last executing test programs: 28.885080719s ago: executing program 3 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x4a) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x10000, 0x14002, 0x80002, 0x3}, 0x0, 0x0) timerfd_create(0x9, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) set_robust_list(0x0, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 27.619524107s ago: executing program 3 (id=208): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000180)='^[+)\x00', &(0x7f0000000200)='./file0\x00', r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(r1, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x100000000000}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0xf) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x3, 0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9689a5b0852936a2b9491ffd5b5762c4abbdeaa46aabe11c0f54ee3fe6ae0f859606f", 0x44}], 0x1) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 27.522038278s ago: executing program 3 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000003040)=""/4094, 0xffe}], 0x10000000000000d2, 0x8, 0x67) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef02000100", @ANYRESHEX=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 27.448613329s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) creat(&(0x7f0000000080)='./bus\x00', 0x152) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x2000040, &(0x7f0000000740)={[], [{@seclabel}, {@seclabel}, {@permit_directio}, {@flag='silent'}]}, 0x1, 0x78a, &(0x7f0000000a00)="$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") 27.200238721s ago: executing program 3 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000010000000000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x400) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x1000, 0x4, 0x8008, 0xe, 0x4, 0x8000, 0x4, 0x5, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x4}, &(0x7f0000000300)=0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000081c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 26.826644414s ago: executing program 3 (id=226): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) getxattr(0x0, 0x0, &(0x7f0000000080)=""/153, 0x99) 26.810665074s ago: executing program 32 (id=226): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) getxattr(0x0, 0x0, &(0x7f0000000080)=""/153, 0x99) 4.07760671s ago: executing program 0 (id=998): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setreuid(0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x720, 0x401) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 2.505908792s ago: executing program 4 (id=1037): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000000c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x9}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x20000800}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1.701016198s ago: executing program 4 (id=1043): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704feffffffffff8400000058e168848a94071b5a225bf11d9b98"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 1.646632828s ago: executing program 4 (id=1045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000780)='netlink_extack\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000240), 0x0, 0x0, &(0x7f0000000380)=""/76, 0x4c}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000009598000013840000202070250000000000040000000000000000bfa100000000000007010000f0000000000000003fe0f5c8581200000000060000200000000085000000730100001c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xb5b4) accept(r5, 0x0, 0x0) shutdown(r5, 0x1) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x2, 0x4, 0x1, 0xc3, 0x0, 0x9, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x8, 0x10000000, 0x6, 0x101}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 1.34335868s ago: executing program 2 (id=1051): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 1.270485321s ago: executing program 2 (id=1052): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) close(r0) 1.124448932s ago: executing program 5 (id=1057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "017cea08e90a62168facaecca577cb43f478fd5e6e5d4fb33ecffe357eac8a8e", "66d379b886319c62896eb4629b6baae1", {"a41819bdef458b3c84740f618752a2e5", "396954ec098e6a74ec194039740c8a59"}}}}}}}, 0x0) 1.108623232s ago: executing program 5 (id=1058): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff01000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ff"], 0x6c}}, 0x0) 1.068437752s ago: executing program 5 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1.036854673s ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000caab82bef200f620e3b6679157036b6311e671a541000000008064dec65eb59bd6dfe333b222b43f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xfdef) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rt_sigsuspend(&(0x7f0000000840)={[0x6]}, 0x8) r7 = socket(0x2a, 0x2, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000780)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/62, 0x3e}], 0x3, &(0x7f0000000700)=""/117, 0x75}, 0x40000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000006c0)=[{0x0, 0x0, 0x9, 0x9d}], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r9, {0xa}, {}, {0xb, 0xfff9}}, [@filter_kind_options=@f_flower={{0x46}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}, @TCA_RATE={0x0, 0x5, {0x0, 0x9}}]}, 0xfffffffffffffdd9}}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.025958872s ago: executing program 5 (id=1061): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioperm(0x0, 0x2, 0x7e) ioperm(0x7fffffffffffffff, 0x2, 0x2) unshare(0xa020480) r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x2) write$binfmt_script(r5, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) pwrite64(r5, &(0x7f0000000040)="ab181ea412d483124bf45fa9a4adb3f55cff852a1203ef19fe9a7884d648f5f902aa6b0617636ded99e310788f6d7cc2768f4521279409", 0x37, 0x2) splice(r5, &(0x7f00000000c0)=0x1, r5, &(0x7f0000000140)=0x7, 0x39b9f81c, 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f78790000000014000280050002000900000006000140000000000900010073797a30000000000900020073797a32000000001400000011000100"], 0x80}}, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000840)={@random="000000e200", @local, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0xab, 0xab, '\b\x00', "c944af", 0xdada, "90e51e84eb3f8198af470bcccb0f09ddec4dbf84b155c3889c26cb6080d5596da3a3363690b5d840874196e0752325a2a582b8a0f1d2923c072def02339998bd10919b09d5fca60e7a55e83c7e88bd96d9a5071466907be9e7c81093ff5c6dfc733f35b53c123fdb251f5d6553a0a5bed046577e173c6ee48175737a9091f0de1ba53ba1986e7c95a390cde9a36c153db258ccac29fb7ef7d83a3505bfbdbc73b2632a5e0086631023d1ceab3da1a93b1a35e83bbc880a"}}}}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/54, 0x36) r6 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000580)=""/107, 0x6b}, 0x7ff}], 0x1, 0x30, 0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000300)='.dead\x00', &(0x7f00000003c0)=@secondary) ioperm(0x0, 0x70000000000, 0x3) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 778.307264ms ago: executing program 4 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f00000006c0)={0x55, 0x8, 0xc, 0x6, 0x366, 0x81}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x6, 0x200000) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x64, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x3}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x1, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) pidfd_getfd(r10, r9, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 733.905125ms ago: executing program 4 (id=1063): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x3fe7bd5f28651f5c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) 678.611555ms ago: executing program 4 (id=1064): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) io_getevents(r7, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r7, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r8}]) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 448.712686ms ago: executing program 1 (id=1068): modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 447.984287ms ago: executing program 2 (id=1069): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000140), &(0x7f0000000240)=r1}, 0x20) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10020) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000480)={'\x00', 0x0, 0x1, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 447.412767ms ago: executing program 1 (id=1070): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@fat=@nfs_stale_rw}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq31E8ehOs/0Av3ryLlyIIXnqQrnQ3a7Y12B823dh8P1B2ujMvM7s7CW8XdjbvvXlaKblWyTQkkVJJSGpVtkSykpDQUHub8MujErUqVyd+fL5w5/6Dm/lCYXZedS6/cC2nqlMXPzx/+fbSx8bE3XdT78dkI/tw83vuy8bZjXOb2wvhp9caanSxVmuYRcfWpbJbsVRvO7ZxbS1XXbu+q77k1JaXW2qqS5Pp5brtumqqLa3YLW3UtFFvqXlsylW1LEsn0zJohg8dUVybnzf5ngwGcRjvtrNez5vhrpXFtZMYFAAA6C9/5v9yIvn/k7KrZVer++X/CSH/7x0//9/umjTidEju3ADkTbr9/d2N/B8AAAAAAAAAAAAAAAAAAAAAgP/BludlPM/LhNvwb0xEUiIS/h/3ONEbR7j+QzEOF8cs8uJeSsR53Sw2i8E2qM+XpCyO2DKdFPnpz4e2oDx3ozA7rb6srDsr7Xj/JcGxMD6U7R4/E8RrJH6lWUxKOtp/TjJypnt8bk98UkSaxVG5cjkSb0lGPj2Smjiy5M/rTvyrGdXrtwp7+h/32wEAAAAAcBpY+lt29/1vsJqkZWm4bMie+mBn5/mAZPZ5PqCyPiqd+BE5PxLfcQMAAAAAMEjc1ouKcRy7PsiFcTl81CCeOisVTJq/NvY8b2Wn0b93mhCRmI70m4j0wQk/7sLXZ8EFPEjjOH+VAAAAAPRCJ+mPeyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyugy4eFrY/ytpjke6G4zlKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8CgAA///JRBp/") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) 306.757748ms ago: executing program 2 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 305.009058ms ago: executing program 2 (id=1072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@local, @multicast]}) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x30080) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000d00)=""/239, 0xef}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10000) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") 279.407948ms ago: executing program 1 (id=1073): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) 232.679148ms ago: executing program 1 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @empty, 0x3}, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r6, 0xd}}, 0x48) 218.314768ms ago: executing program 1 (id=1075): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 192.012449ms ago: executing program 1 (id=1076): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2570, &(0x7f0000000080)={[{0xc3, 0x4e00, "a5de58aa8b35f48d20f4b6f37b4807e4d4a55ecf2ae22249fb6947bcb97b09c76e95dd71970ab584eed0410a9db5cb2201f48a58195b82a0537121cdec99e00cda364ccd22a565d2acf65e82d74dfd08bcca405da7fe27ff4f44e46ff4f58e09f62a38ba1526848942353ef1bf9717bc66dee4b09ead5f2ebde4afc128c0f1f648603d0c192187457ab8b1e3379009175c2bbd33fc210bdd5ed0e255b8e848a5abdda557ddb0008683acfed59d5c6d082e266d618793775002ab191067fa7c2e724a2a"}, {0xc6, 0x4e00, "3c74ea39b8c137cdde271100fda39777be0a85527976559f322c30a2371d171e0fdb41bef1f08a7c467c15c18452c01ade26d26643bbb30eed8b8f05c8e31b699c525f504087f080f1d4c88ce7f24222dabb742da96c3240c17847639fc76ed705787fc809b366f468490a1faca8c81581aa9fd5349104e53d38bf784caad2a5fc37aadd86f1f9a223bc12353456824840c789446b81e066eed219f333bd7e599e204a68d8b59421fa1a50633652e8b20144e27136f6ee8b8f46bcf55f435c4765f2578ac330"}, {0x1000, 0x4e00, "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"}, {0xc1, 0x4e00, "ec70b062be76f0c82e69205850b0910db76e0e624ed377864653ff2a5ce14a8c8edf3982fc94b4a0d81e0193ab2f436c977368b16ff7ddef4aadb7b50c64f69f9960b8f59c656ab0589fe58de04c59e2f072963c830fb19a0c157e31d0178991f43f86c1f0af30829431b8ba492517c5e53265356ca91bf51f15786bc59f9f9243d68595d94075a03261ee15ff3b1e208457d1d8900784fe8fdc96f55d93d26dbdce90e164cb515834f016ce24d561fc625a68d551ea037b5f84b1f81bc4848369"}, {0x97, 0x4e00, "b61dca342e17cba668e505c3b5d63c52d53d3e105f459e7dcfa9ff165668b392cdda44c1ec278f8656e1834dcd44a3ed194dd3f50f2ff3476802fbbde43dbe0bc1cc4bd22a3b6d47de678a1b11b6855676bcf23e05e40e9064e798896a59c27eefc94d9f49e502eb931c5c0d5d47e2ad0b5adb4b3e668b30aaba72afcc4b8f500f317f3476b9de6f44e2fe031ca71bb0645cbd44b48323"}, {}, {0xf5, 0x4e00, "3294599de7ef9c66b49fc3bc074c1fa01bd4b7d377a0cb9daa62e6bc22772136aa894ab3f301d05803c5ec96f15c33d200fb38fe7b5df0e24f3d990166aaf9ae063fedbd179de447eef8a7e70bfd573894e2ce5bdc92cde27e73889b7da819c7039884a8085d69bac97761a2edc3b6703aae66b316336b12e00ae4f2f7a25e7aa0b1d8164c60eb4d4ff62bbfef9174856bd5c624c392c83dfd652b157d86f5dab0de677204b9b899a74e215cc1c16cfb7c46853ef067dc764ce776dad2070db3046b0fc220971ff413101d633b48b208f51cca4c2d1e0ecf02d9d14ca16c2579dd7a698fbbd289d8fd9f4734bb88bf0f6859a07600"}, {0xb0, 0x4e00, "e8ddd969d39bf50f92c0f08c587e6eda4d86731ea37c7ab0f903e90268ff35c213ecfbf3c3e7632d692daab3f0567334803d8280e850cea665a242fcb36562f9ad474e72a34bfdc02a729a5cf0f417c25b93a8dc7e8e46f65290f7b183fa9aac95e1fa0e2619dc14e1ca8922541ccd41fd6413a54156c6ce308de9caeadd740784afe88dda0db36255037d85eb48ef73e1b3126cd307f7dd7d9b2408aaeedd676f4cded3c1b54c2447f229a45706285e"}, {0x1000, 0x4e00, "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"}, {0xb8, 0x4e00, "400e598dbce8c641ed89a06feb12fd0487504b3a26a4c1cfdc714090f4bf7cc903cbafd48744ab422928ef3f34b9a6eecdb0aa07aab14aa4f2896a125338cf166ca725f9482955682ff9d0de90c29583c1fb97fb68a867c1c40419bf4e9028d545e51041bd9fe42e33f241312ae7658e636a87fe2ae49969dd6e19514762be79b241a07ebf46030ca65b8abad86718cd2b2b0e6b3bdd850f615ea99a7f48f3bf3022a9d7987763bdd167391b8816293b92dce652c03b9526"}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002640)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000002700)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000026c0)=0x40, r2, 0x0, 0x0, 0x1}}, 0x20) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000027c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ce263ed4", {0x3, 0x100, 0x0, 0x7f, 0x2, 0x3}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000028c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002880), 0x106, 0x3}}, 0x20) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f00000029c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "a471f68b", {0x3, 0x102, 0x0, 0x2, 0xe, 0xdb}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000002a00)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r6 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000002ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x78}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000002dc0)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x110, 0xcb, 0x2, 0x6, 0xff, 0x3}, 0x102, &(0x7f0000002b40)={0x5, 0xf, 0x102, 0x6, [@generic={0x1c, 0x10, 0xb, "d110b9be9e3b28667ad4eb4de3b295ffa9f6c719a9924f0c29"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xc0, 0x62, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "ffb15f3f6f294b6f84b97264e9dc5231"}, @generic={0xbd, 0x10, 0x4, "5c528c4ec8566d81fa56dceee919a22e522475dc3d5ed631c6ae03f981ccb7f81adaf7b22b464a0bccbf4caca6299bc6d41e15ef2b975db3d92de079094925d79b8c6101f9254dff2a3be182edbe8ae3db800bffecf7564f4339e05c366fdb45e378272d8cc6b14f5ab487ca38a54b900bbf5c5db5817a0b4c198b26cf7440d7029c77bc69dc8aa2807ddaf306e3eaff982cc82d25bd28ae3486751756335400d21d87e5dc0fe5953e1287546a2aca617eafee349be0bdf660fc"}]}, 0x4, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x81a}}, {0x6f, &(0x7f0000002d40)=@string={0x6f, 0x3, "92c9a68406b4672c0540a4c49ac03a2c75e79314712a8ef9e5f295dc585d785d1d312a3b7bfaa7f31c94a4f4d8c143edd1129ec22f54a87440fbd239dc0493f6e3edc1fc44d65e5a5c23cca9ba815fdfa59bfd7267bb1bc649be18b226e62b0c8aad691dd9b77b2342e1abbd9e"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000002f80)={0x14, &(0x7f0000002e40)={0x20, 0xe, 0x2c, {0x2c, 0x3, "8a3bf164bf711f059db18b8bd1c23dab69cf0edaf77766c977627a9863549445035da6d15ac7e8683634"}}, &(0x7f0000002e80)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "a7ce57c1ce637490fd97f46dd03d0baa101433e6e6435a06e3ee483cb6771c80099ae16c11597949a62f2da976e8bd1695e4ab7e80fe9f5db779986c1739bc10565138c96972b113a03b1840fa6c3ab6517f91593306ffce53019eb49f8cd8460d0334e3f9189e497c428dd34cb6d90edd29fd86a051b3ac52f573b9dee3bf0af3780713f943e50d4ab41d82de1cddbda0106d4688a188ebe02f27cc93b27e3378780145cea447e86b13dfec432aac56f5e742d7bbc6dbd455c37e2e77dd30615ee157433bd589"}}}, &(0x7f0000003180)={0x34, &(0x7f0000002fc0)={0x0, 0x0, 0x49, "3f4cfd6adf52ea665af698efe9b9e05a6f9843f10d3976721eabe168bfab574d97213250d4b5c49fa928289c5cd661fcfc7881c80cf22fb24101854e34b8e843942ce0e3539f275b4b"}, &(0x7f0000003040)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000003080)={0x0, 0x8, 0x1}, &(0x7f00000030c0)={0x20, 0x0, 0x21, {0x1f, "8ef6a72c2c2468c8f3209e04f4b5a2e14488c5cf67951a46645986920a2a91"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x3}}) r7 = syz_usb_connect$uac1(0x2, 0x9c, &(0x7f00000031c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x8, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x5}, [@processing_unit={0x8, 0x24, 0x7, 0x3, 0x6, 0x1, 'X'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x6, '1t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x12, 0xbd, 0xc, {0x7, 0x25, 0x1, 0x1, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x4, 0x8f, "1671"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x9, 0x1}, @as_header={0x7, 0x24, 0x1, 0xeb, 0xd5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x3, 0x2, {0x7, 0x25, 0x1, 0x0, 0xd, 0x4}}}}}}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x310, 0x8, 0x9, 0x2, 0x20, 0x8}, 0x9a, &(0x7f00000032c0)={0x5, 0xf, 0x9a, 0x2, [@generic={0x8b, 0x10, 0xb, "1a5a954ef989790c641425890cecf3344e67aa16d86414ecafa9cf4485ee0955a5a1eb88768e7b6c8644f974fc19bb0647a5eab97274c19a11a088e7bfd8a56c8b07b3061603d1f2ee3bbf681fd5f2a144a03a8aebc8107ff16e279fd9445f41f594f7c9d92e21c78f0cc664c31ae5927d79a113296c4f698e097f98199fb7eff7f6dfaea86cf6b1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0xd, 0x9}]}, 0x5, [{0xcb, &(0x7f0000003380)=@string={0xcb, 0x3, "9f0cb0e1693a2fe53b1edb5e8ff7b327f7ba3212c4c8fd86f7869ddcce24ea4df203543fb40fc86a419b1eddbd0f889ee204e62cf30a2fd4a9881948c285cc9eb3310d4d87f55b98c4f6b0c047a45ab518afea44ef573a4593fb9c7d274a5724c9597a25d70a2dec841da5dcd8466793f28f58381cf8c951327fef4de872a531beef0b5ed43f7ba651fb71a956d248c540ef7d2b305db10f0ac9db9133026aa12b7cc49d06172e074b4b516ab64a8abd8133e440fad4befefe062b267be2639d6208ba2df939509696"}}, {0x4, &(0x7f0000003480)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io$uac1(r7, &(0x7f00000036c0)={0x14, &(0x7f0000003600)={0x20, 0x5, 0x66, {0x66, 0x21, "25c6d57c66763858d3ec2e8c85a3d4f66fb700e9744ad5a3c0d14dd93d9c6a0e47a4dab56f5d7dbcaf9b0b4f50592a7ce993c3fa2e5a44a60db3b60e640630511ac2e6810503fc405df30907b3b052fadd3acc237229dd9fc26fb47894572047a8ed35b9"}}, &(0x7f0000003680)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "f3447fc632dc9119d9b30673f578e4e28f85626671dd4d72bf28b31a55fe5bbbd1ec6896b995c0abcd"}}}, &(0x7f0000003900)={0x44, &(0x7f0000003700)={0x40, 0x16, 0x1c, "897968aa790342ec3b6464e290d302869cc4f79d9b4039940c590c60"}, &(0x7f0000003740)={0x0, 0xa, 0x1}, &(0x7f0000003780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000037c0)={0x20, 0x81, 0x2, "58fc"}, &(0x7f0000003800)={0x20, 0x82, 0x2, "a520"}, &(0x7f0000003840)={0x20, 0x83, 0x3, "4c5fe9"}, &(0x7f0000003880)={0x20, 0x84, 0x3, "1e5bca"}, &(0x7f00000038c0)={0x20, 0x85, 0x3, "6cce19"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003980)='./cgroup.net/syz1\x00', 0x1ff) syz_usb_disconnect(r7) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000039c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0xc3, &(0x7f0000003a40)=@generic={0x7, 0x2, 0xbb, "f43b44cb", "387e91ff05117e08d637ec8983145f2634e3d7a41dfdbc304998e94d25a5cd55c653fd2630c96a5277b60d13163a643c87266f2c0fe02dab2a3ffd81fb32de152c8e94f5e6b49d17232969179610cfa20fbee50489d40cc5ca3bf2fedb682c61318a5c2b4075136868291d699d57efca25a64133a3b0b4f428d67592fb06cfff6351bdfd3caa75f700f89e85ff5b14a2d7785d3bb473e2e18b9773d9a054a8ddbd2473e0e3668181f6ed296ad924fdd9caf0c66497b065b3d85615"}) syz_usb_connect(0x0, 0xcf7, &(0x7f0000003b40)={{0x12, 0x1, 0x200, 0xc4, 0xb7, 0xd7, 0x8, 0x2b73, 0xe, 0x4599, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce5, 0x4, 0x81, 0x37, 0xa0, 0x8d, [{{0x9, 0x4, 0xa, 0x9, 0xf, 0xff, 0x91, 0xeb, 0x1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "337f"}, {0x5, 0x24, 0x0, 0x8d7b}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8000, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x80, 0x78, 0x5, 0xde}]}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x4, 0xa}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xd, 0x7, 0x1, [@generic={0x28, 0x21, "196c646a7b5ca65fa27b78a11f6e70d4261d05763801b07f6357839866ea7264653132538f79"}, @generic={0x64, 0x22, "687a55d7037b556925b70f4f9b72e59f0c1a9cd7f548e53cc58c94925fb172325fe531fa97a89366d2044348391a7a64b377c3db2e49f9b317aa1fc82aa7f8df686807d582d8858daaa67e9e48be2f12bd965c40bc830194a6b2588264d0fdca23b8"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xec, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x92, 0xc187}, @generic={0xfd, 0xd, "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"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x5}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0xf, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0xd3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xc30}, @generic={0xb, 0x31, "8515da786e632a1885"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x2, 0xe, [@generic={0x4b, 0x30, "e7ce4fe3c13b8013580bcd10553287b72e0f3f040d40b0164f736e1b125a34f8c764ad222697a71945c2ecc354e53038518afd5b844f26a538483a802f7fd73def195372400879820d"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x1, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}, @generic={0x34, 0xf, "630d53c09d5b5eb0277b6f8398f5ce8df39ee0f5748d9bf1120c1ac68c1465ad87aa5212cf78f3f8a87575183d48ef37e69c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xaf, 0xe, 0x7f}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0xc, 0x33, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x2, 0x80, [@generic={0x75, 0x11, "e843235e550ac8806216a0bdbe5abfa8d36a45d0338b7699fea7a3e10a8475520ceb02d781af4c34fea924b420940791cad1361e0ce4ae37239fcf9305d74ffec1d46e53d9babe2f643283b14562d0a21b801ea0536708a4d1c5daa6fefd0b093363ee635db86374e6315088c055aef4678397"}, @generic={0x3d, 0x9, "7cb6d575a52532c67fc0564ebcdcf1f4be6676ac880892091cdb78ec0c40503b442df084a8de583b11d13f18fffa3f7e1cb5ad5b938114c355a67b"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xe0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x12}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2b, 0x4f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0xe3, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x7e, 0x8, 0xf, 0xdb, 0x57, 0xb4, 0x5, [], [{{0x9, 0x5, 0xc, 0x11, 0x20, 0x9, 0xc, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x6, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x3, 0x7, [@generic={0x59, 0x3, "0a88f566e75f7ad7a31773abf7b35ecacd11f3c9661c50d8fa8c828ea60c1c191827a3cc9369227fb16b271317f3d38b2ec38ad9793a689b21dd559dd0e9afa8f05d72958d78edb54c3050f7712f345488a60dc350c3f5"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x4df8b099a704ef8f, 0x80, 0x2, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9, 0xb7, 0x8, [@generic={0x66, 0x9, "497c686cd3eb2ded3bcd4fe1d402de61f5ebb29e4c8a5a5acfbc71225e77ac60f285b3f9233dcef6a8f295c1f05e2399ae69df78c6b872bf11ab86eca822d41e0ff5d42e1a58d93297937392c919cb63799a87fe6dc35f3fa248573474baadc2ad8c3019"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xe5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0xff, 0x53, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0xc}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x13, 0x8}}, {{0x9, 0x5, 0x0, 0x3, 0xd521631d238fd408, 0x2, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x6}, @generic={0xd3, 0x23, "17cfe7fbbade56f61c650528b351ce388867bf74691cf21ba565ee95e07c39a93d9cb9f80560d16d4f5d566f13a713f75e90392aa8283df3a2aeff53a282e652626ef7f9e7559baf36558b3e812d54ebb365bcfc61edf84b9663e846a8d1b41b644b2cd71bffd1a018f5dcde18c8c4336479127738fbf883a296fca612db96938e8c65edf51c5ee861882e13f722bcebd3f6fc9ab23ffd8fd62a8c97a12d2186c2e678d6b85a25feb8c910a60001e652b79c54d567d020dae0abbaa057791255784e507845b57b2f234dd7e327cfefec6c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x59, 0x0, [@generic={0xf0, 0x1, "d2a325f99a858232d0a797ab79e0c4e13c3646b1289c2d8fbb03087089b3d9b0966d1622518e33aa319a1f844e5dd72b8d5defe15601b4686697796a08d9da63b0cf4548080e5f326d522e4cab4c07a0e9539533b34cc6bfb4480b608dbbd7b3be48e5be6ab648e6c7aac41143e8090fcc6aa659bd75c2298d4efcdfa069e4189d04918f63dd858b247206c269abacb5a6454f222dc04517c242fa810589c0c6de9bb90e752c40d25acf1ad3678f73cc42f3ed7ad9e1ded393fd369c905fa63ee3243b90952a95177e169f305afbcfc428b377bebefaa0f9617e3e60f4a5027fd3c51363ce9786395012fda31966"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x9, 0x4}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x2e, 0x3, 0x0, [@generic={0x100, 0xd, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xfb, 0x3, 0x93}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xf8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x80, 0x9, 0x6}}]}}, {{0x9, 0x4, 0x7e, 0x1, 0x4, 0xff, 0xff, 0xff, 0x9, [@generic={0xc, 0x9, "6e5be08592c7ae410ee2"}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x7, 0x2, "ff99a9e5d3"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfff4, 0xb7, 0xe, "0c9a97b5e1dcde17"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1, "599ceef673d4eead"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x18, 0x7, 0x1, 0x46, [@generic={0x78, 0xe, "34b9b81a77cc18e09b6c7166ae3421d6e15f82f4127a2c126464a8db9c1443cd1897c8582ed1237aafb4d7ccc84f9baf7b84d49d1e076ea1e7bf2a6df62df15c22495e6db95445bd5baabcdf96c2cea0a12f50c10745b8c61b689303ee586b3a7d5efef2953f3cc455f6f6891435077d07aae5a74176"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x4, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0xff}, @generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x2c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x7, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x220, 0x5, 0x1, 0x3, [@generic={0x9c, 0xc, "f39c479abbe95d14bb5993dd37a3b2d60f2eb33829e9cb310e895b2129935693be7388887df1c8edc86b6115f483609c655b764927b024638f51ce1e68ed9828cf93af50aaf562918c0add291002fdfa262a5a0d732bace43a358d6fb3e1ba24d6e9acf49bbda5d36c49b1219cbab7259599d143117715562d232c3eae2347a9a0ec47452efa453fc0a13cc5ace62932c244a7708c742c8f94e0"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0x8e, 0x2, 0x6, 0xd0, 0x46, 0x6c, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b079115894"}, {0x5, 0x24, 0x0, 0x50}, {0xd, 0x24, 0xf, 0x1, 0x8ec8, 0x100, 0x401, 0xf}, {0x6, 0x24, 0x1a, 0x1ff, 0x3}}, @hid_hid={0x9, 0x21, 0x8, 0x8b, 0x1, {0x22, 0x9c8}}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0x7, 0xa, [@generic={0xcf, 0x7, "e85c51417cdf2e04045ba65d6d7820e34b594cb26d5550fa4adb5c7905f7a1ae9d29a0407aa0c5ff2a326df745b8412de2320e62e1f7510f4a23d0a4f1bdb706b01abbd2854846d38f25d2ecf032c906441d79ef17c86d62c3a5e0847728e264956c8267fd5073f60dea337a415ea016bfda322b885dd70727625bad1540a0cc5cc6794ecc882fa5119ce2553bee4801c0d830dd371b5acb892ddd07a7fa99b1afdd675bfe358d5119c157fe8f51d3af2459e8fa3b8bd169bba430d69ca05fbfc072054737a3a8c74e400478af"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x10, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x5}, @generic={0xc1, 0x9, "92de2b88e031bfd7dbc0e2702c50dd49ec42e59746d61ab2fb417a6044f250aff4b2625b57c276c6ca88045ba2b875b6c497d3a1c16dde852368c60f3e3222ada249d94c831153c21ad462866688409700121450d5e608b4ed42be7c8565f7769e511b5e5e262699d6a32f8e13e5ac34c0b31bfe1852e8adea7e7d633305f21dc97655ad596a921b6b2eff875424e1bb4613ce5cd74de6ba3aee758a4e8430f7d2f9894dcb2b1fe5b4c7b12503ec84160342414503204d1ac642ac10ee661f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xf, 0xaf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xade53ee3ceaab87c, 0x8, 0x2}, @generic={0x29, 0x24, "644908192bc6d606692ec1f99bbdc1f26c4c9a86ca6e43d26995ef355ff604acfb7574564c0cb2"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x7, 0x81}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x1, 0x49, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x9, 0xa0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0xc0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x401}]}}]}}]}}]}}, &(0x7f0000004a80)={0xa, &(0x7f0000004840)={0xa, 0x6, 0x300, 0xc, 0x9, 0x6, 0x10, 0x4}, 0x5, &(0x7f0000004880)={0x5, 0xf, 0x5}, 0x4, [{0xc8, &(0x7f00000048c0)=@string={0xc8, 0x3, "01f7e5fbfe1976a2e098a3831e146b885a5a7392728032c2f1c5a7b0be5de7791c9be10c12657f60faeb9ccceabbd18b70afdcb1122f229d3575e4f07380903967827e0fb2ccc4d729618c951feef304de86d06779d40cf7f0e44d65d105c47dc773b564718084f8cc7827f047d51ea9032b16d51add31dc7f64544ae5c1fc545285442ece5b2d57241478820a29ef0e863bcb53f14e4e6dc20f0e77deb39256943cc93adbb41e8d0e23f6427f149678201b8b2bb5c3a2d9d41d0ec25a95853e5963b64143f1"}}, {0x4, &(0x7f00000049c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000004a40)=@lang_id={0x4, 0x3, 0x437}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000004b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000004b40)=0xffffffffffffffff, 0x4) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000004b80)=0x1) openat$cgroup_devices(r9, &(0x7f0000004bc0)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000004c00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 146.500369ms ago: executing program 5 (id=1077): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) 142.288109ms ago: executing program 0 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 118.143909ms ago: executing program 2 (id=1079): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8f0000003920c63b02000000000000227959", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000100830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20048848}, 0x20004000) fcntl$setpipe(r0, 0x407, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000480)=ANY=[@ANYBLOB='c *:', @ANYRESDEC=r8], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r9, &(0x7f00000002c0)={0x2c, 0x4, r11}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_RMID(0x0, 0x0) 70.662729ms ago: executing program 0 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (fail_nth: 2) 69.399949ms ago: executing program 5 (id=1081): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 2.60645ms ago: executing program 0 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 0s ago: executing program 0 (id=1083): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@local, @multicast]}) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r5 = syz_open_dev$vcsa(0x0, 0x9, 0x30080) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000d00)=""/239, 0xef}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x10000) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") kernel console output (not intermixed with test programs): 39.513787][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.524798][ T3815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.563271][ T3811] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.577534][ T3815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.589823][ T3815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.600904][ T3830] x_tables: duplicate underflow at hook 2 [ 39.621946][ T3815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.653835][ T3815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.662821][ T3834] FAULT_INJECTION: forcing a failure. [ 39.662821][ T3834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.675963][ T3834] CPU: 0 UID: 0 PID: 3834 Comm: syz.2.144 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 39.675992][ T3834] Tainted: [W]=WARN [ 39.675999][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.676014][ T3834] Call Trace: [ 39.676021][ T3834] [ 39.676028][ T3834] dump_stack_lvl+0xf2/0x150 [ 39.676060][ T3834] dump_stack+0x15/0x1a [ 39.676184][ T3834] should_fail_ex+0x24a/0x260 [ 39.676222][ T3834] should_fail+0xb/0x10 [ 39.676250][ T3834] should_fail_usercopy+0x1a/0x20 [ 39.676283][ T3834] _copy_from_user+0x1c/0xa0 [ 39.676312][ T3834] __sys_bpf+0x14e/0x7a0 [ 39.676347][ T3834] __x64_sys_bpf+0x43/0x50 [ 39.676440][ T3834] x64_sys_call+0x2914/0x2dc0 [ 39.676471][ T3834] do_syscall_64+0xc9/0x1c0 [ 39.676579][ T3834] ? clear_bhb_loop+0x55/0xb0 [ 39.676612][ T3834] ? clear_bhb_loop+0x55/0xb0 [ 39.676641][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.676727][ T3834] RIP: 0033:0x7f1c3c18d169 [ 39.676810][ T3834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.676830][ T3834] RSP: 002b:00007f1c3a7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.676851][ T3834] RAX: ffffffffffffffda RBX: 00007f1c3c3a5fa0 RCX: 00007f1c3c18d169 [ 39.676865][ T3834] RDX: 0000000000000050 RSI: 0000400000001480 RDI: 0000000000000000 [ 39.676879][ T3834] RBP: 00007f1c3a7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.676891][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.676988][ T3834] R13: 0000000000000000 R14: 00007f1c3c3a5fa0 R15: 00007ffed5a4a6d8 [ 39.677010][ T3834] [ 39.947786][ T3845] FAULT_INJECTION: forcing a failure. [ 39.947786][ T3845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.961206][ T3845] CPU: 1 UID: 0 PID: 3845 Comm: syz.0.148 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 39.961311][ T3845] Tainted: [W]=WARN [ 39.961318][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.961329][ T3845] Call Trace: [ 39.961335][ T3845] [ 39.961342][ T3845] dump_stack_lvl+0xf2/0x150 [ 39.961370][ T3845] dump_stack+0x15/0x1a [ 39.961392][ T3845] should_fail_ex+0x24a/0x260 [ 39.961449][ T3845] should_fail+0xb/0x10 [ 39.961476][ T3845] should_fail_usercopy+0x1a/0x20 [ 39.961508][ T3845] _copy_from_user+0x1c/0xa0 [ 39.961537][ T3845] do_arpt_set_ctl+0x42f/0xa20 [ 39.961640][ T3845] ? _raw_spin_unlock_bh+0x36/0x40 [ 39.961671][ T3845] nf_setsockopt+0x195/0x1b0 [ 39.961705][ T3845] ip_setsockopt+0xea/0x100 [ 39.961800][ T3845] udp_setsockopt+0x95/0xb0 [ 39.961823][ T3845] sock_common_setsockopt+0x64/0x80 [ 39.961859][ T3845] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 39.961897][ T3845] __sys_setsockopt+0x187/0x200 [ 39.961941][ T3845] __x64_sys_setsockopt+0x66/0x80 [ 39.962046][ T3845] x64_sys_call+0x282e/0x2dc0 [ 39.962073][ T3845] do_syscall_64+0xc9/0x1c0 [ 39.962119][ T3845] ? clear_bhb_loop+0x55/0xb0 [ 39.962147][ T3845] ? clear_bhb_loop+0x55/0xb0 [ 39.962174][ T3845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.962201][ T3845] RIP: 0033:0x7efc2ae6d169 [ 39.962276][ T3845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.962295][ T3845] RSP: 002b:00007efc294d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 39.962355][ T3845] RAX: ffffffffffffffda RBX: 00007efc2b085fa0 RCX: 00007efc2ae6d169 [ 39.962368][ T3845] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 39.962381][ T3845] RBP: 00007efc294d1090 R08: 0000000000000068 R09: 0000000000000000 [ 39.962401][ T3845] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001 [ 39.962413][ T3845] R13: 0000000000000000 R14: 00007efc2b085fa0 R15: 00007ffcfcedb788 [ 39.962429][ T3845] [ 40.278554][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.359046][ T3862] loop4: detected capacity change from 0 to 256 [ 40.396937][ T3866] loop3: detected capacity change from 0 to 128 [ 40.399527][ T3862] FAT-fs (loop4): Directory bread(block 64) failed [ 40.409861][ T3862] FAT-fs (loop4): Directory bread(block 65) failed [ 40.415237][ T3866] FAT-fs (loop3): Directory bread(block 162) failed [ 40.423087][ T3862] FAT-fs (loop4): Directory bread(block 66) failed [ 40.426122][ T3866] FAT-fs (loop3): Directory bread(block 163) failed [ 40.431787][ T3862] FAT-fs (loop4): Directory bread(block 67) failed [ 40.442871][ T3862] FAT-fs (loop4): Directory bread(block 68) failed [ 40.449434][ T3862] FAT-fs (loop4): Directory bread(block 69) failed [ 40.455814][ T3866] FAT-fs (loop3): Directory bread(block 164) failed [ 40.462766][ T3866] FAT-fs (loop3): Directory bread(block 165) failed [ 40.469405][ T3866] FAT-fs (loop3): Directory bread(block 166) failed [ 40.476123][ T3862] FAT-fs (loop4): Directory bread(block 70) failed [ 40.476145][ T3862] FAT-fs (loop4): Directory bread(block 71) failed [ 40.476182][ T3862] FAT-fs (loop4): Directory bread(block 72) failed [ 40.483851][ T3866] FAT-fs (loop3): Directory bread(block 167) failed [ 40.500177][ T3862] FAT-fs (loop4): Directory bread(block 73) failed [ 40.505620][ T3866] FAT-fs (loop3): Directory bread(block 168) failed [ 40.558629][ T3866] FAT-fs (loop3): Directory bread(block 169) failed [ 40.609787][ T3862] lo speed is unknown, defaulting to 1000 [ 40.637928][ T3866] FAT-fs (loop3): Directory bread(block 162) failed [ 40.654742][ T3876] loop2: detected capacity change from 0 to 512 [ 40.662364][ T3866] FAT-fs (loop3): Directory bread(block 163) failed [ 40.669319][ T3866] syz.3.158: attempt to access beyond end of device [ 40.669319][ T3866] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 40.692325][ T3876] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.701704][ T3866] syz.3.158: attempt to access beyond end of device [ 40.701704][ T3866] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 40.721251][ T1757] kworker/u8:7: attempt to access beyond end of device [ 40.721251][ T1757] loop4: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 40.769673][ T3879] loop4: detected capacity change from 0 to 512 [ 40.776704][ T3879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.790317][ T3879] EXT4-fs (loop4): 1 truncate cleaned up [ 40.796397][ T3879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.894262][ T3885] netlink: 'syz.3.164': attribute type 2 has an invalid length. [ 40.918134][ T3879] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.967285][ T3881] loop2: detected capacity change from 0 to 8192 [ 40.987291][ T3890] xt_TCPMSS: Only works on TCP SYN packets [ 41.017549][ T3886] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.026321][ T3886] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.035071][ T3886] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.043883][ T3886] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.085764][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.096175][ T3893] loop2: detected capacity change from 0 to 1024 [ 41.114201][ T3893] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.125146][ T3893] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.147601][ T3896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3896 comm=syz.4.168 [ 41.166130][ T3893] JBD2: no valid journal superblock found [ 41.166141][ T3893] EXT4-fs (loop2): Could not load journal inode [ 41.192640][ T3898] rdma_op ffff88811954fd80 conn xmit_rdma 0000000000000000 [ 41.200556][ T3893] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 41.213089][ T3898] loop1: detected capacity change from 0 to 512 [ 41.221622][ T3898] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.169: corrupted xattr block 255: invalid header [ 41.234974][ T3898] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 41.243313][ T3893] loop2: detected capacity change from 0 to 164 [ 41.243517][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.262112][ T3898] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.169: corrupted xattr block 255: invalid header [ 41.278499][ T3893] iso9660: Unknown parameter '0xffffffffffffffff' [ 41.278972][ T3898] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 41.294912][ T3898] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.305317][ T3900] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 41.319446][ T3904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.373483][ T3893] loop2: detected capacity change from 0 to 512 [ 41.379863][ T3893] ext4: Unknown parameter 'i_versionJdebug' [ 41.393453][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.416760][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.481777][ T3917] capability: warning: `syz.2.167' uses deprecated v2 capabilities in a way that may be insecure [ 41.519373][ T3921] rdma_op ffff888118e03180 conn xmit_rdma 0000000000000000 [ 41.531875][ T3921] loop0: detected capacity change from 0 to 512 [ 41.542236][ T3921] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.177: corrupted xattr block 255: invalid header [ 41.562574][ T3921] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 41.583163][ T3921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.613393][ T3921] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.177: corrupted xattr block 255: invalid header [ 41.667042][ T3921] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 41.674726][ T3921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.797514][ T3940] ALSA: seq fatal error: cannot create timer (-22) [ 41.931648][ T3951] loop1: detected capacity change from 0 to 128 [ 41.939995][ T3951] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.010590][ T3951] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.024164][ T3959] netlink: 'syz.0.192': attribute type 2 has an invalid length. [ 42.059657][ T3962] process 'syz.2.194' launched '/dev/fd/5' with NULL argv: empty string added [ 42.105639][ T3963] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 42.137437][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.146133][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.155213][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.163782][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.172129][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.180570][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.189475][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.198064][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.211369][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.230874][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.240493][ T3970] FAULT_INJECTION: forcing a failure. [ 42.240493][ T3970] name failslab, interval 1, probability 0, space 0, times 0 [ 42.253136][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: syz.1.190 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 42.253170][ T3970] Tainted: [W]=WARN [ 42.253179][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.253242][ T3970] Call Trace: [ 42.253248][ T3970] [ 42.253256][ T3970] dump_stack_lvl+0xf2/0x150 [ 42.253286][ T3970] dump_stack+0x15/0x1a [ 42.253307][ T3970] should_fail_ex+0x24a/0x260 [ 42.253386][ T3970] should_failslab+0x8f/0xb0 [ 42.253422][ T3970] __kmalloc_node_noprof+0xad/0x410 [ 42.253477][ T3970] ? allocate_slab+0x144/0x3c0 [ 42.253511][ T3970] allocate_slab+0x144/0x3c0 [ 42.253619][ T3970] ___slab_alloc+0x424/0x970 [ 42.253646][ T3970] ? __kvmalloc_node_noprof+0x72/0x170 [ 42.253678][ T3970] __kmalloc_node_noprof+0x25e/0x410 [ 42.253699][ T3970] ? __kvmalloc_node_noprof+0x72/0x170 [ 42.253827][ T3970] ? __pfx_vlan_setup+0x10/0x10 [ 42.253860][ T3970] __kvmalloc_node_noprof+0x72/0x170 [ 42.253896][ T3970] alloc_netdev_mqs+0x5c1/0xab0 [ 42.253929][ T3970] register_vlan_device+0x268/0x3d0 [ 42.254000][ T3970] vlan_ioctl_handler+0x1ae/0x4f0 [ 42.254031][ T3970] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 42.254126][ T3970] sock_ioctl+0x471/0x600 [ 42.254223][ T3970] ? __pfx_sock_ioctl+0x10/0x10 [ 42.254260][ T3970] __se_sys_ioctl+0xc9/0x140 [ 42.254396][ T3970] __x64_sys_ioctl+0x43/0x50 [ 42.254422][ T3970] x64_sys_call+0x1690/0x2dc0 [ 42.254455][ T3970] do_syscall_64+0xc9/0x1c0 [ 42.254494][ T3970] ? clear_bhb_loop+0x55/0xb0 [ 42.254586][ T3970] ? clear_bhb_loop+0x55/0xb0 [ 42.254619][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.254645][ T3970] RIP: 0033:0x7f615d6dd169 [ 42.254660][ T3970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.254755][ T3970] RSP: 002b:00007f615bcff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.254773][ T3970] RAX: ffffffffffffffda RBX: 00007f615d8f6160 RCX: 00007f615d6dd169 [ 42.254785][ T3970] RDX: 0000400000000500 RSI: 0000000000008982 RDI: 0000000000000003 [ 42.254801][ T3970] RBP: 00007f615bcff090 R08: 0000000000000000 R09: 0000000000000000 [ 42.254814][ T3970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.254828][ T3970] R13: 0000000000000000 R14: 00007f615d8f6160 R15: 00007ffcb1de6fa8 [ 42.254850][ T3970] [ 42.671570][ T3973] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 42.835030][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.044189][ T3978] __nla_validate_parse: 23 callbacks suppressed [ 43.044204][ T3978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.200'. [ 43.065092][ T30] kauditd_printk_skb: 683 callbacks suppressed [ 43.065108][ T30] audit: type=1326 audit(1741878252.975:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.094734][ T30] audit: type=1326 audit(1741878252.975:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.119905][ T30] audit: type=1326 audit(1741878253.035:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.143374][ T30] audit: type=1326 audit(1741878253.035:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.166745][ T30] audit: type=1326 audit(1741878253.035:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.190174][ T30] audit: type=1326 audit(1741878253.035:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.214614][ T30] audit: type=1326 audit(1741878253.035:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.238079][ T30] audit: type=1326 audit(1741878253.035:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.261468][ T30] audit: type=1326 audit(1741878253.035:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.284837][ T30] audit: type=1326 audit(1741878253.035:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 43.288570][ T3993] loop1: detected capacity change from 0 to 2048 [ 43.321663][ T3989] loop4: detected capacity change from 0 to 512 [ 43.339152][ T3995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3995 comm=syz.0.206 [ 43.352167][ T3993] loop1: p1 < > p4 [ 43.357731][ T3993] loop1: p4 size 8388608 extends beyond EOD, truncated [ 43.393275][ T3998] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 43.403813][ T3989] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.204: corrupted xattr block 255: invalid header [ 43.431930][ T4002] usb usb1: usbfs: process 4002 (syz.1.209) did not claim interface 32 before use [ 43.445207][ T3989] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 43.454018][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.467572][ T4005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 43.467777][ T3989] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.204: corrupted xattr block 255: invalid header [ 43.493294][ T3989] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 43.502178][ T3989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.513989][ T4011] usb usb1: usbfs: process 4011 (syz.1.209) did not claim interface 32 before use [ 43.533415][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 43.542276][ T4008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 43.575434][ T4017] loop3: detected capacity change from 0 to 1024 [ 43.582771][ T4018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=4018 comm=syz.2.210 [ 43.587598][ T4020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.215'. [ 43.608800][ T4018] lo speed is unknown, defaulting to 1000 [ 43.635010][ T4017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.697461][ T4028] netlink: 'syz.0.217': attribute type 2 has an invalid length. [ 43.705368][ T4028] netlink: 52 bytes leftover after parsing attributes in process `syz.0.217'. [ 43.787314][ T4038] loop2: detected capacity change from 0 to 128 [ 43.804463][ T4037] loop4: detected capacity change from 0 to 128 [ 43.813580][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 43.818203][ T3298] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 43.822444][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 43.853661][ T4037] FAT-fs (loop4): Directory bread(block 162) failed [ 43.861068][ T3298] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 43.881296][ T4037] FAT-fs (loop4): Directory bread(block 163) failed [ 43.887937][ T4037] FAT-fs (loop4): Directory bread(block 164) failed [ 43.905482][ T4037] FAT-fs (loop4): Directory bread(block 165) failed [ 43.916551][ T4037] FAT-fs (loop4): Directory bread(block 166) failed [ 43.924892][ T4037] FAT-fs (loop4): Directory bread(block 167) failed [ 43.931968][ T4037] FAT-fs (loop4): Directory bread(block 168) failed [ 43.939320][ T4037] FAT-fs (loop4): Directory bread(block 169) failed [ 43.965166][ T4037] FAT-fs (loop4): Directory bread(block 162) failed [ 43.972728][ T4037] FAT-fs (loop4): Directory bread(block 163) failed [ 43.979884][ T4037] syz.4.221: attempt to access beyond end of device [ 43.979884][ T4037] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 43.980901][ T4043] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.224'. [ 44.002269][ T4043] netlink: zone id is out of range [ 44.002309][ T4037] syz.4.221: attempt to access beyond end of device [ 44.002309][ T4037] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 44.007371][ T4043] netlink: zone id is out of range [ 44.007617][ T4043] netlink: zone id is out of range [ 44.031019][ T4043] netlink: zone id is out of range [ 44.036143][ T4043] netlink: zone id is out of range [ 44.041292][ T4043] netlink: zone id is out of range [ 44.046403][ T4043] netlink: zone id is out of range [ 44.051545][ T4043] netlink: zone id is out of range [ 44.056690][ T4043] netlink: zone id is out of range [ 44.061852][ T4043] netlink: zone id is out of range [ 44.088210][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 44.103402][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.103586][ T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.122731][ T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.224418][ T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.234842][ T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.322767][ T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.333194][ T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.393399][ T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.403875][ T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.441854][ T4054] lo speed is unknown, defaulting to 1000 [ 44.520027][ T29] bridge_slave_1: left allmulticast mode [ 44.525752][ T29] bridge_slave_1: left promiscuous mode [ 44.531554][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.554516][ T29] bridge_slave_0: left allmulticast mode [ 44.560331][ T29] bridge_slave_0: left promiscuous mode [ 44.566108][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.644587][ T4067] loop1: detected capacity change from 0 to 256 [ 44.665594][ T4067] FAT-fs (loop1): Directory bread(block 64) failed [ 44.672312][ T4067] FAT-fs (loop1): Directory bread(block 65) failed [ 44.679031][ T4067] FAT-fs (loop1): Directory bread(block 66) failed [ 44.686171][ T4067] FAT-fs (loop1): Directory bread(block 67) failed [ 44.692881][ T4067] FAT-fs (loop1): Directory bread(block 68) failed [ 44.699493][ T4067] FAT-fs (loop1): Directory bread(block 69) failed [ 44.706660][ T4067] FAT-fs (loop1): Directory bread(block 70) failed [ 44.715246][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.725249][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.728636][ T4069] loop2: detected capacity change from 0 to 2048 [ 44.733888][ T4067] FAT-fs (loop1): Directory bread(block 71) failed [ 44.742931][ T4069] EXT4-fs: Ignoring removed oldalloc option [ 44.746798][ T4067] FAT-fs (loop1): Directory bread(block 72) failed [ 44.755414][ T29] bond0 (unregistering): Released all slaves [ 44.759262][ T4067] FAT-fs (loop1): Directory bread(block 73) failed [ 44.785180][ T4069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.805388][ T4069] EXT4-fs (loop2): shut down requested (1) [ 44.823694][ T29] hsr_slave_0: left promiscuous mode [ 44.835921][ T29] hsr_slave_1: left promiscuous mode [ 44.841825][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.849533][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.849689][ T1757] kworker/u8:7: attempt to access beyond end of device [ 44.849689][ T1757] loop1: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 44.870902][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.878472][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.891509][ T4076] random: crng reseeded on system resumption [ 44.918822][ T4080] x_tables: duplicate underflow at hook 2 [ 44.934242][ T29] veth1_macvtap: left promiscuous mode [ 44.939792][ T29] veth0_macvtap: left promiscuous mode [ 44.945807][ T29] veth1_vlan: left promiscuous mode [ 44.952299][ T29] veth0_vlan: left promiscuous mode [ 44.988930][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.071130][ T29] team0 (unregistering): Port device team_slave_1 removed [ 45.080672][ T29] team0 (unregistering): Port device team_slave_0 removed [ 45.126376][ T4095] lo speed is unknown, defaulting to 1000 [ 45.129032][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 45.158908][ T4095] lo speed is unknown, defaulting to 1000 [ 45.164951][ T4099] loop4: detected capacity change from 0 to 512 [ 45.172656][ T4099] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.178872][ T4095] lo speed is unknown, defaulting to 1000 [ 45.197135][ T4099] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.237: bg 0: block 248: padding at end of block bitmap is not set [ 45.213276][ T4099] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.237: Failed to acquire dquot type 1 [ 45.225190][ T4099] EXT4-fs (loop4): 1 truncate cleaned up [ 45.227052][ T4095] infiniband syz2: set active [ 45.235015][ T4104] loop0: detected capacity change from 0 to 512 [ 45.235583][ T4095] infiniband syz2: added lo [ 45.249827][ T4099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.250254][ T4095] RDS/IB: syz2: added [ 45.265121][ T4104] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.238: casefold flag without casefold feature [ 45.278836][ T4095] smc: adding ib device syz2 with port count 1 [ 45.285054][ T4095] smc: ib device syz2 port 1 has pnetid [ 45.293659][ T36] lo speed is unknown, defaulting to 1000 [ 45.298792][ T4104] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.238: couldn't read orphan inode 15 (err -117) [ 45.330290][ T4104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.345195][ T3376] lo speed is unknown, defaulting to 1000 [ 45.345542][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.358074][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.370117][ T4054] bridge_slave_0: entered allmulticast mode [ 45.389259][ T4054] bridge_slave_0: entered promiscuous mode [ 45.395799][ T4095] lo speed is unknown, defaulting to 1000 [ 45.402194][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.409462][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.418873][ T4054] bridge_slave_1: entered allmulticast mode [ 45.425671][ T4054] bridge_slave_1: entered promiscuous mode [ 45.446728][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.460239][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.470819][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.483323][ T4117] loop2: detected capacity change from 0 to 128 [ 45.513105][ T4095] lo speed is unknown, defaulting to 1000 [ 45.526654][ T4122] block device autoloading is deprecated and will be removed. [ 45.534979][ T4122] syz.0.244: attempt to access beyond end of device [ 45.534979][ T4122] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.573902][ T4099] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.237: deleted inode referenced: 12 [ 45.598506][ T4095] lo speed is unknown, defaulting to 1000 [ 45.608221][ T4054] team0: Port device team_slave_0 added [ 45.608280][ T4117] syz.2.243: attempt to access beyond end of device [ 45.608280][ T4117] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 45.621642][ T4054] team0: Port device team_slave_1 added [ 45.637460][ T4117] syz.2.243: attempt to access beyond end of device [ 45.637460][ T4117] loop2: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 45.653423][ T4117] syz.2.243: attempt to access beyond end of device [ 45.653423][ T4117] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 45.667040][ T4117] syz.2.243: attempt to access beyond end of device [ 45.667040][ T4117] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 45.682249][ T4117] syz.2.243: attempt to access beyond end of device [ 45.682249][ T4117] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 45.683048][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.698667][ T4117] syz.2.243: attempt to access beyond end of device [ 45.698667][ T4117] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 45.702477][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.741624][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.752704][ T4125] serio: Serial port ptm0 [ 45.754641][ T4095] lo speed is unknown, defaulting to 1000 [ 45.780843][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.787803][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.813867][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.825648][ T4095] lo speed is unknown, defaulting to 1000 [ 45.854336][ T4054] hsr_slave_0: entered promiscuous mode [ 45.867519][ T4054] hsr_slave_1: entered promiscuous mode [ 45.964878][ T4130] rdma_op ffff888103503d80 conn xmit_rdma 0000000000000000 [ 45.984920][ T4130] loop1: detected capacity change from 0 to 512 [ 45.991585][ T4099] syz.4.237 (4099) used greatest stack depth: 9272 bytes left [ 45.993340][ T4130] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.246: corrupted xattr block 255: invalid header [ 46.014453][ T4130] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 46.017361][ T4054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.023645][ T4130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.042513][ T4130] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.246: corrupted xattr block 255: invalid header [ 46.057599][ T4054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.064551][ T4130] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 46.072669][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084433][ T4054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.092465][ T4130] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.106237][ T4054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.146821][ T4133] serio: Serial port ptm1 [ 46.178588][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.192082][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.210853][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.217946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.246738][ T1757] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.253907][ T1757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.329980][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.471606][ T4054] veth0_vlan: entered promiscuous mode [ 46.479989][ T4054] veth1_vlan: entered promiscuous mode [ 46.486209][ T4171] loop0: detected capacity change from 0 to 512 [ 46.495138][ T4171] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.509630][ T4054] veth0_macvtap: entered promiscuous mode [ 46.517719][ T4054] veth1_macvtap: entered promiscuous mode [ 46.529430][ T4171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.531709][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.552656][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.562543][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.573032][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.582870][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.593323][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.595640][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.255: corrupted inode contents [ 46.603134][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.603153][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.606041][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.627198][ T4171] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.255: mark_inode_dirty error [ 46.636608][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.664436][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.674380][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.684830][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.694672][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.705122][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.709322][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.255: corrupted inode contents [ 46.714946][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.714965][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.715844][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.762087][ T4176] rdma_op ffff8881174e9980 conn xmit_rdma 0000000000000000 [ 46.762540][ T4054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.778070][ T4054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.778198][ T4176] loop1: detected capacity change from 0 to 512 [ 46.786772][ T4054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.801936][ T4054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.818628][ T4176] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.257: corrupted xattr block 255: invalid header [ 46.834709][ T4176] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 46.848055][ T4176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.870904][ T4176] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.257: corrupted xattr block 255: invalid header [ 46.893992][ T4176] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 46.901506][ T4176] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.019542][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.027145][ T4194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.037850][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.045577][ T4194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.077195][ T4199] loop4: detected capacity change from 0 to 512 [ 47.090008][ T4199] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.111536][ T4199] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.128643][ T4202] loop2: detected capacity change from 0 to 128 [ 47.146583][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.159782][ T4202] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.191326][ T4199] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 47.206435][ T4199] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.262: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.229355][ T4202] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.247294][ T4199] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.262: couldn't read orphan inode 13 (err -117) [ 47.262448][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.304965][ T4214] netlink: 'syz.1.271': attribute type 3 has an invalid length. [ 47.346460][ T4194] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 47.362977][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.383002][ T4194] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 47.446253][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.489530][ T4237] netlink: 'syz.4.279': attribute type 2 has an invalid length. [ 47.545394][ T4245] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 47.562560][ T4248] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 47.570813][ T4248] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 47.576023][ T4245] ALSA: seq fatal error: cannot create timer (-19) [ 47.628809][ T4250] ALSA: seq fatal error: cannot create timer (-22) [ 47.774352][ T4260] hub 4-0:1.0: USB hub found [ 47.779088][ T4260] hub 4-0:1.0: 8 ports detected [ 47.798575][ T4266] loop4: detected capacity change from 0 to 128 [ 47.836586][ T4266] lo speed is unknown, defaulting to 1000 [ 47.846110][ T4266] lo speed is unknown, defaulting to 1000 [ 48.025239][ T4274] x_tables: duplicate underflow at hook 2 [ 48.038105][ T4235] loop1: detected capacity change from 0 to 512 [ 48.086581][ T4235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.099347][ T4235] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.146580][ T30] kauditd_printk_skb: 371 callbacks suppressed [ 48.146597][ T30] audit: type=1326 audit(1741878258.055:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f615d6dbad0 code=0x7ffc0000 [ 48.182609][ T30] audit: type=1326 audit(1741878258.095:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f615d6dbeb7 code=0x7ffc0000 [ 48.205966][ T30] audit: type=1326 audit(1741878258.095:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f615d6dbad0 code=0x7ffc0000 [ 48.229295][ T30] audit: type=1326 audit(1741878258.095:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.252633][ T30] audit: type=1326 audit(1741878258.095:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.276008][ T30] audit: type=1326 audit(1741878258.095:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.299377][ T30] audit: type=1326 audit(1741878258.095:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.322781][ T30] audit: type=1326 audit(1741878258.095:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.346112][ T30] audit: type=1326 audit(1741878258.095:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.369475][ T30] audit: type=1326 audit(1741878258.095:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615d6dd169 code=0x7ffc0000 [ 48.393021][ T4278] hub 4-0:1.0: USB hub found [ 48.397700][ T4278] hub 4-0:1.0: 8 ports detected [ 48.409941][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.477725][ T4285] __nla_validate_parse: 15 callbacks suppressed [ 48.477740][ T4285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.298'. [ 48.524505][ T4293] loop4: detected capacity change from 0 to 128 [ 48.538876][ T4294] netlink: 'syz.2.302': attribute type 2 has an invalid length. [ 48.546628][ T4294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.302'. [ 48.551246][ T4293] FAT-fs (loop4): Directory bread(block 162) failed [ 48.567001][ T4293] FAT-fs (loop4): Directory bread(block 163) failed [ 48.573914][ T4296] loop1: detected capacity change from 0 to 512 [ 48.581631][ T4293] FAT-fs (loop4): Directory bread(block 164) failed [ 48.590513][ T4293] FAT-fs (loop4): Directory bread(block 165) failed [ 48.597222][ T4293] FAT-fs (loop4): Directory bread(block 166) failed [ 48.604185][ T4293] FAT-fs (loop4): Directory bread(block 167) failed [ 48.610437][ T4296] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 48.611017][ T4293] FAT-fs (loop4): Directory bread(block 168) failed [ 48.628319][ T4293] FAT-fs (loop4): Directory bread(block 169) failed [ 48.688973][ T4303] lo speed is unknown, defaulting to 1000 [ 48.695265][ T4303] lo speed is unknown, defaulting to 1000 [ 48.747020][ T4308] lo speed is unknown, defaulting to 1000 [ 48.774277][ T4308] lo speed is unknown, defaulting to 1000 [ 48.913526][ T4330] FAULT_INJECTION: forcing a failure. [ 48.913526][ T4330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.926847][ T4330] CPU: 1 UID: 0 PID: 4330 Comm: syz.1.317 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 48.926891][ T4330] Tainted: [W]=WARN [ 48.926899][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.926911][ T4330] Call Trace: [ 48.926917][ T4330] [ 48.926924][ T4330] dump_stack_lvl+0xf2/0x150 [ 48.926958][ T4330] dump_stack+0x15/0x1a [ 48.927030][ T4330] should_fail_ex+0x24a/0x260 [ 48.927069][ T4330] should_fail+0xb/0x10 [ 48.927203][ T4330] should_fail_usercopy+0x1a/0x20 [ 48.927240][ T4330] _copy_from_user+0x1c/0xa0 [ 48.927259][ T4330] kstrtouint_from_user+0x76/0xe0 [ 48.927334][ T4330] ? 0xffffffff81000000 [ 48.927350][ T4330] ? selinux_file_permission+0x22a/0x360 [ 48.927390][ T4330] proc_fail_nth_write+0x4f/0x150 [ 48.927426][ T4330] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.927461][ T4330] vfs_write+0x27d/0x920 [ 48.927525][ T4330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.927600][ T4330] ? __fget_files+0x17c/0x1c0 [ 48.927671][ T4330] ksys_write+0xe8/0x1b0 [ 48.927704][ T4330] __x64_sys_write+0x42/0x50 [ 48.927736][ T4330] x64_sys_call+0x287e/0x2dc0 [ 48.927798][ T4330] do_syscall_64+0xc9/0x1c0 [ 48.927880][ T4330] ? clear_bhb_loop+0x55/0xb0 [ 48.927915][ T4330] ? clear_bhb_loop+0x55/0xb0 [ 48.927948][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.928059][ T4330] RIP: 0033:0x7f615d6dbc1f [ 48.928076][ T4330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 48.928135][ T4330] RSP: 002b:00007f615bd41030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 48.928216][ T4330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f615d6dbc1f [ 48.928230][ T4330] RDX: 0000000000000001 RSI: 00007f615bd410a0 RDI: 0000000000000003 [ 48.928244][ T4330] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 48.928257][ T4330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 48.928270][ T4330] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 48.928291][ T4330] [ 49.221422][ T4338] netlink: 'syz.4.321': attribute type 3 has an invalid length. [ 49.233756][ T4338] netlink: 'syz.4.321': attribute type 3 has an invalid length. [ 49.250314][ T4338] netlink: 'syz.4.321': attribute type 3 has an invalid length. [ 49.299418][ T4347] lo speed is unknown, defaulting to 1000 [ 49.311336][ T4347] lo speed is unknown, defaulting to 1000 [ 49.822098][ T4433] FAULT_INJECTION: forcing a failure. [ 49.822098][ T4433] name failslab, interval 1, probability 0, space 0, times 0 [ 49.834939][ T4433] CPU: 1 UID: 0 PID: 4433 Comm: syz.1.361 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 49.834977][ T4433] Tainted: [W]=WARN [ 49.834985][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.835029][ T4433] Call Trace: [ 49.835035][ T4433] [ 49.835110][ T4433] dump_stack_lvl+0xf2/0x150 [ 49.835188][ T4433] dump_stack+0x15/0x1a [ 49.835214][ T4433] should_fail_ex+0x24a/0x260 [ 49.835247][ T4433] should_failslab+0x8f/0xb0 [ 49.835280][ T4433] kmem_cache_alloc_noprof+0x52/0x320 [ 49.835377][ T4433] ? security_inode_alloc+0x37/0x100 [ 49.835409][ T4433] security_inode_alloc+0x37/0x100 [ 49.835456][ T4433] inode_init_always_gfp+0x4a2/0x4f0 [ 49.835495][ T4433] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 49.835525][ T4433] alloc_inode+0x82/0x160 [ 49.835560][ T4433] new_inode+0x1e/0x100 [ 49.835667][ T4433] shmem_get_inode+0x24e/0x730 [ 49.835695][ T4433] __shmem_file_setup+0x127/0x1f0 [ 49.835752][ T4433] shmem_file_setup+0x3b/0x50 [ 49.835770][ T4433] __se_sys_memfd_create+0x2e1/0x5a0 [ 49.835799][ T4433] __x64_sys_memfd_create+0x31/0x40 [ 49.835829][ T4433] x64_sys_call+0x2d4c/0x2dc0 [ 49.835910][ T4433] do_syscall_64+0xc9/0x1c0 [ 49.835946][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 49.835976][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 49.836071][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.836102][ T4433] RIP: 0033:0x7f615d6dd169 [ 49.836117][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.836134][ T4433] RSP: 002b:00007f615bd40e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.836151][ T4433] RAX: ffffffffffffffda RBX: 00000000000007dc RCX: 00007f615d6dd169 [ 49.836163][ T4433] RDX: 00007f615bd40ef0 RSI: 0000000000000000 RDI: 00007f615d75ec3c [ 49.836203][ T4433] RBP: 0000400000000d80 R08: 00007f615bd40bb7 R09: 00007f615bd40e40 [ 49.836217][ T4433] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000280 [ 49.836231][ T4433] R13: 00007f615bd40ef0 R14: 00007f615bd40eb0 R15: 0000400000000900 [ 49.836252][ T4433] [ 50.089218][ T4444] FAULT_INJECTION: forcing a failure. [ 50.089218][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 50.101939][ T4444] CPU: 1 UID: 0 PID: 4444 Comm: syz.0.365 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 50.101976][ T4444] Tainted: [W]=WARN [ 50.101984][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.101998][ T4444] Call Trace: [ 50.102006][ T4444] [ 50.102085][ T4444] dump_stack_lvl+0xf2/0x150 [ 50.102128][ T4444] dump_stack+0x15/0x1a [ 50.102149][ T4444] should_fail_ex+0x24a/0x260 [ 50.102183][ T4444] should_failslab+0x8f/0xb0 [ 50.102216][ T4444] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 50.102248][ T4444] ? sidtab_sid2str_get+0xb8/0x140 [ 50.102288][ T4444] kmemdup_noprof+0x2b/0x70 [ 50.102388][ T4444] sidtab_sid2str_get+0xb8/0x140 [ 50.102475][ T4444] security_sid_to_context_core+0x1eb/0x2f0 [ 50.102523][ T4444] security_sid_to_context+0x27/0x30 [ 50.102556][ T4444] selinux_lsmprop_to_secctx+0x68/0xf0 [ 50.102608][ T4444] security_lsmprop_to_secctx+0x40/0x80 [ 50.102635][ T4444] audit_log_task_context+0x76/0x180 [ 50.102673][ T4444] audit_log_task+0xf9/0x250 [ 50.102730][ T4444] audit_seccomp+0x68/0x130 [ 50.102760][ T4444] __seccomp_filter+0x6fa/0x1180 [ 50.102832][ T4444] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.102873][ T4444] ? vfs_write+0x644/0x920 [ 50.102904][ T4444] ? putname+0xcf/0xf0 [ 50.102931][ T4444] __secure_computing+0x9f/0x1c0 [ 50.102960][ T4444] syscall_trace_enter+0xd1/0x1f0 [ 50.103025][ T4444] ? fpregs_assert_state_consistent+0x83/0xa0 [ 50.103048][ T4444] do_syscall_64+0xaa/0x1c0 [ 50.103084][ T4444] ? clear_bhb_loop+0x55/0xb0 [ 50.103154][ T4444] ? clear_bhb_loop+0x55/0xb0 [ 50.103205][ T4444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.103234][ T4444] RIP: 0033:0x7efc2ae6d169 [ 50.103251][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.103272][ T4444] RSP: 002b:00007efc294d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 50.103294][ T4444] RAX: ffffffffffffffda RBX: 00007efc2b085fa0 RCX: 00007efc2ae6d169 [ 50.103309][ T4444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.103323][ T4444] RBP: 00007efc294d1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.103417][ T4444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.103431][ T4444] R13: 0000000000000000 R14: 00007efc2b085fa0 R15: 00007ffcfcedb788 [ 50.103452][ T4444] [ 50.776564][ T4511] syzkaller0: entered promiscuous mode [ 50.782141][ T4511] syzkaller0: entered allmulticast mode [ 50.999064][ T4558] lo speed is unknown, defaulting to 1000 [ 51.015251][ T4558] lo speed is unknown, defaulting to 1000 [ 51.025694][ T4560] netlink: 'syz.5.415': attribute type 16 has an invalid length. [ 51.033545][ T4560] netlink: 'syz.5.415': attribute type 3 has an invalid length. [ 51.041211][ T4560] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 51.048912][ T4560] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 51.056606][ T4560] netlink: 'syz.5.415': attribute type 2 has an invalid length. [ 51.064262][ T4560] netlink: 64006 bytes leftover after parsing attributes in process `syz.5.415'. [ 51.126148][ T4579] tap0: tun_chr_ioctl cmd 1074025677 [ 51.134159][ T4579] tap0: linktype set to 0 [ 51.471778][ T4639] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 51.515283][ T4647] netlink: 'syz.4.457': attribute type 10 has an invalid length. [ 51.906753][ T4701] FAULT_INJECTION: forcing a failure. [ 51.906753][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.920021][ T4701] CPU: 0 UID: 0 PID: 4701 Comm: syz.5.478 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 51.920098][ T4701] Tainted: [W]=WARN [ 51.920106][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.920120][ T4701] Call Trace: [ 51.920132][ T4701] [ 51.920141][ T4701] dump_stack_lvl+0xf2/0x150 [ 51.920220][ T4701] dump_stack+0x15/0x1a [ 51.920293][ T4701] should_fail_ex+0x24a/0x260 [ 51.920329][ T4701] should_fail+0xb/0x10 [ 51.920360][ T4701] should_fail_usercopy+0x1a/0x20 [ 51.920415][ T4701] _copy_from_user+0x1c/0xa0 [ 51.920432][ T4701] memdup_user+0x64/0xc0 [ 51.920511][ T4701] strndup_user+0x68/0xa0 [ 51.920534][ T4701] __se_sys_mount+0x4e/0x2d0 [ 51.920559][ T4701] ? fput+0x1c4/0x200 [ 51.920575][ T4701] ? ksys_write+0x176/0x1b0 [ 51.920661][ T4701] __x64_sys_mount+0x67/0x80 [ 51.920687][ T4701] x64_sys_call+0x2c84/0x2dc0 [ 51.920709][ T4701] do_syscall_64+0xc9/0x1c0 [ 51.920828][ T4701] ? clear_bhb_loop+0x55/0xb0 [ 51.920850][ T4701] ? clear_bhb_loop+0x55/0xb0 [ 51.920953][ T4701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.921047][ T4701] RIP: 0033:0x7fb6fa91d169 [ 51.921065][ T4701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.921087][ T4701] RSP: 002b:00007fb6f8f81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.921109][ T4701] RAX: ffffffffffffffda RBX: 00007fb6fab35fa0 RCX: 00007fb6fa91d169 [ 51.921120][ T4701] RDX: 0000400000000080 RSI: 0000400000000000 RDI: 0000000000000000 [ 51.921130][ T4701] RBP: 00007fb6f8f81090 R08: 0000400000000300 R09: 0000000000000000 [ 51.921140][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.921150][ T4701] R13: 0000000000000000 R14: 00007fb6fab35fa0 R15: 00007fff403c3a98 [ 51.921166][ T4701] [ 52.585059][ T4764] FAULT_INJECTION: forcing a failure. [ 52.585059][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.598158][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.5.506 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 52.598215][ T4764] Tainted: [W]=WARN [ 52.598221][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.598309][ T4764] Call Trace: [ 52.598315][ T4764] [ 52.598349][ T4764] dump_stack_lvl+0xf2/0x150 [ 52.598372][ T4764] dump_stack+0x15/0x1a [ 52.598389][ T4764] should_fail_ex+0x24a/0x260 [ 52.598414][ T4764] should_fail+0xb/0x10 [ 52.598461][ T4764] should_fail_usercopy+0x1a/0x20 [ 52.598487][ T4764] _copy_from_iter+0xd5/0xd00 [ 52.598512][ T4764] ? kmalloc_reserve+0x16e/0x190 [ 52.598569][ T4764] ? __build_skb_around+0x196/0x1f0 [ 52.598586][ T4764] ? __alloc_skb+0x21f/0x310 [ 52.598602][ T4764] ? __virt_addr_valid+0x1ed/0x250 [ 52.598661][ T4764] ? __check_object_size+0x364/0x520 [ 52.598682][ T4764] netlink_sendmsg+0x460/0x6e0 [ 52.598766][ T4764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.598908][ T4764] __sock_sendmsg+0x140/0x180 [ 52.598936][ T4764] ____sys_sendmsg+0x326/0x4b0 [ 52.598974][ T4764] __sys_sendmsg+0x19d/0x230 [ 52.599005][ T4764] __x64_sys_sendmsg+0x46/0x50 [ 52.599026][ T4764] x64_sys_call+0x2734/0x2dc0 [ 52.599123][ T4764] do_syscall_64+0xc9/0x1c0 [ 52.599149][ T4764] ? clear_bhb_loop+0x55/0xb0 [ 52.599170][ T4764] ? clear_bhb_loop+0x55/0xb0 [ 52.599242][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.599264][ T4764] RIP: 0033:0x7fb6fa91d169 [ 52.599276][ T4764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.599296][ T4764] RSP: 002b:00007fb6f8f81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.599311][ T4764] RAX: ffffffffffffffda RBX: 00007fb6fab35fa0 RCX: 00007fb6fa91d169 [ 52.599321][ T4764] RDX: 0000000010000000 RSI: 0000400000000080 RDI: 0000000000000004 [ 52.599331][ T4764] RBP: 00007fb6f8f81090 R08: 0000000000000000 R09: 0000000000000000 [ 52.599340][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.599349][ T4764] R13: 0000000000000000 R14: 00007fb6fab35fa0 R15: 00007fff403c3a98 [ 52.599400][ T4764] [ 52.926343][ T4783] lo speed is unknown, defaulting to 1000 [ 52.933083][ T4783] lo speed is unknown, defaulting to 1000 [ 53.171131][ T30] kauditd_printk_skb: 2291 callbacks suppressed [ 53.171148][ T30] audit: type=1400 audit(1741878263.085:4280): avc: denied { read write } for pid=4795 comm="syz.0.519" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 53.222400][ T30] audit: type=1400 audit(1741878263.085:4281): avc: denied { read write } for pid=4795 comm="syz.0.519" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 53.255599][ T30] audit: type=1400 audit(1741878263.165:4282): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.281253][ T4816] FAULT_INJECTION: forcing a failure. [ 53.281253][ T4816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.294386][ T4816] CPU: 0 UID: 0 PID: 4816 Comm: syz.1.527 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 53.294416][ T4816] Tainted: [W]=WARN [ 53.294423][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.294436][ T4816] Call Trace: [ 53.294443][ T4816] [ 53.294450][ T4816] dump_stack_lvl+0xf2/0x150 [ 53.294479][ T4816] dump_stack+0x15/0x1a [ 53.294547][ T4816] should_fail_ex+0x24a/0x260 [ 53.294577][ T4816] should_fail+0xb/0x10 [ 53.294633][ T4816] should_fail_usercopy+0x1a/0x20 [ 53.294665][ T4816] _copy_to_user+0x20/0xa0 [ 53.294684][ T4816] simple_read_from_buffer+0xa0/0x110 [ 53.294715][ T4816] proc_fail_nth_read+0xf9/0x140 [ 53.294746][ T4816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.294780][ T4816] vfs_read+0x19b/0x6f0 [ 53.294804][ T4816] ? __rcu_read_unlock+0x4e/0x70 [ 53.294852][ T4816] ? __fget_files+0x17c/0x1c0 [ 53.294887][ T4816] ksys_read+0xe8/0x1b0 [ 53.294914][ T4816] __x64_sys_read+0x42/0x50 [ 53.294987][ T4816] x64_sys_call+0x2874/0x2dc0 [ 53.295013][ T4816] do_syscall_64+0xc9/0x1c0 [ 53.295045][ T4816] ? clear_bhb_loop+0x55/0xb0 [ 53.295072][ T4816] ? clear_bhb_loop+0x55/0xb0 [ 53.295104][ T4816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.295142][ T4816] RIP: 0033:0x7f615d6dbb7c [ 53.295159][ T4816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.295176][ T4816] RSP: 002b:00007f615bd41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.295194][ T4816] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dbb7c [ 53.295206][ T4816] RDX: 000000000000000f RSI: 00007f615bd410a0 RDI: 0000000000000003 [ 53.295266][ T4816] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 53.295277][ T4816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.295288][ T4816] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 53.295306][ T4816] [ 53.497095][ T30] audit: type=1400 audit(1741878263.195:4283): avc: denied { read } for pid=4815 comm="syz.1.527" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 53.518145][ T30] audit: type=1400 audit(1741878263.195:4284): avc: denied { map_create } for pid=4818 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.537231][ T30] audit: type=1400 audit(1741878263.195:4285): avc: denied { prog_load } for pid=4818 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.556188][ T30] audit: type=1400 audit(1741878263.195:4286): avc: denied { prog_load } for pid=4818 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.575209][ T30] audit: type=1400 audit(1741878263.195:4287): avc: denied { create } for pid=4818 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 53.594563][ T30] audit: type=1400 audit(1741878263.205:4288): avc: denied { read } for pid=4803 comm="syz.4.523" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 53.615708][ T30] audit: type=1400 audit(1741878263.215:4289): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.168052][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 54.263992][ T4867] lo speed is unknown, defaulting to 1000 [ 54.270423][ T4867] lo speed is unknown, defaulting to 1000 [ 54.313760][ T4875] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 54.313769][ T4874] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.338894][ T4875] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.397476][ T4874] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 54.404156][ T4874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.411684][ T4874] vhci_hcd vhci_hcd.0: Device attached [ 54.427702][ T4874] lo speed is unknown, defaulting to 1000 [ 54.434192][ T4874] lo speed is unknown, defaulting to 1000 [ 54.555414][ T4883] vhci_hcd: connection closed [ 54.555716][ T12] vhci_hcd: stop threads [ 54.564862][ T12] vhci_hcd: release socket [ 54.569302][ T12] vhci_hcd: disconnect device [ 54.593642][ T3375] vhci_hcd: vhci_device speed not set [ 54.640911][ T4914] lo speed is unknown, defaulting to 1000 [ 54.647381][ T4914] lo speed is unknown, defaulting to 1000 [ 54.813697][ T4921] SELinux: syz.4.570 (4921) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.279174][ T4978] FAULT_INJECTION: forcing a failure. [ 55.279174][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 55.291873][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.0.598 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 55.291906][ T4978] Tainted: [W]=WARN [ 55.291912][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.291924][ T4978] Call Trace: [ 55.291930][ T4978] [ 55.291937][ T4978] dump_stack_lvl+0xf2/0x150 [ 55.291964][ T4978] dump_stack+0x15/0x1a [ 55.292000][ T4978] should_fail_ex+0x24a/0x260 [ 55.292031][ T4978] should_failslab+0x8f/0xb0 [ 55.292162][ T4978] kmem_cache_alloc_noprof+0x52/0x320 [ 55.292184][ T4978] ? getname_flags+0x81/0x3b0 [ 55.292218][ T4978] getname_flags+0x81/0x3b0 [ 55.292258][ T4978] __x64_sys_linkat+0x78/0xa0 [ 55.292318][ T4978] x64_sys_call+0x14e3/0x2dc0 [ 55.292350][ T4978] do_syscall_64+0xc9/0x1c0 [ 55.292403][ T4978] ? clear_bhb_loop+0x55/0xb0 [ 55.292435][ T4978] ? clear_bhb_loop+0x55/0xb0 [ 55.292467][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.292517][ T4978] RIP: 0033:0x7efc2ae6d169 [ 55.292532][ T4978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.292550][ T4978] RSP: 002b:00007efc294d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 55.292635][ T4978] RAX: ffffffffffffffda RBX: 00007efc2b085fa0 RCX: 00007efc2ae6d169 [ 55.292650][ T4978] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 55.292664][ T4978] RBP: 00007efc294d1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.292676][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.292688][ T4978] R13: 0000000000000000 R14: 00007efc2b085fa0 R15: 00007ffcfcedb788 [ 55.292705][ T4978] [ 55.837578][ T5019] FAULT_INJECTION: forcing a failure. [ 55.837578][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 55.850425][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.1.618 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 55.850457][ T5019] Tainted: [W]=WARN [ 55.850465][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.850480][ T5019] Call Trace: [ 55.850488][ T5019] [ 55.850495][ T5019] dump_stack_lvl+0xf2/0x150 [ 55.850522][ T5019] dump_stack+0x15/0x1a [ 55.850601][ T5019] should_fail_ex+0x24a/0x260 [ 55.850649][ T5019] should_failslab+0x8f/0xb0 [ 55.850684][ T5019] kmem_cache_alloc_node_noprof+0x59/0x320 [ 55.850786][ T5019] ? __alloc_skb+0x10b/0x310 [ 55.850813][ T5019] __alloc_skb+0x10b/0x310 [ 55.850834][ T5019] netlink_alloc_large_skb+0xad/0xe0 [ 55.850895][ T5019] netlink_sendmsg+0x3b4/0x6e0 [ 55.850939][ T5019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.850971][ T5019] __sock_sendmsg+0x140/0x180 [ 55.851013][ T5019] ____sys_sendmsg+0x326/0x4b0 [ 55.851049][ T5019] __sys_sendmsg+0x19d/0x230 [ 55.851144][ T5019] __x64_sys_sendmsg+0x46/0x50 [ 55.851173][ T5019] x64_sys_call+0x2734/0x2dc0 [ 55.851205][ T5019] do_syscall_64+0xc9/0x1c0 [ 55.851242][ T5019] ? clear_bhb_loop+0x55/0xb0 [ 55.851273][ T5019] ? clear_bhb_loop+0x55/0xb0 [ 55.851300][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.851327][ T5019] RIP: 0033:0x7f615d6dd169 [ 55.851341][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.851412][ T5019] RSP: 002b:00007f615bd41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.851431][ T5019] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dd169 [ 55.851445][ T5019] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 55.851459][ T5019] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 55.851473][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.851484][ T5019] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 55.851505][ T5019] [ 56.407344][ T5073] xt_NFQUEUE: number of total queues is 0 [ 57.457259][ T5164] FAULT_INJECTION: forcing a failure. [ 57.457259][ T5164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.470377][ T5164] CPU: 0 UID: 0 PID: 5164 Comm: syz.1.677 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 57.470469][ T5164] Tainted: [W]=WARN [ 57.470483][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.470498][ T5164] Call Trace: [ 57.470505][ T5164] [ 57.470513][ T5164] dump_stack_lvl+0xf2/0x150 [ 57.470559][ T5164] dump_stack+0x15/0x1a [ 57.470585][ T5164] should_fail_ex+0x24a/0x260 [ 57.470620][ T5164] should_fail+0xb/0x10 [ 57.470666][ T5164] should_fail_usercopy+0x1a/0x20 [ 57.470699][ T5164] _copy_to_user+0x20/0xa0 [ 57.470718][ T5164] simple_read_from_buffer+0xa0/0x110 [ 57.470788][ T5164] proc_fail_nth_read+0xf9/0x140 [ 57.470824][ T5164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.470923][ T5164] vfs_read+0x19b/0x6f0 [ 57.470953][ T5164] ? __rcu_read_unlock+0x4e/0x70 [ 57.471017][ T5164] ? __fget_files+0x17c/0x1c0 [ 57.471055][ T5164] ksys_read+0xe8/0x1b0 [ 57.471087][ T5164] __x64_sys_read+0x42/0x50 [ 57.471117][ T5164] x64_sys_call+0x2874/0x2dc0 [ 57.471147][ T5164] do_syscall_64+0xc9/0x1c0 [ 57.471244][ T5164] ? clear_bhb_loop+0x55/0xb0 [ 57.471279][ T5164] ? clear_bhb_loop+0x55/0xb0 [ 57.471312][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.471343][ T5164] RIP: 0033:0x7f615d6dbb7c [ 57.471361][ T5164] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.471382][ T5164] RSP: 002b:00007f615bd41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.471458][ T5164] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dbb7c [ 57.471537][ T5164] RDX: 000000000000000f RSI: 00007f615bd410a0 RDI: 0000000000000003 [ 57.471551][ T5164] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 57.471564][ T5164] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 57.471577][ T5164] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 57.471595][ T5164] [ 57.982465][ T5211] lo speed is unknown, defaulting to 1000 [ 57.988687][ T5211] lo speed is unknown, defaulting to 1000 [ 57.991399][ T5213] sit0: entered allmulticast mode [ 58.046149][ T5213] sit0: entered promiscuous mode [ 58.189076][ T30] kauditd_printk_skb: 1695 callbacks suppressed [ 58.189094][ T30] audit: type=1400 audit(1741878268.095:5985): avc: denied { read write } for pid=4054 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.192389][ T30] audit: type=1400 audit(1741878268.105:5986): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.196795][ T30] audit: type=1400 audit(1741878268.105:5987): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.276049][ T30] audit: type=1400 audit(1741878268.135:5988): avc: denied { create } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 58.276084][ T30] audit: type=1400 audit(1741878268.135:5989): avc: denied { map_create } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.276112][ T30] audit: type=1400 audit(1741878268.135:5990): avc: denied { prog_load } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.276169][ T30] audit: type=1400 audit(1741878268.135:5991): avc: denied { prog_load } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.276196][ T30] audit: type=1400 audit(1741878268.135:5992): avc: denied { read write } for pid=5232 comm="syz.5.708" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 58.276238][ T30] audit: type=1400 audit(1741878268.135:5993): avc: denied { execmem } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 58.276264][ T30] audit: type=1400 audit(1741878268.135:5994): avc: denied { map_create } for pid=5232 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.496271][ T5241] lo speed is unknown, defaulting to 1000 [ 58.508115][ T5241] lo speed is unknown, defaulting to 1000 [ 59.153169][ T5331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5331 comm=syz.1.750 [ 59.170869][ T5333] can0: slcan on ttyS3. [ 59.240489][ T5333] can0 (unregistered): slcan off ttyS3. [ 59.246134][ T5333] Falling back ldisc for ttyS3. [ 59.261991][ T5335] FAULT_INJECTION: forcing a failure. [ 59.261991][ T5335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.275099][ T5335] CPU: 1 UID: 0 PID: 5335 Comm: syz.1.753 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 59.275153][ T5335] Tainted: [W]=WARN [ 59.275161][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.275175][ T5335] Call Trace: [ 59.275181][ T5335] [ 59.275187][ T5335] dump_stack_lvl+0xf2/0x150 [ 59.275214][ T5335] dump_stack+0x15/0x1a [ 59.275236][ T5335] should_fail_ex+0x24a/0x260 [ 59.275273][ T5335] should_fail+0xb/0x10 [ 59.275416][ T5335] should_fail_usercopy+0x1a/0x20 [ 59.275452][ T5335] _copy_to_user+0x20/0xa0 [ 59.275471][ T5335] simple_read_from_buffer+0xa0/0x110 [ 59.275500][ T5335] proc_fail_nth_read+0xf9/0x140 [ 59.275611][ T5335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.275666][ T5335] vfs_read+0x19b/0x6f0 [ 59.275690][ T5335] ? __rcu_read_unlock+0x4e/0x70 [ 59.275712][ T5335] ? __fget_files+0x17c/0x1c0 [ 59.275787][ T5335] ksys_read+0xe8/0x1b0 [ 59.275813][ T5335] __x64_sys_read+0x42/0x50 [ 59.275844][ T5335] x64_sys_call+0x2874/0x2dc0 [ 59.275876][ T5335] do_syscall_64+0xc9/0x1c0 [ 59.275919][ T5335] ? clear_bhb_loop+0x55/0xb0 [ 59.275952][ T5335] ? clear_bhb_loop+0x55/0xb0 [ 59.275994][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.276055][ T5335] RIP: 0033:0x7f615d6dbb7c [ 59.276072][ T5335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.276092][ T5335] RSP: 002b:00007f615bd41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.276188][ T5335] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dbb7c [ 59.276199][ T5335] RDX: 000000000000000f RSI: 00007f615bd410a0 RDI: 0000000000000005 [ 59.276211][ T5335] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 59.276224][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.276238][ T5335] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 59.276258][ T5335] [ 59.548699][ T5355] lo speed is unknown, defaulting to 1000 [ 59.568982][ T5355] lo speed is unknown, defaulting to 1000 [ 59.976203][ T5414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5414 comm=syz.2.778 [ 60.150817][ T5442] netlink: 'syz.4.798': attribute type 30 has an invalid length. [ 60.270646][ T5451] lo speed is unknown, defaulting to 1000 [ 60.277217][ T5451] lo speed is unknown, defaulting to 1000 [ 60.310042][ T5459] FAULT_INJECTION: forcing a failure. [ 60.310042][ T5459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.323366][ T5459] CPU: 1 UID: 0 PID: 5459 Comm: syz.4.802 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 60.323409][ T5459] Tainted: [W]=WARN [ 60.323418][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.323432][ T5459] Call Trace: [ 60.323441][ T5459] [ 60.323450][ T5459] dump_stack_lvl+0xf2/0x150 [ 60.323483][ T5459] dump_stack+0x15/0x1a [ 60.323578][ T5459] should_fail_ex+0x24a/0x260 [ 60.323612][ T5459] should_fail+0xb/0x10 [ 60.323641][ T5459] should_fail_usercopy+0x1a/0x20 [ 60.323676][ T5459] _copy_from_user+0x1c/0xa0 [ 60.323763][ T5459] kstrtouint_from_user+0x76/0xe0 [ 60.323797][ T5459] ? 0xffffffff81000000 [ 60.323812][ T5459] ? selinux_file_permission+0x22a/0x360 [ 60.323850][ T5459] proc_fail_nth_write+0x4f/0x150 [ 60.323881][ T5459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.323982][ T5459] vfs_write+0x27d/0x920 [ 60.324060][ T5459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.324106][ T5459] ? __fget_files+0x17c/0x1c0 [ 60.324226][ T5459] ksys_write+0xe8/0x1b0 [ 60.324260][ T5459] __x64_sys_write+0x42/0x50 [ 60.324294][ T5459] x64_sys_call+0x287e/0x2dc0 [ 60.324384][ T5459] do_syscall_64+0xc9/0x1c0 [ 60.324426][ T5459] ? clear_bhb_loop+0x55/0xb0 [ 60.324459][ T5459] ? clear_bhb_loop+0x55/0xb0 [ 60.324492][ T5459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.324565][ T5459] RIP: 0033:0x7f44d386bc1f [ 60.324581][ T5459] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 60.324599][ T5459] RSP: 002b:00007f44d1eb6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.324662][ T5459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44d386bc1f [ 60.324676][ T5459] RDX: 0000000000000001 RSI: 00007f44d1eb60a0 RDI: 0000000000000006 [ 60.324690][ T5459] RBP: 00007f44d1eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.324704][ T5459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 60.324718][ T5459] R13: 0000000000000000 R14: 00007f44d3a86080 R15: 00007ffdbe6103b8 [ 60.324757][ T5459] [ 60.731864][ T5494] capability: warning: `syz.4.820' uses 32-bit capabilities (legacy support in use) [ 61.004648][ T5531] syzkaller0: tun_chr_ioctl cmd 3223348778 [ 61.008423][ T5533] FAULT_INJECTION: forcing a failure. [ 61.008423][ T5533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.023701][ T5533] CPU: 1 UID: 0 PID: 5533 Comm: syz.4.839 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 61.023729][ T5533] Tainted: [W]=WARN [ 61.023734][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.023770][ T5533] Call Trace: [ 61.023775][ T5533] [ 61.023781][ T5533] dump_stack_lvl+0xf2/0x150 [ 61.023803][ T5533] dump_stack+0x15/0x1a [ 61.023860][ T5533] should_fail_ex+0x24a/0x260 [ 61.023892][ T5533] should_fail+0xb/0x10 [ 61.023983][ T5533] should_fail_usercopy+0x1a/0x20 [ 61.024009][ T5533] _copy_to_user+0x20/0xa0 [ 61.024094][ T5533] simple_read_from_buffer+0xa0/0x110 [ 61.024118][ T5533] proc_fail_nth_read+0xf9/0x140 [ 61.024166][ T5533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.024191][ T5533] vfs_read+0x19b/0x6f0 [ 61.024215][ T5533] ? __rcu_read_unlock+0x4e/0x70 [ 61.024266][ T5533] ? __fget_files+0x17c/0x1c0 [ 61.024295][ T5533] ksys_read+0xe8/0x1b0 [ 61.024318][ T5533] __x64_sys_read+0x42/0x50 [ 61.024401][ T5533] x64_sys_call+0x2874/0x2dc0 [ 61.024423][ T5533] do_syscall_64+0xc9/0x1c0 [ 61.024450][ T5533] ? clear_bhb_loop+0x55/0xb0 [ 61.024608][ T5533] ? clear_bhb_loop+0x55/0xb0 [ 61.024630][ T5533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.024653][ T5533] RIP: 0033:0x7f44d386bb7c [ 61.024666][ T5533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.024680][ T5533] RSP: 002b:00007f44d1ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.024695][ T5533] RAX: ffffffffffffffda RBX: 00007f44d3a85fa0 RCX: 00007f44d386bb7c [ 61.024782][ T5533] RDX: 000000000000000f RSI: 00007f44d1ed70a0 RDI: 0000000000000008 [ 61.024797][ T5533] RBP: 00007f44d1ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.024807][ T5533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.024855][ T5533] R13: 0000000000000000 R14: 00007f44d3a85fa0 R15: 00007ffdbe6103b8 [ 61.024876][ T5533] [ 61.262635][ T5542] serio: Serial port ptm0 [ 61.932987][ T5594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5594 comm=syz.5.866 [ 62.149677][ T5657] tc_dump_action: action bad kind [ 62.189274][ T5664] FAULT_INJECTION: forcing a failure. [ 62.189274][ T5664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.202528][ T5664] CPU: 0 UID: 0 PID: 5664 Comm: syz.1.898 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 62.202565][ T5664] Tainted: [W]=WARN [ 62.202573][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.202587][ T5664] Call Trace: [ 62.202595][ T5664] [ 62.202603][ T5664] dump_stack_lvl+0xf2/0x150 [ 62.202639][ T5664] dump_stack+0x15/0x1a [ 62.202660][ T5664] should_fail_ex+0x24a/0x260 [ 62.202691][ T5664] should_fail+0xb/0x10 [ 62.202779][ T5664] should_fail_usercopy+0x1a/0x20 [ 62.202817][ T5664] _copy_to_user+0x20/0xa0 [ 62.202840][ T5664] simple_read_from_buffer+0xa0/0x110 [ 62.202873][ T5664] proc_fail_nth_read+0xf9/0x140 [ 62.202990][ T5664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.203029][ T5664] vfs_read+0x19b/0x6f0 [ 62.203053][ T5664] ? __rcu_read_unlock+0x4e/0x70 [ 62.203079][ T5664] ? __fget_files+0x17c/0x1c0 [ 62.203194][ T5664] ksys_read+0xe8/0x1b0 [ 62.203227][ T5664] __x64_sys_read+0x42/0x50 [ 62.203256][ T5664] x64_sys_call+0x2874/0x2dc0 [ 62.203287][ T5664] do_syscall_64+0xc9/0x1c0 [ 62.203392][ T5664] ? clear_bhb_loop+0x55/0xb0 [ 62.203431][ T5664] ? clear_bhb_loop+0x55/0xb0 [ 62.203464][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.203496][ T5664] RIP: 0033:0x7f615d6dbb7c [ 62.203576][ T5664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.203643][ T5664] RSP: 002b:00007f615bd41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.203728][ T5664] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dbb7c [ 62.203742][ T5664] RDX: 000000000000000f RSI: 00007f615bd410a0 RDI: 0000000000000003 [ 62.203756][ T5664] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 62.203771][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.203784][ T5664] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 62.203806][ T5664] [ 62.625465][ T5709] FAULT_INJECTION: forcing a failure. [ 62.625465][ T5709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.638755][ T5709] CPU: 0 UID: 0 PID: 5709 Comm: syz.2.918 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 62.638797][ T5709] Tainted: [W]=WARN [ 62.638803][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.638815][ T5709] Call Trace: [ 62.638822][ T5709] [ 62.638829][ T5709] dump_stack_lvl+0xf2/0x150 [ 62.638863][ T5709] dump_stack+0x15/0x1a [ 62.638890][ T5709] should_fail_ex+0x24a/0x260 [ 62.638967][ T5709] should_fail+0xb/0x10 [ 62.639000][ T5709] should_fail_usercopy+0x1a/0x20 [ 62.639107][ T5709] _copy_from_user+0x1c/0xa0 [ 62.639127][ T5709] memdup_user+0x64/0xc0 [ 62.639155][ T5709] strndup_user+0x68/0xa0 [ 62.639217][ T5709] __se_sys_mount+0x4e/0x2d0 [ 62.639346][ T5709] ? fput+0x1c4/0x200 [ 62.639370][ T5709] ? ksys_write+0x176/0x1b0 [ 62.639488][ T5709] __x64_sys_mount+0x67/0x80 [ 62.639526][ T5709] x64_sys_call+0x2c84/0x2dc0 [ 62.639600][ T5709] do_syscall_64+0xc9/0x1c0 [ 62.639634][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 62.639660][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 62.639692][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.639773][ T5709] RIP: 0033:0x7f1c3c18d169 [ 62.639791][ T5709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.639812][ T5709] RSP: 002b:00007f1c3a7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.639834][ T5709] RAX: ffffffffffffffda RBX: 00007f1c3c3a5fa0 RCX: 00007f1c3c18d169 [ 62.639848][ T5709] RDX: 0000400000000340 RSI: 0000400000000280 RDI: 0000000000000000 [ 62.639862][ T5709] RBP: 00007f1c3a7f7090 R08: 0000400000000700 R09: 0000000000000000 [ 62.639931][ T5709] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 62.639945][ T5709] R13: 0000000000000000 R14: 00007f1c3c3a5fa0 R15: 00007ffed5a4a6d8 [ 62.639985][ T5709] [ 62.964379][ T5727] FAULT_INJECTION: forcing a failure. [ 62.964379][ T5727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.977606][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: syz.4.925 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 62.977640][ T5727] Tainted: [W]=WARN [ 62.977647][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.977713][ T5727] Call Trace: [ 62.977720][ T5727] [ 62.977728][ T5727] dump_stack_lvl+0xf2/0x150 [ 62.977760][ T5727] dump_stack+0x15/0x1a [ 62.977781][ T5727] should_fail_ex+0x24a/0x260 [ 62.977813][ T5727] should_fail+0xb/0x10 [ 62.977899][ T5727] should_fail_usercopy+0x1a/0x20 [ 62.977933][ T5727] _copy_to_user+0x20/0xa0 [ 62.977953][ T5727] simple_read_from_buffer+0xa0/0x110 [ 62.977982][ T5727] proc_fail_nth_read+0xf9/0x140 [ 62.978053][ T5727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.978130][ T5727] vfs_read+0x19b/0x6f0 [ 62.978199][ T5727] ? __rcu_read_unlock+0x4e/0x70 [ 62.978223][ T5727] ? __fget_files+0x17c/0x1c0 [ 62.978259][ T5727] ksys_read+0xe8/0x1b0 [ 62.978346][ T5727] __x64_sys_read+0x42/0x50 [ 62.978429][ T5727] x64_sys_call+0x2874/0x2dc0 [ 62.978457][ T5727] do_syscall_64+0xc9/0x1c0 [ 62.978491][ T5727] ? clear_bhb_loop+0x55/0xb0 [ 62.978520][ T5727] ? clear_bhb_loop+0x55/0xb0 [ 62.978549][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.978648][ T5727] RIP: 0033:0x7f44d386bb7c [ 62.978663][ T5727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.978734][ T5727] RSP: 002b:00007f44d1ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.978755][ T5727] RAX: ffffffffffffffda RBX: 00007f44d3a85fa0 RCX: 00007f44d386bb7c [ 62.978851][ T5727] RDX: 000000000000000f RSI: 00007f44d1ed70a0 RDI: 0000000000000003 [ 62.978864][ T5727] RBP: 00007f44d1ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.978951][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.978963][ T5727] R13: 0000000000000000 R14: 00007f44d3a85fa0 R15: 00007ffdbe6103b8 [ 62.978982][ T5727] [ 63.222485][ T30] kauditd_printk_skb: 1841 callbacks suppressed [ 63.222500][ T30] audit: type=1400 audit(1741878273.135:7836): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.276108][ T30] audit: type=1400 audit(1741878273.165:7837): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.300430][ T30] audit: type=1400 audit(1741878273.175:7838): avc: denied { create } for pid=5728 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 63.320958][ T30] audit: type=1326 audit(1741878273.175:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2ae6d169 code=0x7ffc0000 [ 63.344451][ T30] audit: type=1326 audit(1741878273.175:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2ae6d169 code=0x7ffc0000 [ 63.367805][ T30] audit: type=1400 audit(1741878273.175:7841): avc: denied { create } for pid=5728 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 63.387462][ T30] audit: type=1400 audit(1741878273.175:7842): avc: denied { map_create } for pid=5728 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.406522][ T30] audit: type=1326 audit(1741878273.175:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc2ae6d169 code=0x7ffc0000 [ 63.410027][ T5739] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.429802][ T30] audit: type=1326 audit(1741878273.175:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2ae6d169 code=0x7ffc0000 [ 63.549107][ T5751] xt_connbytes: Forcing CT accounting to be enabled [ 63.556710][ T5751] Cannot find add_set index 0 as target [ 63.709601][ T5765] rdma_op ffff888134498980 conn xmit_rdma 0000000000000000 [ 63.714680][ T5767] rdma_op ffff888118440980 conn xmit_rdma 0000000000000000 [ 63.721062][ T5765] loop5: detected capacity change from 0 to 512 [ 63.732263][ T5768] loop2: detected capacity change from 0 to 128 [ 63.738759][ T5767] loop4: detected capacity change from 0 to 512 [ 63.738800][ T5768] EXT4-fs: Ignoring removed nobh option [ 63.757451][ T5765] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #2: comm syz.5.941: corrupted xattr block 255: invalid header [ 63.772769][ T5768] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.781814][ T5767] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.940: corrupted xattr block 255: invalid header [ 63.785149][ T5765] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 63.807739][ T5768] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.810787][ T5765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.827688][ T5767] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 63.839782][ T5767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.849233][ T5765] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #2: comm syz.5.941: corrupted xattr block 255: invalid header [ 63.852936][ T5767] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.940: corrupted xattr block 255: invalid header [ 63.871192][ T5765] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 63.879259][ T5767] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 63.899340][ T5765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.910085][ T5767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.910688][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.034340][ T5778] vlan2: entered allmulticast mode [ 64.186226][ T36] IPVS: starting estimator thread 0... [ 64.248123][ T5783] infiniband syz!: set active [ 64.252975][ T5783] infiniband syz!: added team_slave_0 [ 64.258611][ T5795] loop5: detected capacity change from 0 to 4096 [ 64.280188][ T5792] IPVS: using max 2208 ests per chain, 110400 per kthread [ 64.298698][ T5783] RDS/IB: syz!: added [ 64.303830][ T5795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.340081][ T5795] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.949: corrupted inode contents [ 64.356788][ T5783] smc: adding ib device syz! with port count 1 [ 64.375294][ T5783] smc: ib device syz! port 1 has pnetid [ 64.417746][ T5795] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #15: comm syz.5.949: mark_inode_dirty error [ 64.436574][ T5807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.953'. [ 64.447859][ T5797] loop4: detected capacity change from 0 to 512 [ 64.465417][ T5795] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.949: corrupted inode contents [ 64.499321][ T5795] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.949: mark_inode_dirty error [ 64.536528][ T5795] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.949: corrupted inode contents [ 64.569806][ T5795] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.949: mark_inode_dirty error [ 64.591249][ T5812] rdma_op ffff888134414580 conn xmit_rdma 0000000000000000 [ 64.599008][ T5795] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.949: corrupted inode contents [ 64.620446][ T5812] loop0: detected capacity change from 0 to 512 [ 64.627567][ T5795] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.949: mark_inode_dirty error [ 64.652955][ T5795] EXT4-fs error (device loop5) in ext4_setattr:5569: Corrupt filesystem [ 64.662352][ T5812] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.954: corrupted xattr block 255: invalid header [ 64.699117][ T5808] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #15: comm syz.5.949: corrupted inode contents [ 64.727306][ T5812] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 64.736066][ T5812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.754298][ T5812] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.954: corrupted xattr block 255: invalid header [ 64.783776][ T5797] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.944: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 64.803761][ T5812] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 64.816381][ T5797] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.944: Bad quota inode: 3, type: 0 [ 64.826692][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.841262][ T5797] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.879631][ T5797] EXT4-fs (loop4): mount failed [ 65.014704][ T4054] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 65.032526][ T4054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.272970][ T5857] loop0: detected capacity change from 0 to 512 [ 65.361808][ T5857] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.373360][ T5857] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 65.383615][ T5857] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.972: Corrupt directory, running e2fsck is recommended [ 65.517229][ T5863] FAULT_INJECTION: forcing a failure. [ 65.517229][ T5863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.530401][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: syz.5.974 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 65.530513][ T5863] Tainted: [W]=WARN [ 65.530521][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.530535][ T5863] Call Trace: [ 65.530542][ T5863] [ 65.530550][ T5863] dump_stack_lvl+0xf2/0x150 [ 65.530582][ T5863] dump_stack+0x15/0x1a [ 65.530603][ T5863] should_fail_ex+0x24a/0x260 [ 65.530722][ T5863] should_fail+0xb/0x10 [ 65.530753][ T5863] should_fail_usercopy+0x1a/0x20 [ 65.530787][ T5863] _copy_from_user+0x1c/0xa0 [ 65.530810][ T5863] __se_sys_io_uring_register+0x1034/0x1ef0 [ 65.530881][ T5863] ? ctx_sched_in+0x389/0x3b0 [ 65.530965][ T5863] ? __rcu_read_unlock+0x4e/0x70 [ 65.530992][ T5863] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 65.531036][ T5863] __x64_sys_io_uring_register+0x55/0x70 [ 65.531134][ T5863] x64_sys_call+0x2c52/0x2dc0 [ 65.531165][ T5863] do_syscall_64+0xc9/0x1c0 [ 65.531207][ T5863] ? clear_bhb_loop+0x55/0xb0 [ 65.531233][ T5863] ? clear_bhb_loop+0x55/0xb0 [ 65.531295][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.531350][ T5863] RIP: 0033:0x7fb6fa91d169 [ 65.531364][ T5863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.531381][ T5863] RSP: 002b:00007fb6f8f81038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 65.531478][ T5863] RAX: ffffffffffffffda RBX: 00007fb6fab35fa0 RCX: 00007fb6fa91d169 [ 65.531490][ T5863] RDX: 0000400000000380 RSI: 0000000000000022 RDI: 0000000000000004 [ 65.531502][ T5863] RBP: 00007fb6f8f81090 R08: 0000000000000000 R09: 0000000000000000 [ 65.531515][ T5863] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 65.531550][ T5863] R13: 0000000000000000 R14: 00007fb6fab35fa0 R15: 00007fff403c3a98 [ 65.531571][ T5863] [ 65.642263][ T5857] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 65.686732][ T5865] loop4: detected capacity change from 0 to 512 [ 65.737390][ T5857] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.972: corrupted in-inode xattr: invalid ea_ino [ 65.762041][ T5865] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.770423][ T5857] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.972: couldn't read orphan inode 15 (err -117) [ 65.773726][ T5865] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 65.773744][ T5865] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.975: Corrupt directory, running e2fsck is recommended [ 65.790748][ T5857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.821301][ T5865] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 65.834395][ T5865] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.975: corrupted in-inode xattr: invalid ea_ino [ 65.857802][ T5865] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.975: couldn't read orphan inode 15 (err -117) [ 65.873657][ T5873] loop5: detected capacity change from 0 to 512 [ 65.875203][ T5874] bridge0: port 3(gretap0) entered blocking state [ 65.887015][ T5874] bridge0: port 3(gretap0) entered disabled state [ 65.888546][ T5873] EXT4-fs: Ignoring removed nobh option [ 65.896892][ T5874] gretap0: entered allmulticast mode [ 65.899181][ T5873] EXT4-fs: Ignoring removed i_version option [ 65.909383][ T5874] gretap0: entered promiscuous mode [ 65.910596][ T5857] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.927389][ T5857] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 65.937574][ T5857] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.972: Corrupt directory, running e2fsck is recommended [ 65.940694][ T5874] bridge0: port 3(gretap0) entered blocking state [ 65.953967][ T5873] EXT4-fs: Ignoring removed i_version option [ 65.956819][ T5874] bridge0: port 3(gretap0) entered forwarding state [ 65.963477][ T5865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.984129][ T5873] EXT4-fs: journaled quota format not specified [ 65.992080][ T5857] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.003628][ T5857] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 66.013811][ T5857] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.972: Corrupt directory, running e2fsck is recommended [ 66.041023][ T5875] gretap0: left allmulticast mode [ 66.046191][ T5875] gretap0: left promiscuous mode [ 66.051376][ T5875] bridge0: port 3(gretap0) entered disabled state [ 66.090985][ T5857] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.102537][ T5857] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 66.112654][ T5857] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.972: Corrupt directory, running e2fsck is recommended [ 66.126763][ T5865] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.129605][ T5881] loop5: detected capacity change from 0 to 128 [ 66.138264][ T5865] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 66.138309][ T5865] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.975: Corrupt directory, running e2fsck is recommended [ 66.172948][ T5857] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.200611][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.215339][ T5881] FAT-fs (loop5): Directory bread(block 162) failed [ 66.251081][ T5881] FAT-fs (loop5): Directory bread(block 163) failed [ 66.255094][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 66.267523][ T5881] FAT-fs (loop5): Directory bread(block 164) failed [ 66.291638][ T5891] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.303245][ T5891] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 66.313379][ T5891] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.975: Corrupt directory, running e2fsck is recommended [ 66.326344][ T5881] FAT-fs (loop5): Directory bread(block 165) failed [ 66.333448][ T5881] FAT-fs (loop5): Directory bread(block 166) failed [ 66.343790][ T5895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5895 comm=syz.0.986 [ 66.343883][ T5865] FAULT_INJECTION: forcing a failure. [ 66.343883][ T5865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.369160][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.4.975 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 66.369189][ T5865] Tainted: [W]=WARN [ 66.369272][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.369284][ T5865] Call Trace: [ 66.369291][ T5865] [ 66.369299][ T5865] dump_stack_lvl+0xf2/0x150 [ 66.369363][ T5865] dump_stack+0x15/0x1a [ 66.369428][ T5865] should_fail_ex+0x24a/0x260 [ 66.369463][ T5865] should_fail+0xb/0x10 [ 66.369493][ T5865] should_fail_usercopy+0x1a/0x20 [ 66.369558][ T5865] strncpy_from_user+0x25/0x210 [ 66.369585][ T5865] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 66.369609][ T5865] ? getname_flags+0x81/0x3b0 [ 66.369653][ T5865] getname_flags+0xb0/0x3b0 [ 66.369743][ T5865] getname+0x17/0x20 [ 66.369761][ T5865] do_sys_openat2+0x67/0x120 [ 66.369782][ T5865] __x64_sys_openat+0xf3/0x120 [ 66.369845][ T5865] x64_sys_call+0x2b30/0x2dc0 [ 66.369872][ T5865] do_syscall_64+0xc9/0x1c0 [ 66.369938][ T5865] ? clear_bhb_loop+0x55/0xb0 [ 66.369969][ T5865] ? clear_bhb_loop+0x55/0xb0 [ 66.369999][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.370083][ T5865] RIP: 0033:0x7f44d386d169 [ 66.370100][ T5865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.370125][ T5865] RSP: 002b:00007f44d1ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.370147][ T5865] RAX: ffffffffffffffda RBX: 00007f44d3a85fa0 RCX: 00007f44d386d169 [ 66.370162][ T5865] RDX: 0000000000143042 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 66.370176][ T5865] RBP: 00007f44d1ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.370188][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.370199][ T5865] R13: 0000000000000000 R14: 00007f44d3a85fa0 R15: 00007ffdbe6103b8 [ 66.370260][ T5865] [ 66.562987][ T5881] FAT-fs (loop5): Directory bread(block 167) failed [ 66.563175][ T5886] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.569671][ T5881] FAT-fs (loop5): Directory bread(block 168) failed [ 66.581158][ T5886] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 66.597781][ T5886] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.975: Corrupt directory, running e2fsck is recommended [ 66.600678][ T5881] FAT-fs (loop5): Directory bread(block 169) failed [ 66.628765][ T5897] loop0: detected capacity change from 0 to 512 [ 66.641024][ T5881] FAT-fs (loop5): Directory bread(block 162) failed [ 66.650206][ T5881] FAT-fs (loop5): Directory bread(block 163) failed [ 66.657540][ T5881] bio_check_eod: 16666 callbacks suppressed [ 66.657555][ T5881] syz.5.982: attempt to access beyond end of device [ 66.657555][ T5881] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 66.659589][ T5899] loop1: detected capacity change from 0 to 512 [ 66.671271][ T5881] syz.5.982: attempt to access beyond end of device [ 66.671271][ T5881] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 66.699370][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.728172][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.728486][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.742196][ T5897] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.754423][ T5899] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.792168][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.809971][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 66.863292][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.892675][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 66.901562][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 66.902792][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 66.915567][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 66.979129][ T5921] loop0: detected capacity change from 0 to 2048 [ 67.022667][ T5921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.050624][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 67.059677][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 67.094083][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 67.108187][ T5943] loop4: detected capacity change from 0 to 764 [ 67.149695][ T5943] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.169716][ T5948] FAULT_INJECTION: forcing a failure. [ 67.169716][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 67.182520][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.1.1008 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 67.182559][ T5948] Tainted: [W]=WARN [ 67.182568][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.182583][ T5948] Call Trace: [ 67.182589][ T5948] [ 67.182605][ T5948] dump_stack_lvl+0xf2/0x150 [ 67.182700][ T5948] dump_stack+0x15/0x1a [ 67.182727][ T5948] should_fail_ex+0x24a/0x260 [ 67.182763][ T5948] should_failslab+0x8f/0xb0 [ 67.182797][ T5948] __kmalloc_noprof+0xab/0x3f0 [ 67.182895][ T5948] ? security_prepare_creds+0x53/0x120 [ 67.182992][ T5948] security_prepare_creds+0x53/0x120 [ 67.183067][ T5948] prepare_creds+0x346/0x480 [ 67.183174][ T5948] __sys_setregid+0xde/0x360 [ 67.183203][ T5948] __x64_sys_setregid+0x2d/0x40 [ 67.183229][ T5948] x64_sys_call+0x11dd/0x2dc0 [ 67.183279][ T5948] do_syscall_64+0xc9/0x1c0 [ 67.183318][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 67.183346][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 67.183379][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.183429][ T5948] RIP: 0033:0x7f615d6dd169 [ 67.183448][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.183512][ T5948] RSP: 002b:00007f615bd41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 67.183536][ T5948] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dd169 [ 67.183551][ T5948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 67.183566][ T5948] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 67.183580][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.183638][ T5948] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 67.183661][ T5948] [ 67.185982][ T5949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5949 comm=syz.2.1009 [ 67.599084][ T5980] loop1: detected capacity change from 0 to 512 [ 67.631361][ T5980] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 67.637910][ T5980] EXT4-fs (loop1): mount failed [ 67.674589][ T5980] loop1: detected capacity change from 0 to 512 [ 67.688949][ T5980] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.698967][ T5984] hub 4-0:1.0: USB hub found [ 67.710206][ T5984] hub 4-0:1.0: 8 ports detected [ 67.769673][ T5988] loop5: detected capacity change from 0 to 1024 [ 67.777115][ T5988] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 67.799500][ T5988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5988 comm=syz.5.1025 [ 68.203387][ T6005] netlink: '+}[@': attribute type 3 has an invalid length. [ 68.353624][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.353791][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.371251][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 68.371268][ T30] audit: type=1326 audit(1741878278.275:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fa91d169 code=0x7ffc0000 [ 68.376619][ T30] audit: type=1326 audit(1741878278.285:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb6fa91d169 code=0x7ffc0000 [ 68.376661][ T30] audit: type=1326 audit(1741878278.285:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fa91d169 code=0x7ffc0000 [ 68.376706][ T30] audit: type=1326 audit(1741878278.285:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fa91d169 code=0x7ffc0000 [ 68.376737][ T30] audit: type=1326 audit(1741878278.285:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb6fa91d169 code=0x7ffc0000 [ 68.376767][ T30] audit: type=1326 audit(1741878278.285:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6fa91d1a3 code=0x7ffc0000 [ 68.383111][ T30] audit: type=1326 audit(1741878278.295:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6fa91bc1f code=0x7ffc0000 [ 68.407897][ T30] audit: type=1326 audit(1741878278.315:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb6fa91d1f7 code=0x7ffc0000 [ 68.417272][ T6012] loop5: detected capacity change from 0 to 2048 [ 68.417821][ T6012] ext3: Unknown parameter 'permit_directio' [ 68.422259][ T30] audit: type=1326 audit(1741878278.325:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6fa91bad0 code=0x7ffc0000 [ 68.422331][ T30] audit: type=1326 audit(1741878278.325:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6fa91cd6b code=0x7ffc0000 [ 68.529148][ T6018] netlink: 'syz.4.1037': attribute type 27 has an invalid length. [ 68.621328][ T6016] loop2: detected capacity change from 0 to 1024 [ 68.772792][ T6018] sit0: left promiscuous mode [ 68.777548][ T6018] sit0: left allmulticast mode [ 68.791670][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.060026][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.167420][ T6018] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.176448][ T6018] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.185436][ T6018] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.194396][ T6018] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.213408][ T6018] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.222366][ T6018] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.231369][ T6018] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.240366][ T6018] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.386945][ T6009] syz.5.1033 (6009) used greatest stack depth: 6368 bytes left [ 69.408279][ T6036] loop2: detected capacity change from 0 to 256 [ 69.427205][ T6046] FAULT_INJECTION: forcing a failure. [ 69.427205][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.440403][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.1.1047 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 69.440438][ T6046] Tainted: [W]=WARN [ 69.440452][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.440514][ T6046] Call Trace: [ 69.440521][ T6046] [ 69.440530][ T6046] dump_stack_lvl+0xf2/0x150 [ 69.440567][ T6046] dump_stack+0x15/0x1a [ 69.440605][ T6046] should_fail_ex+0x24a/0x260 [ 69.440659][ T6046] should_fail+0xb/0x10 [ 69.440727][ T6046] should_fail_usercopy+0x1a/0x20 [ 69.440805][ T6046] _copy_to_user+0x20/0xa0 [ 69.440830][ T6046] simple_read_from_buffer+0xa0/0x110 [ 69.440909][ T6046] proc_fail_nth_read+0xf9/0x140 [ 69.440947][ T6046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.441003][ T6046] vfs_read+0x19b/0x6f0 [ 69.441034][ T6046] ? __rcu_read_unlock+0x4e/0x70 [ 69.441063][ T6046] ? __fget_files+0x17c/0x1c0 [ 69.441108][ T6046] ksys_read+0xe8/0x1b0 [ 69.441143][ T6046] __x64_sys_read+0x42/0x50 [ 69.441234][ T6046] x64_sys_call+0x2874/0x2dc0 [ 69.441263][ T6046] do_syscall_64+0xc9/0x1c0 [ 69.441295][ T6046] ? clear_bhb_loop+0x55/0xb0 [ 69.441390][ T6046] ? clear_bhb_loop+0x55/0xb0 [ 69.441425][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.441504][ T6046] RIP: 0033:0x7f615d6dbb7c [ 69.441531][ T6046] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.441550][ T6046] RSP: 002b:00007f615bd41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.441569][ T6046] RAX: ffffffffffffffda RBX: 00007f615d8f5fa0 RCX: 00007f615d6dbb7c [ 69.441581][ T6046] RDX: 000000000000000f RSI: 00007f615bd410a0 RDI: 0000000000000007 [ 69.441592][ T6046] RBP: 00007f615bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 69.441622][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.441636][ T6046] R13: 0000000000000000 R14: 00007f615d8f5fa0 R15: 00007ffcb1de6fa8 [ 69.441659][ T6046] [ 69.449963][ T6036] FAT-fs (loop2): IO charset maciceland not found [ 69.553811][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.680312][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.690860][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.700095][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.708870][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.717467][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.726186][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.735083][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.753589][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.762189][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.774152][ T6064] __nla_validate_parse: 4 callbacks suppressed [ 69.774171][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1053'. [ 69.824407][ T6067] loop5: detected capacity change from 0 to 764 [ 69.927358][ T6078] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1058'. [ 69.984507][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.006530][ T6082] IPv6: sit1: Disabled Multicast RS [ 70.013039][ T6082] sit1: entered allmulticast mode [ 70.262574][ T6089] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1062'. [ 70.471795][ T6095] lo speed is unknown, defaulting to 1000 [ 70.477993][ T6095] lo speed is unknown, defaulting to 1000 [ 70.581631][ T6109] loop1: detected capacity change from 0 to 128 [ 70.592378][ T6109] FAT-fs (loop1): Directory bread(block 162) failed [ 70.599020][ T6109] FAT-fs (loop1): Directory bread(block 163) failed [ 70.606485][ T6109] FAT-fs (loop1): Directory bread(block 164) failed [ 70.614774][ T6109] FAT-fs (loop1): Directory bread(block 165) failed [ 70.623383][ T6109] FAT-fs (loop1): Directory bread(block 166) failed [ 70.630628][ T6109] FAT-fs (loop1): Directory bread(block 167) failed [ 70.637277][ T6109] FAT-fs (loop1): Directory bread(block 168) failed [ 70.644071][ T6109] FAT-fs (loop1): Directory bread(block 169) failed [ 70.665678][ T6109] FAT-fs (loop1): Directory bread(block 162) failed [ 70.672871][ T6109] FAT-fs (loop1): Directory bread(block 163) failed [ 70.679754][ T6109] syz.1.1070: attempt to access beyond end of device [ 70.679754][ T6109] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 70.693090][ T6109] syz.1.1070: attempt to access beyond end of device [ 70.693090][ T6109] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 70.732323][ T6114] rdma_op ffff88810212ed80 conn xmit_rdma 0000000000000000 [ 70.749176][ T6114] loop2: detected capacity change from 0 to 512 [ 70.758611][ T6114] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1072: corrupted xattr block 255: invalid header [ 70.773699][ T6114] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 70.782467][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.795176][ T6114] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1072: corrupted xattr block 255: invalid header [ 70.808660][ T6114] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 70.817728][ T6114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.835968][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.844673][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.853956][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.862707][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.871145][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.879640][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.906045][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.924703][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.941340][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.950263][ T6132] FAULT_INJECTION: forcing a failure. [ 70.950263][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 70.962962][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.0.1080 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 70.962996][ T6132] Tainted: [W]=WARN [ 70.963004][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.963018][ T6132] Call Trace: [ 70.963024][ T6132] [ 70.963035][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.963032][ T6132] dump_stack_lvl+0xf2/0x150 [ 70.963071][ T6132] dump_stack+0x15/0x1a [ 70.963091][ T6132] should_fail_ex+0x24a/0x260 [ 70.963130][ T6132] should_failslab+0x8f/0xb0 [ 70.963164][ T6132] kmem_cache_alloc_node_noprof+0x59/0x320 [ 70.963177][ T6124] ================================================================== [ 70.963193][ T6132] ? __alloc_skb+0x10b/0x310 [ 70.963218][ T6132] __alloc_skb+0x10b/0x310 [ 70.963300][ T6132] netlink_alloc_large_skb+0xad/0xe0 [ 70.963339][ T6132] netlink_sendmsg+0x3b4/0x6e0 [ 70.963385][ T6132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.963425][ T6132] __sock_sendmsg+0x140/0x180 [ 70.963502][ T6132] ____sys_sendmsg+0x326/0x4b0 [ 70.963538][ T6132] __sys_sendmsg+0x19d/0x230 [ 70.963588][ T6132] __x64_sys_sendmsg+0x46/0x50 [ 70.963619][ T6132] x64_sys_call+0x2734/0x2dc0 [ 70.963719][ T6132] do_syscall_64+0xc9/0x1c0 [ 70.963759][ T6132] ? clear_bhb_loop+0x55/0xb0 [ 70.963792][ T6132] ? clear_bhb_loop+0x55/0xb0 [ 70.963903][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.963936][ T6132] RIP: 0033:0x7efc2ae6d169 [ 70.963954][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.964052][ T6132] RSP: 002b:00007efc294d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.964076][ T6132] RAX: ffffffffffffffda RBX: 00007efc2b085fa0 RCX: 00007efc2ae6d169 [ 70.964091][ T6132] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 70.964148][ T6132] RBP: 00007efc294d1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.964162][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.964185][ T6132] R13: 0000000000000000 R14: 00007efc2b085fa0 R15: 00007ffcfcedb788 [ 70.964209][ T6132] [ 70.995458][ T6124] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 70.995519][ T6124] [ 70.995528][ T6124] write to 0xffffffff88bd8188 of 8 bytes by task 6132 on cpu 1: [ 70.995545][ T6124] data_alloc+0x216/0x2c0 [ 70.995590][ T6124] prb_reserve+0x85e/0xb60 [ 70.995622][ T6124] vprintk_store+0x558/0x870 [ 70.995642][ T6124] vprintk_emit+0x168/0x690 [ 70.995660][ T6124] vprintk_default+0x26/0x30 [ 70.995679][ T6124] vprintk+0x1d/0x30 [ 70.995703][ T6124] _printk+0x7a/0xa0 [ 70.995728][ T6124] show_trace_log_lvl+0x380/0x400 [ 70.995755][ T6124] dump_stack_lvl+0xf2/0x150 [ 70.995778][ T6124] dump_stack+0x15/0x1a [ 70.995800][ T6124] should_fail_ex+0x24a/0x260 [ 70.995834][ T6124] should_failslab+0x8f/0xb0 [ 70.995864][ T6124] kmem_cache_alloc_node_noprof+0x59/0x320 [ 70.995891][ T6124] __alloc_skb+0x10b/0x310 [ 70.995915][ T6124] netlink_alloc_large_skb+0xad/0xe0 [ 70.995948][ T6124] netlink_sendmsg+0x3b4/0x6e0 [ 70.995980][ T6124] __sock_sendmsg+0x140/0x180 [ 70.996018][ T6124] ____sys_sendmsg+0x326/0x4b0 [ 70.996050][ T6124] __sys_sendmsg+0x19d/0x230 [ 70.996075][ T6124] __x64_sys_sendmsg+0x46/0x50 [ 70.996103][ T6124] x64_sys_call+0x2734/0x2dc0 [ 70.996136][ T6124] do_syscall_64+0xc9/0x1c0 [ 70.996173][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.996199][ T6124] [ 70.996206][ T6124] read to 0xffffffff88bd8188 of 8 bytes by task 6124 on cpu 0: [ 70.996222][ T6124] data_push_tail+0x102/0x430 [ 70.996258][ T6124] data_alloc+0xbe/0x2c0 [ 70.996291][ T6124] prb_reserve+0x85e/0xb60 [ 70.996326][ T6124] vprintk_store+0x558/0x870 [ 70.996348][ T6124] vprintk_emit+0x168/0x690 [ 70.996367][ T6124] dev_vprintk_emit+0x23c/0x2a0 [ 70.996389][ T6124] dev_printk_emit+0x82/0xb0 [ 70.996407][ T6124] __dev_printk+0xf6/0x110 [ 70.996434][ T6124] _dev_err+0x99/0xc0 [ 70.996456][ T6124] raw_ioctl+0x1a1e/0x1d70 [ 70.996487][ T6124] __se_sys_ioctl+0xc9/0x140 [ 70.996511][ T6124] __x64_sys_ioctl+0x43/0x50 [ 70.996534][ T6124] x64_sys_call+0x1690/0x2dc0 [ 70.996561][ T6124] do_syscall_64+0xc9/0x1c0 [ 70.996591][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.996619][ T6124] [ 70.996626][ T6124] value changed: 0x00000000ffffe176 -> 0x00000000ffffeee9 [ 70.996641][ T6124] [ 70.996648][ T6124] Reported by Kernel Concurrency Sanitizer on: [ 70.996661][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: syz.1.1076 Tainted: G W 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 70.996696][ T6124] Tainted: [W]=WARN [ 70.996706][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.996723][ T6124] ================================================================== [ 71.439000][ T6139] rdma_op ffff888134187d80 conn xmit_rdma 0000000000000000 [ 71.449010][ T6139] loop0: detected capacity change from 0 to 512 [ 71.457133][ T6139] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1083: corrupted xattr block 255: invalid header [ 71.470709][ T6139] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 71.479466][ T6139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.491908][ T6139] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1083: corrupted xattr block 255: invalid header [ 71.505176][ T6139] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 71.512489][ T6139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.