last executing test programs: 2.54869592s ago: executing program 0 (id=1528): unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 2.504971892s ago: executing program 0 (id=1530): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x0, 0x1}, 0xb7aa, 0x80, &(0x7f0000000a00)="c3aaf0afde69f8e6df913671633fd2c59215a43d25b04f8d2a501069ae58ea3ffae1eb031a61f42fb243d0414ae74edf395f7ba457bfd1ded662d675fee932e914d58cbd5488a6003f78462996bf942789980df5d2d602150eb0beb82147e83e0bf9f5e1a70357598c26e369e23031f32d7410706044c9c2da6603210c77b2b125f998325b4762b4d4adab779129d2ff321f5b25120b1e6520c177c7eba0408e54f8d2567eefd991cf86b5edfd6ae9519cf0e6d8b64896202ec5c434024b2f9bae5e29", 0xc3, 0x10001, 0x8, 0x3, 0x80000000, 0x5, &(0x7f0000000900)="ae552f9bd2e5464dcf2d164f2e8aa24f5732a61cdd64c3076b6e8e4a6c9c6484a4060fd371088bd44b0589b312701f9bbc2321b048105660d50aca4c5bb9cbc1bd2c887a337153ed5255afabc8b95e667f07cac8082026f001efecea06fed407c8a619af2c2cc5c1653dfaca7b1cc4292d6f18d52665e2f8ccfd4d2ceaaf09a9c075c70c29896461c654"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000002000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000600)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug}, {@user_xattr}, {@errors_remount}, {@dioread_nolock}]}, 0x9, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) 1.740220235s ago: executing program 3 (id=1537): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180), &(0x7f0000000340)=r2}, 0x20) 1.739856115s ago: executing program 3 (id=1538): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0xa270d000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r1, 0x400, 0x1) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0xd, 0x0, 0x0, 0x40}) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r2, r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0xc02, {0x20, 0x3, 0x4}, 0x2, r2, r3, 0x3655, 0x63, 0x401, 0xfffffffffffffff8, 0x5, 0x5, 0xffffffffffffff96, 0x6, 0x5, 0x6, 0x10, 0x9a8, 0x9, 0x4, 0xd}}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xa, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r9, 0x0, &(0x7f0000001740)=""/4085}, 0x20) r10 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xffffffff00000000, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.660833908s ago: executing program 3 (id=1541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r2}, 0x14) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 1.3803643s ago: executing program 3 (id=1545): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000003c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "53bb"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 1.16127225s ago: executing program 3 (id=1554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000600), 0x220480) r1 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x2020600) copy_file_range(r1, 0x0, r0, 0x0, 0x8, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x60, 0x0, 0x0, @rand_addr=' \x01\x00', @local, {[@dstopts={0x89, 0xa, '\x00', [@generic={0x35}, @jumbo={0xc2, 0x4, 0x20000007}, @calipso={0x7, 0x38, {0x2, 0xc, 0xfd, 0x3, [0x3, 0xffffffffffff90f9, 0x80000001, 0xe6, 0x788a, 0x9]}}, @generic={0x8, 0xf, "c1f4c7e9301b2284e8de0f9f6cc785"}]}]}}}}}, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x8bfb, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r5, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000000)=0xfffffffa, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000910100008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff2489000008000000b703000000000000850000007b0000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x2e, "1cf7814fb38790015603d44ccab54f77f00c16137371e3050000000000000025a877cae408d29aa9823078dc904f"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x9) r10 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 950.086309ms ago: executing program 1 (id=1561): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980400000000001800128008000100736974000c00028008000300ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$packet(r0, &(0x7f0000000740)="05d936277c6f3922007f8347e261bf0fe7ed7ca1b278e3", 0x17, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 868.265292ms ago: executing program 4 (id=1566): unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 834.482004ms ago: executing program 1 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 826.377704ms ago: executing program 4 (id=1569): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000002}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) 817.715594ms ago: executing program 1 (id=1570): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000200)=' ', 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xe, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7946, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 813.729565ms ago: executing program 0 (id=1571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000380), &(0x7f0000000580)=r4}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r6 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x63, 0xffffffffffffffff, {0x4}}, './file1\x00'}) 744.831628ms ago: executing program 4 (id=1572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=r4, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 699.799819ms ago: executing program 1 (id=1575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x20004fed, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02404b9e506a6e0ae5da5cbd6723f818db5d8d000007000004000000"], 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='reno', 0x4) ptrace$setregs(0xd, 0x0, 0x200, &(0x7f0000000900)="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") sendto$inet(r0, &(0x7f0000000100)="b9", 0x1, 0x20040844, 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 652.073152ms ago: executing program 2 (id=1576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000380), &(0x7f0000000580)=r4}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r6 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x63, 0xffffffffffffffff, {0x4}}, './file1\x00'}) 640.794802ms ago: executing program 1 (id=1577): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r3 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0xa, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749d, 0x4, 0x0, 0x0, 0x0) (fail_nth: 5) 599.005834ms ago: executing program 4 (id=1578): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x4000, 0x2) 555.560966ms ago: executing program 0 (id=1579): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 509.393737ms ago: executing program 0 (id=1580): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 487.824678ms ago: executing program 2 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 447.02762ms ago: executing program 1 (id=1582): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='nv', 0x2) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x100}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') lseek(r9, 0x289e0cb5, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x1) 446.34172ms ago: executing program 0 (id=1583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 419.142161ms ago: executing program 2 (id=1584): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f00000000c0)="960034ca269bb702", 0x8, 0x200088d4, &(0x7f0000000040)={0xa, 0x4e20, 0xc9, @private2}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0, 0x0, 0x8000}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 335.995115ms ago: executing program 2 (id=1585): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000200)=' ', 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xe, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7946, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 308.022386ms ago: executing program 2 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 268.426088ms ago: executing program 3 (id=1587): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x0, 0x1}, 0xb7aa, 0x80, &(0x7f0000000a00)="c3aaf0afde69f8e6df913671633fd2c59215a43d25b04f8d2a501069ae58ea3ffae1eb031a61f42fb243d0414ae74edf395f7ba457bfd1ded662d675fee932e914d58cbd5488a6003f78462996bf942789980df5d2d602150eb0beb82147e83e0bf9f5e1a70357598c26e369e23031f32d7410706044c9c2da6603210c77b2b125f998325b4762b4d4adab779129d2ff321f5b25120b1e6520c177c7eba0408e54f8d2567eefd991cf86b5edfd6ae9519cf0e6d8b64896202ec5c434024b2f9bae5e29", 0xc3, 0x10001, 0x8, 0x3, 0x80000000, 0x5, &(0x7f0000000900)="ae552f9bd2e5464dcf2d164f2e8aa24f5732a61cdd64c3076b6e8e4a6c9c6484a4060fd371088bd44b0589b312701f9bbc2321b048105660d50aca4c5bb9cbc1bd2c887a337153ed5255afabc8b95e667f07cac8082026f001efecea06fed407c8a619af2c2cc5c1653dfaca7b1cc4292d6f18d52665e2f8ccfd4d2ceaaf09a9c075c70c29896461c654"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000002000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000600)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug}, {@user_xattr}, {@errors_remount}, {@dioread_nolock}]}, 0x9, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) 190.706911ms ago: executing program 2 (id=1588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=r4, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 79.970696ms ago: executing program 4 (id=1589): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x3bdf, &(0x7f0000000080)={0x0, 0xda6a, 0x80, 0x0, 0x83}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r7}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_0\x00', 0x10) 0s ago: executing program 4 (id=1590): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): id=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.234700][ T29] audit: type=1326 audit(1764539333.649:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.258663][ T29] audit: type=1326 audit(1764539333.649:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.282813][ T29] audit: type=1326 audit(1764539333.649:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.306558][ T29] audit: type=1326 audit(1764539333.649:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.330063][ T29] audit: type=1326 audit(1764539333.649:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 67.355732][ T5767] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.833'. [ 67.358914][ T3322] EXT4-fs unmount: 15 callbacks suppressed [ 67.358979][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.511752][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 67.540363][ T5784] loop4: detected capacity change from 0 to 2048 [ 67.558024][ T5789] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.591287][ T5784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.643398][ T5800] loop1: detected capacity change from 0 to 512 [ 67.655089][ T5800] EXT4-fs: Ignoring removed nobh option [ 67.671095][ T5802] loop0: detected capacity change from 0 to 256 [ 67.676171][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.847: corrupted inode contents [ 67.678161][ T5802] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.697025][ T5800] EXT4-fs (loop1): Remounting filesystem read-only [ 67.709046][ T5800] EXT4-fs (loop1): 1 truncate cleaned up [ 67.715592][ T5800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.728339][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.728506][ T5800] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.750252][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.762411][ T59] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.763062][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.822454][ T5810] loop2: detected capacity change from 0 to 1024 [ 67.829757][ T5810] EXT4-fs: inline encryption not supported [ 67.841213][ T5810] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 67.855527][ T5800] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 67.863798][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.874865][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.893550][ T5810] loop2: detected capacity change from 0 to 512 [ 67.902336][ T5810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.919370][ T5810] EXT4-fs (loop2): 1 truncate cleaned up [ 67.925837][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.976000][ T5820] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.013890][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.089820][ T5830] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 68.167871][ T5841] tipc: Started in network mode [ 68.173165][ T5841] tipc: Node identity 62d4fc688abf, cluster identity 4711 [ 68.181020][ T5841] tipc: Enabled bearer , priority 0 [ 68.198679][ T5841] syzkaller0: entered promiscuous mode [ 68.204334][ T5841] syzkaller0: entered allmulticast mode [ 68.212911][ T5845] FAULT_INJECTION: forcing a failure. [ 68.212911][ T5845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.223415][ T5843] openvswitch: netlink: Missing key (keys=40, expected=100) [ 68.226294][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.3.865 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.226322][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.226334][ T5845] Call Trace: [ 68.226340][ T5845] [ 68.226347][ T5845] __dump_stack+0x1d/0x30 [ 68.226398][ T5845] dump_stack_lvl+0xe8/0x140 [ 68.226418][ T5845] dump_stack+0x15/0x1b [ 68.226435][ T5845] should_fail_ex+0x265/0x280 [ 68.226454][ T5845] should_fail+0xb/0x20 [ 68.226470][ T5845] should_fail_usercopy+0x1a/0x20 [ 68.226539][ T5845] strncpy_from_user+0x25/0x230 [ 68.226564][ T5845] path_setxattrat+0xeb/0x310 [ 68.226659][ T5845] __x64_sys_setxattr+0x6e/0x90 [ 68.226684][ T5845] x64_sys_call+0xad2/0x3000 [ 68.226705][ T5845] do_syscall_64+0xd2/0x200 [ 68.226771][ T5845] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.226806][ T5845] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.226903][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.226924][ T5845] RIP: 0033:0x7f5cf034f749 [ 68.226940][ T5845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.226967][ T5845] RSP: 002b:00007f5ceedaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 68.226988][ T5845] RAX: ffffffffffffffda RBX: 00007f5cf05a5fa0 RCX: 00007f5cf034f749 [ 68.227080][ T5845] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 68.227093][ T5845] RBP: 00007f5ceedaf090 R08: 0000000000000000 R09: 0000000000000000 [ 68.227105][ T5845] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 68.227117][ T5845] R13: 00007f5cf05a6038 R14: 00007f5cf05a5fa0 R15: 00007ffef5699338 [ 68.227141][ T5845] [ 68.284225][ T5847] loop3: detected capacity change from 0 to 1024 [ 68.289625][ T5840] tipc: Resetting bearer [ 68.297466][ T5847] EXT4-fs: inline encryption not supported [ 68.432728][ T5847] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 68.443354][ T5840] tipc: Disabling bearer [ 68.462242][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 68.500754][ T5847] loop3: detected capacity change from 0 to 512 [ 68.508847][ T5847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.523607][ T5847] EXT4-fs (loop3): 1 truncate cleaned up [ 68.531236][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.543310][ T5857] wg1 speed is unknown, defaulting to 1000 [ 68.550779][ T5857] lo speed is unknown, defaulting to 1000 [ 68.619806][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.658704][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.682853][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.701481][ T5866] loop4: detected capacity change from 0 to 128 [ 68.771397][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.839540][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.893913][ T1792] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.921797][ T1792] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.931154][ T1792] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.939892][ T1792] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.976120][ T5877] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 68.992440][ T2968] lo speed is unknown, defaulting to 1000 [ 69.024358][ T5881] loop2: detected capacity change from 0 to 512 [ 69.031498][ T5881] EXT4-fs: Ignoring removed nobh option [ 69.047379][ T5881] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.879: corrupted inode contents [ 69.059981][ T5881] EXT4-fs (loop2): Remounting filesystem read-only [ 69.066844][ T5881] EXT4-fs (loop2): 1 truncate cleaned up [ 69.073145][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.086222][ T59] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.086444][ T5881] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.096901][ T59] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.108221][ T5881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.121447][ T59] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.158886][ T5881] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.166426][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.175597][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.649874][ T5895] loop3: detected capacity change from 0 to 1024 [ 69.656909][ T5895] EXT4-fs: inline encryption not supported [ 69.674207][ T5895] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 69.682313][ T5897] wg1 speed is unknown, defaulting to 1000 [ 69.695302][ T5897] lo speed is unknown, defaulting to 1000 [ 69.738821][ T5903] tipc: Enabled bearer , priority 0 [ 69.752049][ T5903] syzkaller0: entered promiscuous mode [ 69.757772][ T5903] syzkaller0: entered allmulticast mode [ 69.774269][ T5901] tipc: Resetting bearer [ 69.815693][ T5908] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 69.819138][ T5901] tipc: Disabling bearer [ 69.824509][ T5908] __nla_validate_parse: 2 callbacks suppressed [ 69.824572][ T5908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.888'. [ 69.972611][ T5908] loop1: detected capacity change from 0 to 512 [ 69.996105][ T5908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.025114][ T5908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 70.050720][ T5908] System zones: 1-12 [ 70.099329][ T5908] EXT4-fs (loop1): 1 truncate cleaned up [ 70.122942][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.151153][ T5926] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.171592][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 70.191787][ T5926] loop0: detected capacity change from 0 to 1024 [ 70.213857][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.327764][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.346889][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.356628][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.410998][ T5940] loop0: detected capacity change from 0 to 1024 [ 70.438507][ T5940] EXT4-fs: inline encryption not supported [ 70.473354][ T5940] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 70.500847][ T5940] loop0: detected capacity change from 0 to 512 [ 70.507722][ T5940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.521026][ T5940] EXT4-fs (loop0): 1 truncate cleaned up [ 70.521470][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.604641][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.811788][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 70.914162][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.945882][ T5997] FAULT_INJECTION: forcing a failure. [ 70.945882][ T5997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.959296][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.0.907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.959327][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.959340][ T5997] Call Trace: [ 70.959347][ T5997] [ 70.959355][ T5997] __dump_stack+0x1d/0x30 [ 70.959381][ T5997] dump_stack_lvl+0xe8/0x140 [ 70.959429][ T5997] dump_stack+0x15/0x1b [ 70.959446][ T5997] should_fail_ex+0x265/0x280 [ 70.959465][ T5997] should_fail+0xb/0x20 [ 70.959540][ T5997] should_fail_usercopy+0x1a/0x20 [ 70.959637][ T5997] _copy_from_user+0x1c/0xb0 [ 70.959664][ T5997] ___sys_sendmsg+0xc1/0x1d0 [ 70.959734][ T5997] __x64_sys_sendmsg+0xd4/0x160 [ 70.959760][ T5997] x64_sys_call+0x191e/0x3000 [ 70.959793][ T5997] do_syscall_64+0xd2/0x200 [ 70.959813][ T5997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.959838][ T5997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.959935][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.959969][ T5997] RIP: 0033:0x7f41de96f749 [ 70.959985][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.960001][ T5997] RSP: 002b:00007f41dd3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.960050][ T5997] RAX: ffffffffffffffda RBX: 00007f41debc5fa0 RCX: 00007f41de96f749 [ 70.960065][ T5997] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 70.960078][ T5997] RBP: 00007f41dd3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.960092][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.960115][ T5997] R13: 00007f41debc6038 R14: 00007f41debc5fa0 R15: 00007ffc1eaf00e8 [ 70.960136][ T5997] [ 71.169170][ T6005] netlink: 96 bytes leftover after parsing attributes in process `syz.1.906'. [ 71.215296][ T6005] wg1 speed is unknown, defaulting to 1000 [ 71.237543][ T6005] lo speed is unknown, defaulting to 1000 [ 71.307858][ T6014] loop1: detected capacity change from 0 to 512 [ 71.323956][ T6014] EXT4-fs: Ignoring removed orlov option [ 71.329942][ T6014] EXT4-fs: Ignoring removed i_version option [ 71.340961][ T6014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.377993][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 71.434890][ T6014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.448448][ T6014] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.543019][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.559962][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 71.579657][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.917'. [ 71.590638][ T6048] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 71.611232][ T6052] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 71.638573][ T6052] loop1: detected capacity change from 0 to 1024 [ 71.678568][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.748065][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.875831][ T6089] loop4: detected capacity change from 0 to 7 [ 71.883229][ T6089] buffer_io_error: 198 callbacks suppressed [ 71.883268][ T6089] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.898534][ T6089] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.906540][ T6089] loop4: unable to read partition table [ 71.914113][ T6089] loop_reread_partitions: partition scan of loop4 (úùƒåP=ý?ã}X‹ºÐ œëÜ%õ«) failed (rc=-5) [ 71.926135][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.935139][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.943973][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.953120][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.962223][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.971418][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.981955][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 71.986287][ T6089] pim6reg: entered allmulticast mode [ 71.990621][ T3308] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.043218][ T6089] pim6reg: left allmulticast mode [ 72.111584][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 72.111599][ T29] audit: type=1326 audit(1764539338.619:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 72.141700][ T29] audit: type=1400 audit(1764539338.619:4170): avc: denied { wake_alarm } for pid=6079 comm="syz.1.923" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.174123][ T29] audit: type=1326 audit(1764539338.669:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cf03465e7 code=0x7ffc0000 [ 72.198197][ T29] audit: type=1326 audit(1764539338.669:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cf02eb829 code=0x7ffc0000 [ 72.222648][ T29] audit: type=1326 audit(1764539338.669:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 72.247011][ T29] audit: type=1326 audit(1764539338.669:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 72.270842][ T29] audit: type=1326 audit(1764539338.669:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 72.294451][ T29] audit: type=1326 audit(1764539338.669:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 72.317896][ T29] audit: type=1326 audit(1764539338.669:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 72.341882][ T29] audit: type=1326 audit(1764539338.669:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f41de9665e7 code=0x7ffc0000 [ 72.398833][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 72.409615][ T6098] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 72.476033][ T6102] xt_hashlimit: max too large, truncated to 1048576 [ 72.485946][ T6104] tipc: Started in network mode [ 72.491015][ T6104] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.501065][ T6104] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.509951][ T6104] tipc: Enabled bearer , priority 10 [ 72.516564][ T6106] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.535113][ T6106] loop0: detected capacity change from 0 to 1024 [ 72.579878][ T6108] loop3: detected capacity change from 0 to 512 [ 72.588652][ T6106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.616384][ T6108] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.635763][ T6108] EXT4-fs (loop3): mount failed [ 72.658514][ T6081] syz.1.923 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 72.672737][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.1.923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.672836][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.672849][ T6081] Call Trace: [ 72.672856][ T6081] [ 72.672864][ T6081] __dump_stack+0x1d/0x30 [ 72.672885][ T6081] dump_stack_lvl+0xe8/0x140 [ 72.672906][ T6081] dump_stack+0x15/0x1b [ 72.672968][ T6081] dump_header+0x81/0x220 [ 72.673053][ T6081] oom_kill_process+0x342/0x400 [ 72.673089][ T6081] out_of_memory+0x979/0xb80 [ 72.673121][ T6081] try_charge_memcg+0x610/0xa10 [ 72.673155][ T6081] obj_cgroup_charge_pages+0xa6/0x150 [ 72.673179][ T6081] __memcg_kmem_charge_page+0x9f/0x170 [ 72.673231][ T6081] __alloc_frozen_pages_noprof+0x188/0x360 [ 72.673270][ T6081] alloc_pages_mpol+0xb3/0x260 [ 72.673289][ T6081] ? alloc_pages_noprof+0x61/0x130 [ 72.673347][ T6081] alloc_pages_noprof+0x90/0x130 [ 72.673370][ T6081] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 72.673475][ T6081] __kvmalloc_node_noprof+0x483/0x670 [ 72.673504][ T6081] ? ip_set_alloc+0x24/0x30 [ 72.673553][ T6081] ? ip_set_alloc+0x24/0x30 [ 72.673587][ T6081] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 72.673623][ T6081] ip_set_alloc+0x24/0x30 [ 72.673680][ T6081] hash_netiface_create+0x282/0x740 [ 72.673716][ T6081] ? __pfx_hash_netiface_create+0x10/0x10 [ 72.673749][ T6081] ip_set_create+0x3cc/0x970 [ 72.673842][ T6081] ? __nla_parse+0x40/0x60 [ 72.673869][ T6081] nfnetlink_rcv_msg+0x4c6/0x590 [ 72.673911][ T6081] netlink_rcv_skb+0x123/0x220 [ 72.674025][ T6081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 72.674120][ T6081] nfnetlink_rcv+0x167/0x16c0 [ 72.674143][ T6081] ? kmem_cache_free+0xe4/0x3d0 [ 72.674188][ T6081] ? __kfree_skb+0x109/0x150 [ 72.674243][ T6081] ? nlmon_xmit+0x4f/0x60 [ 72.674270][ T6081] ? consume_skb+0x49/0x150 [ 72.674335][ T6081] ? nlmon_xmit+0x4f/0x60 [ 72.674355][ T6081] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 72.674414][ T6081] ? __dev_queue_xmit+0x1200/0x2000 [ 72.674489][ T6081] ? __dev_queue_xmit+0x182/0x2000 [ 72.674512][ T6081] ? ref_tracker_free+0x37d/0x3e0 [ 72.674624][ T6081] ? __netlink_deliver_tap+0x4dc/0x500 [ 72.674649][ T6081] netlink_unicast+0x5c0/0x690 [ 72.674677][ T6081] netlink_sendmsg+0x58b/0x6b0 [ 72.674697][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.674761][ T6081] __sock_sendmsg+0x145/0x180 [ 72.674787][ T6081] ____sys_sendmsg+0x31e/0x4e0 [ 72.674828][ T6081] ___sys_sendmsg+0x17b/0x1d0 [ 72.674931][ T6081] __x64_sys_sendmsg+0xd4/0x160 [ 72.674952][ T6081] x64_sys_call+0x191e/0x3000 [ 72.674973][ T6081] do_syscall_64+0xd2/0x200 [ 72.675002][ T6081] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.675033][ T6081] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.675169][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.675281][ T6081] RIP: 0033:0x7f2a296bf749 [ 72.675340][ T6081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.675361][ T6081] RSP: 002b:00007f2a28127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.675387][ T6081] RAX: ffffffffffffffda RBX: 00007f2a29915fa0 RCX: 00007f2a296bf749 [ 72.675462][ T6081] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 72.675474][ T6081] RBP: 00007f2a29743f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.675489][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.675504][ T6081] R13: 00007f2a29916038 R14: 00007f2a29915fa0 R15: 00007ffe256c89d8 [ 72.675521][ T6081] [ 72.675528][ T6081] memory: usage 307200kB, limit 307200kB, failcnt 628 [ 72.731995][ T6114] loop3: detected capacity change from 0 to 512 [ 72.735004][ T6081] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 72.768450][ T6114] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.773163][ T6081] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 72.773183][ T6081] Memory cgroup stats for /syz1: [ 72.773718][ T6081] cache 0 [ 72.786110][ T6114] EXT4-fs (loop3): mount failed [ 72.788063][ T6081] rss 4096 [ 72.788073][ T6081] shmem 0 [ 72.788081][ T6081] mapped_file 0 [ 72.794872][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.798065][ T6081] dirty 0 [ 72.798075][ T6081] writeback 0 [ 72.798092][ T6081] workingset_refault_anon 200 [ 72.798100][ T6081] workingset_refault_file 1524 [ 72.798107][ T6081] swap 483328 [ 72.798113][ T6081] swapcached 4096 [ 72.798120][ T6081] pgpgin 27703 [ 72.872708][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 72.872820][ T6081] pgpgout 27702 [ 72.901303][ T3005] loop4: unable to read partition table [ 72.903757][ T6081] pgfault 39753 [ 72.938232][ T3005] loop4: unable to read partition table [ 72.939354][ T6081] pgmajfault 136 [ 73.006217][ T3005] loop4: unable to read partition table [ 73.010142][ T6081] inactive_anon 0 [ 73.171800][ T6081] active_anon 4096 [ 73.175660][ T6081] inactive_file 0 [ 73.179402][ T6081] active_file 0 [ 73.183044][ T6081] unevictable 0 [ 73.186513][ T6081] hierarchical_memory_limit 314572800 [ 73.191995][ T6081] hierarchical_memsw_limit 9223372036854771712 [ 73.198340][ T6081] total_cache 0 [ 73.202031][ T6081] total_rss 4096 [ 73.205681][ T6081] total_shmem 0 [ 73.209159][ T6081] total_mapped_file 0 [ 73.213265][ T6081] total_dirty 0 [ 73.216734][ T6081] total_writeback 0 [ 73.220551][ T6081] total_workingset_refault_anon 200 [ 73.226121][ T6081] total_workingset_refault_file 1524 [ 73.231588][ T6081] total_swap 483328 [ 73.235483][ T6081] total_swapcached 4096 [ 73.239791][ T6081] total_pgpgin 27703 [ 73.243718][ T6081] total_pgpgout 27702 [ 73.247733][ T6081] total_pgfault 39753 [ 73.251851][ T6081] total_pgmajfault 136 [ 73.255962][ T6081] total_inactive_anon 0 [ 73.260119][ T6081] total_active_anon 4096 [ 73.264498][ T6081] total_inactive_file 0 [ 73.268674][ T6081] total_active_file 0 [ 73.272696][ T6081] total_unevictable 0 [ 73.276787][ T6081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=6079,uid=0 [ 73.291522][ T6081] Memory cgroup out of memory: Killed process 6079 (syz.1.923) total-vm:96148kB, anon-rss:1136kB, file-rss:22588kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 73.335866][ T6127] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.936'. [ 73.390395][ T6129] loop0: detected capacity change from 0 to 2048 [ 73.397327][ T3005] loop4: unable to read partition table [ 73.397981][ T6134] loop3: detected capacity change from 0 to 1024 [ 73.410224][ T6134] EXT4-fs: inline encryption not supported [ 73.421658][ T6134] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 73.428117][ T6136] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 73.444282][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.464207][ T6134] loop3: detected capacity change from 0 to 512 [ 73.476874][ T6134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.487795][ T3005] loop4: unable to read partition table [ 73.506567][ T6134] EXT4-fs (loop3): 1 truncate cleaned up [ 73.516431][ T6134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.551497][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.642069][ T6150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.649838][ T3423] tipc: Node number set to 1 [ 73.670121][ T6150] loop1: detected capacity change from 0 to 1024 [ 73.693239][ T6150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.740160][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.858060][ T6162] loop1: detected capacity change from 0 to 512 [ 73.890664][ T6162] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.906510][ T6162] EXT4-fs (loop1): mount failed [ 73.939363][ T6168] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.948285][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 73.974581][ T6168] loop1: detected capacity change from 0 to 1024 [ 73.994373][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.042545][ T6172] loop0: detected capacity change from 0 to 2048 [ 74.055260][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.071385][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.242277][ T6191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 74.331222][ T6194] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 74.378479][ T6196] loop4: detected capacity change from 0 to 512 [ 74.393244][ T6196] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.412479][ T6196] EXT4-fs (loop4): mount failed [ 74.504920][ T6211] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 74.531137][ T6215] loop1: detected capacity change from 0 to 2048 [ 74.549436][ T6213] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 74.567032][ T6219] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 74.622621][ T6215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.668246][ T6211] loop3: detected capacity change from 0 to 512 [ 74.687048][ T6211] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.731106][ T6211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 74.740588][ T6211] System zones: 1-12 [ 74.758242][ T6211] EXT4-fs (loop3): 1 truncate cleaned up [ 74.796942][ T6211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.835969][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.886059][ T6247] __nla_validate_parse: 11 callbacks suppressed [ 74.886102][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 74.904732][ T6247] loop0: detected capacity change from 0 to 256 [ 74.914541][ T6247] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.941308][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.968558][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.018665][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 75.030194][ T6255] loop0: detected capacity change from 0 to 256 [ 75.041359][ T6255] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.124520][ T6265] loop0: detected capacity change from 0 to 512 [ 75.144963][ T6265] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.160612][ T6265] EXT4-fs (loop0): mount failed [ 75.245211][ T6273] wg1 speed is unknown, defaulting to 1000 [ 75.251555][ T6273] lo speed is unknown, defaulting to 1000 [ 75.268729][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 75.293341][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'. [ 75.452595][ T6298] loop1: detected capacity change from 0 to 512 [ 75.459263][ T6298] EXT4-fs: Ignoring removed nobh option [ 75.483070][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.989'. [ 75.489378][ T6298] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.988: corrupted inode contents [ 75.511529][ T6298] EXT4-fs (loop1): Remounting filesystem read-only [ 75.532564][ T6298] EXT4-fs (loop1): 1 truncate cleaned up [ 75.540105][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.553168][ T6298] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.553267][ T2446] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.574405][ T2446] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.577940][ T6298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.599091][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 75.603584][ T2446] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 75.627855][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.828400][ T6298] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 75.841907][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.869775][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.909236][ T6342] loop0: detected capacity change from 0 to 512 [ 75.933011][ T6342] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.949442][ T6342] EXT4-fs (loop0): mount failed [ 75.950348][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1008'. [ 75.963927][ T6351] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 76.052255][ T6358] siw: device registration error -23 [ 76.152958][ T6374] loop0: detected capacity change from 0 to 512 [ 76.159764][ T6374] EXT4-fs: Ignoring removed nobh option [ 76.161450][ T6376] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1020'. [ 76.185381][ T6374] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1019: corrupted inode contents [ 76.200710][ T6374] EXT4-fs (loop0): Remounting filesystem read-only [ 76.207648][ T6374] EXT4-fs (loop0): 1 truncate cleaned up [ 76.217587][ T6374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.230456][ T6374] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.233803][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.251707][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.259977][ T6374] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.264516][ T61] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.318840][ T6374] syz!: rxe_newlink: already configured on team_slave_0 [ 76.326936][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.335746][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.460510][ T6386] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 76.468770][ T6386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1023'. [ 76.552616][ T6386] loop1: detected capacity change from 0 to 512 [ 76.568863][ T6386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.583482][ T6386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 76.592864][ T6386] System zones: 1-12 [ 76.598362][ T6386] EXT4-fs (loop1): 1 truncate cleaned up [ 76.606414][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.698791][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 76.712961][ T6389] loop4: detected capacity change from 0 to 256 [ 76.724882][ T6389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.747915][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.769551][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.826554][ T6398] siw: device registration error -23 [ 76.872880][ T6408] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.898739][ T6408] loop4: detected capacity change from 0 to 1024 [ 76.913566][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.959431][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.108045][ T6435] siw: device registration error -23 [ 77.224984][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 77.312627][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.338308][ T6453] loop1: detected capacity change from 0 to 512 [ 77.348088][ T6454] loop4: detected capacity change from 0 to 7 [ 77.355503][ T6454] buffer_io_error: 72 callbacks suppressed [ 77.355565][ T6454] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.371955][ T6453] __quota_error: 267 callbacks suppressed [ 77.371975][ T6453] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 77.389124][ T6453] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.404270][ T6454] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.412262][ T6454] loop4: unable to read partition table [ 77.418944][ T6453] EXT4-fs (loop1): mount failed [ 77.422373][ T6454] loop_reread_partitions: partition scan of loop4 (úùƒåP=ý?ã}X‹ºÐ œëÜ%õ«) failed (rc=-5) [ 77.424940][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.447080][ T6454] pim6reg: entered allmulticast mode [ 77.475528][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.490358][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.499483][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.508029][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.518278][ T29] audit: type=1326 audit(1764539344.019:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.542383][ T29] audit: type=1326 audit(1764539344.019:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.566722][ T29] audit: type=1326 audit(1764539344.019:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.590529][ T29] audit: type=1326 audit(1764539344.019:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.614440][ T29] audit: type=1326 audit(1764539344.019:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.638076][ T29] audit: type=1326 audit(1764539344.019:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.638778][ T6462] pim6reg: left allmulticast mode [ 77.667292][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.670533][ T29] audit: type=1326 audit(1764539344.079:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.675581][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.699158][ T29] audit: type=1326 audit(1764539344.079:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 77.707217][ T3306] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.731712][ T29] audit: type=1326 audit(1764539344.119:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7f4322005 code=0x7ffc0000 [ 77.814842][ T6467] loop2: detected capacity change from 0 to 512 [ 77.852207][ T6467] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.910412][ T6467] EXT4-fs (loop2): mount failed [ 78.245131][ T6500] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.310469][ T6505] loop4: detected capacity change from 0 to 512 [ 78.317027][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.344535][ T6505] EXT4-fs: Ignoring removed nobh option [ 78.381145][ T6505] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1070: corrupted inode contents [ 78.394675][ T6505] EXT4-fs (loop4): Remounting filesystem read-only [ 78.401846][ T6505] EXT4-fs (loop4): 1 truncate cleaned up [ 78.408468][ T6505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.421655][ T6505] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.422484][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.443521][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.455130][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.465283][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.510625][ T6505] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 78.527086][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.540155][ T6528] bond1: entered promiscuous mode [ 78.545672][ T6528] bond1: entered allmulticast mode [ 78.555630][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.560979][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.626227][ T6537] siw: device registration error -23 [ 78.750482][ T6556] tipc: Enabled bearer , priority 0 [ 78.758542][ T6556] syzkaller0: entered promiscuous mode [ 78.764211][ T6556] syzkaller0: entered allmulticast mode [ 78.774150][ T6555] tipc: Resetting bearer [ 78.782644][ T6555] tipc: Disabling bearer [ 78.881884][ T6563] veth0_macvtap: left promiscuous mode [ 78.943571][ T6563] loop3: detected capacity change from 0 to 256 [ 78.956485][ T6563] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.002771][ T6567] tipc: Enabled bearer , priority 0 [ 79.010009][ T6567] syzkaller0: entered promiscuous mode [ 79.015775][ T6567] syzkaller0: entered allmulticast mode [ 79.025520][ T6566] tipc: Resetting bearer [ 79.038201][ T6566] tipc: Disabling bearer [ 79.125491][ T6573] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.170265][ T6580] loop2: detected capacity change from 0 to 512 [ 79.184996][ T6580] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.207840][ T6573] loop4: detected capacity change from 0 to 1024 [ 79.219349][ T6580] EXT4-fs (loop2): mount failed [ 79.242445][ T6573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.293402][ T6589] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.332075][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.341820][ T6589] loop3: detected capacity change from 0 to 1024 [ 79.363020][ T6589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.399544][ T6602] loop2: detected capacity change from 0 to 512 [ 79.408834][ T6602] EXT4-fs: Ignoring removed nobh option [ 79.460596][ T6606] siw: device registration error -23 [ 79.469920][ T6602] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1110: corrupted inode contents [ 79.484290][ T6608] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.502199][ T6602] EXT4-fs (loop2): Remounting filesystem read-only [ 79.509420][ T6602] EXT4-fs (loop2): 1 truncate cleaned up [ 79.516207][ T6602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.529251][ T6602] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.541205][ T6602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.561196][ T61] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.571916][ T61] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.583804][ T61] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.595139][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.671077][ T6602] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 79.681622][ T6623] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.698529][ T6627] bond1: entered promiscuous mode [ 79.702002][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.704044][ T6627] bond1: entered allmulticast mode [ 79.717926][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.719425][ T6627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.750583][ T6623] loop1: detected capacity change from 0 to 1024 [ 79.777672][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.829527][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.917048][ T6643] __nla_validate_parse: 13 callbacks suppressed [ 79.917065][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 79.944884][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1127'. [ 79.954131][ T6643] loop1: detected capacity change from 0 to 256 [ 79.963841][ T6643] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.037984][ T6652] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.102766][ T6660] netlink: 28 bytes leftover after parsing attributes in process `^'. [ 80.138803][ T6668] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.157906][ T6668] loop1: detected capacity change from 0 to 1024 [ 80.184180][ T6668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.219257][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.281995][ T6680] wg1 speed is unknown, defaulting to 1000 [ 80.294618][ T6680] lo speed is unknown, defaulting to 1000 [ 80.353268][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 80.373051][ T6684] loop2: detected capacity change from 0 to 256 [ 80.379983][ T6684] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.440958][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 80.568216][ T6702] netlink: 28 bytes leftover after parsing attributes in process `^'. [ 80.621622][ T6713] loop4: detected capacity change from 0 to 512 [ 80.657490][ T6713] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.657784][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1149'. [ 80.692472][ T6713] EXT4-fs (loop4): mount failed [ 80.728923][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 80.757204][ T6731] bond1: entered promiscuous mode [ 80.762760][ T6731] bond1: entered allmulticast mode [ 80.773346][ T6731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.799733][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 80.846012][ T6735] loop4: detected capacity change from 0 to 256 [ 80.868198][ T6735] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.901433][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 81.018724][ T6765] loop1: detected capacity change from 0 to 512 [ 81.058830][ T6765] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1162: iget: bad extra_isize 90 (inode size 256) [ 81.135491][ T6765] EXT4-fs (loop1): Remounting filesystem read-only [ 81.152604][ T6765] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.163180][ T6765] EXT4-fs (loop1): 1 orphan inode deleted [ 81.169375][ T6765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.196506][ T6782] siw: device registration error -23 [ 81.238998][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.284003][ T6790] loop1: detected capacity change from 0 to 512 [ 81.324417][ T6790] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.346312][ T6790] EXT4-fs (loop1): mount failed [ 81.473120][ T6812] tipc: Enabled bearer , priority 0 [ 81.504846][ T6812] syzkaller0: entered promiscuous mode [ 81.510461][ T6812] syzkaller0: entered allmulticast mode [ 81.546626][ T6824] bond2: entered promiscuous mode [ 81.551836][ T6824] bond2: entered allmulticast mode [ 81.592457][ T6824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.616311][ T6811] tipc: Resetting bearer [ 81.628505][ T6811] tipc: Disabling bearer [ 81.635824][ T6809] wg1 speed is unknown, defaulting to 1000 [ 81.649356][ T6809] lo speed is unknown, defaulting to 1000 [ 81.693371][ T6842] siw: device registration error -23 [ 81.716025][ T6846] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.743629][ T6848] loop3: detected capacity change from 0 to 512 [ 81.762927][ T6848] EXT4-fs (loop3): too many log groups per flexible block group [ 81.771357][ T6848] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 81.778338][ T6848] EXT4-fs (loop3): mount failed [ 81.855518][ T6858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.892581][ T6858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.907984][ T6861] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 81.972923][ T6858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.056660][ T6858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.148205][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.162144][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.180622][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.195435][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.213554][ T6878] tipc: Enabled bearer , priority 0 [ 82.222133][ T6878] tipc: Resetting bearer [ 82.229659][ T6877] tipc: Disabling bearer [ 82.258104][ T6880] loop2: detected capacity change from 0 to 256 [ 82.265605][ T6880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.359085][ T6888] wg1 speed is unknown, defaulting to 1000 [ 82.365928][ T6888] lo speed is unknown, defaulting to 1000 [ 82.519045][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.718322][ T6909] loop3: detected capacity change from 0 to 256 [ 82.727246][ T6909] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.753760][ T6913] tipc: Enabled bearer , priority 0 [ 82.770272][ T6913] tipc: Resetting bearer [ 82.801515][ T6912] tipc: Disabling bearer [ 82.837849][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 82.837866][ T29] audit: type=1400 audit(1764539349.339:4838): avc: denied { name_bind } for pid=6917 comm="syz.4.1204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 82.865476][ T29] audit: type=1400 audit(1764539349.339:4839): avc: denied { node_bind } for pid=6917 comm="syz.4.1204" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 82.962679][ T29] audit: type=1326 audit(1764539349.469:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.033716][ T29] audit: type=1326 audit(1764539349.499:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.058486][ T29] audit: type=1326 audit(1764539349.499:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.082159][ T29] audit: type=1326 audit(1764539349.499:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.106445][ T29] audit: type=1326 audit(1764539349.499:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.130140][ T29] audit: type=1326 audit(1764539349.499:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.153791][ T29] audit: type=1326 audit(1764539349.499:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.178354][ T29] audit: type=1326 audit(1764539349.499:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f42ef749 code=0x7ffc0000 [ 83.274819][ T6942] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 83.276811][ T6939] bond3: entered promiscuous mode [ 83.289355][ T6939] bond3: entered allmulticast mode [ 83.298288][ T6939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.317337][ T6945] loop3: detected capacity change from 0 to 512 [ 83.338278][ T6945] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.354104][ T6945] EXT4-fs (loop3): mount failed [ 83.408927][ T6951] loop1: detected capacity change from 0 to 512 [ 83.409287][ T6949] wg1 speed is unknown, defaulting to 1000 [ 83.424350][ T6953] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.432354][ T6949] lo speed is unknown, defaulting to 1000 [ 83.440198][ T6951] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.457208][ T6951] EXT4-fs (loop1): mount failed [ 83.471872][ T6953] loop3: detected capacity change from 0 to 1024 [ 83.493854][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.581902][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.634047][ T6973] loop3: detected capacity change from 0 to 256 [ 83.641522][ T6973] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.771964][ T6988] capability: warning: `syz.0.1231' uses 32-bit capabilities (legacy support in use) [ 83.821686][ T6996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.853219][ T6996] loop0: detected capacity change from 0 to 2048 [ 83.891321][ T3306] loop0: p1 < > p4 [ 83.895843][ T7003] FAULT_INJECTION: forcing a failure. [ 83.895843][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 83.896479][ T3306] loop0: p4 size 8388608 extends beyond EOD, truncated [ 83.909114][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.4.1237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.909155][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.909165][ T7003] Call Trace: [ 83.909171][ T7003] [ 83.909178][ T7003] __dump_stack+0x1d/0x30 [ 83.909205][ T7003] dump_stack_lvl+0xe8/0x140 [ 83.909237][ T7003] dump_stack+0x15/0x1b [ 83.909254][ T7003] should_fail_ex+0x265/0x280 [ 83.909274][ T7003] ? __se_sys_memfd_create+0x1cc/0x590 [ 83.909298][ T7003] should_failslab+0x8c/0xb0 [ 83.909325][ T7003] __kmalloc_cache_noprof+0x4c/0x4a0 [ 83.909354][ T7003] ? fput+0x8f/0xc0 [ 83.909372][ T7003] __se_sys_memfd_create+0x1cc/0x590 [ 83.909468][ T7003] __x64_sys_memfd_create+0x31/0x40 [ 83.909490][ T7003] x64_sys_call+0x2ac2/0x3000 [ 83.909634][ T7003] do_syscall_64+0xd2/0x200 [ 83.909670][ T7003] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.909696][ T7003] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.909726][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.909746][ T7003] RIP: 0033:0x7fe7f42ef749 [ 83.909816][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.909833][ T7003] RSP: 002b:00007fe7f2d4ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 83.909880][ T7003] RAX: ffffffffffffffda RBX: 000000000000060e RCX: 00007fe7f42ef749 [ 83.909892][ T7003] RDX: 00007fe7f2d4edec RSI: 0000000000000000 RDI: 00007fe7f4374960 [ 83.909905][ T7003] RBP: 00002000000007c0 R08: 00007fe7f2d4eb07 R09: 0000000000000000 [ 83.909918][ T7003] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 83.909930][ T7003] R13: 00007fe7f2d4edec R14: 00007fe7f2d4edf0 R15: 00007ffd901e7968 [ 83.909998][ T7003] [ 84.039797][ T7011] FAULT_INJECTION: forcing a failure. [ 84.039797][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.111645][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.3.1240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.111664][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.111672][ T7011] Call Trace: [ 84.111677][ T7011] [ 84.111689][ T7011] __dump_stack+0x1d/0x30 [ 84.111737][ T7011] dump_stack_lvl+0xe8/0x140 [ 84.111759][ T7011] dump_stack+0x15/0x1b [ 84.111778][ T7011] should_fail_ex+0x265/0x280 [ 84.111800][ T7011] should_fail+0xb/0x20 [ 84.111816][ T7011] should_fail_usercopy+0x1a/0x20 [ 84.111905][ T7011] _copy_from_user+0x1c/0xb0 [ 84.111991][ T7011] ___sys_sendmsg+0xc1/0x1d0 [ 84.112017][ T7011] __x64_sys_sendmsg+0xd4/0x160 [ 84.112058][ T7011] x64_sys_call+0x191e/0x3000 [ 84.112082][ T7011] do_syscall_64+0xd2/0x200 [ 84.112100][ T7011] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.112144][ T7011] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.112239][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.112252][ T7011] RIP: 0033:0x7f5cf034f749 [ 84.112263][ T7011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.112275][ T7011] RSP: 002b:00007f5ceedaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.112329][ T7011] RAX: ffffffffffffffda RBX: 00007f5cf05a5fa0 RCX: 00007f5cf034f749 [ 84.112338][ T7011] RDX: 00000000000000c0 RSI: 00002000000037c0 RDI: 0000000000000006 [ 84.112346][ T7011] RBP: 00007f5ceedaf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.112424][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.112431][ T7011] R13: 00007f5cf05a6038 R14: 00007f5cf05a5fa0 R15: 00007ffef5699338 [ 84.112444][ T7011] [ 84.294605][ T6996] loop0: p1 < > p4 [ 84.299140][ T6996] loop0: p4 size 8388608 extends beyond EOD, truncated [ 84.345063][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.345175][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.505440][ T7031] loop3: detected capacity change from 0 to 512 [ 84.524646][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.538956][ T7031] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.551045][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.553384][ T3600] Bluetooth: hci0: command 0x1003 tx timeout [ 84.631836][ T7042] loop0: detected capacity change from 0 to 512 [ 84.638775][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.670504][ T7042] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.691406][ T7042] EXT4-fs (loop0): mount failed [ 84.778067][ T7061] wg1 speed is unknown, defaulting to 1000 [ 84.784753][ T7061] lo speed is unknown, defaulting to 1000 [ 84.850188][ T7065] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 84.931890][ T7065] loop3: detected capacity change from 0 to 512 [ 84.949524][ T7065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.988428][ T7065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 84.998382][ T7069] __nla_validate_parse: 25 callbacks suppressed [ 84.998400][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 84.998412][ T7065] System zones: [ 85.010211][ T7069] loop1: detected capacity change from 0 to 256 [ 85.025752][ T7065] 1-12 [ 85.030002][ T7069] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.065502][ T7073] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 85.082712][ T7065] EXT4-fs (loop3): 1 truncate cleaned up [ 85.128169][ T7073] loop0: detected capacity change from 0 to 1024 [ 85.154634][ T7073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.163115][ T7077] bond4: entered promiscuous mode [ 85.171951][ T7077] bond4: entered allmulticast mode [ 85.183287][ T7077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.230352][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 85.277997][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 85.311889][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.343112][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 85.357536][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.413576][ T7099] wg1 speed is unknown, defaulting to 1000 [ 85.420083][ T7099] lo speed is unknown, defaulting to 1000 [ 85.502313][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 85.513433][ T7102] loop4: detected capacity change from 0 to 256 [ 85.520257][ T7102] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.573090][ T7107] loop4: detected capacity change from 0 to 256 [ 85.579863][ T7107] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.619505][ T7111] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1276'. [ 85.662370][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 85.696808][ T7117] FAULT_INJECTION: forcing a failure. [ 85.696808][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 85.709694][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.709725][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.709809][ T7117] Call Trace: [ 85.709817][ T7117] [ 85.709826][ T7117] __dump_stack+0x1d/0x30 [ 85.709852][ T7117] dump_stack_lvl+0xe8/0x140 [ 85.709972][ T7117] dump_stack+0x15/0x1b [ 85.709995][ T7117] should_fail_ex+0x265/0x280 [ 85.710047][ T7117] ? vt_do_diacrit+0x231/0x6b0 [ 85.710069][ T7117] should_failslab+0x8c/0xb0 [ 85.710094][ T7117] __kmalloc_cache_noprof+0x4c/0x4a0 [ 85.710121][ T7117] vt_do_diacrit+0x231/0x6b0 [ 85.710216][ T7117] vt_ioctl+0xe0d/0x18a0 [ 85.710234][ T7117] ? tty_jobctrl_ioctl+0x29e/0x810 [ 85.710262][ T7117] tty_ioctl+0x7d8/0xb80 [ 85.710281][ T7117] ? __pfx_tty_ioctl+0x10/0x10 [ 85.710331][ T7117] __se_sys_ioctl+0xce/0x140 [ 85.710395][ T7117] __x64_sys_ioctl+0x43/0x50 [ 85.710414][ T7117] x64_sys_call+0x1816/0x3000 [ 85.710434][ T7117] do_syscall_64+0xd2/0x200 [ 85.710480][ T7117] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.710504][ T7117] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.710533][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.710560][ T7117] RIP: 0033:0x7fe7f42ef749 [ 85.710575][ T7117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.710592][ T7117] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.710611][ T7117] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 85.710623][ T7117] RDX: 00002000000006c0 RSI: 0000000000004bfa RDI: 0000000000000005 [ 85.710634][ T7117] RBP: 00007fe7f2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.710645][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.710681][ T7117] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 85.710699][ T7117] [ 85.974211][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 85.993484][ T7122] loop4: detected capacity change from 0 to 2048 [ 86.047101][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 86.053446][ T7132] loop1: detected capacity change from 0 to 512 [ 86.074991][ T7132] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.091086][ T7132] EXT4-fs (loop1): mount failed [ 86.283560][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 86.489802][ T7164] loop0: detected capacity change from 0 to 512 [ 86.506389][ T7164] EXT4-fs: Ignoring removed nobh option [ 86.565906][ T7172] loop1: detected capacity change from 0 to 512 [ 86.568666][ T7172] EXT4-fs: Ignoring removed nobh option [ 86.576403][ T7164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1296: corrupted inode contents [ 86.576633][ T7164] EXT4-fs (loop0): Remounting filesystem read-only [ 86.576706][ T7164] EXT4-fs (loop0): 1 truncate cleaned up [ 86.577235][ T7164] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.577760][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.577785][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.577808][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.610741][ T7172] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1298: corrupted inode contents [ 86.618891][ T7176] loop3: detected capacity change from 0 to 2048 [ 86.619303][ T7172] EXT4-fs (loop1): Remounting filesystem read-only [ 86.619397][ T7172] EXT4-fs (loop1): 1 truncate cleaned up [ 86.619914][ T7172] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.636423][ T61] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.641652][ T7164] syz!: rxe_newlink: already configured on team_slave_0 [ 86.645492][ T61] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.657715][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.765735][ T61] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.769255][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.886038][ T7172] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.913228][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.924652][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.995892][ T7212] bridge0: port 3(batadv1) entered blocking state [ 87.002684][ T7212] bridge0: port 3(batadv1) entered disabled state [ 87.009574][ T7212] batadv1: entered allmulticast mode [ 87.015363][ T7214] loop2: detected capacity change from 0 to 128 [ 87.015833][ T7212] batadv1: entered promiscuous mode [ 87.063008][ T7217] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 87.075439][ T7217] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.085201][ T7217] siw: device registration error -23 [ 87.136451][ T7224] FAULT_INJECTION: forcing a failure. [ 87.136451][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 87.149281][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.4.1310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.149314][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.149346][ T7224] Call Trace: [ 87.149354][ T7224] [ 87.149363][ T7224] __dump_stack+0x1d/0x30 [ 87.149389][ T7224] dump_stack_lvl+0xe8/0x140 [ 87.149484][ T7224] dump_stack+0x15/0x1b [ 87.149506][ T7224] should_fail_ex+0x265/0x280 [ 87.149529][ T7224] should_failslab+0x8c/0xb0 [ 87.149562][ T7224] kmem_cache_alloc_noprof+0x50/0x480 [ 87.149657][ T7224] ? audit_log_start+0x342/0x720 [ 87.149685][ T7224] audit_log_start+0x342/0x720 [ 87.149706][ T7224] ? kstrtouint+0x76/0xc0 [ 87.149738][ T7224] audit_seccomp+0x48/0x100 [ 87.149793][ T7224] ? __seccomp_filter+0x82d/0x1250 [ 87.149818][ T7224] __seccomp_filter+0x83e/0x1250 [ 87.149898][ T7224] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.149931][ T7224] ? vfs_write+0x7e8/0x960 [ 87.149966][ T7224] ? __rcu_read_unlock+0x4f/0x70 [ 87.150050][ T7224] ? __fget_files+0x184/0x1c0 [ 87.150110][ T7224] __secure_computing+0x82/0x150 [ 87.150207][ T7224] syscall_trace_enter+0xcf/0x1e0 [ 87.150238][ T7224] do_syscall_64+0xac/0x200 [ 87.150262][ T7224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.150292][ T7224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.150370][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.150394][ T7224] RIP: 0033:0x7fe7f42ef749 [ 87.150413][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.150434][ T7224] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 87.150520][ T7224] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 87.150533][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 87.150546][ T7224] RBP: 00007fe7f2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.150558][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.150569][ T7224] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 87.150607][ T7224] [ 87.511793][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 87.515270][ T7244] wg1 speed is unknown, defaulting to 1000 [ 87.521279][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 87.566344][ T7244] lo speed is unknown, defaulting to 1000 [ 87.617965][ T7265] FAULT_INJECTION: forcing a failure. [ 87.617965][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.631170][ T7265] CPU: 1 UID: 0 PID: 7265 Comm: syz.1.1324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.631200][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.631287][ T7265] Call Trace: [ 87.631294][ T7265] [ 87.631303][ T7265] __dump_stack+0x1d/0x30 [ 87.631410][ T7265] dump_stack_lvl+0xe8/0x140 [ 87.631432][ T7265] dump_stack+0x15/0x1b [ 87.631449][ T7265] should_fail_ex+0x265/0x280 [ 87.631467][ T7265] should_fail+0xb/0x20 [ 87.631482][ T7265] should_fail_usercopy+0x1a/0x20 [ 87.631503][ T7265] _copy_from_user+0x1c/0xb0 [ 87.631597][ T7265] __sys_connect+0xd0/0x2b0 [ 87.631632][ T7265] __x64_sys_connect+0x3f/0x50 [ 87.631660][ T7265] x64_sys_call+0x2c0c/0x3000 [ 87.631714][ T7265] do_syscall_64+0xd2/0x200 [ 87.631733][ T7265] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.631757][ T7265] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.631862][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.631885][ T7265] RIP: 0033:0x7f2a296bf749 [ 87.631900][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.631916][ T7265] RSP: 002b:00007f2a28127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 87.631937][ T7265] RAX: ffffffffffffffda RBX: 00007f2a29915fa0 RCX: 00007f2a296bf749 [ 87.631951][ T7265] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 87.631964][ T7265] RBP: 00007f2a28127090 R08: 0000000000000000 R09: 0000000000000000 [ 87.632006][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.632017][ T7265] R13: 00007f2a29916038 R14: 00007f2a29915fa0 R15: 00007ffe256c89d8 [ 87.632036][ T7265] [ 87.633630][ T7246] wg1 speed is unknown, defaulting to 1000 [ 87.813340][ T7246] lo speed is unknown, defaulting to 1000 [ 87.858771][ T7274] loop1: detected capacity change from 0 to 512 [ 87.865708][ T7274] EXT4-fs: Ignoring removed nobh option [ 87.883548][ T7263] siw: device registration error -23 [ 87.899027][ T7274] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1328: corrupted inode contents [ 87.931797][ T7274] EXT4-fs (loop1): Remounting filesystem read-only [ 87.945047][ T7274] EXT4-fs (loop1): 1 truncate cleaned up [ 87.961516][ T38] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.972325][ T38] __quota_error: 592 callbacks suppressed [ 87.972418][ T38] Quota error (device loop1): write_blk: dquota write failed [ 87.981273][ T7274] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.985676][ T38] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 88.006332][ T38] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.017216][ T38] Quota error (device loop1): write_blk: dquota write failed [ 88.025337][ T38] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 88.035490][ T38] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.035544][ T38] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 88.035588][ T38] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.043925][ T29] audit: type=1326 audit(1764539354.539:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2a296bf749 code=0x7ffc0000 [ 88.047825][ T7274] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.116799][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.130060][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.485233][ T7308] siw: device registration error -23 [ 88.621910][ T7326] loop4: detected capacity change from 0 to 2048 [ 89.005413][ T1792] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.267908][ T7396] siw: device registration error -23 [ 89.333427][ T7402] loop2: detected capacity change from 0 to 256 [ 89.340382][ T7402] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.398467][ T29] audit: type=1326 audit(1764539355.899:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.0.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 89.447895][ T29] audit: type=1326 audit(1764539355.899:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.0.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 89.453866][ T7410] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.472091][ T29] audit: type=1326 audit(1764539355.899:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.0.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41de96f749 code=0x7ffc0000 [ 89.504786][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.512639][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.521148][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.529197][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.536760][ T1036] rtc rtc0: __rtc_set_alarm: err=-22 [ 89.665007][ T7427] loop3: detected capacity change from 0 to 164 [ 89.686291][ T7427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.702872][ T7427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.714045][ T7429] loop4: detected capacity change from 0 to 256 [ 89.721493][ T7427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.730353][ T7427] rock: directory entry would overflow storage [ 89.736134][ T7429] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.736965][ T7427] rock: sig=0x4f50, size=4, remaining=3 [ 89.754564][ T7427] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.780501][ T7427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.789073][ T7427] Symlink component flag not implemented [ 89.794831][ T7427] Symlink component flag not implemented [ 90.046951][ T7436] __nla_validate_parse: 23 callbacks suppressed [ 90.046972][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1370'. [ 90.078643][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 90.155639][ T7453] FAULT_INJECTION: forcing a failure. [ 90.155639][ T7453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.168852][ T7453] CPU: 0 UID: 0 PID: 7453 Comm: syz.4.1374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.168888][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.168901][ T7453] Call Trace: [ 90.168909][ T7453] [ 90.168917][ T7453] __dump_stack+0x1d/0x30 [ 90.168970][ T7453] dump_stack_lvl+0xe8/0x140 [ 90.168991][ T7453] dump_stack+0x15/0x1b [ 90.169010][ T7453] should_fail_ex+0x265/0x280 [ 90.169076][ T7453] should_fail+0xb/0x20 [ 90.169092][ T7453] should_fail_usercopy+0x1a/0x20 [ 90.169113][ T7453] _copy_from_user+0x1c/0xb0 [ 90.169194][ T7453] do_tcp_setsockopt+0x41c/0x1670 [ 90.169212][ T7453] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 90.169235][ T7453] tcp_setsockopt+0x51/0xb0 [ 90.169252][ T7453] sock_common_setsockopt+0x69/0x80 [ 90.169283][ T7453] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 90.169305][ T7453] __sys_setsockopt+0x184/0x200 [ 90.169338][ T7453] __x64_sys_setsockopt+0x64/0x80 [ 90.169365][ T7453] x64_sys_call+0x20ec/0x3000 [ 90.169384][ T7453] do_syscall_64+0xd2/0x200 [ 90.169408][ T7453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.169434][ T7453] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.169479][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.169543][ T7453] RIP: 0033:0x7fe7f42ef749 [ 90.169558][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.169586][ T7453] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.169605][ T7453] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 90.169617][ T7453] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000004 [ 90.169655][ T7453] RBP: 00007fe7f2d4f090 R08: 0000000000000004 R09: 0000000000000000 [ 90.169665][ T7453] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 90.169676][ T7453] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 90.169693][ T7453] [ 90.396418][ T7458] loop4: detected capacity change from 0 to 512 [ 90.422961][ T7458] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.445313][ T7458] EXT4-fs (loop4): mount failed [ 90.675830][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 90.866311][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 91.030893][ T3600] Bluetooth: hci0: command 0x1003 tx timeout [ 91.031016][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.277450][ T7516] loop2: detected capacity change from 0 to 512 [ 91.285243][ T7516] EXT4-fs: Ignoring removed nobh option [ 91.314194][ T7516] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1391: corrupted inode contents [ 91.326509][ T7516] EXT4-fs (loop2): Remounting filesystem read-only [ 91.334167][ T7516] EXT4-fs (loop2): 1 truncate cleaned up [ 91.340779][ T7516] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.353308][ T38] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.364245][ T38] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.375715][ T38] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.392959][ T7516] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.402587][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.417822][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.460298][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1397'. [ 91.503714][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 91.514677][ T7535] loop0: detected capacity change from 0 to 256 [ 91.522298][ T7535] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.770217][ T7560] loop3: detected capacity change from 0 to 512 [ 91.785441][ T7560] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.801575][ T7560] EXT4-fs (loop3): mount failed [ 91.845622][ T7562] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1405'. [ 91.891664][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 91.913670][ T7575] siw: device registration error -23 [ 91.926493][ T7577] FAULT_INJECTION: forcing a failure. [ 91.926493][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.939785][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.939832][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.939844][ T7577] Call Trace: [ 91.939848][ T7577] [ 91.939853][ T7577] __dump_stack+0x1d/0x30 [ 91.939871][ T7577] dump_stack_lvl+0xe8/0x140 [ 91.939964][ T7577] dump_stack+0x15/0x1b [ 91.939976][ T7577] should_fail_ex+0x265/0x280 [ 91.940019][ T7577] should_fail+0xb/0x20 [ 91.940029][ T7577] should_fail_usercopy+0x1a/0x20 [ 91.940042][ T7577] _copy_from_user+0x1c/0xb0 [ 91.940118][ T7577] ___sys_sendmsg+0xc1/0x1d0 [ 91.940140][ T7577] __x64_sys_sendmsg+0xd4/0x160 [ 91.940155][ T7577] x64_sys_call+0x191e/0x3000 [ 91.940243][ T7577] do_syscall_64+0xd2/0x200 [ 91.940329][ T7577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.940373][ T7577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.940423][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.940437][ T7577] RIP: 0033:0x7fe7f42ef749 [ 91.940448][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.940495][ T7577] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.940509][ T7577] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 91.940548][ T7577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 91.940556][ T7577] RBP: 00007fe7f2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.940564][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.940579][ T7577] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 91.940592][ T7577] [ 92.742010][ T7608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 92.758916][ T7608] loop3: detected capacity change from 0 to 1024 [ 92.980989][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 92.981010][ T29] audit: type=1326 audit(1764539359.479:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf034f749 code=0x0 [ 93.033576][ T29] audit: type=1326 audit(1764539359.539:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.058264][ T29] audit: type=1326 audit(1764539359.559:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.082403][ T29] audit: type=1326 audit(1764539359.559:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.106368][ T29] audit: type=1326 audit(1764539359.559:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.130285][ T29] audit: type=1326 audit(1764539359.559:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.154926][ T29] audit: type=1326 audit(1764539359.559:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.178648][ T29] audit: type=1326 audit(1764539359.559:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf034f749 code=0x7ffc0000 [ 93.225985][ T29] audit: type=1400 audit(1764539359.729:5832): avc: denied { connect } for pid=7628 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.246564][ T29] audit: type=1400 audit(1764539359.739:5833): avc: denied { firmware_load } for pid=7628 comm="syz.4.1429" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 93.305515][ T7631] loop0: detected capacity change from 0 to 512 [ 93.332433][ T7631] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.347952][ T7631] EXT4-fs (loop0): mount failed [ 93.390669][ T7637] loop0: detected capacity change from 0 to 512 [ 93.421740][ T7637] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.447887][ T7637] EXT4-fs (loop0): mount failed [ 93.460875][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1434'. [ 93.514703][ T7649] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 93.524272][ T7649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1435'. [ 93.633159][ T7649] loop1: detected capacity change from 0 to 512 [ 93.651717][ T7649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.667284][ T7649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 93.677869][ T7649] System zones: 1-12 [ 93.684366][ T7649] EXT4-fs (loop1): 1 truncate cleaned up [ 93.809917][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.822408][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.894002][ T7669] loop2: detected capacity change from 0 to 512 [ 93.912719][ T7669] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.928067][ T7669] EXT4-fs (loop2): mount failed [ 93.969305][ T7673] loop2: detected capacity change from 0 to 256 [ 93.976339][ T7673] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.040638][ T7679] loop2: detected capacity change from 0 to 512 [ 94.047501][ T7679] EXT4-fs: Ignoring removed nobh option [ 94.064462][ T7679] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1444: corrupted inode contents [ 94.077251][ T7679] EXT4-fs (loop2): Remounting filesystem read-only [ 94.084376][ T7679] EXT4-fs (loop2): 1 truncate cleaned up [ 94.090442][ T7679] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.101316][ T38] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.112141][ T38] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.122811][ T38] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.144545][ T7679] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.152593][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.161580][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.306234][ T7684] SELinux: failed to load policy [ 94.417756][ T7696] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.447123][ T7696] loop4: detected capacity change from 0 to 1024 [ 94.453814][ T7698] loop0: detected capacity change from 0 to 512 [ 94.462983][ T7700] FAULT_INJECTION: forcing a failure. [ 94.462983][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 94.475856][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.1.1453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.475886][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.475898][ T7700] Call Trace: [ 94.475907][ T7700] [ 94.475916][ T7700] __dump_stack+0x1d/0x30 [ 94.476007][ T7700] dump_stack_lvl+0xe8/0x140 [ 94.476075][ T7700] dump_stack+0x15/0x1b [ 94.476096][ T7700] should_fail_ex+0x265/0x280 [ 94.476117][ T7700] should_failslab+0x8c/0xb0 [ 94.476165][ T7700] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 94.476233][ T7700] ? __alloc_skb+0x101/0x320 [ 94.476263][ T7700] __alloc_skb+0x101/0x320 [ 94.476293][ T7700] alloc_skb_with_frags+0x7d/0x470 [ 94.476355][ T7700] sock_alloc_send_pskb+0x430/0x4e0 [ 94.476382][ T7700] __ip_append_data+0x18bd/0x2440 [ 94.476415][ T7700] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 94.476549][ T7700] ? ipv4_mtu+0x210/0x230 [ 94.476576][ T7700] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 94.476603][ T7700] ip_make_skb+0x137/0x2c0 [ 94.476648][ T7700] udp_sendmsg+0x1013/0x13c0 [ 94.476680][ T7700] ? __rcu_read_unlock+0x4f/0x70 [ 94.476707][ T7700] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 94.476743][ T7700] ? __pfx_udp_sendmsg+0x10/0x10 [ 94.476773][ T7700] inet_sendmsg+0xac/0xd0 [ 94.476793][ T7700] __sock_sendmsg+0x102/0x180 [ 94.476898][ T7700] ____sys_sendmsg+0x345/0x4e0 [ 94.476922][ T7700] ___sys_sendmsg+0x17b/0x1d0 [ 94.476955][ T7700] __sys_sendmmsg+0x178/0x300 [ 94.476986][ T7700] __x64_sys_sendmmsg+0x57/0x70 [ 94.477080][ T7700] x64_sys_call+0x1c4a/0x3000 [ 94.477105][ T7700] do_syscall_64+0xd2/0x200 [ 94.477129][ T7700] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.477287][ T7700] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.477324][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.477421][ T7700] RIP: 0033:0x7f2a296bf749 [ 94.477440][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.477459][ T7700] RSP: 002b:00007f2a28127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.477480][ T7700] RAX: ffffffffffffffda RBX: 00007f2a29915fa0 RCX: 00007f2a296bf749 [ 94.477492][ T7700] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 94.477504][ T7700] RBP: 00007f2a28127090 R08: 0000000000000000 R09: 0000000000000000 [ 94.477544][ T7700] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 94.477556][ T7700] R13: 00007f2a29916038 R14: 00007f2a29915fa0 R15: 00007ffe256c89d8 [ 94.477576][ T7700] [ 94.745289][ T7698] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.772226][ T7698] EXT4-fs (loop0): mount failed [ 94.809882][ T7710] loop4: detected capacity change from 0 to 164 [ 94.820108][ T7710] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.837026][ T7712] FAULT_INJECTION: forcing a failure. [ 94.837026][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.850275][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.0.1457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.850304][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.850315][ T7712] Call Trace: [ 94.850321][ T7712] [ 94.850329][ T7712] __dump_stack+0x1d/0x30 [ 94.850352][ T7712] dump_stack_lvl+0xe8/0x140 [ 94.850414][ T7712] dump_stack+0x15/0x1b [ 94.850534][ T7712] should_fail_ex+0x265/0x280 [ 94.850552][ T7712] should_fail+0xb/0x20 [ 94.850567][ T7712] should_fail_usercopy+0x1a/0x20 [ 94.850618][ T7712] _copy_to_user+0x20/0xa0 [ 94.850648][ T7712] simple_read_from_buffer+0xb5/0x130 [ 94.850671][ T7712] proc_fail_nth_read+0x10e/0x150 [ 94.850774][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.850865][ T7712] vfs_read+0x1a8/0x770 [ 94.850890][ T7712] ? __rcu_read_unlock+0x4f/0x70 [ 94.850918][ T7712] ? __fget_files+0x184/0x1c0 [ 94.850997][ T7712] ksys_read+0xda/0x1a0 [ 94.851026][ T7712] __x64_sys_read+0x40/0x50 [ 94.851075][ T7712] x64_sys_call+0x27c0/0x3000 [ 94.851128][ T7712] do_syscall_64+0xd2/0x200 [ 94.851216][ T7712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.851241][ T7712] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.851352][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.851377][ T7712] RIP: 0033:0x7f41de96e15c [ 94.851395][ T7712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.851411][ T7712] RSP: 002b:00007f41dd3d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.851491][ T7712] RAX: ffffffffffffffda RBX: 00007f41debc5fa0 RCX: 00007f41de96e15c [ 94.851506][ T7712] RDX: 000000000000000f RSI: 00007f41dd3d70a0 RDI: 0000000000000004 [ 94.851521][ T7712] RBP: 00007f41dd3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.851602][ T7712] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 94.851616][ T7712] R13: 00007f41debc6038 R14: 00007f41debc5fa0 R15: 00007ffc1eaf00e8 [ 94.851645][ T7712] [ 95.062669][ T7715] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 95.062754][ T7715] __nla_validate_parse: 5 callbacks suppressed [ 95.062778][ T7715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1458'. [ 95.114907][ T7720] loop4: detected capacity change from 0 to 512 [ 95.143854][ T7720] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.171017][ T7720] EXT4-fs (loop4): mount failed [ 95.243217][ T7730] loop4: detected capacity change from 0 to 164 [ 95.251035][ T7730] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.253942][ T7730] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.285394][ T7733] loop0: detected capacity change from 0 to 164 [ 95.286451][ T7733] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.287204][ T7733] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.305178][ T7715] loop2: detected capacity change from 0 to 512 [ 95.306423][ T7736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.306483][ T7736] rock: directory entry would overflow storage [ 95.306491][ T7736] rock: sig=0x4f50, size=4, remaining=3 [ 95.306504][ T7736] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.312677][ T7736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.312766][ T7736] Symlink component flag not implemented [ 95.312774][ T7736] Symlink component flag not implemented [ 95.338369][ T7737] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.338431][ T7737] rock: directory entry would overflow storage [ 95.338440][ T7737] rock: sig=0x4f50, size=4, remaining=3 [ 95.338453][ T7737] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.338505][ T7715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.338745][ T7737] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.338786][ T7737] Symlink component flag not implemented [ 95.338792][ T7737] Symlink component flag not implemented [ 95.353215][ T7715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 95.488967][ T7715] System zones: 1-12 [ 95.496517][ T7715] EXT4-fs (loop2): 1 truncate cleaned up [ 95.556426][ T7741] loop0: detected capacity change from 0 to 164 [ 95.567950][ T7741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.583717][ T7743] loop4: detected capacity change from 0 to 512 [ 95.612885][ T7743] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.628566][ T7741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.637870][ T7741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.646291][ T7741] rock: directory entry would overflow storage [ 95.652699][ T7741] rock: sig=0x4f50, size=4, remaining=3 [ 95.658353][ T7741] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.667214][ T7741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 95.675672][ T7741] Symlink component flag not implemented [ 95.681393][ T7741] Symlink component flag not implemented [ 95.688640][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.776357][ T7743] EXT4-fs (loop4): mount failed [ 95.796561][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.816378][ T7757] FAULT_INJECTION: forcing a failure. [ 95.816378][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 95.829897][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.4.1475 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.829972][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.830055][ T7757] Call Trace: [ 95.830137][ T7757] [ 95.830144][ T7757] __dump_stack+0x1d/0x30 [ 95.830167][ T7757] dump_stack_lvl+0xe8/0x140 [ 95.830220][ T7757] dump_stack+0x15/0x1b [ 95.830236][ T7757] should_fail_ex+0x265/0x280 [ 95.830328][ T7757] should_failslab+0x8c/0xb0 [ 95.830360][ T7757] kmem_cache_alloc_noprof+0x50/0x480 [ 95.830421][ T7757] ? audit_log_start+0x342/0x720 [ 95.830444][ T7757] audit_log_start+0x342/0x720 [ 95.830466][ T7757] ? kstrtouint+0x76/0xc0 [ 95.830500][ T7757] audit_seccomp+0x48/0x100 [ 95.830589][ T7757] ? __seccomp_filter+0x82d/0x1250 [ 95.830694][ T7757] __seccomp_filter+0x83e/0x1250 [ 95.830726][ T7757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.830835][ T7757] ? vfs_write+0x7e8/0x960 [ 95.830860][ T7757] ? __rcu_read_unlock+0x4f/0x70 [ 95.831036][ T7757] ? __fget_files+0x184/0x1c0 [ 95.831070][ T7757] __secure_computing+0x82/0x150 [ 95.831116][ T7757] syscall_trace_enter+0xcf/0x1e0 [ 95.831144][ T7757] do_syscall_64+0xac/0x200 [ 95.831167][ T7757] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.831251][ T7757] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.831286][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.831310][ T7757] RIP: 0033:0x7fe7f42ef749 [ 95.831329][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.831425][ T7757] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 95.831446][ T7757] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 95.831458][ T7757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff [ 95.831489][ T7757] RBP: 00007fe7f2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.831502][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.831516][ T7757] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 95.831546][ T7757] [ 96.105907][ T7765] syzkaller0: entered promiscuous mode [ 96.111756][ T7765] syzkaller0: entered allmulticast mode [ 96.169680][ T7769] loop4: detected capacity change from 0 to 512 [ 96.204801][ T7769] EXT4-fs: Ignoring removed nobh option [ 96.227754][ T7769] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1480: corrupted inode contents [ 96.275770][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 96.289001][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'. [ 96.298497][ T7769] EXT4-fs (loop4): Remounting filesystem read-only [ 96.309753][ T7769] EXT4-fs (loop4): 1 truncate cleaned up [ 96.318378][ T7769] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.328986][ T2446] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.340117][ T2446] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.351218][ T2446] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.380138][ T7769] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.392838][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.401580][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.490356][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 96.491466][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 96.502448][ T7794] loop0: detected capacity change from 0 to 256 [ 96.514796][ T7793] loop1: detected capacity change from 0 to 256 [ 96.517267][ T7794] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.521868][ T7793] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.663643][ T7808] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1495'. [ 96.679335][ T7810] loop0: detected capacity change from 0 to 164 [ 96.705370][ T7810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.733302][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'. [ 96.741750][ T7810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.773987][ T7810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.782587][ T7810] rock: directory entry would overflow storage [ 96.788955][ T7810] rock: sig=0x4f50, size=4, remaining=3 [ 96.794603][ T7810] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.811991][ T7810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.844959][ T7810] Symlink component flag not implemented [ 96.850664][ T7810] Symlink component flag not implemented [ 96.855340][ T7827] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 96.865159][ T7827] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1503'. [ 96.876305][ T7826] loop2: detected capacity change from 0 to 512 [ 96.901392][ T7826] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.916727][ T7826] EXT4-fs (loop2): mount failed [ 96.937949][ T7832] wg1 speed is unknown, defaulting to 1000 [ 96.944491][ T7832] lo speed is unknown, defaulting to 1000 [ 97.001512][ T7827] loop1: detected capacity change from 0 to 512 [ 97.032095][ T7833] wg1 speed is unknown, defaulting to 1000 [ 97.050608][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 97.070218][ T7833] lo speed is unknown, defaulting to 1000 [ 97.077882][ T7827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.095654][ T7835] loop2: detected capacity change from 0 to 256 [ 97.106634][ T7835] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.169982][ T7849] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 97.187131][ T7827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 97.220537][ T7827] System zones: 1-12 [ 97.238322][ T7827] EXT4-fs (loop1): 1 truncate cleaned up [ 97.379643][ T7863] loop0: detected capacity change from 0 to 164 [ 97.396576][ T7863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.421811][ T7863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.423457][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.443782][ T7863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.447431][ T7868] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.469497][ T7863] rock: directory entry would overflow storage [ 97.476118][ T7863] rock: sig=0x4f50, size=4, remaining=3 [ 97.482008][ T7863] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.496866][ T7868] loop2: detected capacity change from 0 to 1024 [ 97.524793][ T7873] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.543089][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.554737][ T7873] Symlink component flag not implemented [ 97.560816][ T7873] Symlink component flag not implemented [ 97.567893][ T7868] EXT4-fs mount: 30 callbacks suppressed [ 97.567911][ T7868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.611145][ T7879] loop4: detected capacity change from 0 to 512 [ 97.617812][ T7879] EXT4-fs: Ignoring removed nobh option [ 97.687858][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 97.694198][ T7879] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1520: corrupted inode contents [ 97.724179][ T7879] EXT4-fs (loop4): Remounting filesystem read-only [ 97.731804][ T7879] EXT4-fs (loop4): 1 truncate cleaned up [ 97.738215][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.738430][ T7879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.761034][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.761076][ T7879] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.772041][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.793995][ T7890] loop3: detected capacity change from 0 to 256 [ 97.801266][ T7879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.812342][ T7890] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.832321][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.955103][ T7879] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.965384][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.974916][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.991549][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 97.991575][ T29] audit: type=1326 audit(1764539364.499:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0233f65e7 code=0x7ffc0000 [ 98.021825][ T29] audit: type=1326 audit(1764539364.499:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa02339b829 code=0x7ffc0000 [ 98.024471][ T7906] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 98.046732][ T29] audit: type=1326 audit(1764539364.499:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa0233ff749 code=0x7ffc0000 [ 98.055670][ T29] audit: type=1326 audit(1764539364.559:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0233f65e7 code=0x7ffc0000 [ 98.103556][ T29] audit: type=1326 audit(1764539364.559:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa02339b829 code=0x7ffc0000 [ 98.127642][ T29] audit: type=1326 audit(1764539364.559:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0233f65e7 code=0x7ffc0000 [ 98.151376][ T29] audit: type=1326 audit(1764539364.559:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa02339b829 code=0x7ffc0000 [ 98.175542][ T29] audit: type=1326 audit(1764539364.559:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa0233ff749 code=0x7ffc0000 [ 98.235536][ T7911] loop3: detected capacity change from 0 to 512 [ 98.243968][ T29] audit: type=1326 audit(1764539364.589:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0233f65e7 code=0x7ffc0000 [ 98.267883][ T29] audit: type=1326 audit(1764539364.589:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa02339b829 code=0x7ffc0000 [ 98.276742][ T7906] loop0: detected capacity change from 0 to 512 [ 98.306374][ T7911] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.314455][ T7906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.329868][ T7911] EXT4-fs (loop3): mount failed [ 98.340218][ T7906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 98.354072][ T7906] System zones: 1-12 [ 98.367780][ T7906] EXT4-fs (loop0): 1 truncate cleaned up [ 98.401865][ T7906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.420380][ T7918] wg1 speed is unknown, defaulting to 1000 [ 98.420698][ T7918] lo speed is unknown, defaulting to 1000 [ 98.471098][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.486460][ T7919] wg1 speed is unknown, defaulting to 1000 [ 98.501344][ T7919] lo speed is unknown, defaulting to 1000 [ 98.521924][ T7918] FAULT_INJECTION: forcing a failure. [ 98.521924][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.535287][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.3.1534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.535376][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.535389][ T7918] Call Trace: [ 98.535397][ T7918] [ 98.535406][ T7918] __dump_stack+0x1d/0x30 [ 98.535462][ T7918] dump_stack_lvl+0xe8/0x140 [ 98.535485][ T7918] dump_stack+0x15/0x1b [ 98.535577][ T7918] should_fail_ex+0x265/0x280 [ 98.535601][ T7918] should_fail+0xb/0x20 [ 98.535620][ T7918] should_fail_usercopy+0x1a/0x20 [ 98.535644][ T7918] _copy_from_iter+0xd2/0xe80 [ 98.535669][ T7918] ? __build_skb_around+0x1ab/0x200 [ 98.535761][ T7918] ? __alloc_skb+0x223/0x320 [ 98.535792][ T7918] netlink_sendmsg+0x471/0x6b0 [ 98.535818][ T7918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.535889][ T7918] __sock_sendmsg+0x145/0x180 [ 98.535913][ T7918] ____sys_sendmsg+0x31e/0x4e0 [ 98.535937][ T7918] ___sys_sendmsg+0x17b/0x1d0 [ 98.535969][ T7918] __x64_sys_sendmsg+0xd4/0x160 [ 98.536016][ T7918] x64_sys_call+0x191e/0x3000 [ 98.536040][ T7918] do_syscall_64+0xd2/0x200 [ 98.536062][ T7918] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.536093][ T7918] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.536156][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.536242][ T7918] RIP: 0033:0x7f5cf034f749 [ 98.536261][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.536279][ T7918] RSP: 002b:00007f5ceedaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.536302][ T7918] RAX: ffffffffffffffda RBX: 00007f5cf05a5fa0 RCX: 00007f5cf034f749 [ 98.536316][ T7918] RDX: 0000000000040004 RSI: 0000200000002bc0 RDI: 0000000000000007 [ 98.536329][ T7918] RBP: 00007f5ceedaf090 R08: 0000000000000000 R09: 0000000000000000 [ 98.536359][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.536372][ T7918] R13: 00007f5cf05a6038 R14: 00007f5cf05a5fa0 R15: 00007ffef5699338 [ 98.536392][ T7918] [ 98.589683][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.753796][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.831860][ T7940] FAULT_INJECTION: forcing a failure. [ 98.831860][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.845199][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.845235][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.845250][ T7940] Call Trace: [ 98.845257][ T7940] [ 98.845267][ T7940] __dump_stack+0x1d/0x30 [ 98.845291][ T7940] dump_stack_lvl+0xe8/0x140 [ 98.845312][ T7940] dump_stack+0x15/0x1b [ 98.845391][ T7940] should_fail_ex+0x265/0x280 [ 98.845410][ T7940] should_fail+0xb/0x20 [ 98.845424][ T7940] should_fail_usercopy+0x1a/0x20 [ 98.845443][ T7940] _copy_from_iter+0xd2/0xe80 [ 98.845532][ T7940] ? __build_skb_around+0x1ab/0x200 [ 98.845560][ T7940] ? __alloc_skb+0x223/0x320 [ 98.845586][ T7940] netlink_sendmsg+0x471/0x6b0 [ 98.845607][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.845627][ T7940] __sock_sendmsg+0x145/0x180 [ 98.845712][ T7940] ____sys_sendmsg+0x31e/0x4e0 [ 98.845735][ T7940] ___sys_sendmsg+0x17b/0x1d0 [ 98.845765][ T7940] __x64_sys_sendmsg+0xd4/0x160 [ 98.845787][ T7940] x64_sys_call+0x191e/0x3000 [ 98.845864][ T7940] do_syscall_64+0xd2/0x200 [ 98.845885][ T7940] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.845916][ T7940] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.845948][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.846016][ T7940] RIP: 0033:0x7fe7f42ef749 [ 98.846035][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.846053][ T7940] RSP: 002b:00007fe7f2d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.846076][ T7940] RAX: ffffffffffffffda RBX: 00007fe7f4545fa0 RCX: 00007fe7f42ef749 [ 98.846091][ T7940] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 98.846105][ T7940] RBP: 00007fe7f2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.846118][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.846132][ T7940] R13: 00007fe7f4546038 R14: 00007fe7f4545fa0 R15: 00007ffd901e7968 [ 98.846189][ T7940] [ 99.109849][ T7945] loop1: detected capacity change from 0 to 256 [ 99.125443][ T7945] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.137745][ T7949] loop3: detected capacity change from 0 to 512 [ 99.200894][ T7956] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 99.221384][ T7949] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.252805][ T7949] EXT4-fs (loop3): mount failed [ 99.258375][ T7956] loop2: detected capacity change from 0 to 1024 [ 99.313115][ T7956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.379407][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.531313][ T7986] loop4: detected capacity change from 0 to 256 [ 99.538456][ T7986] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.665057][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.748957][ T8019] loop0: detected capacity change from 0 to 164 [ 99.755880][ T8012] loop4: detected capacity change from 0 to 256 [ 99.773916][ T8019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.788164][ T8012] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.817947][ T8019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.822208][ T8024] loop2: detected capacity change from 0 to 164 [ 99.836301][ T8019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.856640][ T8019] Symlink component flag not implemented [ 99.862546][ T8019] Symlink component flag not implemented [ 99.891053][ T8024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.914225][ T8024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.941399][ T8024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.950120][ T8024] Symlink component flag not implemented [ 99.955857][ T8024] Symlink component flag not implemented [ 100.174815][ T8051] __nla_validate_parse: 12 callbacks suppressed [ 100.174835][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1586'. [ 100.216246][ T8053] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 100.226095][ T8053] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1587'. [ 100.295371][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 100.391341][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 100.416688][ T8062] loop2: detected capacity change from 0 to 256 [ 100.437802][ T8062] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.476746][ T3005] ================================================================== [ 100.485065][ T3005] BUG: KCSAN: data-race in dont_mount / step_into [ 100.491610][ T3005] [ 100.494139][ T3005] read-write to 0xffff888106ed7480 of 4 bytes by task 3306 on cpu 1: [ 100.502317][ T3005] dont_mount+0x2a/0x40 [ 100.506657][ T3005] vfs_unlink+0x28f/0x420 [ 100.511026][ T3005] do_unlinkat+0x24e/0x480 [ 100.515478][ T3005] __x64_sys_unlink+0x2e/0x40 [ 100.515847][ T8053] loop3: detected capacity change from 0 to 512 [ 100.520189][ T3005] x64_sys_call+0x2dcf/0x3000 [ 100.520216][ T3005] do_syscall_64+0xd2/0x200 [ 100.520238][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.520260][ T3005] [ 100.520266][ T3005] read to 0xffff888106ed7480 of 4 bytes by task 3005 on cpu 0: [ 100.520282][ T3005] step_into+0x12f/0x7f0 [ 100.520311][ T3005] walk_component+0x162/0x220 [ 100.520337][ T3005] path_lookupat+0xfe/0x2a0 [ 100.520367][ T3005] filename_lookup+0x147/0x340 [ 100.520396][ T3005] do_readlinkat+0x7d/0x320 [ 100.520416][ T3005] __x64_sys_readlink+0x47/0x60 [ 100.520434][ T3005] x64_sys_call+0x28de/0x3000 [ 100.520458][ T3005] do_syscall_64+0xd2/0x200 [ 100.520477][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.520499][ T3005] [ 100.520503][ T3005] value changed: 0x00300080 -> 0x00004080 [ 100.520516][ T3005] [ 100.520520][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 100.520533][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.520567][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.520580][ T3005] ================================================================== [ 100.678919][ T8053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.710530][ T8053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 100.735784][ T8053] System zones: 1-12 [ 100.742495][ T8053] EXT4-fs (loop3): 1 truncate cleaned up [ 100.750535][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.884022][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.894771][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.415119][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.