58d, "0ce2776f41ad", @long="3d13c7d29998d907ebb7bd04c41b2488"}}]}, @NL80211_ATTR_PROBE_RESP={0x58f, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x112, 0xf, [@random_vendor={0xdd, 0xf6, "5ae920707a1facc50b1247566d2a2602f9ec57be7c8b29c740ccc07bfa57f0d567568003a44d501badbfa501cb6c6a3f70b411fc4a116a732d98b021828fa182678d9c5bd8914183eb0319a1d164cd0cd48cfd8ec52c2e7e59858f190f653b4e377fd69535dbdb9bf7c77eaac13b55e79b3511603784b778988c9689c7589ca37424e50979303945260e838b84f508918bcc93cde3c55c5c731850a43c46a35a3c44e9a253fc66dfe94b65dcbfd2a364e2f9eef69fdf714e76c1cd4555ea45973ccf6784c7aaecc0bc87aef1372badc966c52ed4fbd351d2dfb1ed23681721682efdcdeb4da6ab5ce9e4d8071928fd2ff91d090359d5"}, @peer_mgmt={0x75, 0x14, {0x0, 0x1ff, @void, @void, @val="131d18e9298e8b14f5a95c9c1997585b"}}]}, @NL80211_ATTR_IE={0x60, 0x2a, [@random_vendor={0xdd, 0x28, "7ddd5f9dc9ec127780e39d145629ef323353dcd64d50957951f54d60e194fa8439cc3c9b958fa3c8"}, @sec_chan_ofs={0x3e, 0x1}, @mic={0x8c, 0x10, {0xd10, "7405c0bff966", @short="98c7d6cbeac553f1"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}]}, @NL80211_ATTR_IE={0x10fe, 0x2a, [@link_id={0x65, 0x12, {@random="043608d0720b", @device_a, @broadcast}}, @challenge={0x10, 0x1, 0x18}, @erp={0x2a, 0x1, {0x1}}, @supported_rates={0x1, 0x4, [{0x36}, {0x24, 0x1}, {0x4}, {0x30, 0x1}]}, @erp={0x2a, 0x1, {0x1, 0x1}}, @measure_req={0x26, 0x1003, {0xa0, 0x7f, 0x18, "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"}}, @challenge={0x10, 0x1, 0xd4}, @perr={0x84, 0xbd, {0x9c, 0xd, [{{}, @device_a, 0x1ff, @void, 0x2e}, {{}, @device_a, 0x1, @void, 0x27}, {{}, @device_b, 0xfffffff7, @void, 0x1a}, {{}, @device_a, 0x0, @void, 0x33}, {{}, @broadcast, 0x10001, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0xfffff85f, @value=@broadcast, 0x2e}, {{}, @device_b, 0x7, @void, 0x37}, {{}, @broadcast, 0x3, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x19}, {{}, @device_b, 0x6}, {{}, @device_b, 0x8, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x3f}, {{}, @device_a, 0x1, @void, 0x3b}]}}, @cf={0x4, 0x6, {0x0, 0x4, 0x3, 0x5}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x610, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb8, 0x3, "0beb948ff089f582c4c6e169c04951f1fa0727893ee022e775ef5c15a7eae1ee4a384dfd0032496a9012b896d2542cd2c8645ba90d8c9f2b4c93f6f76c9c0088d8ac5cbca58f940f78d2ab35fe568f32bfa02a350df5ec7cda1b8dda6da1ceec3eb8266dbefcf337daea9b44c444b41afc4a1cedfe2ab1964f60e9e5686d040eb61eebe20a82c6ff8d346aef878b42055f3e319bd44985b4725fec6d13346764f2a58e25fc2961f5a2a0b1bb87397b4c55e50d42"}, @NL80211_FTM_RESP_ATTR_LCI={0x39, 0x2, "77513f7cd091765f833c772eacb79669eabc1d540b8f3468688513521ce8552a764964b978074f69ab3ec1dcbeee472c0a4b65ee2d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe2, 0x3, "150e63f63c9e72da529f2a281a1fe17819d79267d71fe1b27b30bfc1209f6d5ea96d11adf868b423285a2c11ba5ee1d0a6ad5b0f97e73acb241c79130cac26fe9cd6f5ca13d40f90fec8ed0134a36ddb6dcd403ff2114654807d40199f328d239e5ff69d3b62ee952c57db5c870abc9f90f88e0ef4c4039d689b7a2c4a3ee8b7fd9ecbd45bd3ca8eb63b663b61b618dd4e4808c0da058875f387cfad23fe7b6e41e100f614379705791e97a66c54935500765e7ac132d7cfd3fc74517529123529c9ec2d9180a36d4ae069e81614747d005f9c755247eb5cc454c10a5173"}, @NL80211_FTM_RESP_ATTR_LCI={0xdc, 0x2, "0a87486cf3ad45fa436ac911155da9435c584c2ec7897689a20237ea985e21c799623c0f7bfb241e6da25cfbd0cc7f33cfe67d87a2395fd0c896ce05acb5ca0a98e4dd758abc2a281de9b44062608947e1026fcc6d1a7484a1a87aabf2b7d849d2fcce4d73d22f9f8b06d5c5d52af2f6a14a82be57d7bd5b359bb728a9bc6cdd57526303db34892bae2e2317182024bd7ea42337e61e51e28310499dc2776d7d6b0a6ced7e56e6b37a483f1a01672edd8cf1a61fba8903cb970bc4a57d7a949bb6d27125757b5f7b09e0a30b03505ad2a24a36ee95acde37"}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "517a089ba0799ebf3b2c77e3e70e2861a3d6c9d645e72165ddb30504129e2f97aefd5e38b05961d20ae0f5337d8d2db65a6442f90fd3aff80c832cde3e1397c9cf0930ca6b81952b7c1b18c8ff604c8d00c27855ea768bc7500a2bb0709e7ba3fdb4ab2126f95834afbe54040efdb2634b34f55501328019f19391a2fc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc2, 0x3, "2a662944746ade30e06a566ae0ff04531e62bc7a0d6d880bace5ead339212f941325d55e8100d77b1613d0ff3c2443fc3805df339af6aacb1b8dcc842acd1d2633c74b9213300c4165e1ef4b1e860564a6d59009f869f35fa047dcf1f73241b29b81a4e8a88a386f04e73272beb987acfd27f2a3b695ffae9603426bfaee953591df6245700866428d41f381cf8c453e0b38091519ec866b5f9be5acf435feaa9365fb2288a03e6a1ee261e637578903e6ada4e0307f2ede71a2be6f2dad"}, @NL80211_FTM_RESP_ATTR_LCI={0xf6, 0x2, "469f79d8bf343f89f644903b07993e7e0a7df2452afd292938bb92421cc23556f4af671e9f2d71fe181850fc967eea4e193e00315f6bc4cae23c56bc3dc2f4dfc61435fd5ab41264058e120c0b582eb3bafe0ce167cb02b58ba89967902eddb89e2cdb2b67a8b6b6526cf115119bc70ebd52c86e491cc086c946bc28daae8f9b5ec313937f5bf02d0d71ae1f95ff34660698d1b5bb11d3a72367590232f349633998f5fa34651c06e4edd48c355ad87ca504bfd3272c90eede9b10d9100003272ce2432ed1ad1c6390b86d3a58c8c68197528c778b2a046bef4df84fabf8b75ffbcc67ceaa7a9d4cdbd2c1ef50b220842653"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdf, 0x3, "7ad30e5c750c231f40ac880e827da60fc9ff4fbad2c89435d17d701b3b4875bddb704c2bdc8137feba37f4d52c39268acd0e85698703e49a33a8b46b313d5c08ac157788adefdfbd58f93334afed987b25467f4fcb1171edeb4a40143b6e4bdc330ebfdc788ded5a2fd616d5e1c81790b64d20ee5207b9a409a8578b9c062359b30717123c0bf3fbbd7ca7cd7c47ce24d2fe3b12290c2fa98df155b69086b83be3c130d986bf44a9d1e5c8b21f127bb3a628bb7864ef6d56d0c2a3a2df1e3955281382e8b10ab85a7d7c7fd6e7f72bcc12229849dfef349d1dd6ad"}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "addea002a45bdab1a493f1587a7522f2f5b19e253b02afc9ef2b0715866c947f1d855d71f59ac80f5ec33b3161351d9501"}]}, @NL80211_ATTR_BEACON_HEAD={0x1b0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xf05}, @device_a, @broadcast, @from_mac=@broadcast, {0xe}}, 0xfffffffffffffff2, @random=0x6, 0x2100, @void, @void, @val={0x3, 0x1, 0xb3}, @val={0x4, 0x6, {0xef, 0x4, 0x4, 0x8}}, @void, @val={0x5, 0x98, {0x0, 0x13, 0x81, "11b06028ba79d41eebf5bec2efb06ba3eabec9f6cd3b31b572ffa8dec6307d21c7065c40904ba641a80c82aced0b4a95d58bc219299383791876ad45ebc9f2a77ef513cf4a72f76e8b9261316a2dbbaccb3fb8e0cd74a0370a617282594e032b21998a4bf7e4926e9e3b48bfe9606d328d518253a9bab84a723fcdce32ea67c15014b9a5db900c868fdcbcf96e2ccd2e2779596a9a"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x28, 0x3a}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x6, 0x18}}, @val={0x76, 0x6, {0x8, 0x5, 0x29, 0x800}}, [{0xdd, 0x40, "36f7df78868a450cd640ffd62a1eb77f1ecd89d346c81f0fa2d6bfb3a7f894b17e547d2ee2535fe6b1b4da3789116eef8992da2b659e7775d6f255126710c0cb"}, {0xdd, 0x5b, "e1747e27181984b6e8fbb474e7af01e8b95333e5e1dc463b3478617edfc8c145c35bd400c56ffdeb61c87ea687b564043b5bc471a5efbc4ca419e2928e633652efba804024acb36a592acaff745826380b9c31053b6749e9bb07c5"}, {0xdd, 0x23, "af44e1959653cb0f81485a26d33ca2dede73e02cff66b717ab83adeda4cbcb029fe77a"}]}}, @NL80211_ATTR_PROBE_RESP={0x516, 0x91, "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"}]}, 0x3690}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) open(&(0x7f0000004a40)='./file0\x00', 0x0, 0x40) (async) open(&(0x7f0000004a40)='./file0\x00', 0x0, 0x40) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000004a80)={0x5922, 0x4, 0x0, [{0x6, 0x3, 0x47, 0x70, 0x5, 0x2, 0x8, '\x00', 0x4}, {0x3a, 0x3, 0x1, 0x0, 0x8, 0x2, 0x10, '\x00', 0x9}, {0x0, 0xeab, 0x8, 0x1, 0x9, 0x8, 0x1, '\x00', 0x18}, {0x0, 0x9, 0x4, 0x3, 0x4, 0x5, 0x94, '\x00', 0x498515b1}]}) (async) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000004a80)={0x5922, 0x4, 0x0, [{0x6, 0x3, 0x47, 0x70, 0x5, 0x2, 0x8, '\x00', 0x4}, {0x3a, 0x3, 0x1, 0x0, 0x8, 0x2, 0x10, '\x00', 0x9}, {0x0, 0xeab, 0x8, 0x1, 0x9, 0x8, 0x1, '\x00', 0x18}, {0x0, 0x9, 0x4, 0x3, 0x4, 0x5, 0x94, '\x00', 0x498515b1}]}) 13.20594579s ago: executing program 4 (id=732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, r0, 0x5, 0x5, 0x4}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddf8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) statx(r0, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000400)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010003704000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="8b"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0x25) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setgroups(0x40000000000001b5, &(0x7f0000000240)=[r7, 0x0]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2200004, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766644e6f3d047f7cb22385cf3c497ed99f02e05bd25af9a86726c228e6434d66a8fc134251eee191d640de0b3e8532b99f141ea1f6f2357b7e26f2f3b9c7b5a01f4d8a8fb53cd74d86ead700"/93, @ANYRESHEX=r6, @ANYBLOB=',ignoreqv,dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.L,\x00']) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r9, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 13.201778461s ago: executing program 32 (id=732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, r0, 0x5, 0x5, 0x4}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddf8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) statx(r0, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000400)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010003704000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="8b"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0x25) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setgroups(0x40000000000001b5, &(0x7f0000000240)=[r7, 0x0]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2200004, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766644e6f3d047f7cb22385cf3c497ed99f02e05bd25af9a86726c228e6434d66a8fc134251eee191d640de0b3e8532b99f141ea1f6f2357b7e26f2f3b9c7b5a01f4d8a8fb53cd74d86ead700"/93, @ANYRESHEX=r6, @ANYBLOB=',ignoreqv,dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.L,\x00']) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r9, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.171163556s ago: executing program 0 (id=999): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 2.07412447s ago: executing program 0 (id=1000): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xef}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 2.07377772s ago: executing program 0 (id=1001): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) getrandom(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.969479464s ago: executing program 0 (id=1004): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x66) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x84, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x224, r2, 0x7, 0x4000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "5933010e252cdfc148f50586febd"}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "da459317bf031666894aa21f01448afa285a403c871d0ada2483b719e392f2bf823501b0646ff1ef1b09257b2c55feddc0d268c26955e4e9de27a5618b2788be7dc37cd70226f0087dd9636c1488d35d60e92e799997f267b58ede04eec89793ac97f57e72d53e2a5bd32c25b6c9e3dd019d900055b1b196bffc790b0becf114ae98669c6e329491b6b07a8888455d3b0b"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'F\'!,^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7982}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "e8c27101e89c9929e24a103403baac3964d1bb656d7a7487cc2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(0x0, 0x0, 0x0) 1.921264427s ago: executing program 2 (id=1005): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x66) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x84, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x224, r4, 0x7, 0x4000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "5933010e252cdfc148f50586febd"}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "da459317bf031666894aa21f01448afa285a403c871d0ada2483b719e392f2bf823501b0646ff1ef1b09257b2c55feddc0d268c26955e4e9de27a5618b2788be7dc37cd70226f0087dd9636c1488d35d60e92e799997f267b58ede04eec89793ac97f57e72d53e2a5bd32c25b6c9e3dd019d900055b1b196bffc790b0becf114ae98669c6e329491b6b07a8888455d3b0b"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'F\'!,^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7982}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "e8c27101e89c9929e24a103403baac3964d1bb656d7a7487cc2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x8010) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(0x0, 0x0, 0x0) 1.516286674s ago: executing program 0 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.481387816s ago: executing program 2 (id=1010): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000002004000"], 0x48) 1.460855266s ago: executing program 0 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800610000a9aa43273eda279052967735689e20000000090000000000000090786110000036a32757b2e7a385cac6c9b9b1ff73fc6756b502cd109540b78137179790c02ced24c5a7e79e7e67759030c1dc7eb7a3cd4fef09e149af00ed829264fd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) 1.403201159s ago: executing program 2 (id=1014): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmmsg$unix(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000700)="96121714edb1e6d0656dbbbfc366a6216e96378c929151c0e45a6cdca1e6e2f43e8843e53b30daf3de3d075493b6f280299f0283f47db053dc143e227c14eba8960d698a5e5ffbe790f4176073bd24d71e83610c4c958db12be1d33c3d9e", 0x5e}, {&(0x7f0000000780)="66d84b6b0dc312cf8ed646efe419b3c75edcc4484906847844380dcce74e55594643e998f9576d240705bc376bd10f069a20889b7d3fee266c21dfe4fd7ece997d35a469d9ba37b6a4413a1a07cbe23f872e913c9d6b00f8cdaa4d18873eeccc7378ca4179a9", 0x66}, {&(0x7f0000000cc0)="f2bc7c4ab7d98c798a3b0347afa9ffe4edbccc74b19d2bbb0f7034e7226580b98ff87d0bec953fd207128a818f4fa4b347d16e3538fe8fcdcd9365307fed8158ad198b3cc95d683141eed356641f0c26f56f63cc078922e10e9d8bfdb4c9a050306f690eca10a6d211264055c17654b4cda7d46dbdd629f8243a2dea50112a947fc3fb1b2e65", 0x86}, {&(0x7f0000000600)="8b2cabb6c4147d9a0e5dd56bb0794528bd7444d6396a54c266766d6a411d9deb70a59667dcddc99f555c06e39ab6a6470608", 0x32}, {&(0x7f0000000d80)="e68857213951ec9e09dec08ea15f2eb6cf67895bac6f1cfbbc5219f98b41ca2a62105eb76b32d1d39c7fe243b37ed6917f72aa55151815adfb8ac8035939b2544679d71b869bf01fa20143b5931027ea770ff34f4fbc3a1b2b599bdd2f00824b942f9bdad4c9269647cc40ee4937f10001202b87aee261594f2ed415161c857782b2bfd9d0", 0x85}, {&(0x7f0000000e40)="936f6a6f94ebf8cda5e0dfc39dfdc964bcc30667ea4011c93f66dc636ddc659a4371df07f8d265bba0b16319b677254831d9f2936a84c8f1180103098306b9cfdb6835e94575b9a0aee1cac0415179c578a4e2203c137b1c32d03d5e7503f6da46b1d1bb4ec604ba94d730634d5961a8ca608226a0808a451ae41d320b4e860d3ab8293b84b9b0019a24aad43524fa83ac73681fee9d47bfabe6c8fc19d1473b7f1e5e658e18f2f50c364c9b5692d4373a74cb4e517790a52056b99a3a2fcbdd0cd74f11", 0xc4}, {&(0x7f0000000f40)="2a997f87a303d4f14a65e5eadcafea7d4bf27dcc2abb20cc40b54be1375b6eefa9b7b60e80d75397bf147d70aac7036ea7a5435a458f79c5a1e17ec011b2821d7e442dffd7610e78ce380c39abe93e013553979d5b0d54d655dd47ff09af99e911ae2c23a9d71e79905652e114ef1b38e5752fa9e124a20d651a39eb7c14f9d36da45fd2723fbb05499da9fb9a1ac4623af95bfa56fc0aaee1f6b992b677a0328842273fa12b7c8d19bc554f5cb8038fa40ac44699721769077adb87c3", 0xbd}, {&(0x7f0000001000)="defae88bf29fc925af055ff25726d5cbdb951ae8a5ef64898752dffe95caa4625b3d45f525d28581c180a7dbd2a964525c49ce9cc208c0d4f2d425e470e5b8546e6fbfab15a01eca828353de586f72e5a4b2f0a0c0f5ef73fa2926738c3bdea14cb37cd9799ad71c8892cf446d78259951b9156e7ab2a927333ff6c023299e95ed1a4f99705ea427c02baa811a4a64d664f71c498573522e1acf7cc1cdbb1029794447e7ec18487001af78242e0a31e47e414906f872fdb5c15d96412a4be01c3a05a0b758c386fc5d94ef4e01999a70561f6339a3fe418098b807188f861292081bd81f9853c66e6ba5fd217df6896a71ef1e8bad7e", 0xf6}, {&(0x7f0000001100)="8b9c5d482f1dbe2f566eddfd11985f9be16c6ff14745530fe0fdf10ef8599901173a4938ccdf7679bc60da29f76929022c35ff3ba846c0942c7aa46a29c95fc87252632a98ae1fe6337a32e91b6a689e52574c85f06ffe6e528cf1b764272b053aad8e6211207380c95dc4d6e4ef721f6d9246612a829d4c337c79f24ae1139ba6f035d3866b1ba68805b1c40d87e061a70a45129bb944b544d3ead3a02a8233977bbcce7a088f70e37ec04c5a649c94ffba5870b8385c1cf61172a20de488264d90af7f9df9db9c3450c9de4b09bdc9", 0xd0}], 0x9, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x44}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="0cc8143251a60af8100603f04295965c85098a0fc33e7f364f", 0x19}], 0x1, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x20000000}}, {{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001dc0)="9932dcabd9da7d8aef0bf03a2cf76aed31", 0x11}, {&(0x7f0000001e00)="9155c0f637f54ebde6bb84d2e02b23671aec72da47436f448f0d716111d47fe443c002170d4969fa69a22ef4ec11c4827451a0bfa8261835f54570afbb985356371da823237692942b4cf61848e5796d440a8e9ce20275d793f0839c4a6de527b725627286d79703", 0x68}, {&(0x7f0000001e80)="c6cb8a30554da6dccde5d087c944eaa29c9be6f3357cbf15eff21baa2443c73f2aaf23482cbb7d0d1593", 0x2a}, {&(0x7f0000001ec0)="20310bdb31141954bc77fd890e56c493bdea7a29df73fa9086e68a020b75dd26e108fbe60898430449b43a", 0x2b}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="dc4955f322793de126593975a6f7c9051b5faf855ac5ab46b27181191e460f61a666c04d1c1cfc620910ec707e8a8e7d74b034284d6831886435bc02961d23cebb6560cbed24efa72385028d4d4be131237044470ad17544f978a29fcc972dd02e4585b02cbd690d6062ab8812c8e2a1ba98b2f30676648ab169219c37a0de35d1e83ee988a912ccd38778d2e1433c58ef2feecb806958f1d5fa74868d34075dfef907760b5de8c14cb2300d6bcb30983eddff66aa05b15a2c767a796968e924819e17e622084018", 0xc8}], 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="e201d4cdf5cd477b00000200000000000000000000e9ff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000804}}], 0x4, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket(0x400000000010, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xe, 0xe6, 0x4, 0x0, 0x3, 0x6, 0x8, 0x32e, 0x40, 0x10e, 0xf3, 0x408, 0x38, 0x3, 0x9, 0x0, 0x7}, [{0x60000000, 0x2, 0xfffffffffffffe01, 0x7, 0x7, 0x9, 0xc2d, 0xb3a8}, {0x5, 0x4a, 0x829, 0x918, 0x0, 0x6, 0x8, 0x3}, {0x4, 0x0, 0x7, 0x8, 0x4, 0x3, 0x2, 0x4}], "d61113e9470e16", ['\x00', '\x00']}, 0x2ef) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x60, 0x2c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xf, 0x5}, {0xfff3, 0x6}, {0xfffc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x8, 0x8a}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xb43}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xfffffffb}, @TCA_U32_LINK={0x8, 0x3, 0x2006}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xb4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x984f4687b85a83b8, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r12, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2000000000008, 0x0, 0x4, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000010007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r13}, 0x3d) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r14, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.250294066s ago: executing program 1 (id=1017): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x18) statx(0xffffffffffffffff, &(0x7f0000001dc0)='./file0\x00', 0x800, 0x100, &(0x7f0000004e80)) 1.234135046s ago: executing program 5 (id=1018): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{0x20000003, 0xffffffff}, {0xfffffffc}]}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0xff82, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)='^', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.176831299s ago: executing program 5 (id=1019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x2, 0x48c, 0x10005, 0xd, 0x428, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x4, 0x6, 0x8080000005, 0xfffffffffffffb3d, 0x5, 0x2, 0x9220000000000000, 0x1, 0x0, 0x80000001, 0x574, 0x4, 0x7}) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0x1, "135825f1a6c51de48aaf7b2ce6252f0b5add77"}) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "b29c2e44f16d647cdee3747b8f60469f83861ba807e2ecdda7fede32593e0a90cb030091fbc1b615f08011907a7265bd58aaaab52e9c"}, 0x41) 1.1584568s ago: executing program 1 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18630c3dd3a100000000000000000000a500040000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0) unshare(0x2a020480) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) getpid() socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x130, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2, 0x800000000, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x2, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@empty}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x130}}, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1018e58, &(0x7f00000005c0), 0x4, 0x62c, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$EVIOCGPHYS(r9, 0x80404507, &(0x7f0000000300)=""/185) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_es_find_extent_range_enter\x00', r10, 0x0, 0x2000000000}, 0x11) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 1.13108015s ago: executing program 3 (id=1021): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x66) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x84, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x224, r4, 0x7, 0x4000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "5933010e252cdfc148f50586febd"}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "da459317bf031666894aa21f01448afa285a403c871d0ada2483b719e392f2bf823501b0646ff1ef1b09257b2c55feddc0d268c26955e4e9de27a5618b2788be7dc37cd70226f0087dd9636c1488d35d60e92e799997f267b58ede04eec89793ac97f57e72d53e2a5bd32c25b6c9e3dd019d900055b1b196bffc790b0becf114ae98669c6e329491b6b07a8888455d3b0b"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'F\'!,^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'netlink_extack\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7982}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "e8c27101e89c9929e24a103403baac3964d1bb656d7a7487cc2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x8010) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(0x0, 0x0, 0x0) 1.057682834s ago: executing program 5 (id=1022): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x11, 0xc1, &(0x7f00000002c0)="8663c0d7de47edb9fcccc7d76793ad60641aa35b427ff33c951315a23c625044034adcc647c0aaa7a214b2e7b1a80115e70017029e5b8eb8870da18cacebf51a130eeeec5924aea73399e83b56afcc5455235c23c41c7eb8734b688d15fc854cffb28656d1af9d6085108c342c7ca1cc228d3ec8b74c2c07f1e4d13f093be6c782e9d13e8af555d860deb65e4ac32a52290da01b508a5ddfb866201ded5e4cb43db4ee28e8339a8c2f91ecf97fadefb6020024753c08411cfc85c26eb123abeda8"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=@newtaction={0x100, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0xec, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x85, 0x6, "be9bd64c351fc092dbf9577b9b79c75e144c1c23f460255e8ac412f9620a37f7ce54fcbd77e290b259989ec390d8f388f7f38e16155e308f2d01334b0d54105bbceae0c1b59c2971c024fd376719840000000000000000f1f4208e7b2b689053c321cb8f9bd4e1961338ea90f331eada59e7c21c80b86a51e44f93a8d03c4047ee"}, {0xc}, {0xc}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000002000010029010000fcdbdf250214140c0000000300000000050013000100000008000200ffffffff080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44046084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="181400000064020000000006718980a3fea71e0000000000008500000089000000"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 793.334035ms ago: executing program 3 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 740.625148ms ago: executing program 3 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 705.996039ms ago: executing program 3 (id=1025): perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x29, 0xa1, 0x0, 0x0, 0x0, 0xb, 0x4530, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x3c}, 0xee2b, 0x6, 0x9, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x20, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb0}, @TCA_ROUTE4_TO={0x8, 0x2, 0x22}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8, 0x0, 0x7, 0x5, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x67, 0x0, 0xe1, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x44, 0x12, "5cad858a334aa8cd728ccf8b1862dcb8"}, @lsrr={0x83, 0x7, 0x97, [@loopback]}, @noop, @rr={0x7, 0x1b, 0xf9, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @multicast2, @empty, @local]}]}}}}}) 622.021523ms ago: executing program 5 (id=1026): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) io_pgetevents(0x0, 0xecad, 0x0, 0x0, 0x0, 0x0) r2 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0x8}, 0x18) socket$netlink(0x10, 0x3, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x6, 0x7, 0x9, 0x7}) sendmmsg$unix(r4, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c00000000000000", @ANYRES32=r3], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x40810}}], 0x2, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) 573.336255ms ago: executing program 2 (id=1027): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x355) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606", 0xb}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 546.961446ms ago: executing program 1 (id=1028): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8800}]}) close_range(r0, 0xffffffffffffffff, 0x0) 525.710587ms ago: executing program 5 (id=1029): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x41}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0xad, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115007700fffc010000000000000000"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000180)=0x4f, 0x4) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x475, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7, 0x0, 0x5}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000440), 0x1, 0x512, &(0x7f0000000c40)="$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") ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000000)) 490.552608ms ago: executing program 2 (id=1030): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x18) statx(0xffffffffffffffff, &(0x7f0000001dc0)='./file0\x00', 0x800, 0x100, &(0x7f0000004e80)) 438.293881ms ago: executing program 1 (id=1031): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x355) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606", 0xb}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 391.538233ms ago: executing program 2 (id=1032): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x20060400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 365.327924ms ago: executing program 1 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sync() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 334.729075ms ago: executing program 3 (id=1034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) r3 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x40e9, &(0x7f0000000000)={0x0, 0x605e, 0x8, 0x2, 0x3ae, 0x0, r3}, &(0x7f0000000500), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000003c0)=[r0, r1, r2, r1, r2], 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_open_dev$evdev(&(0x7f0000000400), 0x401, 0x101000) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000440)=""/126) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000009000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000000050000000000000020100000"], 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r12, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 17.894199ms ago: executing program 5 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 16.595699ms ago: executing program 3 (id=1036): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x120008c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cc, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000040)='./control\x00', 0x10) 0s ago: executing program 1 (id=1037): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) kernel console output (not intermixed with test programs): de: none. [ 53.810424][ T4319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4319 comm=syz.4.237 [ 53.823441][ T4319] all: renamed from lo (while UP) [ 53.842258][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.901470][ T4325] netlink: 7 bytes leftover after parsing attributes in process `syz.3.240'. [ 53.930730][ T4325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.240'. [ 54.052567][ T4333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.074680][ T4333] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 54.089894][ T4333] EXT4-fs (loop3): 1 truncate cleaned up [ 54.097159][ T4333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.161973][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.417232][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 54.553529][ T4350] EXT4-fs (loop1): 1 orphan inode deleted [ 54.565743][ T123] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 54.578869][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.600836][ T4350] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.722645][ T4355] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.250: ea_inode file size=0 entry size=6 [ 54.747145][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.757603][ T4355] EXT4-fs (loop4): 1 orphan inode deleted [ 54.764940][ T4355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.877034][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 54.877115][ T29] audit: type=1400 audit(1764992128.970:1029): avc: denied { bind } for pid=4370 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.903419][ T29] audit: type=1400 audit(1764992128.970:1030): avc: denied { name_bind } for pid=4370 comm="syz.3.255" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 54.925113][ T29] audit: type=1400 audit(1764992128.970:1031): avc: denied { node_bind } for pid=4370 comm="syz.3.255" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 54.948629][ T29] audit: type=1326 audit(1764992128.970:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 54.972510][ T4376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.983359][ T29] audit: type=1326 audit(1764992128.970:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.007371][ T29] audit: type=1326 audit(1764992128.970:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.030930][ T29] audit: type=1326 audit(1764992128.970:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.054733][ T29] audit: type=1326 audit(1764992128.970:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.079327][ T29] audit: type=1326 audit(1764992128.970:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.103062][ T29] audit: type=1326 audit(1764992128.970:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 55.186482][ T4376] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 55.201637][ T4376] EXT4-fs (loop4): 1 truncate cleaned up [ 55.206095][ T4381] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.222090][ T4381] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.229939][ T4381] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.259: corrupted inode contents [ 55.242488][ T4381] EXT4-fs (loop1): Remounting filesystem read-only [ 55.250634][ T4381] EXT4-fs (loop1): 1 truncate cleaned up [ 55.256658][ T123] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.267473][ T123] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.279848][ T123] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.389200][ T4394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.390143][ T4398] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.264: ea_inode file size=0 entry size=6 [ 55.412668][ T4398] EXT4-fs (loop3): 1 orphan inode deleted [ 55.423822][ T4394] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 55.466045][ T4394] EXT4-fs (loop4): 1 truncate cleaned up [ 55.513600][ T1041] IPVS: starting estimator thread 0... [ 55.531953][ T4406] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.606444][ T4407] IPVS: using max 2208 ests per chain, 110400 per kthread [ 56.118525][ T4475] FAULT_INJECTION: forcing a failure. [ 56.118525][ T4475] name failslab, interval 1, probability 0, space 0, times 0 [ 56.131420][ T4475] CPU: 1 UID: 0 PID: 4475 Comm: syz.3.290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.131458][ T4475] Tainted: [W]=WARN [ 56.131466][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.131481][ T4475] Call Trace: [ 56.131488][ T4475] [ 56.131538][ T4475] __dump_stack+0x1d/0x30 [ 56.131567][ T4475] dump_stack_lvl+0xe8/0x140 [ 56.131596][ T4475] dump_stack+0x15/0x1b [ 56.131620][ T4475] should_fail_ex+0x265/0x280 [ 56.131702][ T4475] should_failslab+0x8c/0xb0 [ 56.131747][ T4475] kmem_cache_alloc_noprof+0x50/0x4a0 [ 56.131824][ T4475] ? audit_log_start+0x342/0x720 [ 56.131851][ T4475] audit_log_start+0x342/0x720 [ 56.131875][ T4475] ? kstrtouint+0x76/0xc0 [ 56.131996][ T4475] audit_seccomp+0x48/0x100 [ 56.132034][ T4475] ? __seccomp_filter+0x832/0x1260 [ 56.132069][ T4475] __seccomp_filter+0x843/0x1260 [ 56.132104][ T4475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 56.132215][ T4475] ? vfs_write+0x7e8/0x960 [ 56.132255][ T4475] ? __cond_resched+0x4e/0x90 [ 56.132300][ T4475] __secure_computing+0x82/0x150 [ 56.132332][ T4475] syscall_trace_enter+0xcf/0x1e0 [ 56.132421][ T4475] do_syscall_64+0xb2/0x2a0 [ 56.132512][ T4475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.132537][ T4475] RIP: 0033:0x7fe225b5f749 [ 56.132556][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.132603][ T4475] RSP: 002b:00007fe2245bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 56.132764][ T4475] RAX: ffffffffffffffda RBX: 00007fe225db5fa0 RCX: 00007fe225b5f749 [ 56.132777][ T4475] RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: 000000000000ee01 [ 56.132789][ T4475] RBP: 00007fe2245bf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.132805][ T4475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.132820][ T4475] R13: 00007fe225db6038 R14: 00007fe225db5fa0 R15: 00007ffee1b8d658 [ 56.132844][ T4475] [ 56.410593][ T4484] __nla_validate_parse: 27 callbacks suppressed [ 56.410612][ T4484] netlink: 7 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.430147][ T4484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.439299][ T4484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.497942][ T4491] set_capacity_and_notify: 9 callbacks suppressed [ 56.498017][ T4491] loop1: detected capacity change from 0 to 512 [ 56.518971][ T4484] netlink: 7 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.528414][ T4498] netlink: 232 bytes leftover after parsing attributes in process `syz.4.299'. [ 56.547791][ T4484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.549588][ T4491] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.556787][ T4484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.294'. [ 56.570229][ T4491] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 56.590960][ T4491] EXT4-fs (loop1): 1 truncate cleaned up [ 56.593305][ T4498] loop4: detected capacity change from 0 to 512 [ 56.616873][ T4505] loop2: detected capacity change from 0 to 512 [ 56.629245][ T4505] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 56.639687][ T4498] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.648684][ T4498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.656353][ T4505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.300: bg 0: block 255: padding at end of block bitmap is not set [ 56.672549][ T4498] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.299: corrupted inode contents [ 56.687431][ T4505] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 56.697201][ T4498] EXT4-fs (loop4): Remounting filesystem read-only [ 56.703847][ T4498] EXT4-fs (loop4): 1 truncate cleaned up [ 56.710252][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.710289][ T4505] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.300: invalid indirect mapped block 1 (level 1) [ 56.720856][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.754473][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.766283][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 56.777053][ T4498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.299'. [ 56.786964][ T4498] netlink: 64 bytes leftover after parsing attributes in process `syz.4.299'. [ 56.799049][ T4498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.299'. [ 56.829435][ T4505] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 56.879751][ T4515] loop3: detected capacity change from 0 to 512 [ 56.896881][ T4515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.917393][ T4515] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 56.955847][ T4515] EXT4-fs (loop3): 1 truncate cleaned up [ 57.034734][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.035818][ T4526] Driver unsupported XDP return value 0 on prog (id 267) dev N/A, expect packet loss! [ 57.059121][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.095716][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.104570][ T4528] ./file0: Can't lookup blockdev [ 57.116810][ T4528] 9pnet_fd: Insufficient options for proto=fd [ 57.135603][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834846][ T4591] loop3: detected capacity change from 0 to 512 [ 57.845415][ T4588] loop0: detected capacity change from 0 to 512 [ 57.855081][ T4591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.869607][ T4588] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.887943][ T4591] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 57.903431][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 57.910280][ T4588] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 57.937441][ T4588] EXT4-fs (loop0): 1 truncate cleaned up [ 58.563800][ T4611] loop1: detected capacity change from 0 to 512 [ 58.593841][ T4622] loop0: detected capacity change from 0 to 512 [ 58.622545][ T4611] EXT4-fs (loop1): 1 orphan inode deleted [ 58.674254][ T37] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 58.674491][ T4622] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.338: ea_inode file size=0 entry size=6 [ 58.687383][ T4611] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.704143][ T4622] EXT4-fs (loop0): 1 orphan inode deleted [ 58.740464][ T4631] loop2: detected capacity change from 0 to 512 [ 58.816407][ T4631] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.870329][ T4631] EXT4-fs (loop2): 1 truncate cleaned up [ 59.058028][ T4645] loop1: detected capacity change from 0 to 128 [ 59.105345][ T4645] vfat: Unknown parameter '' [ 59.381441][ T4671] ./file0: Can't lookup blockdev [ 59.412066][ T4671] 9pnet_fd: Insufficient options for proto=fd [ 60.223175][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 60.223191][ T29] audit: type=1400 audit(1764992134.310:1559): avc: denied { name_bind } for pid=4708 comm="syz.1.364" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.251317][ T29] audit: type=1400 audit(1764992134.310:1560): avc: denied { node_bind } for pid=4708 comm="syz.1.364" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.472029][ T4710] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.595782][ T29] audit: type=1400 audit(1764992134.680:1561): avc: denied { read append } for pid=4708 comm="syz.1.364" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.755745][ T4724] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.952218][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.981722][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.328955][ T4747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.406768][ T4747] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 61.444498][ T4748] EXT4-fs (loop3): 1 orphan inode deleted [ 61.451225][ T4747] EXT4-fs (loop1): 1 truncate cleaned up [ 61.457788][ T4748] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.468424][ T862] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.478394][ T862] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 61.701108][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.713521][ T29] audit: type=1326 audit(1764992135.810:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 61.739562][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.777162][ T4759] __nla_validate_parse: 72 callbacks suppressed [ 61.777180][ T4759] netlink: 7 bytes leftover after parsing attributes in process `syz.3.378'. [ 61.835758][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 61.844718][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 61.855014][ T29] audit: type=1326 audit(1764992135.840:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 61.878725][ T29] audit: type=1326 audit(1764992135.840:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 61.902188][ T29] audit: type=1326 audit(1764992135.840:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 61.925629][ T29] audit: type=1326 audit(1764992135.840:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 61.949274][ T29] audit: type=1326 audit(1764992135.840:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 62.082151][ T4759] netlink: 7 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.091401][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.100327][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.255313][ T4759] netlink: 7 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.280584][ T4765] set_capacity_and_notify: 4 callbacks suppressed [ 62.280603][ T4765] loop2: detected capacity change from 0 to 512 [ 62.298392][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.307491][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 62.322086][ T4765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.352327][ T4765] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 62.367771][ T4765] EXT4-fs (loop2): 1 truncate cleaned up [ 62.699596][ T4782] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 63.024889][ T4789] loop3: detected capacity change from 0 to 512 [ 63.043738][ T4785] loop2: detected capacity change from 0 to 8192 [ 63.052933][ T4789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.099681][ T4791] loop4: detected capacity change from 0 to 164 [ 63.129715][ T4789] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 63.136874][ T4791] iso9660: Unknown parameter '¤´H_Zõ2î' [ 63.234291][ T4789] EXT4-fs (loop3): 1 truncate cleaned up [ 63.353801][ T4794] netlink: 7 bytes leftover after parsing attributes in process `syz.1.390'. [ 63.529586][ T4801] loop3: detected capacity change from 0 to 512 [ 63.551600][ T4801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.594385][ T4801] EXT4-fs (loop3): 1 truncate cleaned up [ 63.917048][ T4815] loop1: detected capacity change from 0 to 512 [ 63.935842][ T4815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.938008][ T4818] x_tables: duplicate underflow at hook 1 [ 63.982470][ T4815] EXT4-fs (loop1): 1 truncate cleaned up [ 64.573720][ T4851] loop2: detected capacity change from 0 to 512 [ 64.601336][ T4851] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.410: ea_inode file size=0 entry size=6 [ 64.641431][ T4851] EXT4-fs (loop2): 1 orphan inode deleted [ 64.714801][ T4847] mmap: syz.0.409 (4847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.880171][ T4877] FAULT_INJECTION: forcing a failure. [ 64.880171][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.893549][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.2.418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.893646][ T4877] Tainted: [W]=WARN [ 64.893726][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.893742][ T4877] Call Trace: [ 64.893751][ T4877] [ 64.893760][ T4877] __dump_stack+0x1d/0x30 [ 64.893787][ T4877] dump_stack_lvl+0xe8/0x140 [ 64.893832][ T4877] dump_stack+0x15/0x1b [ 64.893890][ T4877] should_fail_ex+0x265/0x280 [ 64.893935][ T4877] should_fail+0xb/0x20 [ 64.893989][ T4877] should_fail_usercopy+0x1a/0x20 [ 64.894017][ T4877] _copy_from_user+0x1c/0xb0 [ 64.894041][ T4877] ___sys_sendmsg+0xc1/0x1d0 [ 64.894081][ T4877] __x64_sys_sendmsg+0xd4/0x160 [ 64.894176][ T4877] x64_sys_call+0x17ba/0x3000 [ 64.894209][ T4877] do_syscall_64+0xd8/0x2a0 [ 64.894247][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.894275][ T4877] RIP: 0033:0x7faf350df749 [ 64.894338][ T4877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.894362][ T4877] RSP: 002b:00007faf33b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.894386][ T4877] RAX: ffffffffffffffda RBX: 00007faf35335fa0 RCX: 00007faf350df749 [ 64.894403][ T4877] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000005 [ 64.894476][ T4877] RBP: 00007faf33b47090 R08: 0000000000000000 R09: 0000000000000000 [ 64.894492][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.894508][ T4877] R13: 00007faf35336038 R14: 00007faf35335fa0 R15: 00007ffe97a7a528 [ 64.894533][ T4877] [ 65.186313][ T4885] FAULT_INJECTION: forcing a failure. [ 65.186313][ T4885] name failslab, interval 1, probability 0, space 0, times 0 [ 65.199130][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.3.421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.199170][ T4885] Tainted: [W]=WARN [ 65.199179][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.199279][ T4885] Call Trace: [ 65.199286][ T4885] [ 65.199294][ T4885] __dump_stack+0x1d/0x30 [ 65.199320][ T4885] dump_stack_lvl+0xe8/0x140 [ 65.199348][ T4885] dump_stack+0x15/0x1b [ 65.199416][ T4885] should_fail_ex+0x265/0x280 [ 65.199467][ T4885] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 65.199501][ T4885] should_failslab+0x8c/0xb0 [ 65.199525][ T4885] __kmalloc_cache_noprof+0x4c/0x4c0 [ 65.199556][ T4885] bpf_prog_alloc_no_stats+0xc4/0x390 [ 65.199604][ T4885] bpf_prog_alloc+0x3c/0x150 [ 65.199642][ T4885] __get_filter+0x92/0x230 [ 65.199669][ T4885] sk_reuseport_attach_filter+0x20/0x140 [ 65.199778][ T4885] sk_setsockopt+0x1890/0x20e0 [ 65.199825][ T4885] udp_lib_setsockopt+0x93/0x640 [ 65.199931][ T4885] udpv6_setsockopt+0x77/0xb0 [ 65.199956][ T4885] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 65.200019][ T4885] sock_common_setsockopt+0x69/0x80 [ 65.200048][ T4885] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.200123][ T4885] __sys_setsockopt+0x184/0x200 [ 65.200144][ T4885] __x64_sys_setsockopt+0x64/0x80 [ 65.200211][ T4885] x64_sys_call+0x21d5/0x3000 [ 65.200276][ T4885] do_syscall_64+0xd8/0x2a0 [ 65.200313][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.200338][ T4885] RIP: 0033:0x7fe225b5f749 [ 65.200358][ T4885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.200410][ T4885] RSP: 002b:00007fe2245bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.200429][ T4885] RAX: ffffffffffffffda RBX: 00007fe225db5fa0 RCX: 00007fe225b5f749 [ 65.200441][ T4885] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 65.200453][ T4885] RBP: 00007fe2245bf090 R08: 0000000000000010 R09: 0000000000000000 [ 65.200468][ T4885] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 65.200483][ T4885] R13: 00007fe225db6038 R14: 00007fe225db5fa0 R15: 00007ffee1b8d658 [ 65.200511][ T4885] [ 65.423984][ T4880] loop4: detected capacity change from 0 to 8192 [ 65.426664][ T4889] loop2: detected capacity change from 0 to 512 [ 65.446683][ T4889] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.423: ea_inode file size=0 entry size=6 [ 65.467573][ T4889] EXT4-fs (loop2): 1 orphan inode deleted [ 65.591217][ T4902] loop0: detected capacity change from 0 to 512 [ 65.605063][ T4902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.620945][ T4903] EXT4-fs: Ignoring removed i_version option [ 65.641537][ T4902] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 65.657198][ T4903] EXT4-fs: Ignoring removed bh option [ 65.668225][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 65.668239][ T29] audit: type=1326 audit(1764992139.760:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.701583][ T4902] EXT4-fs (loop0): 1 truncate cleaned up [ 65.720466][ T29] audit: type=1326 audit(1764992139.760:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.743881][ T29] audit: type=1326 audit(1764992139.760:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.753807][ T4903] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.767323][ T29] audit: type=1326 audit(1764992139.760:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.801101][ T29] audit: type=1326 audit(1764992139.760:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.824817][ T29] audit: type=1326 audit(1764992139.760:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.848439][ T29] audit: type=1326 audit(1764992139.760:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.872189][ T29] audit: type=1326 audit(1764992139.760:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.896145][ T4896] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.426: iget: bad i_size value: 2533274857506816 [ 65.917901][ T4896] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.426: iget: bad i_size value: 2533274857506816 [ 65.936920][ T29] audit: type=1326 audit(1764992139.890:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 65.960897][ T29] audit: type=1326 audit(1764992139.890:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 66.275019][ T4943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.306722][ T4943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 66.327634][ T4943] EXT4-fs (loop0): 1 truncate cleaned up [ 66.346916][ T4950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4950 comm=syz.2.442 [ 66.369283][ T4950] all: renamed from lo (while UP) [ 66.486514][ T4968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.507106][ T4968] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 66.574031][ T4968] EXT4-fs (loop1): 1 truncate cleaned up [ 66.686219][ T4974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.702683][ T4974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 66.721999][ T4974] EXT4-fs (loop3): 1 truncate cleaned up [ 66.906912][ T4990] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.913116][ T4994] FAULT_INJECTION: forcing a failure. [ 66.913116][ T4994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.930739][ T4994] CPU: 0 UID: 0 PID: 4994 Comm: syz.1.456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.930870][ T4994] Tainted: [W]=WARN [ 66.930879][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.930894][ T4994] Call Trace: [ 66.930902][ T4994] [ 66.930912][ T4994] __dump_stack+0x1d/0x30 [ 66.930942][ T4994] dump_stack_lvl+0xe8/0x140 [ 66.930968][ T4994] dump_stack+0x15/0x1b [ 66.931029][ T4994] should_fail_ex+0x265/0x280 [ 66.931108][ T4994] should_fail+0xb/0x20 [ 66.931198][ T4994] should_fail_usercopy+0x1a/0x20 [ 66.931229][ T4994] _copy_from_user+0x1c/0xb0 [ 66.931256][ T4994] __sys_bpf+0x183/0x7c0 [ 66.931447][ T4994] __x64_sys_bpf+0x41/0x50 [ 66.931491][ T4994] x64_sys_call+0x28e1/0x3000 [ 66.931567][ T4994] do_syscall_64+0xd8/0x2a0 [ 66.931596][ T4994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.931669][ T4994] RIP: 0033:0x7fe87972f749 [ 66.931688][ T4994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.931780][ T4994] RSP: 002b:00007fe878197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.931817][ T4994] RAX: ffffffffffffffda RBX: 00007fe879985fa0 RCX: 00007fe87972f749 [ 66.931834][ T4994] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 66.931850][ T4994] RBP: 00007fe878197090 R08: 0000000000000000 R09: 0000000000000000 [ 66.931866][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.931881][ T4994] R13: 00007fe879986038 R14: 00007fe879985fa0 R15: 00007ffdf2502b18 [ 66.931906][ T4994] [ 67.153620][ T4990] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.184735][ T5002] __nla_validate_parse: 67 callbacks suppressed [ 67.184753][ T5002] netlink: 7 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.216005][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.224935][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.257738][ T4990] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.274221][ T4996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.284597][ T5002] netlink: 7 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.284677][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.284705][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.311316][ T5000] set_capacity_and_notify: 6 callbacks suppressed [ 67.311337][ T5000] loop1: detected capacity change from 0 to 512 [ 67.367935][ T5002] netlink: 7 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.377045][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.386123][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 67.410387][ T4996] EXT4-fs (loop3): 1 truncate cleaned up [ 67.417879][ T5010] loop0: detected capacity change from 0 to 512 [ 67.424402][ T5010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.454305][ T4990] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.468268][ T5010] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 67.523443][ T5000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.542165][ T5010] EXT4-fs (loop0): 1 truncate cleaned up [ 67.553164][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.566746][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.582431][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.606325][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.622884][ T5013] loop4: detected capacity change from 0 to 8192 [ 67.652212][ T5000] EXT4-fs (loop1): 1 truncate cleaned up [ 67.656939][ T5017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.464'. [ 67.677101][ T3660] loop4: p1 < > [ 67.687060][ T5013] loop4: p1 < > [ 67.745733][ T5021] loop3: detected capacity change from 0 to 512 [ 67.797522][ T5021] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.465: ea_inode file size=0 entry size=6 [ 67.806688][ T3660] udevd[3660]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.832826][ T3660] udevd[3660]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.868542][ T5021] EXT4-fs (loop3): 1 orphan inode deleted [ 67.953434][ T5036] loop4: detected capacity change from 0 to 1024 [ 67.984811][ T5036] EXT4-fs: Ignoring removed orlov option [ 68.055725][ T5045] loop2: detected capacity change from 0 to 512 [ 68.127032][ T5054] loop4: detected capacity change from 0 to 512 [ 68.141251][ T5045] loop2: detected capacity change from 0 to 512 [ 68.165052][ T5054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.206028][ T5054] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 68.237836][ T5054] EXT4-fs (loop4): 1 truncate cleaned up [ 68.250211][ T5045] loop2: detected capacity change from 0 to 512 [ 68.282202][ T5045] loop2: detected capacity change from 0 to 512 [ 68.457900][ T5085] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.486: ea_inode file size=0 entry size=6 [ 68.489674][ T5085] EXT4-fs (loop4): 1 orphan inode deleted [ 68.660905][ T5102] EXT4-fs (loop0): 1 orphan inode deleted [ 68.677289][ T5102] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.677386][ T61] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 68.749490][ T5108] ./file0: Can't lookup blockdev [ 68.813088][ T5108] 9pnet_fd: Insufficient options for proto=fd [ 69.650958][ T5161] sg_write: data in/out 49276/12 bytes for SCSI command 0x6-- guessing data in; [ 69.650958][ T5161] program syz.0.504 not setting count and/or reply_len properly [ 69.693164][ T5149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.857553][ T5149] EXT4-fs (loop1): 1 truncate cleaned up [ 69.925308][ T5149] EXT4-fs mount: 76 callbacks suppressed [ 69.925355][ T5149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.058428][ T5184] EXT4-fs (loop4): 1 orphan inode deleted [ 70.075750][ T1679] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 70.128107][ T5184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.193979][ T5184] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.333302][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.434868][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.516084][ T5200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.590698][ T5200] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 70.677987][ T5200] EXT4-fs (loop3): 1 truncate cleaned up [ 70.720507][ T5200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.782237][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 70.782254][ T29] audit: type=1400 audit(1764992144.870:2116): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.842115][ T5221] ./file0: Can't lookup blockdev [ 70.879295][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.911931][ T5221] 9pnet_fd: Insufficient options for proto=fd [ 70.931389][ T5223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.959258][ T29] audit: type=1400 audit(1764992145.050:2117): avc: denied { write } for pid=5225 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.005739][ T5223] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.029687][ T29] audit: type=1400 audit(1764992145.120:2118): avc: denied { read write } for pid=5219 comm="syz.0.516" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.052551][ T29] audit: type=1400 audit(1764992145.120:2119): avc: denied { open } for pid=5219 comm="syz.0.516" path="/93/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.123135][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.244656][ T29] audit: type=1326 audit(1764992145.240:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.263416][ T5242] ./file0: Can't lookup blockdev [ 71.268169][ T29] audit: type=1326 audit(1764992145.240:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.268207][ T29] audit: type=1326 audit(1764992145.240:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.268237][ T29] audit: type=1326 audit(1764992145.250:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.268284][ T29] audit: type=1326 audit(1764992145.250:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.268316][ T29] audit: type=1326 audit(1764992145.250:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 71.430955][ T5247] 9pnet_fd: Insufficient options for proto=fd [ 72.091503][ T5270] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 72.099456][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.107329][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.115217][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.123033][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.130851][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.138691][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.146490][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.154396][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.162425][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.170322][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 72.206746][ T5272] FAULT_INJECTION: forcing a failure. [ 72.206746][ T5272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.219956][ T5272] CPU: 0 UID: 0 PID: 5272 Comm: syz.4.534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.219996][ T5272] Tainted: [W]=WARN [ 72.220059][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.220072][ T5272] Call Trace: [ 72.220080][ T5272] [ 72.220095][ T5272] __dump_stack+0x1d/0x30 [ 72.220121][ T5272] dump_stack_lvl+0xe8/0x140 [ 72.220149][ T5272] dump_stack+0x15/0x1b [ 72.220174][ T5272] should_fail_ex+0x265/0x280 [ 72.220276][ T5272] should_fail+0xb/0x20 [ 72.220404][ T5272] should_fail_usercopy+0x1a/0x20 [ 72.220431][ T5272] _copy_to_user+0x20/0xa0 [ 72.220461][ T5272] simple_read_from_buffer+0xb5/0x130 [ 72.220504][ T5272] proc_fail_nth_read+0x10e/0x150 [ 72.220544][ T5272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.220569][ T5272] vfs_read+0x1a8/0x770 [ 72.220639][ T5272] ? __rcu_read_unlock+0x4f/0x70 [ 72.220666][ T5272] ? __fget_files+0x184/0x1c0 [ 72.220727][ T5272] ? mutex_lock+0x58/0x90 [ 72.220749][ T5272] ksys_read+0xda/0x1a0 [ 72.220845][ T5272] __x64_sys_read+0x40/0x50 [ 72.220883][ T5272] x64_sys_call+0x2889/0x3000 [ 72.220965][ T5272] do_syscall_64+0xd8/0x2a0 [ 72.221023][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.221125][ T5272] RIP: 0033:0x7effdc73e15c [ 72.221145][ T5272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.221210][ T5272] RSP: 002b:00007effdb19f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.221229][ T5272] RAX: ffffffffffffffda RBX: 00007effdc995fa0 RCX: 00007effdc73e15c [ 72.221245][ T5272] RDX: 000000000000000f RSI: 00007effdb19f0a0 RDI: 0000000000000004 [ 72.221264][ T5272] RBP: 00007effdb19f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.221280][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.221295][ T5272] R13: 00007effdc996038 R14: 00007effdc995fa0 R15: 00007ffe51d9c0b8 [ 72.221330][ T5272] [ 72.224667][ T3505] hid-generic 0000:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [syz1] on [ 72.332631][ T5270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.454976][ T5279] __nla_validate_parse: 15 callbacks suppressed [ 72.454994][ T5279] netlink: 232 bytes leftover after parsing attributes in process `syz.1.533'. [ 72.510452][ T5281] set_capacity_and_notify: 42 callbacks suppressed [ 72.510513][ T5281] loop1: detected capacity change from 0 to 512 [ 72.544875][ T3487] hid-generic 0000:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz1] on [ 72.789522][ T5281] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.804453][ T5281] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.816183][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.871970][ T5281] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.533: corrupted inode contents [ 72.889661][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.933513][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 72.970939][ T5281] EXT4-fs (loop1): 1 truncate cleaned up [ 72.976985][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.987610][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.048998][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.072283][ T5275] bond1 (unregistering): Released all slaves [ 73.090772][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.131478][ T5304] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 73.156189][ T5274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.533'. [ 73.165128][ T5274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.533'. [ 73.206646][ T5279] netlink: 14 bytes leftover after parsing attributes in process `syz.1.533'. [ 73.211101][ T5274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.533'. [ 73.304314][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.398767][ T5323] netlink: 64 bytes leftover after parsing attributes in process `syz.1.542'. [ 73.607456][ T5336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.647264][ T5336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.886368][ T5307] random: crng reseeded on system resumption [ 74.177335][ T5346] loop2: detected capacity change from 0 to 8192 [ 74.408980][ T5350] netlink: 232 bytes leftover after parsing attributes in process `syz.1.553'. [ 74.454284][ T5357] syz.3.555 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.472884][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.480069][ T5350] loop1: detected capacity change from 0 to 512 [ 74.529073][ T5350] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.543444][ T5359] loop4: detected capacity change from 0 to 128 [ 74.559676][ T5350] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.568867][ T5350] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.553: corrupted inode contents [ 74.594293][ T5350] EXT4-fs (loop1): Remounting filesystem read-only [ 74.608156][ T5350] EXT4-fs (loop1): 1 truncate cleaned up [ 74.614122][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.625437][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.723021][ T5365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.557'. [ 74.740184][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.788643][ T5350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.875313][ T5350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 74.884384][ T5350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.553'. [ 74.974923][ T5373] loop0: detected capacity change from 0 to 164 [ 75.073490][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.387598][ T5396] netlink: 'syz.3.562': attribute type 5 has an invalid length. [ 75.447371][ T5375] loop3: detected capacity change from 0 to 128 [ 75.456025][ T5375] EXT4-fs: Ignoring removed nobh option [ 75.466953][ T5375] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.562: iget: checksum invalid [ 75.512744][ T5405] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.524876][ T5405] bond0: (slave lo): Error: Device type is different from other slaves [ 75.533570][ T5375] EXT4-fs (loop3): get root inode failed [ 75.539327][ T5375] EXT4-fs (loop3): mount failed [ 75.545394][ T5394] net_ratelimit: 27 callbacks suppressed [ 75.545409][ T5394] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 75.598839][ T5375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 75.606093][ T5375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.614548][ T5375] vhci_hcd vhci_hcd.0: Device attached [ 75.626590][ T5407] vhci_hcd: connection closed [ 75.626693][ T61] vhci_hcd: stop threads [ 75.635698][ T61] vhci_hcd: release socket [ 75.640226][ T61] vhci_hcd: disconnect device [ 75.655280][ T5411] FAULT_INJECTION: forcing a failure. [ 75.655280][ T5411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.668562][ T5411] CPU: 0 UID: 0 PID: 5411 Comm: syz.2.571 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.668651][ T5411] Tainted: [W]=WARN [ 75.668657][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.668670][ T5411] Call Trace: [ 75.668676][ T5411] [ 75.668684][ T5411] __dump_stack+0x1d/0x30 [ 75.668713][ T5411] dump_stack_lvl+0xe8/0x140 [ 75.668754][ T5411] dump_stack+0x15/0x1b [ 75.668780][ T5411] should_fail_ex+0x265/0x280 [ 75.668875][ T5411] should_fail+0xb/0x20 [ 75.668915][ T5411] should_fail_usercopy+0x1a/0x20 [ 75.668941][ T5411] _copy_from_user+0x1c/0xb0 [ 75.668972][ T5411] ___sys_sendmsg+0xc1/0x1d0 [ 75.669024][ T5411] __x64_sys_sendmsg+0xd4/0x160 [ 75.669134][ T5411] x64_sys_call+0x17ba/0x3000 [ 75.669164][ T5411] do_syscall_64+0xd8/0x2a0 [ 75.669197][ T5411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.669297][ T5411] RIP: 0033:0x7faf350df749 [ 75.669312][ T5411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.669331][ T5411] RSP: 002b:00007faf33b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.669376][ T5411] RAX: ffffffffffffffda RBX: 00007faf35335fa0 RCX: 00007faf350df749 [ 75.669388][ T5411] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 75.669399][ T5411] RBP: 00007faf33b47090 R08: 0000000000000000 R09: 0000000000000000 [ 75.669411][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.669423][ T5411] R13: 00007faf35336038 R14: 00007faf35335fa0 R15: 00007ffe97a7a528 [ 75.669443][ T5411] [ 75.850556][ T5414] loop0: detected capacity change from 0 to 2048 [ 75.878535][ T5418] loop1: detected capacity change from 0 to 512 [ 75.894702][ T3660] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 75.900104][ T3660] loop0: partition table partially beyond EOD, truncated [ 75.901566][ T5418] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.915379][ T5418] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.919305][ T3660] loop0: p1 size 917504 extends beyond EOD, truncated [ 75.930426][ T3660] loop0: p2 start 4278190080 is beyond EOD, truncated [ 75.938286][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.573: corrupted inode contents [ 75.938716][ T3660] loop0: p4 size 8192 extends beyond EOD, truncated [ 75.957566][ T3660] loop0: p5 size 917504 extends beyond EOD, truncated [ 75.965478][ T3660] loop0: p6 size 8192 extends beyond EOD, truncated [ 75.968796][ T5418] EXT4-fs (loop1): Remounting filesystem read-only [ 75.981496][ T5414] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 75.986253][ T5418] EXT4-fs (loop1): 1 truncate cleaned up [ 75.986723][ T5414] loop0: partition table partially beyond EOD, truncated [ 75.992801][ T5414] loop0: p1 size 917504 extends beyond EOD, truncated [ 75.993712][ T5414] loop0: p2 start 4278190080 is beyond EOD, [ 76.001039][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.007163][ T5414] truncated [ 76.013051][ T37] __quota_error: 273 callbacks suppressed [ 76.013067][ T37] Quota error (device loop1): write_blk: dquota write failed [ 76.013083][ T37] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 76.013109][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.034799][ T29] audit: type=1400 audit(1764992150.033:2387): avc: denied { create } for pid=5427 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 76.040601][ T37] Quota error (device loop1): write_blk: dquota write failed [ 76.040620][ T37] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 76.084963][ T5414] loop0: p4 size 8192 extends beyond EOD, [ 76.092815][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.100868][ T5414] truncated [ 76.112790][ T29] audit: type=1326 audit(1764992150.099:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 76.117200][ T37] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 76.128905][ T29] audit: type=1326 audit(1764992150.118:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 76.176771][ T29] audit: type=1326 audit(1764992150.118:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 76.182913][ T61] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.209745][ T5414] loop0: p5 size 917504 extends beyond EOD, truncated [ 76.217949][ T5414] loop0: p6 size 8192 extends beyond EOD, truncated [ 76.227256][ T29] audit: type=1326 audit(1764992150.192:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf350df749 code=0x7ffc0000 [ 76.244510][ T61] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.254599][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.272799][ T3008] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 76.278127][ T3008] loop0: partition table partially beyond EOD, truncated [ 76.285953][ T3008] loop0: p1 size 917504 extends beyond EOD, truncated [ 76.294787][ T3008] loop0: p2 start 4278190080 is beyond EOD, truncated [ 76.302446][ T3008] loop0: p4 size 8192 extends beyond EOD, truncated [ 76.313820][ T61] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.313936][ T3008] loop0: p5 size 917504 extends beyond EOD, truncated [ 76.330080][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.363766][ T3008] loop0: p6 size 8192 extends beyond EOD, truncated [ 76.372148][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.445759][ T3660] udevd[3660]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 76.470756][ T3812] udevd[3812]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 76.484280][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 76.484909][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 76.501872][ T5211] udevd[5211]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 76.526502][ T5442] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.536612][ T5442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.577403][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 76.577818][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 76.589367][ T5211] udevd[5211]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 76.608597][ T3812] udevd[3812]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 76.620079][ T3660] udevd[3660]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 76.684618][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 76.691837][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.713805][ T5442] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.723661][ T5442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.816464][ T5453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5453 comm=syz.2.583 [ 76.836613][ T5442] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.846558][ T5442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.876943][ T5453] all: renamed from lo (while UP) [ 76.894347][ T5450] loop3: detected capacity change from 0 to 512 [ 76.910927][ T5442] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.921036][ T5442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.957142][ T5450] EXT4-fs (loop3): 1 orphan inode deleted [ 76.970299][ T5450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.982984][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 76.984898][ T5450] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.010531][ T5463] loop1: detected capacity change from 0 to 256 [ 77.057052][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.066141][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.096965][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.105423][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.122018][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.138497][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.146779][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.156025][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.164318][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.241754][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.264090][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.601976][ T5494] netlink: 'syz.2.595': attribute type 4 has an invalid length. [ 77.610323][ T5495] netlink: 'syz.2.595': attribute type 4 has an invalid length. [ 77.687717][ T5491] __nla_validate_parse: 40 callbacks suppressed [ 77.687733][ T5491] netlink: 232 bytes leftover after parsing attributes in process `syz.4.594'. [ 77.758183][ T5493] loop4: detected capacity change from 0 to 512 [ 77.819289][ T5493] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.837921][ T5493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.885777][ T5493] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.594: corrupted inode contents [ 77.962354][ T5493] EXT4-fs (loop4): Remounting filesystem read-only [ 77.987787][ T5493] EXT4-fs (loop4): 1 truncate cleaned up [ 78.007847][ T875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.018500][ T875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.031412][ T875] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.045714][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.062094][ T5491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'. [ 78.071032][ T5491] netlink: 64 bytes leftover after parsing attributes in process `syz.4.594'. [ 78.080103][ T5491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'. [ 78.090228][ T5491] netlink: 14 bytes leftover after parsing attributes in process `syz.4.594'. [ 78.113160][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.136667][ T5508] loop0: detected capacity change from 0 to 512 [ 78.152828][ T5508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.177563][ T5508] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 78.194386][ T5510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.224979][ T5508] EXT4-fs (loop0): 1 truncate cleaned up [ 78.231366][ T5508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.280155][ T5500] loop2: detected capacity change from 0 to 512 [ 78.304334][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.325191][ T5510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.340215][ T5500] EXT4-fs (loop2): 1 orphan inode deleted [ 78.352885][ T1679] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 78.370369][ T5500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.393443][ T5500] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.409714][ T5510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.421676][ T5523] loop0: detected capacity change from 0 to 164 [ 78.494535][ T5510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.515863][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.594470][ T1679] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.626660][ T1679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.652842][ T1679] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.664481][ T1679] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.832257][ T5549] netlink: 64 bytes leftover after parsing attributes in process `syz.4.612'. [ 79.086345][ T5565] netlink: 64 bytes leftover after parsing attributes in process `syz.2.618'. [ 79.143610][ T5568] netlink: 7 bytes leftover after parsing attributes in process `syz.3.619'. [ 79.156626][ T5568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.619'. [ 79.165912][ T5568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.619'. [ 79.427493][ T5593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5593 comm=syz.3.627 [ 79.441733][ T5593] all: renamed from lo (while UP) [ 79.535958][ T5594] loop2: detected capacity change from 0 to 8192 [ 79.583645][ T5599] FAULT_INJECTION: forcing a failure. [ 79.583645][ T5599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.597379][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.0.629 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.597508][ T5599] Tainted: [W]=WARN [ 79.597517][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.597587][ T5599] Call Trace: [ 79.597595][ T5599] [ 79.597602][ T5599] __dump_stack+0x1d/0x30 [ 79.597627][ T5599] dump_stack_lvl+0xe8/0x140 [ 79.597653][ T5599] dump_stack+0x15/0x1b [ 79.597724][ T5599] should_fail_ex+0x265/0x280 [ 79.597768][ T5599] should_fail+0xb/0x20 [ 79.597832][ T5599] should_fail_usercopy+0x1a/0x20 [ 79.597852][ T5599] _copy_from_user+0x1c/0xb0 [ 79.597877][ T5599] ___sys_sendmsg+0xc1/0x1d0 [ 79.597920][ T5599] __x64_sys_sendmsg+0xd4/0x160 [ 79.597962][ T5599] x64_sys_call+0x17ba/0x3000 [ 79.597988][ T5599] do_syscall_64+0xd8/0x2a0 [ 79.598026][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.598048][ T5599] RIP: 0033:0x7fe77da6f749 [ 79.598064][ T5599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.598081][ T5599] RSP: 002b:00007fe77c4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.598179][ T5599] RAX: ffffffffffffffda RBX: 00007fe77dcc5fa0 RCX: 00007fe77da6f749 [ 79.598196][ T5599] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 79.598218][ T5599] RBP: 00007fe77c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 79.598232][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.598247][ T5599] R13: 00007fe77dcc6038 R14: 00007fe77dcc5fa0 R15: 00007ffc4dfebd68 [ 79.598271][ T5599] [ 80.429689][ T5632] loop1: detected capacity change from 0 to 512 [ 80.464264][ T5632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.539044][ T5632] EXT4-fs (loop1): 1 truncate cleaned up [ 80.549716][ T5647] loop2: detected capacity change from 0 to 512 [ 80.551628][ T5632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.569744][ T5647] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.648: ea_inode file size=0 entry size=6 [ 80.570046][ T5647] EXT4-fs (loop2): 1 orphan inode deleted [ 80.570526][ T5647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.745845][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.803594][ T5655] loop2: detected capacity change from 0 to 512 [ 80.825763][ T5655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.840752][ T5655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 80.859391][ T5655] EXT4-fs (loop2): 1 truncate cleaned up [ 80.873784][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.899253][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.946739][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.520046][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 81.520065][ T29] audit: type=1400 audit(1764992155.160:2668): avc: denied { ioctl } for pid=5680 comm="syz.3.658" path="socket:[12519]" dev="sockfs" ino=12519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.827126][ T29] audit: type=1326 audit(1764992155.450:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf350d65e7 code=0x7ffc0000 [ 81.922275][ T29] audit: type=1326 audit(1764992155.450:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3507b829 code=0x7ffc0000 [ 81.946376][ T29] audit: type=1326 audit(1764992155.450:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf350d65e7 code=0x7ffc0000 [ 81.969925][ T29] audit: type=1326 audit(1764992155.450:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3507b829 code=0x7ffc0000 [ 81.994402][ T29] audit: type=1326 audit(1764992155.450:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf350d65e7 code=0x7ffc0000 [ 82.018056][ T29] audit: type=1326 audit(1764992155.450:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3507b829 code=0x7ffc0000 [ 82.041530][ T29] audit: type=1326 audit(1764992155.450:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf350d65e7 code=0x7ffc0000 [ 82.065879][ T29] audit: type=1326 audit(1764992155.450:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3507b829 code=0x7ffc0000 [ 82.089353][ T29] audit: type=1326 audit(1764992155.450:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf350d65e7 code=0x7ffc0000 [ 82.180274][ T5711] FAULT_INJECTION: forcing a failure. [ 82.180274][ T5711] name failslab, interval 1, probability 0, space 0, times 0 [ 82.193000][ T5711] CPU: 1 UID: 0 PID: 5711 Comm: syz.2.670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.193038][ T5711] Tainted: [W]=WARN [ 82.193047][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.193075][ T5711] Call Trace: [ 82.193084][ T5711] [ 82.193092][ T5711] __dump_stack+0x1d/0x30 [ 82.193121][ T5711] dump_stack_lvl+0xe8/0x140 [ 82.193145][ T5711] dump_stack+0x15/0x1b [ 82.193164][ T5711] should_fail_ex+0x265/0x280 [ 82.193234][ T5711] should_failslab+0x8c/0xb0 [ 82.193285][ T5711] kmem_cache_alloc_node_noprof+0x57/0x4c0 [ 82.193312][ T5711] ? __alloc_skb+0x324/0x4d0 [ 82.193350][ T5711] __alloc_skb+0x324/0x4d0 [ 82.193385][ T5711] ? __alloc_skb+0x24d/0x4d0 [ 82.193465][ T5711] netlink_alloc_large_skb+0xbf/0xf0 [ 82.193499][ T5711] netlink_sendmsg+0x3cf/0x6b0 [ 82.193573][ T5711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.193604][ T5711] __sock_sendmsg+0x145/0x180 [ 82.193635][ T5711] ____sys_sendmsg+0x31e/0x4a0 [ 82.193662][ T5711] ___sys_sendmsg+0x17b/0x1d0 [ 82.193707][ T5711] __x64_sys_sendmsg+0xd4/0x160 [ 82.193740][ T5711] x64_sys_call+0x17ba/0x3000 [ 82.193798][ T5711] do_syscall_64+0xd8/0x2a0 [ 82.193827][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.193930][ T5711] RIP: 0033:0x7faf350df749 [ 82.193955][ T5711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.193977][ T5711] RSP: 002b:00007faf33b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.194001][ T5711] RAX: ffffffffffffffda RBX: 00007faf35335fa0 RCX: 00007faf350df749 [ 82.194014][ T5711] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 82.194026][ T5711] RBP: 00007faf33b47090 R08: 0000000000000000 R09: 0000000000000000 [ 82.194066][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.194078][ T5711] R13: 00007faf35336038 R14: 00007faf35335fa0 R15: 00007ffe97a7a528 [ 82.194102][ T5711] [ 82.480529][ T5714] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 82.605423][ T5722] loop1: detected capacity change from 0 to 512 [ 82.616502][ T5726] loop2: detected capacity change from 0 to 512 [ 82.634849][ T5726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.643545][ T5722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.669976][ T5726] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 82.689068][ T5726] EXT4-fs (loop2): 1 truncate cleaned up [ 82.696035][ T5722] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 82.722136][ T5726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.735298][ T5722] EXT4-fs (loop1): 1 truncate cleaned up [ 82.741408][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.768424][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.818097][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.863381][ T5752] ./file0: Can't lookup blockdev [ 82.904469][ T5752] 9pnet_fd: Insufficient options for proto=fd [ 83.058112][ T5764] __nla_validate_parse: 35 callbacks suppressed [ 83.058131][ T5764] netlink: 7 bytes leftover after parsing attributes in process `syz.0.691'. [ 83.082913][ T5772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.123353][ T5764] netlink: 60 bytes leftover after parsing attributes in process `syz.0.691'. [ 83.133110][ T5764] netlink: 60 bytes leftover after parsing attributes in process `syz.0.691'. [ 83.142983][ T5772] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 83.171189][ T5772] EXT4-fs (loop3): 1 truncate cleaned up [ 83.179375][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.226854][ T5778] FAULT_INJECTION: forcing a failure. [ 83.226854][ T5778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.240032][ T5778] CPU: 1 UID: 0 PID: 5778 Comm: syz.1.696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.240071][ T5778] Tainted: [W]=WARN [ 83.240079][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.240094][ T5778] Call Trace: [ 83.240101][ T5778] [ 83.240109][ T5778] __dump_stack+0x1d/0x30 [ 83.240163][ T5778] dump_stack_lvl+0xe8/0x140 [ 83.240189][ T5778] dump_stack+0x15/0x1b [ 83.240267][ T5778] should_fail_ex+0x265/0x280 [ 83.240311][ T5778] should_fail+0xb/0x20 [ 83.240347][ T5778] should_fail_usercopy+0x1a/0x20 [ 83.240373][ T5778] _copy_to_user+0x20/0xa0 [ 83.240408][ T5778] simple_read_from_buffer+0xb5/0x130 [ 83.240449][ T5778] proc_fail_nth_read+0x10e/0x150 [ 83.240481][ T5778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.240509][ T5778] vfs_read+0x1a8/0x770 [ 83.240547][ T5778] ? __rcu_read_unlock+0x4f/0x70 [ 83.240623][ T5778] ? __fget_files+0x184/0x1c0 [ 83.240647][ T5778] ? mutex_lock+0x58/0x90 [ 83.240675][ T5778] ksys_read+0xda/0x1a0 [ 83.240707][ T5778] __x64_sys_read+0x40/0x50 [ 83.240744][ T5778] x64_sys_call+0x2889/0x3000 [ 83.240848][ T5778] do_syscall_64+0xd8/0x2a0 [ 83.240880][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.240901][ T5778] RIP: 0033:0x7fe87972e15c [ 83.240916][ T5778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.240933][ T5778] RSP: 002b:00007fe878197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.240967][ T5778] RAX: ffffffffffffffda RBX: 00007fe879985fa0 RCX: 00007fe87972e15c [ 83.240983][ T5778] RDX: 000000000000000f RSI: 00007fe8781970a0 RDI: 0000000000000007 [ 83.240996][ T5778] RBP: 00007fe878197090 R08: 0000000000000000 R09: 0000000000000000 [ 83.241008][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.241019][ T5778] R13: 00007fe879986038 R14: 00007fe879985fa0 R15: 00007ffdf2502b18 [ 83.241038][ T5778] [ 83.242243][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.478616][ T5790] set_capacity_and_notify: 1 callbacks suppressed [ 83.478635][ T5790] loop4: detected capacity change from 0 to 512 [ 83.562364][ T5790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.617458][ T5790] EXT4-fs (loop4): 1 truncate cleaned up [ 83.651172][ T5790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.672779][ T5806] netlink: 7 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.704064][ T5806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.713101][ T5806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.833454][ T5816] loop2: detected capacity change from 0 to 512 [ 83.877144][ T5806] netlink: 7 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.896508][ T5816] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 83.916204][ T5819] netlink: 7 bytes leftover after parsing attributes in process `syz.1.709'. [ 83.932565][ T5806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.941604][ T5806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 83.966349][ T5816] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.708: bg 0: block 104: invalid block bitmap [ 83.973221][ T3328] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.014460][ T5816] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 84.029394][ T5816] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.708: invalid indirect mapped block 1 (level 1) [ 84.056694][ T5816] EXT4-fs (loop2): 1 truncate cleaned up [ 84.063106][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.065532][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.129064][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.146053][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.159691][ T3328] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.189523][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.234687][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.294032][ T3328] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.347015][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.413963][ T5837] loop2: detected capacity change from 0 to 512 [ 84.421047][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.437635][ T5841] loop1: detected capacity change from 0 to 512 [ 84.465864][ T3328] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.486276][ T5837] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.505848][ T5841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.538768][ T5841] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 84.549473][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.590036][ T5837] EXT4-fs (loop2): 1 truncate cleaned up [ 84.608402][ T5841] EXT4-fs (loop1): 1 truncate cleaned up [ 84.614583][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.616296][ T5837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.674066][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.693326][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.737299][ T3328] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.790446][ T3328] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 84.822341][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.871148][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.901109][ T5849] loop3: detected capacity change from 0 to 512 [ 84.919017][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.965432][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.982137][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 84.995649][ T5849] EXT4-fs (loop3): 1 orphan inode deleted [ 85.011505][ T862] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 85.030382][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 85.034034][ T5849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.078574][ T3328] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 85.138303][ T5849] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.153343][ T5858] loop2: detected capacity change from 0 to 512 [ 85.186888][ T5858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.198615][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.214631][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.226799][ T5858] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 85.258466][ T5858] EXT4-fs (loop2): 1 truncate cleaned up [ 85.275554][ T5858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.325674][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.449135][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.564996][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.589608][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.644366][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.660413][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.685235][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.986605][ T5918] loop1: detected capacity change from 0 to 512 [ 86.008278][ T5918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.032605][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 86.040565][ T5918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.070209][ T5918] EXT4-fs (loop1): 1 truncate cleaned up [ 86.082371][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.129382][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.139797][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.146961][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.154808][ T5893] bridge_slave_0: entered allmulticast mode [ 86.162324][ T5893] bridge_slave_0: entered promiscuous mode [ 86.172678][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.179932][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.187685][ T5893] bridge_slave_1: entered allmulticast mode [ 86.195247][ T5893] bridge_slave_1: entered promiscuous mode [ 86.239175][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.250282][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.379465][ T5893] team0: Port device team_slave_0 added [ 86.399326][ T5893] team0: Port device team_slave_1 added [ 86.427874][ T5940] 9pnet_fd: Insufficient options for proto=fd [ 86.455979][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.462972][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.489875][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.563259][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.570379][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.582895][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.597216][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.629955][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.677042][ T5893] hsr_slave_0: entered promiscuous mode [ 86.683385][ T5893] hsr_slave_1: entered promiscuous mode [ 86.815093][ T5893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.825447][ T5893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.833754][ T5979] loop1: detected capacity change from 0 to 512 [ 86.842163][ T5893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.849635][ T5979] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.863913][ T5893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.873620][ T5979] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.890330][ T5979] EXT4-fs (loop1): 1 truncate cleaned up [ 86.897287][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.925847][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.005481][ T5996] loop1: detected capacity change from 0 to 512 [ 87.012752][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 87.012769][ T29] audit: type=1400 audit(1764992160.305:3020): avc: denied { bind } for pid=5993 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.014577][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.022766][ T29] audit: type=1400 audit(1764992160.305:3021): avc: denied { setopt } for pid=5993 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.066861][ T5996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.081611][ T5994] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.092414][ T5996] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.107721][ T5996] EXT4-fs (loop1): 1 truncate cleaned up [ 87.114027][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.114646][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.145607][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.152845][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.163411][ T5994] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.163460][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.184564][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.191861][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.226725][ T5994] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.280159][ T5994] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.306580][ T6005] loop1: detected capacity change from 0 to 512 [ 87.336013][ T6005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.355839][ T29] audit: type=1326 audit(1764992160.614:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.378921][ T29] audit: type=1326 audit(1764992160.614:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.386840][ T6013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.402236][ T29] audit: type=1326 audit(1764992160.614:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.402278][ T29] audit: type=1326 audit(1764992160.614:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.402317][ T29] audit: type=1326 audit(1764992160.614:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.402358][ T29] audit: type=1326 audit(1764992160.614:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.402392][ T29] audit: type=1326 audit(1764992160.623:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.402471][ T29] audit: type=1326 audit(1764992160.623:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77da6f749 code=0x7ffc0000 [ 87.533754][ T6005] EXT4-fs (loop1): 1 truncate cleaned up [ 87.579867][ T6013] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.595090][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.596372][ T6013] EXT4-fs (loop3): 1 truncate cleaned up [ 87.614054][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.634758][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.667058][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.674774][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 87.676869][ T875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.712627][ T862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.775655][ T862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.788583][ T862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.948802][ T6038] xt_connbytes: Forcing CT accounting to be enabled [ 87.968077][ T6038] Cannot find set identified by id 0 to match [ 88.042823][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.073041][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.091099][ T5893] veth0_vlan: entered promiscuous mode [ 88.120893][ T5893] veth1_vlan: entered promiscuous mode [ 88.148739][ T5893] veth0_macvtap: entered promiscuous mode [ 88.172238][ T6055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.179283][ T5893] veth1_macvtap: entered promiscuous mode [ 88.188679][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.194503][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.208130][ T6055] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 88.226587][ T6055] EXT4-fs (loop2): 1 truncate cleaned up [ 88.227586][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.241868][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.256419][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.274801][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.287440][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.305457][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.317040][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574417][ T6086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.604656][ T6086] EXT4-fs (loop1): 1 truncate cleaned up [ 88.616140][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.645284][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.717959][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.743619][ T6093] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.765244][ T6101] __nla_validate_parse: 35 callbacks suppressed [ 88.765263][ T6101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'. [ 88.786527][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 88.801797][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.851456][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.804'. [ 88.919710][ T6117] set_capacity_and_notify: 5 callbacks suppressed [ 88.919726][ T6117] loop1: detected capacity change from 0 to 512 [ 88.939022][ T6117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.989348][ T6117] EXT4-fs (loop1): 1 truncate cleaned up [ 89.000606][ T6121] netlink: 64 bytes leftover after parsing attributes in process `syz.3.809'. [ 89.010357][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.083369][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.225381][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.266649][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.284477][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6157 comm=syz.5.820 [ 89.311564][ T6145] all: renamed from lo (while UP) [ 89.397725][ T6161] netlink: 64 bytes leftover after parsing attributes in process `syz.2.824'. [ 89.521507][ T6171] netlink: 64 bytes leftover after parsing attributes in process `syz.0.828'. [ 89.945117][ T6198] netlink: 580 bytes leftover after parsing attributes in process `syz.1.838'. [ 90.040473][ T6202] loop3: detected capacity change from 0 to 512 [ 90.060654][ T6202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.086859][ T6202] EXT4-fs (loop3): 1 truncate cleaned up [ 90.266538][ T6211] loop3: detected capacity change from 0 to 512 [ 90.274077][ T6195] loop2: detected capacity change from 0 to 512 [ 90.284388][ T6211] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.307747][ T6195] EXT4-fs (loop2): 1 orphan inode deleted [ 90.320634][ T6211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 90.323429][ T6195] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.357874][ T6211] EXT4-fs (loop3): 1 truncate cleaned up [ 90.357909][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 90.594920][ T6221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6221 comm=syz.2.845 [ 90.624914][ T6221] all: renamed from lo (while UP) [ 90.672684][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.691099][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.960094][ T6247] loop3: detected capacity change from 0 to 128 [ 91.073481][ T6257] FAULT_INJECTION: forcing a failure. [ 91.073481][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.086660][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.1.858 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.086726][ T6257] Tainted: [W]=WARN [ 91.086735][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.086752][ T6257] Call Trace: [ 91.086761][ T6257] [ 91.086801][ T6257] __dump_stack+0x1d/0x30 [ 91.086832][ T6257] dump_stack_lvl+0xe8/0x140 [ 91.086862][ T6257] dump_stack+0x15/0x1b [ 91.086887][ T6257] should_fail_ex+0x265/0x280 [ 91.086951][ T6257] should_fail+0xb/0x20 [ 91.086989][ T6257] should_fail_usercopy+0x1a/0x20 [ 91.087014][ T6257] _copy_from_user+0x1c/0xb0 [ 91.087101][ T6257] copy_clone_args_from_user+0x14f/0x490 [ 91.087135][ T6257] ? kstrtouint+0x76/0xc0 [ 91.087172][ T6257] __se_sys_clone3+0x6f/0x200 [ 91.087290][ T6257] __x64_sys_clone3+0x31/0x40 [ 91.087311][ T6257] x64_sys_call+0x2c0f/0x3000 [ 91.087334][ T6257] do_syscall_64+0xd8/0x2a0 [ 91.087368][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.087447][ T6257] RIP: 0033:0x7fe87972f749 [ 91.087466][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.087565][ T6257] RSP: 002b:00007fe878196f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 91.087590][ T6257] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe87972f749 [ 91.087603][ T6257] RDX: 00007fe878196f20 RSI: 0000000000000058 RDI: 00007fe878196f20 [ 91.087616][ T6257] RBP: 00007fe878197090 R08: 0000000000000000 R09: 0000000000000058 [ 91.087627][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.087641][ T6257] R13: 00007fe879986038 R14: 00007fe879985fa0 R15: 00007ffdf2502b18 [ 91.087700][ T6257] [ 91.281903][ T6259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 91.364853][ T6273] loop2: detected capacity change from 0 to 128 [ 91.448001][ T6277] netlink: 232 bytes leftover after parsing attributes in process `syz.0.866'. [ 91.484356][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'. [ 91.516627][ T6269] loop1: detected capacity change from 0 to 8192 [ 91.559874][ T6269] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.835113][ T6322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6322 comm=syz.0.875 [ 91.857774][ T6322] all: renamed from lo (while UP) [ 91.858544][ T23] hid_parser_main: 18 callbacks suppressed [ 91.858580][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.876531][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.883953][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.891421][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.898851][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.906315][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.913989][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.921420][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.928878][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.936368][ T23] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 91.941805][ T6330] loop1: detected capacity change from 0 to 512 [ 91.961584][ T23] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 91.976162][ T6324] 9pnet_fd: Insufficient options for proto=fd [ 91.995265][ T6330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.044368][ T6332] fido_id[6332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.076474][ T6330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 92.118450][ T6330] EXT4-fs (loop1): 1 truncate cleaned up [ 92.192709][ T6349] loop1: detected capacity change from 0 to 256 [ 92.415937][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 92.415955][ T29] audit: type=1326 audit(1764992165.357:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.492815][ T29] audit: type=1326 audit(1764992165.395:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.516464][ T29] audit: type=1326 audit(1764992165.395:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.539883][ T29] audit: type=1326 audit(1764992165.395:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.563327][ T29] audit: type=1326 audit(1764992165.395:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.586782][ T29] audit: type=1326 audit(1764992165.395:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.610247][ T29] audit: type=1326 audit(1764992165.395:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.633842][ T29] audit: type=1326 audit(1764992165.395:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6353 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fe87972f749 code=0x7ffc0000 [ 92.754333][ T29] audit: type=1326 audit(1764992165.451:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.5.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625ca3f749 code=0x7ffc0000 [ 92.765300][ T6389] loop3: detected capacity change from 0 to 512 [ 92.777756][ T29] audit: type=1326 audit(1764992165.451:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.5.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625ca3f749 code=0x7ffc0000 [ 92.810895][ T6389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.922409][ T6389] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.896: inode has both inline data and extents flags [ 92.941919][ T6401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.952502][ T6389] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.896: couldn't read orphan inode 15 (err -117) [ 93.015643][ T6401] EXT4-fs (loop1): 1 truncate cleaned up [ 93.602894][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.613401][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.135135][ T6493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.149533][ T6493] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 94.192278][ T6501] __nla_validate_parse: 48 callbacks suppressed [ 94.192293][ T6501] netlink: 7 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.212730][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.212751][ T6493] EXT4-fs (loop1): 1 truncate cleaned up [ 94.227567][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.277263][ T6504] veth0: entered promiscuous mode [ 94.284541][ T6501] netlink: 7 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.285477][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 94.293696][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.293730][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.355553][ T6501] netlink: 7 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.366438][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.375467][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.932'. [ 94.426433][ T6519] set_capacity_and_notify: 3 callbacks suppressed [ 94.426454][ T6519] loop2: detected capacity change from 0 to 512 [ 94.485217][ T6519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.510461][ T6519] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 94.535337][ T6519] EXT4-fs (loop2): 1 truncate cleaned up [ 94.655771][ T6543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6543 comm=syz.5.945 [ 94.667001][ T6551] vlan2: entered allmulticast mode [ 94.673864][ T6551] bridge_slave_0: entered allmulticast mode [ 94.706588][ T6543] all: renamed from lo (while UP) [ 94.908236][ T6568] loop2: detected capacity change from 0 to 256 [ 95.001516][ T6576] FAULT_INJECTION: forcing a failure. [ 95.001516][ T6576] name failslab, interval 1, probability 0, space 0, times 0 [ 95.007895][ T6575] loop2: detected capacity change from 0 to 512 [ 95.014235][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.0.956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.014276][ T6576] Tainted: [W]=WARN [ 95.014283][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.014298][ T6576] Call Trace: [ 95.014364][ T6576] [ 95.014375][ T6576] __dump_stack+0x1d/0x30 [ 95.014412][ T6576] dump_stack_lvl+0xe8/0x140 [ 95.014520][ T6576] dump_stack+0x15/0x1b [ 95.014616][ T6576] should_fail_ex+0x265/0x280 [ 95.014665][ T6576] should_failslab+0x8c/0xb0 [ 95.014692][ T6576] kmem_cache_alloc_noprof+0x50/0x4a0 [ 95.014738][ T6576] ? getname_flags+0x80/0x3b0 [ 95.014771][ T6576] getname_flags+0x80/0x3b0 [ 95.014802][ T6576] user_path_at+0x28/0x130 [ 95.014849][ T6576] do_utimes+0xd9/0x210 [ 95.014879][ T6576] __x64_sys_utime+0xbc/0x140 [ 95.014962][ T6576] x64_sys_call+0x2776/0x3000 [ 95.014995][ T6576] do_syscall_64+0xd8/0x2a0 [ 95.015050][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.015080][ T6576] RIP: 0033:0x7fe77da6f749 [ 95.015102][ T6576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.015126][ T6576] RSP: 002b:00007fe77c4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 95.015151][ T6576] RAX: ffffffffffffffda RBX: 00007fe77dcc5fa0 RCX: 00007fe77da6f749 [ 95.015229][ T6576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 95.015247][ T6576] RBP: 00007fe77c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.015323][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.015340][ T6576] R13: 00007fe77dcc6038 R14: 00007fe77dcc5fa0 R15: 00007ffc4dfebd68 [ 95.015368][ T6576] [ 95.214768][ T6580] loop1: detected capacity change from 0 to 128 [ 95.275190][ T6575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.289927][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.308028][ T6575] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 95.322311][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.335434][ T6575] EXT4-fs (loop2): 1 truncate cleaned up [ 95.399890][ T6597] loop1: detected capacity change from 0 to 256 [ 95.477419][ T6605] 9pnet_fd: Insufficient options for proto=fd [ 95.575143][ T2971] hid-generic 00A0:0006:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 95.596385][ T6621] lo speed is unknown, defaulting to 1000 [ 95.603205][ T6621] lo speed is unknown, defaulting to 1000 [ 95.613119][ T6621] lo speed is unknown, defaulting to 1000 [ 95.672656][ T6621] infiniband syz2: set active [ 95.677401][ T6621] infiniband syz2: added lo [ 95.682548][ T2971] lo speed is unknown, defaulting to 1000 [ 95.699623][ T6621] RDS/IB: syz2: added [ 95.707268][ T6621] smc: adding ib device syz2 with port count 1 [ 95.716088][ T6621] smc: ib device syz2 port 1 has no pnetid [ 95.722536][ T2971] lo speed is unknown, defaulting to 1000 [ 95.730952][ T6621] lo speed is unknown, defaulting to 1000 [ 95.745264][ T6630] loop1: detected capacity change from 0 to 512 [ 95.753585][ T6630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.774043][ T6630] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 95.789746][ T6630] EXT4-fs (loop1): 1 truncate cleaned up [ 95.805427][ T6621] lo speed is unknown, defaulting to 1000 [ 95.891421][ T6621] lo speed is unknown, defaulting to 1000 [ 95.947763][ T6639] loop1: detected capacity change from 0 to 256 [ 95.948056][ T6621] lo speed is unknown, defaulting to 1000 [ 96.049411][ T6621] lo speed is unknown, defaulting to 1000 [ 96.106506][ T6621] lo speed is unknown, defaulting to 1000 [ 96.345940][ T6675] FAULT_INJECTION: forcing a failure. [ 96.345940][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 96.358756][ T6675] CPU: 1 UID: 0 PID: 6675 Comm: syz.0.990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.358800][ T6675] Tainted: [W]=WARN [ 96.358810][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.358828][ T6675] Call Trace: [ 96.358836][ T6675] [ 96.358845][ T6675] __dump_stack+0x1d/0x30 [ 96.358900][ T6675] dump_stack_lvl+0xe8/0x140 [ 96.358935][ T6675] dump_stack+0x15/0x1b [ 96.358961][ T6675] should_fail_ex+0x265/0x280 [ 96.359003][ T6675] should_failslab+0x8c/0xb0 [ 96.359032][ T6675] __kmalloc_noprof+0xa5/0x590 [ 96.359124][ T6675] ? alloc_port_data+0xc0/0x230 [ 96.359154][ T6675] alloc_port_data+0xc0/0x230 [ 96.359187][ T6675] ib_device_set_netdev+0xb1/0x450 [ 96.359260][ T6675] ? ib_set_device_ops+0x2c7c/0x2ce0 [ 96.359294][ T6675] rxe_register_device+0x14d/0x190 [ 96.359325][ T6675] rxe_add+0x8c7/0x8e0 [ 96.359358][ T6675] rxe_net_add+0x62/0xb0 [ 96.359400][ T6675] rxe_newlink+0xc6/0x180 [ 96.359437][ T6675] nldev_newlink+0x369/0x3f0 [ 96.359569][ T6675] ? __pfx_nldev_newlink+0x10/0x10 [ 96.359611][ T6675] rdma_nl_rcv+0x47c/0x5a0 [ 96.359652][ T6675] ? selinux_nlmsg_lookup+0x99/0x890 [ 96.359708][ T6675] netlink_unicast+0x5c0/0x690 [ 96.359746][ T6675] netlink_sendmsg+0x58b/0x6b0 [ 96.359782][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.359836][ T6675] __sock_sendmsg+0x145/0x180 [ 96.359874][ T6675] ____sys_sendmsg+0x31e/0x4a0 [ 96.359908][ T6675] ___sys_sendmsg+0x17b/0x1d0 [ 96.359951][ T6675] __x64_sys_sendmsg+0xd4/0x160 [ 96.359989][ T6675] x64_sys_call+0x17ba/0x3000 [ 96.360132][ T6675] do_syscall_64+0xd8/0x2a0 [ 96.360166][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.360193][ T6675] RIP: 0033:0x7fe77da6f749 [ 96.360224][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.360246][ T6675] RSP: 002b:00007fe77c4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.360268][ T6675] RAX: ffffffffffffffda RBX: 00007fe77dcc5fa0 RCX: 00007fe77da6f749 [ 96.360283][ T6675] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 96.360298][ T6675] RBP: 00007fe77c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 96.360339][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.360353][ T6675] R13: 00007fe77dcc6038 R14: 00007fe77dcc5fa0 R15: 00007ffc4dfebd68 [ 96.360376][ T6675] [ 96.360484][ T6675] rdma_rxe: rxe_newlink: failed to add lo [ 96.764877][ T6696] loop3: detected capacity change from 0 to 164 [ 96.799133][ T6690] lo speed is unknown, defaulting to 1000 [ 96.819457][ T6699] loop2: detected capacity change from 0 to 512 [ 96.838749][ T6699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.857552][ T6699] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 96.871681][ T6696] rdma_rxe: rxe_newlink: failed to add lo [ 96.930158][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 96.980162][ T6712] lo: entered promiscuous mode [ 96.985859][ T6712] lo: entered allmulticast mode [ 97.030143][ T6712] tunl0: entered promiscuous mode [ 97.035265][ T6712] tunl0: entered allmulticast mode [ 97.055490][ T6712] gre0: entered promiscuous mode [ 97.060641][ T6712] gre0: entered allmulticast mode [ 97.069842][ T6712] gretap0: entered promiscuous mode [ 97.075066][ T6712] gretap0: entered allmulticast mode [ 97.093381][ T6712] erspan0: entered promiscuous mode [ 97.098736][ T6712] erspan0: entered allmulticast mode [ 97.106937][ T6712] ip_vti0: entered promiscuous mode [ 97.113066][ T6712] ip_vti0: entered allmulticast mode [ 97.120106][ T6712] ip6_vti0: entered promiscuous mode [ 97.125537][ T6712] ip6_vti0: entered allmulticast mode [ 97.132760][ T6712] sit0: entered promiscuous mode [ 97.137856][ T6712] sit0: entered allmulticast mode [ 97.146095][ T6712] ip6tnl0: entered promiscuous mode [ 97.151334][ T6712] ip6tnl0: entered allmulticast mode [ 97.159688][ T6712] ip6gre0: entered promiscuous mode [ 97.164935][ T6712] ip6gre0: entered allmulticast mode [ 97.171962][ T6712] syz_tun: entered promiscuous mode [ 97.177973][ T6712] syz_tun: entered allmulticast mode [ 97.184574][ T6712] ip6gretap0: entered promiscuous mode [ 97.190229][ T6712] ip6gretap0: entered allmulticast mode [ 97.213612][ T6712] bridge0: entered promiscuous mode [ 97.218983][ T6712] bridge0: entered allmulticast mode [ 97.231788][ T6712] vcan0: entered promiscuous mode [ 97.237019][ T6712] vcan0: entered allmulticast mode [ 97.246442][ T6712] bond0: entered promiscuous mode [ 97.251642][ T6712] bond_slave_0: entered promiscuous mode [ 97.257565][ T6712] bond_slave_1: entered promiscuous mode [ 97.263346][ T6712] bond0: entered allmulticast mode [ 97.268541][ T6712] bond_slave_0: entered allmulticast mode [ 97.275037][ T6712] bond_slave_1: entered allmulticast mode [ 97.285790][ T6712] team0: entered promiscuous mode [ 97.290887][ T6712] team_slave_0: entered promiscuous mode [ 97.296705][ T6712] team_slave_1: entered promiscuous mode [ 97.302490][ T6712] team0: entered allmulticast mode [ 97.308384][ T6712] team_slave_0: entered allmulticast mode [ 97.314164][ T6712] team_slave_1: entered allmulticast mode [ 97.322516][ T6712] dummy0: entered promiscuous mode [ 97.327792][ T6712] dummy0: entered allmulticast mode [ 97.334440][ T6712] nlmon0: entered promiscuous mode [ 97.341226][ T6712] nlmon0: entered allmulticast mode [ 97.349069][ T6712] caif0: entered promiscuous mode [ 97.354144][ T6712] caif0: entered allmulticast mode [ 97.359424][ T6712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.376494][ T6723] sch_tbf: burst 22 is lower than device macvlan1 mtu (1550) ! [ 97.413384][ T6724] sch_tbf: burst 22 is lower than device macvlan1 mtu (1550) ! [ 97.541400][ T6748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6748 comm=syz.2.1014 [ 97.564684][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.582137][ T6748] all: renamed from lo (while UP) [ 97.589351][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.788712][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 97.788732][ T29] audit: type=1400 audit(1764992170.381:4088): avc: denied { relabelfrom } for pid=6764 comm="syz.1.1020" name="" dev="pipefs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.827903][ T6765] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 97.844726][ T6767] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.873220][ T6767] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 97.883497][ T6765] loop1: detected capacity change from 0 to 1024 [ 97.906153][ T29] audit: type=1400 audit(1764992170.419:4089): avc: denied { mac_admin } for pid=6764 comm="syz.1.1020" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.928119][ T29] audit: type=1400 audit(1764992170.419:4090): avc: denied { getopt } for pid=6766 comm="syz.5.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.937429][ T6765] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.947717][ T29] audit: type=1400 audit(1764992170.419:4091): avc: denied { relabelto } for pid=6764 comm="syz.1.1020" name="" dev="pipefs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:modules_dep_t:s0" [ 97.947770][ T29] audit: type=1326 audit(1764992170.438:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.009760][ T29] audit: type=1326 audit(1764992170.438:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.033184][ T29] audit: type=1326 audit(1764992170.438:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.057260][ T29] audit: type=1326 audit(1764992170.438:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.080906][ T29] audit: type=1326 audit(1764992170.438:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.105273][ T29] audit: type=1326 audit(1764992170.438:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe225b5f749 code=0x7ffc0000 [ 98.134254][ T6765] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 98.169806][ T6765] EXT4-fs (loop1): mount failed [ 98.234764][ T6765] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.677053][ T6806] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.688785][ T6811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.717966][ T6806] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.730713][ T6811] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 98.751996][ T6806] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1034: corrupted inode contents [ 98.780308][ T6811] EXT4-fs (loop1): 1 truncate cleaned up [ 98.794401][ T6806] EXT4-fs (loop3): Remounting filesystem read-only [ 98.808307][ T6806] EXT4-fs (loop3): 1 truncate cleaned up [ 98.814400][ T6315] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.825035][ T6315] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.851682][ T6315] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 98.941738][ T3660] ================================================================== [ 98.949877][ T3660] BUG: KCSAN: data-race in _copy_to_iter / fat12_ent_put [ 98.957120][ T3660] [ 98.959466][ T3660] write to 0xffff88811e70980c of 1 bytes by task 6819 on cpu 0: [ 98.967121][ T3660] fat12_ent_put+0x74/0x170 [ 98.971675][ T3660] fat_alloc_clusters+0x4d1/0xa80 [ 98.976744][ T3660] fat_alloc_new_dir+0xbb/0x530 [ 98.981644][ T3660] vfat_mkdir+0x9b/0x1f0 [ 98.985942][ T3660] vfs_mkdir+0x2db/0x3d0 [ 98.990394][ T3660] do_mkdirat+0x133/0x3b0 [ 98.994771][ T3660] __x64_sys_mkdir+0x42/0x50 [ 98.999426][ T3660] x64_sys_call+0x2f32/0x3000 [ 99.004227][ T3660] do_syscall_64+0xd8/0x2a0 [ 99.008857][ T3660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.014780][ T3660] [ 99.017138][ T3660] read to 0xffff88811e709800 of 512 bytes by task 3660 on cpu 1: [ 99.024876][ T3660] _copy_to_iter+0x130/0xe70 [ 99.029549][ T3660] copy_page_to_iter+0x18f/0x2d0 [ 99.034537][ T3660] filemap_read+0x407/0xa00 [ 99.039094][ T3660] blkdev_read_iter+0x22d/0x2e0 [ 99.043973][ T3660] vfs_read+0x64c/0x770 [ 99.048174][ T3660] ksys_read+0xda/0x1a0 [ 99.052365][ T3660] __x64_sys_read+0x40/0x50 [ 99.056948][ T3660] x64_sys_call+0x2889/0x3000 [ 99.061665][ T3660] do_syscall_64+0xd8/0x2a0 [ 99.066207][ T3660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.072135][ T3660] [ 99.074473][ T3660] Reported by Kernel Concurrency Sanitizer on: [ 99.080737][ T3660] CPU: 1 UID: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.091625][ T3660] Tainted: [W]=WARN [ 99.095698][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.105795][ T3660] ================================================================== [ 99.130864][ T6823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.150910][ T6823] EXT4-fs (loop1): 1 truncate cleaned up