last executing test programs: 48.850051239s ago: executing program 0 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 47.342655907s ago: executing program 0 (id=85): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 46.127043097s ago: executing program 0 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x2, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r2, 0x8aa, 0x0, 0x1000000, 0x0, 0x0) 46.036823266s ago: executing program 0 (id=98): syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000180)={[{@nobh}, {@noauto_da_alloc}]}, 0x1, 0x240, &(0x7f00000002c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r2 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) read$qrtrtun(r2, &(0x7f0000000580)=""/190, 0xbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x10240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f000000a400)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r7 = syz_open_dev$hiddev(&(0x7f0000000680), 0x7fff, 0x4000) readahead(r7, 0x507, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 45.99469949s ago: executing program 0 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001180)=ANY=[], 0x102e) 45.722987557s ago: executing program 0 (id=109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 45.722667487s ago: executing program 32 (id=109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 2.087104855s ago: executing program 1 (id=737): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004000), 0x0, 0x10000, &(0x7f00000041c0)={0x77359400}) pipe(&(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000002700)='sock_exceed_buf_limit\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r1, 0xffffffffffffffff, 0x0) 1.974445746s ago: executing program 1 (id=739): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x101201, 0xc9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.924146241s ago: executing program 1 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0xb2, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000380)=0x21004a, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x1020008, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000001c00)={0x13d4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x24, 0x5, "69430f4e070ccfc24bbf3fb6d837b2dc85e74354206708043e2807abe2ba21cf"}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x53, 0x2, '\x00kK7\xdc d-\xb0\r\vh\xd7uh8w\xe6\x13\xea\x13\x06m/\xd9\x9bV\x93Ea\xc8\xf8\x9a\x05\x8d9\xd1\xba\\\x89=Y]\x9d\t6\x1bb\xbb\x9d\x92\xfd\xa4\xcaTB\xc6\x82u\xf0\xcf\x8e\x99\x00\x0f\a\xe119`\v\xdcH\xcc=E\xc0\x8d\x92'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\\.)}%%}\\/^%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "e4c38722274db50ede80a546fb4c6ca412381dc9f9e6c35dcf05fd30e4de0c30634c7bb01b3013668da0a53b143414ebecdf4e28915f7ca4e77a32d5a92758df1caf900070852a8459b17c4eff84"}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "85af"}]}, @ETHTOOL_A_FEATURES_WANTED={0x116c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "7a44e0a957067a45e89774358492291ddb57a9ca4cd666223ed504c72fd8e3142147c7247e3c7a8f7b4dd2297eb8332d2c36a5c7a26a92171a9bafdcd0f141824e69e8636619d22f88e61147539280bad0f126423edf68ef37d315a721a74f12a14afff1b265adce926acd2d58aa67903b4e2505ee759bfec235103bc4b812720871d7928a1fd2a37282f6c16d72c050271033c92baed492867e9c686719c9"}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "6d94328626290d9f7e1f310a09e60ce5062860034261a380c8691dbe75312e268adce3498ae098738f1ef14d51056b8171822bf9d58aeb0c3be705d198ce6b8ccaf0a97af2d3ed279f171bd66b40cb7b2d7b5e13ab97bc9bae4055a7ba80327afb2812884275b373390ad9bf370269585334f86fb77c403fd06ff2afb137e4f2b5b9491555d31aac009d9c6ceb9d5eacda610aa939fc5f852068970c051f02ce9d344f36e96e80c382c41e813228f35b6008f62b2bdbada6"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-,[)(*\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x13d4}, 0x1, 0x0, 0x0, 0xc004}, 0x11) stat(0x0, &(0x7f0000000680)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,versi', @ANYRES16=r6]) 1.035249429s ago: executing program 1 (id=753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (fail_nth: 3) 959.045396ms ago: executing program 1 (id=754): socket$kcm(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880), 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={r3, 0x80000000, 0x7, 0x7, 0x7, 0x7f, 0xe9b, 0x6, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0xc0b, 0x9aa4, 0xfa, 0x4, 0x3}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}, {@journal_dev={'journal_dev', 0x3d, 0xce2c}}, {@noblock_validity}]}, 0xff, 0x4f2, &(0x7f0000000600)="$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") r4 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000003000000000000000000000000000000050000000000000000000000000000000800000000020000000000000000000000000000000000000700000000000000cc000000000000000000000000000000f7000000000000000000000000000000000000000a00010300000000000000004c001200"], 0x13c}}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x8002, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'vxcan1\x00'}}, 0x1e) 949.605587ms ago: executing program 3 (id=755): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000000)={0xa, 0x4e23, 0x40000004, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r9, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x560a, &(0x7f0000000040)={0xfc, 0x0, 0x9}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f0000000200)='./file0\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 874.924844ms ago: executing program 4 (id=756): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f00000004c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setlease(r4, 0x400, 0xfb2c6c470a50e215) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x2, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x2ac, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x27c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x6, 0x3, 0x33e}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x2ac}}, 0x0) 847.594807ms ago: executing program 3 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 752.951976ms ago: executing program 3 (id=759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000002000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000003000000000000000000000000000000050000000000000000000000000000000800000000020000000000000000000000000000000000000700000000000000cc000000000000000000000000000000f700"/152], 0x13c}}, 0x0) 752.150286ms ago: executing program 3 (id=761): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(0x0, 0x9, 0xa0400) pipe2$watch_queue(0x0, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x0, 0x0, 0x0) 603.621641ms ago: executing program 2 (id=765): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000200), 0x0, 0x0, 0x800000, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 580.849343ms ago: executing program 4 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a80)={0x30b, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r4, 0xffffffffffffffff, 0x7a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xb0, r9, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 555.880595ms ago: executing program 2 (id=767): r0 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 555.207375ms ago: executing program 4 (id=768): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x0, 0x800000000000}) 524.175669ms ago: executing program 2 (id=769): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="2500000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0xfffffffffffffdb2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRESHEX, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='f2fs_lookup_start\x00', 0xffffffffffffffff, 0x0, 0x8008}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) gettid() socket(0x10, 0x2, 0x0) 486.192242ms ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0xed, 0x5, 0x1, 0x800, 0x40, 0x60d6, 0x3}, &(0x7f0000000300)=0x9c) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) read$eventfd(r2, &(0x7f0000000200), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x134, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0xf0, 0x2a, [@supported_rates={0x1, 0x3, [{0x16, 0x1}, {0x30}, {0x18}]}, @supported_rates={0x1, 0x4, [{0x6, 0x1}, {0x24}, {0x48}, {0x6c, 0x1}]}, @erp={0x2a, 0x1}, @tim={0x5, 0xd4, {0x5a, 0xed, 0x8, "3b8bf78735d484af053563358ddad2ace45306cd1d8092fbfc85fa01d142f1ddb6a26e098cb2e6e14ff8d00901c01731430d8486216c38afc46c851b47e9d1854ef264654ae73609f769a02bd132c50c4933bfb3c67f76b3fe7710ed1e859d109474cffaa7b459eee940e33e9310110d85c7579aa14ba853485575bcc76022cc67f2e95fd891a394bfd836953db7544233e7370a8604f25af2a0060365414336f0680c9a61cf6100fe60fe5baf52cd2cfa09dc7b93530982f4ec91eae6f0f82b2ee060cbb43da2313f389c1ea3f06310f3"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x200}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x1) setuid(0xee01) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000900)={0x53, 0x4, 0x6, 0x34, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="43060b09b6ec", 0x0, 0x4, 0x10002, 0xffffffffffffffff, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0xed, 0x5, 0x1, 0x800, 0x40, 0x60d6, 0x3}, &(0x7f0000000300)=0x9c) (async) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) (async) read$eventfd(r2, &(0x7f0000000200), 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x134, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0xf0, 0x2a, [@supported_rates={0x1, 0x3, [{0x16, 0x1}, {0x30}, {0x18}]}, @supported_rates={0x1, 0x4, [{0x6, 0x1}, {0x24}, {0x48}, {0x6c, 0x1}]}, @erp={0x2a, 0x1}, @tim={0x5, 0xd4, {0x5a, 0xed, 0x8, "3b8bf78735d484af053563358ddad2ace45306cd1d8092fbfc85fa01d142f1ddb6a26e098cb2e6e14ff8d00901c01731430d8486216c38afc46c851b47e9d1854ef264654ae73609f769a02bd132c50c4933bfb3c67f76b3fe7710ed1e859d109474cffaa7b459eee940e33e9310110d85c7579aa14ba853485575bcc76022cc67f2e95fd891a394bfd836953db7544233e7370a8604f25af2a0060365414336f0680c9a61cf6100fe60fe5baf52cd2cfa09dc7b93530982f4ec91eae6f0f82b2ee060cbb43da2313f389c1ea3f06310f3"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x200}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) setuid(0xee01) (async) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000900)={0x53, 0x4, 0x6, 0x34, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="43060b09b6ec", 0x0, 0x4, 0x10002, 0xffffffffffffffff, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") (async) 467.539765ms ago: executing program 2 (id=772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000002000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000003000000000000000000000000000000050000000000000000000000000000000800000000020000000000000000000000000000000000000700000000000000cc000000000000000000000000000000f700"/152], 0x13c}}, 0x0) 408.20846ms ago: executing program 3 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1) (fail_nth: 1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 407.87271ms ago: executing program 5 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 404.57295ms ago: executing program 2 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a80)={0x30b, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r4, 0xffffffffffffffff, 0x7a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xb0, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 381.350303ms ago: executing program 5 (id=777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) io_setup(0x239f, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="02130000"], 0x10}}, 0x0) 351.992866ms ago: executing program 4 (id=778): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000200), 0x0, 0x0, 0x800000, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 351.551346ms ago: executing program 5 (id=779): r0 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 345.742596ms ago: executing program 2 (id=780): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES64=r0], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x3776}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x2, 0x8, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x18, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0x5}}}}}]}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x26, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = gettid() r10 = gettid() tkill(r9, 0x12) tkill(r9, 0x2d) tkill(r10, 0x14) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000580)={'\x00', 0x800, 0x20e959b5, 0x9, 0x2, 0xffff, r10}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r11}, 0x38) 330.356158ms ago: executing program 5 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 77.342253ms ago: executing program 4 (id=782): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004000), 0x0, 0x10000, &(0x7f00000041c0)={0x77359400}) pipe(&(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000002700)='sock_exceed_buf_limit\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x20, 0x6, 0x0) dup2(r6, r5) close_range(r1, 0xffffffffffffffff, 0x0) 67.359734ms ago: executing program 5 (id=783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 46.545136ms ago: executing program 4 (id=784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56c41, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 26.851798ms ago: executing program 5 (id=785): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xd06, 0x40}, 0x1069a1, 0x6, 0x0, 0x8, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x19d) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000300), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000240)) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x6, 0x8, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) (async) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='user.incfs.size\x00', &(0x7f00000003c0)='nl80211\x00', 0x8, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x1d3df39df5a933ce, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1, 0xff, 0x7, 0x9, 0x4}, 0x20) (async) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000002000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000003000000000000000000000000000000050000000000000000000000000000000800000000020000000000000000000000000000000000000700000000000000cc000000000000000000000000000000f7000000000000000000000000000000000000000a"], 0x13c}}, 0x0) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 36.764730][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.781687][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.820569][ T3498] loop4: detected capacity change from 0 to 512 [ 36.849765][ T3498] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5: bad orphan inode 11862016 [ 36.868849][ T3498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.901782][ T3498] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.916768][ T3504] pim6reg: entered allmulticast mode [ 36.926062][ T3504] pim6reg: left allmulticast mode [ 36.950677][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.016985][ T3514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'. [ 37.036377][ T3516] Zero length message leads to an empty skb [ 37.046829][ T3516] netlink: 19 bytes leftover after parsing attributes in process `syz.3.12'. [ 37.204247][ T3519] process 'syz.4.14' launched './file0' with NULL argv: empty string added [ 37.329558][ T3524] netlink: 19 bytes leftover after parsing attributes in process `syz.0.16'. [ 37.334091][ T3529] loop4: detected capacity change from 0 to 512 [ 37.356291][ T3528] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 37.437560][ T3534] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15'. [ 37.512006][ T3529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.454217][ T3539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20'. [ 38.480942][ T3548] netlink: 19 bytes leftover after parsing attributes in process `syz.0.23'. [ 38.495181][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.709452][ T3564] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 38.720989][ T3562] loop3: detected capacity change from 0 to 8192 [ 38.727698][ T3562] ======================================================= [ 38.727698][ T3562] WARNING: The mand mount option has been deprecated and [ 38.727698][ T3562] and is ignored by this kernel. Remove the mand [ 38.727698][ T3562] option from the mount to silence this warning. [ 38.727698][ T3562] ======================================================= [ 39.216018][ T3572] loop0: detected capacity change from 0 to 512 [ 39.238719][ T3574] pim6reg: entered allmulticast mode [ 39.261986][ T3574] pim6reg: left allmulticast mode [ 39.263190][ T3572] EXT4-fs: dax option not supported [ 39.362894][ T3578] Illegal XDP return value 4294967294 on prog (id 23) dev N/A, expect packet loss! [ 39.790625][ T3588] loop4: detected capacity change from 0 to 512 [ 39.918040][ T3588] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.38: bad orphan inode 11862016 [ 39.947543][ T3600] loop3: detected capacity change from 0 to 512 [ 40.002575][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.070821][ T3600] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.41: bg 0: block 248: padding at end of block bitmap is not set [ 40.126184][ T3600] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.41: Failed to acquire dquot type 1 [ 40.149316][ T3588] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.225800][ T3600] EXT4-fs (loop3): 1 truncate cleaned up [ 40.262865][ T3600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.309697][ T3600] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.454060][ T3600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.510739][ T3600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 40.541400][ T3612] FAULT_INJECTION: forcing a failure. [ 40.541400][ T3612] name failslab, interval 1, probability 0, space 0, times 1 [ 40.554119][ T3612] CPU: 0 UID: 0 PID: 3612 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.554235][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.554252][ T3612] Call Trace: [ 40.554261][ T3612] [ 40.554271][ T3612] __dump_stack+0x1d/0x30 [ 40.554293][ T3612] dump_stack_lvl+0xe8/0x140 [ 40.554318][ T3612] dump_stack+0x15/0x1b [ 40.554340][ T3612] should_fail_ex+0x265/0x280 [ 40.554390][ T3612] ? __pfx_cpu_map_kthread_run+0x10/0x10 [ 40.554467][ T3612] ? __kthread_create_on_node+0x76/0x230 [ 40.554496][ T3612] should_failslab+0x8c/0xb0 [ 40.554532][ T3612] __kmalloc_cache_noprof+0x4c/0x4a0 [ 40.554571][ T3612] ? __rcu_read_unlock+0x4f/0x70 [ 40.554657][ T3612] ? __pfx_cpu_map_kthread_run+0x10/0x10 [ 40.554686][ T3612] __kthread_create_on_node+0x76/0x230 [ 40.554714][ T3612] ? __pfx_cpu_map_kthread_run+0x10/0x10 [ 40.554752][ T3612] kthread_create_on_node+0x89/0xc0 [ 40.554803][ T3612] ? should_failslab+0x8c/0xb0 [ 40.554835][ T3612] cpu_map_update_elem+0x68a/0x800 [ 40.554872][ T3612] bpf_map_update_value+0x189/0x570 [ 40.554948][ T3612] map_update_elem+0x41f/0x520 [ 40.555009][ T3612] __sys_bpf+0x57b/0x7c0 [ 40.555051][ T3612] __x64_sys_bpf+0x41/0x50 [ 40.555165][ T3612] x64_sys_call+0x2aee/0x3000 [ 40.555258][ T3612] do_syscall_64+0xd2/0x200 [ 40.555290][ T3612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.555325][ T3612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.555394][ T3612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.555520][ T3612] RIP: 0033:0x7fb559d7eec9 [ 40.555537][ T3612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.555555][ T3612] RSP: 002b:00007fb5587e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.555580][ T3612] RAX: ffffffffffffffda RBX: 00007fb559fd5fa0 RCX: 00007fb559d7eec9 [ 40.555592][ T3612] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002 [ 40.555606][ T3612] RBP: 00007fb5587e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.555622][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.555696][ T3612] R13: 00007fb559fd6038 R14: 00007fb559fd5fa0 R15: 00007ffe83c8a1b8 [ 40.555719][ T3612] [ 40.798042][ T3600] syz.3.41 (3600) used greatest stack depth: 9120 bytes left [ 40.854096][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.868833][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 40.868853][ T29] audit: type=1326 audit(1760326498.189:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e3d5eec9 code=0x7ffc0000 [ 40.992361][ T29] audit: type=1400 audit(1760326498.279:399): avc: denied { create } for pid=3613 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.012413][ T29] audit: type=1400 audit(1760326498.279:400): avc: denied { write } for pid=3613 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.051986][ T29] audit: type=1107 audit(1760326498.359:401): pid=3628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 41.089333][ T29] audit: type=1400 audit(1760326498.439:402): avc: denied { name_bind } for pid=3633 comm="syz.3.53" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.111022][ T29] audit: type=1400 audit(1760326498.439:403): avc: denied { node_bind } for pid=3633 comm="syz.3.53" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.135205][ T29] audit: type=1400 audit(1760326498.439:404): avc: denied { create } for pid=3613 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.144420][ T3637] loop1: detected capacity change from 0 to 128 [ 41.154622][ T29] audit: type=1400 audit(1760326498.439:405): avc: denied { ioctl } for pid=3613 comm="syz.2.45" path="socket:[5142]" dev="sockfs" ino=5142 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.170814][ T3616] infiniband syz!: set active [ 41.190435][ T3616] infiniband syz!: added team_slave_0 [ 41.201473][ T29] audit: type=1326 audit(1760326498.549:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3633 comm=77DEA105FF07 exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x0 [ 41.246641][ T3616] RDS/IB: syz!: added [ 41.324439][ T29] audit: type=1326 audit(1760326498.619:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 41.329597][ T3640] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.382349][ T3647] loop0: detected capacity change from 0 to 128 [ 41.460633][ T3644] FAULT_INJECTION: forcing a failure. [ 41.460633][ T3644] name failslab, interval 1, probability 0, space 0, times 0 [ 41.473381][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.473426][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 41.473441][ T3644] Call Trace: [ 41.473448][ T3644] [ 41.473456][ T3644] __dump_stack+0x1d/0x30 [ 41.473477][ T3644] dump_stack_lvl+0xe8/0x140 [ 41.473497][ T3644] dump_stack+0x15/0x1b [ 41.473513][ T3644] should_fail_ex+0x265/0x280 [ 41.473597][ T3644] should_failslab+0x8c/0xb0 [ 41.473632][ T3644] __kmalloc_noprof+0xa5/0x570 [ 41.473660][ T3644] ? inotify_handle_inode_event+0x125/0x3d0 [ 41.473693][ T3644] inotify_handle_inode_event+0x125/0x3d0 [ 41.473787][ T3644] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 41.473884][ T3644] fsnotify_handle_inode_event+0x1c0/0x220 [ 41.473914][ T3644] fsnotify+0x13cf/0x14b0 [ 41.473944][ T3644] do_splice+0xf58/0x10b0 [ 41.474027][ T3644] ? proc_fail_nth_write+0x13b/0x160 [ 41.474057][ T3644] ? __rcu_read_unlock+0x4f/0x70 [ 41.474091][ T3644] ? __fget_files+0x184/0x1c0 [ 41.474303][ T3644] __se_sys_splice+0x26c/0x3a0 [ 41.474336][ T3644] __x64_sys_splice+0x78/0x90 [ 41.474365][ T3644] x64_sys_call+0x28a7/0x3000 [ 41.474388][ T3644] do_syscall_64+0xd2/0x200 [ 41.474453][ T3644] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.474480][ T3644] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.474574][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.474616][ T3644] RIP: 0033:0x7f4a17baeec9 [ 41.474631][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.474649][ T3644] RSP: 002b:00007f4a16617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 41.474815][ T3644] RAX: ffffffffffffffda RBX: 00007f4a17e05fa0 RCX: 00007f4a17baeec9 [ 41.474827][ T3644] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 41.474900][ T3644] RBP: 00007f4a16617090 R08: 0000000000039000 R09: 0000000000000000 [ 41.474912][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.474923][ T3644] R13: 00007f4a17e06038 R14: 00007f4a17e05fa0 R15: 00007ffffae77258 [ 41.474944][ T3644] [ 41.702334][ T3647] bond1: entered promiscuous mode [ 41.707463][ T3647] bond1: entered allmulticast mode [ 41.713187][ T3647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.925406][ T3661] loop3: detected capacity change from 0 to 164 [ 42.443024][ T3672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 42.605907][ T3684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3684 comm=GPL [ 42.624819][ T3685] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 42.632595][ T3685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.69'. [ 42.649177][ T3683] capability: warning: `syz.3.71' uses 32-bit capabilities (legacy support in use) [ 42.663475][ T3683] loop3: detected capacity change from 0 to 1024 [ 42.725249][ T3678] loop1: detected capacity change from 0 to 4096 [ 42.732184][ T3678] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 42.863786][ T3696] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.908244][ T3705] loop1: detected capacity change from 0 to 512 [ 43.070491][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.093983][ T3712] loop3: detected capacity change from 0 to 1024 [ 43.138882][ T3705] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.153853][ T3712] EXT4-fs: inline encryption not supported [ 43.181279][ T3712] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 43.419614][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.084319][ T3741] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 44.101372][ T3741] lo speed is unknown, defaulting to 1000 [ 44.107145][ T3741] lo speed is unknown, defaulting to 1000 [ 44.113100][ T3741] lo speed is unknown, defaulting to 1000 [ 44.119191][ T3741] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.126942][ T3741] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.268524][ T3741] lo speed is unknown, defaulting to 1000 [ 44.274860][ T3741] lo speed is unknown, defaulting to 1000 [ 44.281123][ T3741] lo speed is unknown, defaulting to 1000 [ 44.287263][ T3741] lo speed is unknown, defaulting to 1000 [ 44.295927][ T3741] lo speed is unknown, defaulting to 1000 [ 44.302820][ T3741] lo speed is unknown, defaulting to 1000 [ 44.309421][ T3748] pim6reg: entered allmulticast mode [ 44.315508][ T3748] pim6reg: left allmulticast mode [ 44.376011][ T3750] loop4: detected capacity change from 0 to 1024 [ 44.385981][ T3750] EXT4-fs: Ignoring removed orlov option [ 44.451735][ T3750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.497642][ T3750] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.515893][ T3756] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 44.542537][ T3762] loop0: detected capacity change from 0 to 128 [ 44.564243][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.781030][ T3780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.106'. [ 44.818367][ T3784] veth0: entered promiscuous mode [ 44.827630][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.845910][ T3789] pim6reg: entered allmulticast mode [ 44.851830][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 44.870132][ T3789] pim6reg: left allmulticast mode [ 44.915243][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.992947][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.003460][ T3803] loop4: detected capacity change from 0 to 512 [ 45.087668][ T3814] netlink: 19 bytes leftover after parsing attributes in process `syz.1.116'. [ 45.097285][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.139672][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.156314][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.168067][ T3818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.118'. [ 45.281322][ T37] bridge_slave_1: left allmulticast mode [ 45.287066][ T37] bridge_slave_1: left promiscuous mode [ 45.292864][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.322462][ T37] bridge_slave_0: left allmulticast mode [ 45.328170][ T37] bridge_slave_0: left promiscuous mode [ 45.333994][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.359580][ T3831] loop4: detected capacity change from 0 to 512 [ 45.478120][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.506004][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.515305][ T3831] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.533970][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.557195][ T37] bond0 (unregistering): Released all slaves [ 45.574389][ T37] bond1 (unregistering): Released all slaves [ 45.585359][ T3791] lo speed is unknown, defaulting to 1000 [ 45.595342][ T3829] loop3: detected capacity change from 0 to 512 [ 45.647040][ T3829] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.121: bad orphan inode 11862016 [ 45.684285][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.701298][ T37] hsr_slave_0: left promiscuous mode [ 45.707417][ T3901] loop2: detected capacity change from 0 to 128 [ 45.712471][ T37] hsr_slave_1: left promiscuous mode [ 45.721274][ T3829] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.732138][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.739608][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.748911][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.758448][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.766001][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.786896][ T37] veth1_macvtap: left promiscuous mode [ 45.796975][ T37] veth0_macvtap: left promiscuous mode [ 45.808078][ T37] veth1_vlan: left promiscuous mode [ 45.878904][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 45.878922][ T29] audit: type=1326 audit(1760326503.229:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 45.931063][ T29] audit: type=1326 audit(1760326503.269:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 45.954183][ T37] veth0_vlan: left promiscuous mode [ 45.954528][ T29] audit: type=1326 audit(1760326503.269:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 45.982874][ T29] audit: type=1326 audit(1760326503.269:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 46.006202][ T29] audit: type=1326 audit(1760326503.269:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 46.029660][ T29] audit: type=1326 audit(1760326503.269:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 46.052911][ T29] audit: type=1326 audit(1760326503.269:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 46.076253][ T29] audit: type=1326 audit(1760326503.269:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb559d7eec9 code=0x7ffc0000 [ 46.107619][ T29] audit: type=1400 audit(1760326503.359:726): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.127573][ T29] audit: type=1326 audit(1760326503.379:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3828 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 46.277656][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.287366][ T3919] loop1: detected capacity change from 0 to 8192 [ 46.347900][ T3923] xt_TCPMSS: Only works on TCP SYN packets [ 46.364729][ T37] team0 (unregistering): Port device team_slave_1 removed [ 46.375713][ T37] team0 (unregistering): Port device team_slave_0 removed [ 46.480005][ T3927] loop3: detected capacity change from 0 to 8192 [ 46.620987][ T3923] loop2: detected capacity change from 0 to 164 [ 46.706908][ T3923] ÿÿÿÿÿÿ: renamed from veth0_to_batadv (while UP) [ 46.731213][ T3791] chnl_net:caif_netlink_parms(): no params data found [ 46.795679][ T3935] loop4: detected capacity change from 0 to 512 [ 46.975998][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.028132][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.035291][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.086226][ T3935] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.104260][ T3791] bridge_slave_0: entered allmulticast mode [ 47.121012][ T3791] bridge_slave_0: entered promiscuous mode [ 47.151429][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.158591][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.196462][ T3791] bridge_slave_1: entered allmulticast mode [ 47.211572][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.222095][ T3791] bridge_slave_1: entered promiscuous mode [ 47.265278][ T3791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.306167][ T3791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.352178][ T3791] team0: Port device team_slave_0 added [ 47.359305][ T3953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.138'. [ 47.359667][ T3791] team0: Port device team_slave_1 added [ 47.451180][ T3957] loop2: detected capacity change from 0 to 512 [ 47.459337][ T3791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.466425][ T3791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.492610][ T3791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.506814][ T3791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.513916][ T3791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.540066][ T3791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.650657][ T3791] hsr_slave_0: entered promiscuous mode [ 47.670992][ T3791] hsr_slave_1: entered promiscuous mode [ 47.677565][ T3791] debugfs: 'hsr0' already exists in 'hsr' [ 47.683514][ T3791] Cannot create hsr debugfs directory [ 47.914162][ T3791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.936423][ T3791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.956493][ T3791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.978143][ T3791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.988122][ T3967] loop4: detected capacity change from 0 to 512 [ 48.005742][ T3967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.068024][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.111055][ T3791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.150684][ T3791] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.158581][ T3977] netlink: 19 bytes leftover after parsing attributes in process `syz.4.143'. [ 48.178754][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.185855][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.232492][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.239790][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.253294][ T3979] pim6reg: entered allmulticast mode [ 48.277132][ T3979] pim6reg: left allmulticast mode [ 48.395951][ T3791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.450091][ T3993] loop3: detected capacity change from 0 to 512 [ 48.478964][ T3993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.496352][ T3791] veth0_vlan: entered promiscuous mode [ 48.510763][ T3791] veth1_vlan: entered promiscuous mode [ 48.520249][ T3993] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.543896][ T3791] veth0_macvtap: entered promiscuous mode [ 48.552066][ T3791] veth1_macvtap: entered promiscuous mode [ 48.564880][ T3791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.574716][ T3791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.591793][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.653951][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.680628][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.695198][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.727500][ T4005] loop4: detected capacity change from 0 to 8192 [ 48.857960][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.710653][ T4031] loop2: detected capacity change from 0 to 512 [ 49.767163][ T4031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.807098][ T4033] netlink: 'syz.3.152': attribute type 6 has an invalid length. [ 49.941878][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.075488][ T4043] loop3: detected capacity change from 0 to 512 [ 50.185895][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.059096][ T29] kauditd_printk_skb: 10239 callbacks suppressed [ 51.059118][ T29] audit: type=1326 audit(1760326508.389:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 51.089093][ T29] audit: type=1326 audit(1760326508.389:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0d9075d67 code=0x7ffc0000 [ 51.112669][ T29] audit: type=1326 audit(1760326508.389:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0d901af79 code=0x7ffc0000 [ 51.136197][ T29] audit: type=1326 audit(1760326508.389:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0d9075d67 code=0x7ffc0000 [ 51.159646][ T29] audit: type=1326 audit(1760326508.389:10968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0d901af79 code=0x7ffc0000 [ 51.183649][ T29] audit: type=1326 audit(1760326508.389:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0d9075d67 code=0x7ffc0000 [ 51.207054][ T29] audit: type=1326 audit(1760326508.389:10970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0d901af79 code=0x7ffc0000 [ 51.230426][ T29] audit: type=1326 audit(1760326508.389:10971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0d9075d67 code=0x7ffc0000 [ 51.253832][ T29] audit: type=1326 audit(1760326508.389:10972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0d901af79 code=0x7ffc0000 [ 51.277192][ T29] audit: type=1326 audit(1760326508.389:10973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.5.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0d9075d67 code=0x7ffc0000 [ 51.529439][ T4043] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.710970][ T4041] netlink: 60 bytes leftover after parsing attributes in process `syz.2.160'. [ 51.824688][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.850482][ T4056] sch_fq: defrate 0 ignored. [ 51.887947][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 51.904742][ T4066] xt_TCPMSS: Only works on TCP SYN packets [ 52.141621][ T4082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 52.197825][ T4085] netlink: 76 bytes leftover after parsing attributes in process `syz.4.173'. [ 52.267626][ T4083] loop3: detected capacity change from 0 to 164 [ 52.273276][ T4083] ÿÿÿÿÿÿ: renamed from veth0_to_batadv (while UP) [ 52.596356][ T4089] loop3: detected capacity change from 0 to 512 [ 52.606350][ T4089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.669416][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.947361][ T4093] loop3: detected capacity change from 0 to 512 [ 53.032748][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.048559][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.104730][ T4103] netlink: 'syz.5.182': attribute type 3 has an invalid length. [ 53.121331][ T4103] loop5: detected capacity change from 0 to 512 [ 53.144464][ T4103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.260036][ T4103] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 53.268168][ T4103] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.289106][ T4119] netlink: 19 bytes leftover after parsing attributes in process `syz.1.187'. [ 53.315708][ T4103] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.182: corrupted inode contents [ 53.353144][ T4122] loop4: detected capacity change from 0 to 1024 [ 53.361635][ T4122] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 53.371971][ T4103] EXT4-fs (loop5): Remounting filesystem read-only [ 53.375193][ T4126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 53.378809][ T4103] EXT4-fs (loop5): 1 truncate cleaned up [ 53.435786][ T4126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.452066][ T4130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.184'. [ 53.465325][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.476073][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.488040][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.506369][ T4103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.556238][ T4131] macvlan2: entered promiscuous mode [ 53.567247][ T4131] bond1: entered promiscuous mode [ 53.598924][ T4131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.640824][ T4131] bond1: left promiscuous mode [ 53.723237][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.841360][ T4140] loop5: detected capacity change from 0 to 512 [ 53.878401][ T4140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.894028][ T4142] vhci_hcd: invalid port number 96 [ 53.899399][ T4142] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 53.913643][ T4122] loop4: detected capacity change from 0 to 1764 [ 54.062136][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.144004][ T4162] netlink: 19 bytes leftover after parsing attributes in process `syz.3.200'. [ 54.557672][ T3489] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.600389][ T4177] netlink: 19 bytes leftover after parsing attributes in process `syz.3.206'. [ 54.726790][ T3489] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.776288][ T4190] netlink: 5380 bytes leftover after parsing attributes in process `+}[@'. [ 54.866745][ T4192] loop3: detected capacity change from 0 to 128 [ 54.892777][ T4191] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 54.921821][ T4192] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.029674][ T4196] netlink: 19 bytes leftover after parsing attributes in process `syz.2.212'. [ 55.039485][ T4192] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.125842][ T4173] siw: device registration error -23 [ 55.237753][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.366300][ T4206] netlink: 76 bytes leftover after parsing attributes in process `syz.2.214'. [ 55.405062][ T4214] netlink: 19 bytes leftover after parsing attributes in process `syz.5.220'. [ 55.479837][ C0] hrtimer: interrupt took 54797 ns [ 55.573900][ T4238] loop4: detected capacity change from 0 to 128 [ 55.605204][ T4238] syz.4.230: attempt to access beyond end of device [ 55.605204][ T4238] loop4: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 55.619067][ T4238] syz.4.230: attempt to access beyond end of device [ 55.619067][ T4238] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 55.633080][ T4238] syz.4.230: attempt to access beyond end of device [ 55.633080][ T4238] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 55.647351][ T4238] syz.4.230: attempt to access beyond end of device [ 55.647351][ T4238] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 55.680277][ T4250] loop1: detected capacity change from 0 to 512 [ 55.686763][ T4238] syz.4.230: attempt to access beyond end of device [ 55.686763][ T4238] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 55.701333][ T4238] syz.4.230: attempt to access beyond end of device [ 55.701333][ T4238] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 55.715866][ T4238] syz.4.230: attempt to access beyond end of device [ 55.715866][ T4238] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 55.716832][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.729553][ T4238] syz.4.230: attempt to access beyond end of device [ 55.729553][ T4238] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 55.774299][ T4238] syz.4.230: attempt to access beyond end of device [ 55.774299][ T4238] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 55.812456][ T4238] syz.4.230: attempt to access beyond end of device [ 55.812456][ T4238] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 55.830255][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.843521][ T4237] Buffer I/O error on dev loop4, logical block 305, async page read [ 55.852055][ T4237] Buffer I/O error on dev loop4, logical block 306, async page read [ 55.882450][ T4237] Buffer I/O error on dev loop4, logical block 307, async page read [ 55.890656][ T4237] Buffer I/O error on dev loop4, logical block 308, async page read [ 55.899780][ T4237] Buffer I/O error on dev loop4, logical block 309, async page read [ 55.907963][ T4237] Buffer I/O error on dev loop4, logical block 310, async page read [ 55.916254][ T4237] Buffer I/O error on dev loop4, logical block 311, async page read [ 55.925403][ T4237] Buffer I/O error on dev loop4, logical block 312, async page read [ 55.939375][ T4237] Buffer I/O error on dev loop4, logical block 305, async page read [ 55.947556][ T4237] Buffer I/O error on dev loop4, logical block 306, async page read [ 56.557607][ T4283] loop5: detected capacity change from 0 to 512 [ 56.582185][ T4283] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.243: bad orphan inode 11862016 [ 56.595320][ T4283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.609614][ T4283] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.623911][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 56.623928][ T29] audit: type=1400 audit(1760326513.979:11414): avc: denied { create } for pid=4282 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.660645][ T29] audit: type=1400 audit(1760326514.009:11415): avc: denied { setopt } for pid=4282 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.680339][ T29] audit: type=1107 audit(1760326514.009:11416): pid=4290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 56.694535][ T29] audit: type=1400 audit(1760326514.049:11417): avc: denied { ioctl } for pid=4282 comm="syz.5.243" path="socket:[6112]" dev="sockfs" ino=6112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.707442][ T4296] loop3: detected capacity change from 0 to 512 [ 56.728774][ T29] audit: type=1400 audit(1760326514.079:11418): avc: denied { bind } for pid=4282 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.769518][ T4300] loop1: detected capacity change from 0 to 128 [ 56.803303][ T4294] loop4: detected capacity change from 0 to 512 [ 56.830572][ T4294] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 56.859290][ T4294] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 56.916392][ T4294] EXT4-fs (loop4): 1 truncate cleaned up [ 56.944455][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.959245][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.992698][ T4307] loop2: detected capacity change from 0 to 1024 [ 57.001072][ T4296] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.020669][ T4283] lo speed is unknown, defaulting to 1000 [ 57.027121][ T4307] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.033740][ T4307] EXT4-fs: Ignoring removed bh option [ 57.058793][ T4307] ext3: Unknown parameter 'subj_type' [ 57.151556][ T4307] veth2: entered allmulticast mode [ 57.186954][ T29] audit: type=1400 audit(1760326514.529:11419): avc: denied { ioctl } for pid=4306 comm="syz.2.249" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.191416][ T4283] pimreg: entered allmulticast mode [ 57.240173][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.254901][ T4283] pimreg: left allmulticast mode [ 57.290953][ T29] audit: type=1400 audit(1760326514.639:11420): avc: denied { read } for pid=4319 comm="syz.1.252" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.313809][ T29] audit: type=1400 audit(1760326514.639:11421): avc: denied { open } for pid=4319 comm="syz.1.252" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.337597][ T29] audit: type=1400 audit(1760326514.639:11422): avc: denied { ioctl } for pid=4319 comm="syz.1.252" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.350408][ T4320] loop1: detected capacity change from 0 to 128 [ 57.382122][ T4320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.398981][ T4320] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.488106][ T29] audit: type=1400 audit(1760326514.729:11423): avc: denied { setattr } for pid=4282 comm="syz.5.243" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.600842][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.612923][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.950184][ T4337] netlink: 76 bytes leftover after parsing attributes in process `syz.5.256'. [ 58.442211][ T4347] lo speed is unknown, defaulting to 1000 [ 58.786431][ T4353] netlink: 'syz.3.262': attribute type 4 has an invalid length. [ 59.256570][ T4363] netlink: 60 bytes leftover after parsing attributes in process `syz.5.264'. [ 59.324235][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 59.338865][ T4146] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 59.467122][ T4365] pim6reg: entered allmulticast mode [ 59.540566][ T4370] pim6reg: left allmulticast mode [ 59.881965][ T4379] loop5: detected capacity change from 0 to 2048 [ 59.909470][ T4379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.995153][ T4379] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.272: bg 0: block 234: padding at end of block bitmap is not set [ 60.019712][ T4389] loop1: detected capacity change from 0 to 164 [ 60.080864][ T4391] netlink: 76 bytes leftover after parsing attributes in process `syz.3.274'. [ 60.136493][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.159577][ T4393] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 60.378509][ T4401] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 60.395534][ T4401] siw: device registration error -23 [ 60.896502][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 60.955148][ T4416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.156204][ T4415] loop3: detected capacity change from 0 to 512 [ 61.183036][ T4419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 61.215937][ T4421] loop5: detected capacity change from 0 to 512 [ 61.222977][ T4415] EXT4-fs: Ignoring removed i_version option [ 61.253850][ T4415] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 61.281585][ T4421] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.286: bg 0: block 248: padding at end of block bitmap is not set [ 61.325868][ T4415] EXT4-fs (loop3): 1 truncate cleaned up [ 61.339681][ T4421] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.286: Failed to acquire dquot type 1 [ 61.362389][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.402079][ T4421] EXT4-fs (loop5): 1 truncate cleaned up [ 61.414250][ T4421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.492954][ T4421] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.649098][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.710707][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 61.710724][ T29] audit: type=1326 audit(1760326519.039:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 61.773041][ T4432] loop3: detected capacity change from 0 to 512 [ 61.819098][ T29] audit: type=1107 audit(1760326519.159:11490): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 61.839914][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.851988][ T4438] netlink: 76 bytes leftover after parsing attributes in process `syz.1.289'. [ 61.861985][ T4432] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.870143][ T4432] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.877634][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.888400][ T4432] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.288: corrupted inode contents [ 61.889581][ T4443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.292'. [ 61.935707][ T4432] EXT4-fs (loop3): Remounting filesystem read-only [ 61.935819][ T4432] EXT4-fs (loop3): 1 truncate cleaned up [ 61.942478][ T29] audit: type=1326 audit(1760326519.269:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971373][ T29] audit: type=1326 audit(1760326519.269:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971450][ T29] audit: type=1326 audit(1760326519.269:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971489][ T29] audit: type=1326 audit(1760326519.269:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971582][ T29] audit: type=1326 audit(1760326519.269:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971632][ T29] audit: type=1326 audit(1760326519.269:11496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971689][ T29] audit: type=1326 audit(1760326519.269:11497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.971726][ T29] audit: type=1326 audit(1760326519.269:11499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 61.998944][ T3875] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.998974][ T3875] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.999012][ T3875] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.999671][ T4432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.013235][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.046171][ T4448] loop4: detected capacity change from 0 to 8192 [ 62.078712][ T4451] vhci_hcd: invalid port number 96 [ 62.232678][ T4451] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 62.284700][ T4456] loop3: detected capacity change from 0 to 512 [ 62.317903][ T4461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 62.338021][ T4456] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.346456][ T4456] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.350324][ T4456] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.298: corrupted inode contents [ 62.366611][ T4456] EXT4-fs (loop3): Remounting filesystem read-only [ 62.366751][ T4456] EXT4-fs (loop3): 1 truncate cleaned up [ 62.373477][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.389899][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.401131][ T3867] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.401683][ T4456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.446463][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.478844][ T4467] loop2: detected capacity change from 0 to 1024 [ 62.483327][ T4465] netlink: 'syz.3.301': attribute type 4 has an invalid length. [ 62.499569][ T4467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.499664][ T4467] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.530000][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.632474][ T4478] pim6reg: entered allmulticast mode [ 62.642665][ T4478] pim6reg: left allmulticast mode [ 62.674122][ T4480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.744634][ T4480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.772171][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 62.781344][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 62.790258][ T4490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.831590][ T4480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.928568][ T4480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.946667][ T4508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.959354][ T4507] FAULT_INJECTION: forcing a failure. [ 62.959354][ T4507] name failslab, interval 1, probability 0, space 0, times 0 [ 62.972087][ T4507] CPU: 0 UID: 0 PID: 4507 Comm: syz.4.318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.972115][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.972139][ T4507] Call Trace: [ 62.972147][ T4507] [ 62.972156][ T4507] __dump_stack+0x1d/0x30 [ 62.972193][ T4507] dump_stack_lvl+0xe8/0x140 [ 62.972216][ T4507] dump_stack+0x15/0x1b [ 62.972231][ T4507] should_fail_ex+0x265/0x280 [ 62.972309][ T4507] should_failslab+0x8c/0xb0 [ 62.972346][ T4507] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 62.972383][ T4507] ? __alloc_skb+0x101/0x320 [ 62.972417][ T4507] __alloc_skb+0x101/0x320 [ 62.972479][ T4507] inet_netconf_notify_devconf+0x173/0x230 [ 62.972520][ T4507] inetdev_event+0x743/0xc10 [ 62.972640][ T4507] ? __pfx_ib_netdevice_event+0x10/0x10 [ 62.972688][ T4507] ? ib_netdevice_event+0x186/0x5f0 [ 62.972716][ T4507] ? __pfx_arp_netdev_event+0x10/0x10 [ 62.972741][ T4507] ? __pfx_inetdev_event+0x10/0x10 [ 62.972778][ T4507] raw_notifier_call_chain+0x6f/0x1b0 [ 62.972864][ T4507] ? call_netdevice_notifiers_info+0x9c/0x100 [ 62.972893][ T4507] call_netdevice_notifiers_info+0xae/0x100 [ 62.972921][ T4507] unregister_netdevice_many_notify+0xda9/0x15d0 [ 62.972970][ T4507] unregister_netdevice_queue+0x1f5/0x220 [ 62.973038][ T4507] vti6_siocdevprivate+0x273/0x8e0 [ 62.973075][ T4507] dev_ifsioc+0x8f8/0xaa0 [ 62.973116][ T4507] dev_ioctl+0x78d/0x960 [ 62.973157][ T4507] sock_ioctl+0x593/0x610 [ 62.973278][ T4507] ? __pfx_sock_ioctl+0x10/0x10 [ 62.973322][ T4507] __se_sys_ioctl+0xce/0x140 [ 62.973347][ T4507] __x64_sys_ioctl+0x43/0x50 [ 62.973384][ T4507] x64_sys_call+0x1816/0x3000 [ 62.973412][ T4507] do_syscall_64+0xd2/0x200 [ 62.973463][ T4507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.973541][ T4507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.973571][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.973601][ T4507] RIP: 0033:0x7fa69372eec9 [ 62.973628][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.973731][ T4507] RSP: 002b:00007fa692197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.973756][ T4507] RAX: ffffffffffffffda RBX: 00007fa693985fa0 RCX: 00007fa69372eec9 [ 62.973772][ T4507] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000006 [ 62.973788][ T4507] RBP: 00007fa692197090 R08: 0000000000000000 R09: 0000000000000000 [ 62.973804][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.973818][ T4507] R13: 00007fa693986038 R14: 00007fa693985fa0 R15: 00007ffc07609588 [ 62.973840][ T4507] [ 63.246171][ T4513] loop5: detected capacity change from 0 to 512 [ 63.259684][ T3875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261379][ T4513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.272465][ T3875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.280727][ T4513] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.298056][ T3875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.320187][ T3859] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.346015][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.457608][ T4525] loop5: detected capacity change from 0 to 512 [ 63.484366][ T4525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.497170][ T4525] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.563486][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.579014][ T4535] loop4: detected capacity change from 0 to 128 [ 63.587826][ T4535] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.600550][ T4535] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.645434][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.681647][ T4545] loop5: detected capacity change from 0 to 512 [ 63.700645][ T4545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.741292][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.833688][ T4564] pimreg: entered allmulticast mode [ 63.839937][ T4564] pimreg: left allmulticast mode [ 63.887179][ T4568] pim6reg: entered allmulticast mode [ 63.893466][ T4568] pim6reg: left allmulticast mode [ 63.958741][ T4573] loop5: detected capacity change from 0 to 128 [ 63.968179][ T4573] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.034898][ T4582] loop3: detected capacity change from 0 to 512 [ 64.085317][ T4590] loop3: detected capacity change from 0 to 512 [ 64.093283][ T4590] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.347: casefold flag without casefold feature [ 64.106701][ T4590] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.347: couldn't read orphan inode 15 (err -117) [ 64.124262][ T4593] bridge0: entered promiscuous mode [ 64.129764][ T4593] macsec1: entered promiscuous mode [ 64.136467][ T4593] bridge0: port 3(macsec1) entered blocking state [ 64.143193][ T4593] bridge0: port 3(macsec1) entered disabled state [ 64.149914][ T4593] macsec1: entered allmulticast mode [ 64.155222][ T4593] bridge0: entered allmulticast mode [ 64.160993][ T4593] macsec1: left allmulticast mode [ 64.166041][ T4593] bridge0: left allmulticast mode [ 64.171718][ T4593] bridge0: left promiscuous mode [ 64.248111][ T4597] FAULT_INJECTION: forcing a failure. [ 64.248111][ T4597] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.261288][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.261356][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.261374][ T4597] Call Trace: [ 64.261380][ T4597] [ 64.261388][ T4597] __dump_stack+0x1d/0x30 [ 64.261407][ T4597] dump_stack_lvl+0xe8/0x140 [ 64.261495][ T4597] dump_stack+0x15/0x1b [ 64.261510][ T4597] should_fail_ex+0x265/0x280 [ 64.261552][ T4597] should_fail+0xb/0x20 [ 64.261580][ T4597] should_fail_usercopy+0x1a/0x20 [ 64.261600][ T4597] _copy_to_user+0x20/0xa0 [ 64.261663][ T4597] simple_read_from_buffer+0xb5/0x130 [ 64.261684][ T4597] proc_fail_nth_read+0x10e/0x150 [ 64.261712][ T4597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.261738][ T4597] vfs_read+0x1a8/0x770 [ 64.261803][ T4597] ? __rcu_read_unlock+0x4f/0x70 [ 64.261826][ T4597] ? __fget_files+0x184/0x1c0 [ 64.261847][ T4597] ? __sys_setsockopt+0x18e/0x200 [ 64.261910][ T4597] ksys_read+0xda/0x1a0 [ 64.261931][ T4597] __x64_sys_read+0x40/0x50 [ 64.261952][ T4597] x64_sys_call+0x27c0/0x3000 [ 64.261972][ T4597] do_syscall_64+0xd2/0x200 [ 64.262019][ T4597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.262043][ T4597] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.262063][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.262083][ T4597] RIP: 0033:0x7f041b6fd8dc [ 64.262144][ T4597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.262213][ T4597] RSP: 002b:00007f041a15f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.262231][ T4597] RAX: ffffffffffffffda RBX: 00007f041b955fa0 RCX: 00007f041b6fd8dc [ 64.262242][ T4597] RDX: 000000000000000f RSI: 00007f041a15f0a0 RDI: 0000000000000004 [ 64.262253][ T4597] RBP: 00007f041a15f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.262263][ T4597] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 64.262280][ T4597] R13: 00007f041b956038 R14: 00007f041b955fa0 R15: 00007ffc0c397d18 [ 64.262305][ T4597] [ 64.606686][ T4607] __nla_validate_parse: 8 callbacks suppressed [ 64.606825][ T4607] netlink: 5380 bytes leftover after parsing attributes in process `+}[@'. [ 64.665333][ T4616] pim6reg: entered allmulticast mode [ 64.671438][ T4616] pim6reg: left allmulticast mode [ 64.704233][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 64.750389][ T4629] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 64.764121][ T4631] loop2: detected capacity change from 0 to 512 [ 64.810400][ T4631] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.012707][ T4647] netlink: 5380 bytes leftover after parsing attributes in process `+}[@'. [ 65.095067][ T4658] hub 9-0:1.0: USB hub found [ 65.100253][ T4658] hub 9-0:1.0: 8 ports detected [ 65.110166][ T4661] FAULT_INJECTION: forcing a failure. [ 65.110166][ T4661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.123316][ T4661] CPU: 1 UID: 0 PID: 4661 Comm: syz.4.373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.123428][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.123446][ T4661] Call Trace: [ 65.123453][ T4661] [ 65.123462][ T4661] __dump_stack+0x1d/0x30 [ 65.123490][ T4661] dump_stack_lvl+0xe8/0x140 [ 65.123541][ T4661] dump_stack+0x15/0x1b [ 65.123562][ T4661] should_fail_ex+0x265/0x280 [ 65.123607][ T4661] should_fail+0xb/0x20 [ 65.123705][ T4661] should_fail_usercopy+0x1a/0x20 [ 65.123731][ T4661] _copy_from_user+0x1c/0xb0 [ 65.123786][ T4661] proc_ioctl_default+0x43/0xa0 [ 65.123875][ T4661] usbdev_ioctl+0xe8b/0x1700 [ 65.123907][ T4661] ? __pfx_usbdev_ioctl+0x10/0x10 [ 65.123937][ T4661] __se_sys_ioctl+0xce/0x140 [ 65.123962][ T4661] __x64_sys_ioctl+0x43/0x50 [ 65.123986][ T4661] x64_sys_call+0x1816/0x3000 [ 65.124048][ T4661] do_syscall_64+0xd2/0x200 [ 65.124080][ T4661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.124116][ T4661] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.124144][ T4661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.124189][ T4661] RIP: 0033:0x7fa69372eec9 [ 65.124217][ T4661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.124240][ T4661] RSP: 002b:00007fa692197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.124265][ T4661] RAX: ffffffffffffffda RBX: 00007fa693985fa0 RCX: 00007fa69372eec9 [ 65.124282][ T4661] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 65.124297][ T4661] RBP: 00007fa692197090 R08: 0000000000000000 R09: 0000000000000000 [ 65.124375][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.124391][ T4661] R13: 00007fa693986038 R14: 00007fa693985fa0 R15: 00007ffc07609588 [ 65.124415][ T4661] [ 65.360253][ T4673] loop4: detected capacity change from 0 to 512 [ 65.371733][ T4675] loop5: detected capacity change from 0 to 512 [ 65.380273][ T4673] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.420598][ T4678] netlink: 'syz.3.379': attribute type 3 has an invalid length. [ 65.436238][ T4678] loop3: detected capacity change from 0 to 512 [ 65.467868][ T4666] vlan2: entered allmulticast mode [ 65.511703][ T4678] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 65.568786][ T4678] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.601871][ T4678] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.379: corrupted inode contents [ 65.638975][ T4678] EXT4-fs (loop3): Remounting filesystem read-only [ 65.647801][ T4678] EXT4-fs (loop3): 1 truncate cleaned up [ 65.655852][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.667624][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.679875][ T3867] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.784398][ T4707] loop4: detected capacity change from 0 to 1024 [ 65.785769][ T4703] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 65.793601][ T4707] EXT4-fs: Ignoring removed orlov option [ 65.905255][ T4713] loop3: detected capacity change from 0 to 128 [ 65.911271][ T4707] IPv6: sit1: Disabled Multicast RS [ 65.917782][ T4707] sit1: entered allmulticast mode [ 65.938499][ T4713] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 66.069702][ T4723] loop3: detected capacity change from 0 to 512 [ 66.082822][ T4724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 66.345205][ T4743] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 66.362602][ T4743] siw: device registration error -23 [ 66.447273][ T4745] netlink: 'syz.2.399': attribute type 4 has an invalid length. [ 67.166520][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 67.166537][ T29] audit: type=1400 audit(1760326524.509:11963): avc: denied { relabelfrom } for pid=4753 comm="syz.5.403" name="" dev="pipefs" ino=8854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 67.166622][ T4757] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 67.166820][ T29] audit: type=1400 audit(1760326524.509:11964): avc: denied { relabelto } for pid=4753 comm="syz.5.403" name="" dev="pipefs" ino=8854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 67.167777][ T4765] loop2: detected capacity change from 0 to 512 [ 67.191755][ T4765] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.407: bad orphan inode 11862016 [ 67.192478][ T4765] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.280650][ T4765] lo speed is unknown, defaulting to 1000 [ 67.467449][ T4777] pim6reg: entered allmulticast mode [ 67.473740][ T4777] pim6reg: left allmulticast mode [ 67.574928][ T4785] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 67.602090][ T4785] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 67.613048][ T3859] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 67.625159][ T4785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.640634][ T29] audit: type=1400 audit(1760326524.989:11965): avc: denied { write } for pid=4784 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.665582][ T4785] loop2: detected capacity change from 0 to 512 [ 67.677160][ T4785] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.413: corrupted inode contents [ 67.689568][ T4785] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 67.698494][ T4785] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.413: corrupted inode contents [ 67.711082][ T4785] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.413: mark_inode_dirty error [ 67.723131][ T4785] EXT4-fs (loop2): 1 orphan inode deleted [ 67.728708][ T3875] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 67.753584][ T4799] loop4: detected capacity change from 0 to 164 [ 67.768747][ T29] audit: type=1400 audit(1760326525.109:11966): avc: denied { read } for pid=4800 comm="syz.2.420" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.769498][ T4801] loop2: detected capacity change from 0 to 512 [ 67.791422][ T29] audit: type=1400 audit(1760326525.109:11967): avc: denied { open } for pid=4800 comm="syz.2.420" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.831370][ T4801] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.839819][ T4801] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.848142][ T4801] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.420: corrupted inode contents [ 67.861205][ T4801] EXT4-fs (loop2): Remounting filesystem read-only [ 67.868096][ T4801] EXT4-fs (loop2): 1 truncate cleaned up [ 67.880142][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.890947][ T52] Quota error (device loop2): write_blk: dquota write failed [ 67.898424][ T52] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 67.908812][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.919396][ T52] Quota error (device loop2): write_blk: dquota write failed [ 67.926895][ T52] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 67.937589][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.947938][ T52] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 67.993792][ T4810] loop3: detected capacity change from 0 to 512 [ 68.017283][ T4810] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.424: bad orphan inode 11862016 [ 68.029402][ T4810] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.034985][ T4816] pim6reg: entered allmulticast mode [ 68.046695][ T4816] pim6reg: left allmulticast mode [ 68.094525][ T4810] lo speed is unknown, defaulting to 1000 [ 68.275154][ T4827] loop3: detected capacity change from 0 to 512 [ 68.322949][ T4836] loop2: detected capacity change from 0 to 512 [ 68.343249][ T4838] loop3: detected capacity change from 0 to 512 [ 68.360204][ T4838] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 68.368310][ T4838] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.381480][ T4838] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.433: corrupted inode contents [ 68.394991][ T4838] EXT4-fs (loop3): Remounting filesystem read-only [ 68.402058][ T4838] EXT4-fs (loop3): 1 truncate cleaned up [ 68.407923][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.418590][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.430500][ T3867] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.478902][ T4852] pim6reg: entered allmulticast mode [ 68.501775][ T4852] pim6reg: left allmulticast mode [ 68.528335][ T4858] loop3: detected capacity change from 0 to 512 [ 68.542334][ T4858] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.440: bad orphan inode 11862016 [ 68.553989][ T4858] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.593221][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.441'. [ 68.651104][ T4858] lo speed is unknown, defaulting to 1000 [ 68.658485][ T4868] FAULT_INJECTION: forcing a failure. [ 68.658485][ T4868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.671627][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.671737][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.671754][ T4868] Call Trace: [ 68.671763][ T4868] [ 68.671773][ T4868] __dump_stack+0x1d/0x30 [ 68.671797][ T4868] dump_stack_lvl+0xe8/0x140 [ 68.671817][ T4868] dump_stack+0x15/0x1b [ 68.671875][ T4868] should_fail_ex+0x265/0x280 [ 68.671920][ T4868] should_fail+0xb/0x20 [ 68.672024][ T4868] should_fail_usercopy+0x1a/0x20 [ 68.672044][ T4868] _copy_from_user+0x1c/0xb0 [ 68.672076][ T4868] memdup_user+0x5e/0xd0 [ 68.672161][ T4868] __se_sys_kexec_load+0x109/0x160 [ 68.672193][ T4868] __x64_sys_kexec_load+0x55/0x70 [ 68.672252][ T4868] x64_sys_call+0x289c/0x3000 [ 68.672274][ T4868] do_syscall_64+0xd2/0x200 [ 68.672378][ T4868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.672413][ T4868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.672442][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.672500][ T4868] RIP: 0033:0x7f4a17baeec9 [ 68.672519][ T4868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.672538][ T4868] RSP: 002b:00007f4a16617038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 68.672561][ T4868] RAX: ffffffffffffffda RBX: 00007f4a17e05fa0 RCX: 00007f4a17baeec9 [ 68.672577][ T4868] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 68.672593][ T4868] RBP: 00007f4a16617090 R08: 0000000000000000 R09: 0000000000000000 [ 68.672609][ T4868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.672690][ T4868] R13: 00007f4a17e06038 R14: 00007f4a17e05fa0 R15: 00007ffffae77258 [ 68.672715][ T4868] [ 68.910727][ T4866] pimreg: entered allmulticast mode [ 68.925477][ T4873] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 68.943799][ T4874] loop4: detected capacity change from 0 to 512 [ 68.952845][ T4874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.961357][ T4874] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (5000000) [ 69.064193][ T4878] loop3: detected capacity change from 0 to 512 [ 69.100026][ T4878] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.108380][ T4878] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.116683][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.447: corrupted inode contents [ 69.128969][ T4878] EXT4-fs (loop3): Remounting filesystem read-only [ 69.135669][ T4878] EXT4-fs (loop3): 1 truncate cleaned up [ 69.141689][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.152249][ T3867] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.162828][ T3867] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.309015][ T4885] loop3: detected capacity change from 0 to 8192 [ 69.776564][ T4899] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 69.794442][ T4899] siw: device registration error -23 [ 70.023508][ T4901] pim6reg: entered allmulticast mode [ 70.029507][ T4901] pim6reg: left allmulticast mode [ 70.180850][ T4912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 70.299242][ T4921] netlink: 76 bytes leftover after parsing attributes in process `syz.4.460'. [ 70.365830][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 70.374840][ T4926] loop2: detected capacity change from 0 to 164 [ 70.478599][ T4931] loop5: detected capacity change from 0 to 512 [ 70.488704][ T4931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.497217][ T4931] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (5000000) [ 70.563008][ T4937] loop2: detected capacity change from 0 to 512 [ 70.601842][ T4937] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.469: bad orphan inode 11862016 [ 70.602587][ T4937] EXT4-fs mount: 36 callbacks suppressed [ 70.602606][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.602757][ T4937] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.625529][ T4941] netlink: 'syz.5.471': attribute type 4 has an invalid length. [ 70.684946][ T4937] lo speed is unknown, defaulting to 1000 [ 70.711732][ T4947] loop5: detected capacity change from 0 to 512 [ 70.731369][ T4947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.751354][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.781743][ T4937] pimreg: entered allmulticast mode [ 70.914570][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.042757][ T3859] pimreg (unregistering): left allmulticast mode [ 71.135187][ T4961] netlink: 60 bytes leftover after parsing attributes in process `syz.5.474'. [ 71.424102][ T4970] loop4: detected capacity change from 0 to 164 [ 71.691425][ T4976] loop2: detected capacity change from 0 to 512 [ 71.713930][ T4976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.714140][ T4976] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.804260][ T4980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 71.870314][ T4982] loop4: detected capacity change from 0 to 512 [ 71.920938][ T4982] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.921188][ T4982] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.924914][ T4982] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.482: corrupted inode contents [ 71.925072][ T4982] EXT4-fs (loop4): Remounting filesystem read-only [ 71.925222][ T4982] EXT4-fs (loop4): 1 truncate cleaned up [ 71.925585][ T3875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.925612][ T3875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.925646][ T3875] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.926304][ T4982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.990739][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.056310][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.107421][ T4990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.150808][ T4994] loop2: detected capacity change from 0 to 8192 [ 72.246109][ T4998] netlink: 19 bytes leftover after parsing attributes in process `syz.1.490'. [ 72.258458][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 72.258487][ T29] audit: type=1400 audit(1760326529.589:12295): avc: denied { bind } for pid=4997 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.262714][ T4999] netlink: 19 bytes leftover after parsing attributes in process `syz.3.489'. [ 72.599119][ T5007] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 72.897889][ T5018] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 72.923503][ T29] audit: type=1400 audit(1760326530.269:12296): avc: denied { audit_write } for pid=5016 comm="syz.1.495" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.950663][ T29] audit: type=1107 audit(1760326530.269:12297): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 72.964379][ T29] audit: type=1400 audit(1760326530.309:12298): avc: denied { sys_module } for pid=5016 comm="syz.1.495" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.048876][ T5024] netlink: 68 bytes leftover after parsing attributes in process `syz.2.494'. [ 73.073623][ T29] audit: type=1400 audit(1760326530.419:12299): avc: denied { read } for pid=5014 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.249387][ T5032] loop4: detected capacity change from 0 to 512 [ 73.461640][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.520723][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.589706][ T5037] netlink: 'syz.5.501': attribute type 1 has an invalid length. [ 73.607846][ T29] audit: type=1326 audit(1760326530.949:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 73.631506][ T29] audit: type=1326 audit(1760326530.949:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 73.655153][ T29] audit: type=1326 audit(1760326530.949:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 73.678683][ T29] audit: type=1326 audit(1760326530.949:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 73.679348][ T5037] loop5: detected capacity change from 0 to 1024 [ 73.717088][ T5037] EXT4-fs: Ignoring removed nobh option [ 73.722800][ T5037] EXT4-fs: Ignoring removed bh option [ 73.729237][ T29] audit: type=1326 audit(1760326530.949:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd0d907eec9 code=0x7ffc0000 [ 73.767352][ T5037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.780021][ T5050] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.814989][ T5060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 73.826019][ T5062] netlink: 5380 bytes leftover after parsing attributes in process `+}[@'. [ 73.869045][ T5062] loop3: detected capacity change from 0 to 128 [ 74.008415][ T5062] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.031987][ T5062] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.166561][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.287497][ T5088] loop3: detected capacity change from 0 to 1024 [ 74.347604][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.360358][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.372783][ T5088] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.392274][ T5088] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.514: lblock 0 mapped to illegal pblock 0 (length 3) [ 74.405880][ T5088] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 74.418239][ T5088] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.418239][ T5088] [ 74.520319][ T5096] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 74.537461][ T5096] siw: device registration error -23 [ 74.849604][ T5098] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 74.867006][ T5098] siw: device registration error -23 [ 74.886416][ T31] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 3) [ 74.937695][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 74.950072][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.950072][ T31] [ 75.008946][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.074721][ T5110] loop4: detected capacity change from 0 to 128 [ 75.083486][ T5110] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.095888][ T5110] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.215236][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.233147][ T5121] loop2: detected capacity change from 0 to 128 [ 75.242615][ T5121] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.255162][ T5121] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.312036][ T5126] __nla_validate_parse: 5 callbacks suppressed [ 75.312055][ T5126] netlink: 56 bytes leftover after parsing attributes in process `syz.5.530'. [ 75.469936][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.587451][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.604939][ T5108] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 75.654491][ T5108] netlink: 'syz.3.524': attribute type 6 has an invalid length. [ 75.755677][ T5146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.536'. [ 75.764955][ T5126] loop5: detected capacity change from 0 to 32768 [ 75.775578][ T5148] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 75.799211][ T5126] loop5: p1 p3 < > [ 75.869816][ T5155] netlink: 5380 bytes leftover after parsing attributes in process `+}[@'. [ 75.894503][ T5155] loop3: detected capacity change from 0 to 128 [ 75.910390][ T5155] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.922941][ T5155] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.971688][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.100514][ T5163] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 76.117722][ T5163] siw: device registration error -23 [ 76.577556][ T5167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.541'. [ 76.803605][ T5171] loop4: detected capacity change from 0 to 512 [ 76.901891][ T5171] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.914312][ T5174] loop5: detected capacity change from 0 to 512 [ 76.945153][ T5171] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.963406][ T5174] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.545: bad orphan inode 11862016 [ 76.993655][ T5174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.048246][ T5174] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.122775][ T5171] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.544: corrupted inode contents [ 77.135012][ T5171] EXT4-fs (loop4): Remounting filesystem read-only [ 77.142023][ T5171] EXT4-fs (loop4): 1 truncate cleaned up [ 77.147907][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.158690][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.173743][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.185232][ T5171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.209719][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.289921][ T5174] lo speed is unknown, defaulting to 1000 [ 77.343530][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 77.343546][ T29] audit: type=1326 audit(1760326534.659:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.373380][ T29] audit: type=1326 audit(1760326534.659:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.396908][ T29] audit: type=1326 audit(1760326534.659:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.420565][ T29] audit: type=1326 audit(1760326534.659:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.444244][ T29] audit: type=1326 audit(1760326534.659:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.467889][ T29] audit: type=1326 audit(1760326534.659:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.491432][ T29] audit: type=1326 audit(1760326534.659:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.514986][ T29] audit: type=1326 audit(1760326534.659:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.538467][ T29] audit: type=1326 audit(1760326534.669:12835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.561943][ T29] audit: type=1326 audit(1760326534.669:12836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a17baeec9 code=0x7ffc0000 [ 77.611429][ T5191] pimreg: entered allmulticast mode [ 77.642397][ T5191] pimreg: left allmulticast mode [ 77.671072][ T5197] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.688305][ T5197] loop4: detected capacity change from 0 to 2048 [ 77.720217][ T5197] Alternate GPT is invalid, using primary GPT. [ 77.726607][ T5197] loop4: p1 p2 p3 [ 77.856117][ T5203] netlink: 'syz.4.552': attribute type 4 has an invalid length. [ 77.892323][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 77.904155][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.915754][ T3425] lo speed is unknown, defaulting to 1000 [ 77.921613][ T3425] syz0: Port: 1 Link DOWN [ 78.179251][ T5216] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 78.204496][ T5217] pim6reg: entered allmulticast mode [ 78.212207][ T5217] pim6reg: left allmulticast mode [ 78.449261][ T5221] loop5: detected capacity change from 0 to 164 [ 78.526174][ T5223] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 78.541015][ T5224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.558'. [ 78.862889][ T5226] loop2: detected capacity change from 0 to 512 [ 78.930893][ T5228] FAULT_INJECTION: forcing a failure. [ 78.930893][ T5228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.944030][ T5228] CPU: 1 UID: 0 PID: 5228 Comm: syz.4.561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.944076][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.944131][ T5228] Call Trace: [ 78.944141][ T5228] [ 78.944151][ T5228] __dump_stack+0x1d/0x30 [ 78.944178][ T5228] dump_stack_lvl+0xe8/0x140 [ 78.944204][ T5228] dump_stack+0x15/0x1b [ 78.944227][ T5228] should_fail_ex+0x265/0x280 [ 78.944330][ T5228] should_fail+0xb/0x20 [ 78.944389][ T5228] should_fail_usercopy+0x1a/0x20 [ 78.944413][ T5228] _copy_from_user+0x1c/0xb0 [ 78.944448][ T5228] __x64_sys_rt_sigaction+0xb3/0x1a0 [ 78.944533][ T5228] x64_sys_call+0x1bc2/0x3000 [ 78.944562][ T5228] do_syscall_64+0xd2/0x200 [ 78.944588][ T5228] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.944650][ T5228] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.944680][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.944709][ T5228] RIP: 0033:0x7fa69372eec9 [ 78.944729][ T5228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.944792][ T5228] RSP: 002b:00007fa692197038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 78.944813][ T5228] RAX: ffffffffffffffda RBX: 00007fa693985fa0 RCX: 00007fa69372eec9 [ 78.944828][ T5228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000019 [ 78.944845][ T5228] RBP: 00007fa692197090 R08: 0000200000000440 R09: 0000000000000000 [ 78.944861][ T5228] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 78.944878][ T5228] R13: 00007fa693986038 R14: 00007fa693985fa0 R15: 00007ffc07609588 [ 78.944902][ T5228] [ 79.125083][ T5231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.562'. [ 79.134829][ T5226] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.143001][ T5226] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.151002][ T5226] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.560: corrupted inode contents [ 79.210342][ T5226] EXT4-fs (loop2): Remounting filesystem read-only [ 79.218183][ T5226] EXT4-fs (loop2): 1 truncate cleaned up [ 79.225159][ T3875] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.235821][ T3875] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.268758][ T3875] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.279944][ T5226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.311901][ T5236] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 79.319712][ T5236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'. [ 79.350279][ T5236] batman_adv: batadv0: Adding interface: veth1_vlan [ 79.357342][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.369118][ T5236] batman_adv: batadv0: Interface activated: veth1_vlan [ 79.406727][ T5244] loop2: detected capacity change from 0 to 164 [ 79.463450][ T5247] pim6reg: entered allmulticast mode [ 79.511127][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 79.723760][ T5266] loop4: detected capacity change from 0 to 512 [ 79.842984][ T5267] xt_CONNSECMARK: invalid mode: 0 [ 79.889937][ T5266] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.910909][ T5266] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.920639][ T5266] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.576: corrupted inode contents [ 79.933447][ T5266] EXT4-fs (loop4): Remounting filesystem read-only [ 79.940266][ T5266] EXT4-fs (loop4): 1 truncate cleaned up [ 79.946239][ T3875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.956878][ T3875] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.967762][ T3875] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.994049][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.047890][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.754043][ T5282] __nla_validate_parse: 2 callbacks suppressed [ 80.754062][ T5282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 80.772077][ T5284] netlink: 76 bytes leftover after parsing attributes in process `syz.2.583'. [ 80.785854][ T5286] netlink: 36 bytes leftover after parsing attributes in process `syz.5.584'. [ 80.816346][ T5289] loop2: detected capacity change from 0 to 512 [ 80.834440][ T5289] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.585: bad orphan inode 11862016 [ 80.846164][ T5289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.859513][ T5289] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.973129][ T5311] loop4: detected capacity change from 0 to 1024 [ 80.983903][ T5289] lo speed is unknown, defaulting to 1000 [ 81.010889][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.043321][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.234902][ T5289] pimreg: entered allmulticast mode [ 81.242797][ T5289] pimreg: left allmulticast mode [ 81.388905][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.389773][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 81.513949][ T5352] loop2: detected capacity change from 0 to 8192 [ 81.542113][ T5359] loop3: detected capacity change from 0 to 164 [ 81.559117][ T5355] lo speed is unknown, defaulting to 1000 [ 81.626316][ T5352] netlink: 'syz.2.609': attribute type 12 has an invalid length. [ 81.654056][ T5363] netlink: 19 bytes leftover after parsing attributes in process `syz.5.613'. [ 81.762983][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.618'. [ 81.860112][ T5355] pimreg: entered allmulticast mode [ 81.867160][ T5355] pimreg: left allmulticast mode [ 81.912613][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 82.001506][ T5394] loop2: detected capacity change from 0 to 512 [ 82.008554][ T5394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.019069][ T5394] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (5000000) [ 82.072486][ T5399] netlink: 19 bytes leftover after parsing attributes in process `syz.1.628'. [ 82.104906][ T5401] netlink: 19 bytes leftover after parsing attributes in process `syz.1.629'. [ 82.217942][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 82.789694][ T5422] netlink: 'syz.5.638': attribute type 4 has an invalid length. [ 82.878099][ T5429] loop2: detected capacity change from 0 to 512 [ 82.914184][ T5433] loop5: detected capacity change from 0 to 164 [ 82.927127][ T5434] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 82.927789][ T5434] siw: device registration error -23 [ 82.958753][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 82.958768][ T29] audit: type=1326 audit(1760326540.289:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.958808][ T29] audit: type=1326 audit(1760326540.289:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.958905][ T29] audit: type=1326 audit(1760326540.289:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.958961][ T29] audit: type=1326 audit(1760326540.289:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959061][ T29] audit: type=1326 audit(1760326540.289:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959091][ T29] audit: type=1326 audit(1760326540.289:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959191][ T29] audit: type=1326 audit(1760326540.289:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959221][ T29] audit: type=1326 audit(1760326540.289:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959339][ T29] audit: type=1326 audit(1760326540.299:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 82.959371][ T29] audit: type=1326 audit(1760326540.299:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69372eec9 code=0x7ffc0000 [ 83.109069][ T5438] loop5: detected capacity change from 0 to 512 [ 83.110395][ T5438] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.117833][ T5438] EXT4-fs (loop5): 1 truncate cleaned up [ 83.118790][ T5438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.150313][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.400991][ T5429] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.401167][ T5429] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.402447][ T5429] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.642: corrupted inode contents [ 83.402603][ T5429] EXT4-fs (loop2): Remounting filesystem read-only [ 83.402738][ T5429] EXT4-fs (loop2): 1 truncate cleaned up [ 83.402820][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.402846][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.402906][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.403407][ T5429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.461563][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.572593][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.644130][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.109572][ T5488] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 84.127570][ T5488] siw: device registration error -23 [ 84.697427][ T5492] loop4: detected capacity change from 0 to 512 [ 84.704707][ T5492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.853031][ T5492] EXT4-fs (loop4): 1 truncate cleaned up [ 84.861912][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.971117][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.085178][ T5517] loop3: detected capacity change from 0 to 512 [ 85.092507][ T5517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.101288][ T5517] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (5000000) [ 85.150639][ T5524] loop5: detected capacity change from 0 to 512 [ 85.178931][ T5524] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.678: bad orphan inode 11862016 [ 85.201109][ T5524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 85.223882][ T5524] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.337153][ T5532] loop2: detected capacity change from 0 to 128 [ 85.373309][ T5532] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.397672][ T5532] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.419377][ T5524] lo speed is unknown, defaulting to 1000 [ 85.655885][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.827192][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.936386][ T5565] __nla_validate_parse: 13 callbacks suppressed [ 85.936452][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.695'. [ 86.016329][ T5573] loop2: detected capacity change from 0 to 512 [ 86.062082][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.122476][ T5580] netlink: 19 bytes leftover after parsing attributes in process `syz.3.699'. [ 86.163212][ T5573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.171817][ T5589] loop5: detected capacity change from 0 to 512 [ 86.180512][ T5573] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.318435][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 86.327482][ T5573] bridge_slave_1: left allmulticast mode [ 86.333294][ T5573] bridge_slave_1: left promiscuous mode [ 86.339025][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.346974][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 86.381424][ T5589] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.705: bad orphan inode 11862016 [ 86.392744][ T5573] bridge_slave_0: left promiscuous mode [ 86.398494][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.406510][ T5589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.419651][ T5589] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.548820][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 86.585961][ T5589] lo speed is unknown, defaulting to 1000 [ 86.603704][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.726260][ T5607] loop2: detected capacity change from 0 to 512 [ 86.733408][ T5607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.741924][ T5607] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (5000000) [ 86.779516][ T5598] pimreg: entered allmulticast mode [ 86.817017][ T5589] pimreg: left allmulticast mode [ 87.027973][ T5613] FAULT_INJECTION: forcing a failure. [ 87.027973][ T5613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.041164][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz.1.713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.041204][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.041221][ T5613] Call Trace: [ 87.041230][ T5613] [ 87.041300][ T5613] __dump_stack+0x1d/0x30 [ 87.041322][ T5613] dump_stack_lvl+0xe8/0x140 [ 87.041343][ T5613] dump_stack+0x15/0x1b [ 87.041365][ T5613] should_fail_ex+0x265/0x280 [ 87.041473][ T5613] should_fail+0xb/0x20 [ 87.041510][ T5613] should_fail_usercopy+0x1a/0x20 [ 87.041605][ T5613] _copy_to_user+0x20/0xa0 [ 87.041648][ T5613] simple_read_from_buffer+0xb5/0x130 [ 87.041672][ T5613] proc_fail_nth_read+0x10e/0x150 [ 87.041705][ T5613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.041736][ T5613] vfs_read+0x1a8/0x770 [ 87.041759][ T5613] ? __rcu_read_unlock+0x4f/0x70 [ 87.041804][ T5613] ? __fget_files+0x184/0x1c0 [ 87.041903][ T5613] ? finish_task_switch+0xad/0x2b0 [ 87.041935][ T5613] ksys_read+0xda/0x1a0 [ 87.041967][ T5613] __x64_sys_read+0x40/0x50 [ 87.042005][ T5613] x64_sys_call+0x27c0/0x3000 [ 87.042067][ T5613] do_syscall_64+0xd2/0x200 [ 87.042099][ T5613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.042215][ T5613] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.042237][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.042263][ T5613] RIP: 0033:0x7f4a17bad8dc [ 87.042300][ T5613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.042378][ T5613] RSP: 002b:00007f4a16617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.042403][ T5613] RAX: ffffffffffffffda RBX: 00007f4a17e05fa0 RCX: 00007f4a17bad8dc [ 87.042426][ T5613] RDX: 000000000000000f RSI: 00007f4a166170a0 RDI: 0000000000000004 [ 87.042442][ T5613] RBP: 00007f4a16617090 R08: 0000000000000000 R09: 0000000000000000 [ 87.042458][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.042488][ T5613] R13: 00007f4a17e06038 R14: 00007f4a17e05fa0 R15: 00007ffffae77258 [ 87.042507][ T5613] [ 87.279987][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.403429][ T5614] lo speed is unknown, defaulting to 1000 [ 87.515329][ T5626] netlink: 76 bytes leftover after parsing attributes in process `syz.2.718'. [ 87.568292][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 87.643085][ T5635] dummy0: entered promiscuous mode [ 87.653103][ T5635] bond_slave_0: entered promiscuous mode [ 87.659155][ T5635] bond_slave_0: left promiscuous mode [ 87.718979][ T5637] siw: device registration error -23 [ 87.766796][ T5635] dummy0: left promiscuous mode [ 87.801186][ T5636] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 87.987403][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 87.987424][ T29] audit: type=1107 audit(1760326545.410:13378): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 88.092170][ T5648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.726'. [ 88.094975][ T29] audit: type=1326 audit(1760326545.563:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.124489][ T29] audit: type=1326 audit(1760326545.563:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.148023][ T29] audit: type=1326 audit(1760326545.563:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.171498][ T29] audit: type=1326 audit(1760326545.563:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.195038][ T29] audit: type=1326 audit(1760326545.563:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.218702][ T29] audit: type=1326 audit(1760326545.563:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.242168][ T29] audit: type=1326 audit(1760326545.563:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.265752][ T29] audit: type=1326 audit(1760326545.563:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.289276][ T29] audit: type=1326 audit(1760326545.563:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f041b6feec9 code=0x7ffc0000 [ 88.392986][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 88.445987][ T5669] loop5: detected capacity change from 0 to 512 [ 88.453144][ T5669] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.465647][ T5669] EXT4-fs (loop5): 1 truncate cleaned up [ 88.472759][ T5669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.505621][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.522115][ T5675] loop2: detected capacity change from 0 to 512 [ 88.531180][ T5675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.549405][ T5680] loop5: detected capacity change from 0 to 512 [ 88.561587][ T5675] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 9: comm syz.2.736: lblock 0 mapped to illegal pblock 9 (length 1) [ 88.577369][ T5675] EXT4-fs (loop2): mount failed [ 88.578294][ T5680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.606432][ T5680] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.625163][ T5675] loop2: detected capacity change from 0 to 1024 [ 88.632541][ T5675] EXT4-fs: Ignoring removed orlov option [ 88.639498][ T5675] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.687703][ T5675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.711662][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.766925][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.812000][ T5696] loop5: detected capacity change from 0 to 512 [ 88.840036][ T5696] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.741: bad orphan inode 11862016 [ 88.851315][ T5696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.864693][ T5696] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.917170][ T5704] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 88.935023][ T5704] siw: device registration error -23 [ 88.986088][ T5696] pimreg: entered allmulticast mode [ 89.007551][ T5696] pimreg: left allmulticast mode [ 89.125918][ T5708] loop4: detected capacity change from 0 to 512 [ 89.225190][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.259807][ T5708] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.745: bad orphan inode 11862016 [ 89.271908][ T5708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 89.284922][ T5708] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.305324][ T5712] loop5: detected capacity change from 0 to 512 [ 89.315068][ T5712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.334776][ T5712] EXT4-fs (loop5): 1 truncate cleaned up [ 89.336975][ T5714] netlink: 76 bytes leftover after parsing attributes in process `syz.2.747'. [ 89.341233][ T5712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.388255][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.425421][ T5719] pimreg: entered allmulticast mode [ 89.433342][ T5708] lo speed is unknown, defaulting to 1000 [ 89.457268][ T5723] loop3: detected capacity change from 0 to 164 [ 89.471061][ T5719] pimreg: left allmulticast mode [ 89.517196][ T5726] loop5: detected capacity change from 0 to 512 [ 89.544374][ T5717] lo speed is unknown, defaulting to 1000 [ 89.578034][ T5726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.638669][ T5726] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.659972][ T5724] lo speed is unknown, defaulting to 1000 [ 89.731787][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.805412][ T3791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.914777][ T5744] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 89.933905][ T5756] loop5: detected capacity change from 0 to 164 [ 89.958800][ T5757] netlink: 'syz.4.756': attribute type 3 has an invalid length. [ 90.066066][ T5771] loop4: detected capacity change from 0 to 512 [ 90.101084][ T5771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.117873][ T5771] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.242997][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.284218][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.294480][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.305599][ T5792] FAULT_INJECTION: forcing a failure. [ 90.305599][ T5792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.318816][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.318850][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.318866][ T5792] Call Trace: [ 90.318875][ T5792] [ 90.318885][ T5792] __dump_stack+0x1d/0x30 [ 90.318910][ T5792] dump_stack_lvl+0xe8/0x140 [ 90.318958][ T5792] dump_stack+0x15/0x1b [ 90.319034][ T5792] should_fail_ex+0x265/0x280 [ 90.319197][ T5792] should_fail+0xb/0x20 [ 90.319281][ T5792] should_fail_usercopy+0x1a/0x20 [ 90.319304][ T5792] _copy_to_iter+0xd2/0xe70 [ 90.319329][ T5792] ? __schedule+0x6b9/0xb30 [ 90.319362][ T5792] ? __list_del_entry_valid_or_report+0x65/0x130 [ 90.319412][ T5792] tun_do_read+0xa6a/0x15a0 [ 90.319446][ T5792] ? __pfx_default_wake_function+0x10/0x10 [ 90.319556][ T5792] tun_chr_read_iter+0x176/0x250 [ 90.319648][ T5792] do_iter_readv_writev+0x4a1/0x540 [ 90.319682][ T5792] vfs_readv+0x1ea/0x690 [ 90.319737][ T5792] do_readv+0xe7/0x210 [ 90.319769][ T5792] __x64_sys_readv+0x45/0x50 [ 90.319795][ T5792] x64_sys_call+0x29fc/0x3000 [ 90.319819][ T5792] do_syscall_64+0xd2/0x200 [ 90.319845][ T5792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.319934][ T5792] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.319957][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.319981][ T5792] RIP: 0033:0x7f041b6feec9 [ 90.319996][ T5792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.320110][ T5792] RSP: 002b:00007f041a15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 90.320129][ T5792] RAX: ffffffffffffffda RBX: 00007f041b955fa0 RCX: 00007f041b6feec9 [ 90.320142][ T5792] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 90.320155][ T5792] RBP: 00007f041a15f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.320236][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.320248][ T5792] R13: 00007f041b956038 R14: 00007f041b955fa0 R15: 00007ffc0c397d18 [ 90.320269][ T5792] [ 90.598812][ T5811] loop4: detected capacity change from 0 to 2048 [ 90.607612][ T5813] loop5: detected capacity change from 0 to 128 [ 90.626280][ T2] ================================================================== [ 90.634418][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 90.640945][ T2] [ 90.643304][ T2] read-write to 0xffffffff8685feb8 of 4 bytes by task 3311 on cpu 1: [ 90.651548][ T2] free_pid+0x77/0x180 [ 90.655637][ T2] free_pids+0x54/0xb0 [ 90.659712][ T2] release_task+0x9a9/0xb60 [ 90.664233][ T2] wait_consider_task+0x114a/0x1660 [ 90.669442][ T2] __do_wait+0xfa/0x510 [ 90.673618][ T2] do_wait+0xb7/0x250 [ 90.677779][ T2] kernel_wait4+0x16b/0x1e0 [ 90.682308][ T2] __x64_sys_wait4+0x91/0x120 [ 90.686995][ T2] x64_sys_call+0x2a6a/0x3000 [ 90.691683][ T2] do_syscall_64+0xd2/0x200 [ 90.696198][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.702122][ T2] [ 90.704453][ T2] read to 0xffffffff8685feb8 of 4 bytes by task 2 on cpu 0: [ 90.711753][ T2] copy_process+0x17fc/0x2000 [ 90.716451][ T2] kernel_clone+0x16c/0x5c0 [ 90.720973][ T2] kernel_thread+0xad/0xe0 [ 90.725411][ T2] kthreadd+0x28d/0x360 [ 90.729666][ T2] ret_from_fork+0x122/0x1b0 [ 90.734265][ T2] ret_from_fork_asm+0x1a/0x30 [ 90.739045][ T2] [ 90.741372][ T2] value changed: 0x800000fc -> 0x800000fb [ 90.747106][ T2] [ 90.749445][ T2] Reported by Kernel Concurrency Sanitizer on: [ 90.755614][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.764928][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.774997][ T2] ================================================================== [ 90.814241][ T3310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 90.829037][ T3310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem