last executing test programs: 2.992760097s ago: executing program 2 (id=2775): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000200)=""/98) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x88002000, &(0x7f00000019c0)="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", 0x126, &(0x7f0000001600), &(0x7f0000001680), &(0x7f0000001880)="fd5f5491c62bac361d505b707a18919d78e83ea22261c9f060423d7d6600ab9be8799400ceb9efb2f9279f2e6a6d03a3074f47e59e88489b8830a3c86184dd66906124bfb63a7db2bda9f045f1513a65b766c0305d25563be04b7bc8813ce7017be8f148a264f4472221afde07f1e722216ec49fb3e83b913cf3be6c0a559bf985b43b457226b19f063a344b26336b13f18eeb03fd040004fa7472a490a1ef86763fbbed71") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$802154_dgram(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x4000144}, 0x20000098) 2.853754049s ago: executing program 2 (id=2778): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.696946951s ago: executing program 2 (id=2782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x500082c) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r10, {0x1}}, './file1\x00'}) io_uring_enter(r7, 0x22d6, 0x4b34, 0x4, 0x0, 0x0) close_range(r2, r3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 2.127604259s ago: executing program 1 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) 1.983506822s ago: executing program 3 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") (fail_nth: 16) 1.941888232s ago: executing program 0 (id=2791): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) accept(r3, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x78) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x100}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x38, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 1.803777424s ago: executing program 3 (id=2792): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.766112955s ago: executing program 3 (id=2793): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, 0x0) 1.742996775s ago: executing program 3 (id=2794): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x400, 0x81, 0xffffffff, 0x6, 0x8, 0x204002, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) 1.694650226s ago: executing program 2 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) clock_settime(0x1ed5d7403, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfffffffffffffff4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0xfffffffe, 0xd17a, "0cd1cad22826"}}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) 1.569614467s ago: executing program 4 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x4000000000001, 0x35b281) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x9, &(0x7f0000002b00)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000380)="b2a2d8bcab7bb759b81b4bacc10edd0272150d4ab5397f74ebe1622d407f3440369494e46990", 0x26, 0x5, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000400)="dc6fee618d1763a8b9f0b926b3cafd2eee37d1cdd46420564f2ef4de9601fa4ded898e6eabee770bfb14c28a657faeb7c426916b86b17da9b0", 0x39, 0x2, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000480)="bd60e780bc7b4d26d51b6f88c86276c1875222c7a8f51c34ec407fd52cfc81778419c36f0319bce328713b9f7e51b93842d2ec09e2e14d9fbfb3b4c19477b1a6722bce44608c82b0bce358145d8143f1def89d5d0304c4364db7972774c6ed799ebb2951b1b9dc", 0x67, 0xffffffff80000001, 0x0, 0x1, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xd, 0x1, 0xffffffffffffffff, &(0x7f0000000600)="c647d7dc61ae610aaef4332ddad1a60f404ac497bb62f7cb4855f0d708fe8080757a59031862c1fb284e86e9821d67b71b71e6a028c51d493d34dc40c4c5f74d3013e2bb29ba34acb64a356529001fe8c66e8890ade2c858962e", 0x5a, 0x3, 0x0, 0x4ebe51658e2645e0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000700)="d4b4cbd0d91305867a1e8aa8f39a", 0xe, 0x9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x800, 0xffffffffffffffff, &(0x7f0000000780)="7ada9e13a1b7a304f6fe812d2136bcbefd653b8da88c559d02db256bf904bb6a8cd7405708280471588a376a4b9be517d6d823dd13938577d56812b66a9a0f3fb2ce7e53e3cba045171c026dccb18ab70358727fe65cf1341be9863ab304d16d14a962b82dea8084abd63731ef28622b84b6d8965aea430304757fc92fe65e84c9", 0x81, 0x1, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0xe, 0xffffffffffffffff, &(0x7f0000001b00)="d55a3d87dd94792838c2d0b58cc93192b35dd0eb5c568911435d713b4cef13b616cb6a7686dd58e1375df99e703e47040039e06f85d275e9ea9532380a6dbc7d77f1d847d01c5dd26b0b46f708de863e0cfb5340cc6f8362283662f06606de8fcf686874a34bf218b7a8ca0db06f8b11311475f313df41db27c1e89c598e5a5d85e7135baa5fe777744c02c2d6a1210b659a647e4ca86d464a45436adb1b8ebfcac91e9f97d06df02256299d86f5057b0e2e1e5867e14e172fd4c682b276a04ce40645a463b115b4b29eb9d12f4a9b449a99bd718d06dba754f59de5caa2e7b9a040bb77bf3360ec6b673d33ccd51bf99842212904436ede77f2f369f415531dfb2c0b8ab3d549a0b2c4bf33f3e18ca267d1292f4713c847c3de3ed1319bbe7e6d3028b618f18edcef2dd39cee61d4feafcabc5dea131e6a3198f21637f154b63c179f6b355c4c1547b83d622554c43de5d304cf57b9ee342471d061c3478b21c9ec34439b139ddf4f2ecc11d14f50c621c9063e11106c9f0a5bb675888b0e9eb3e9b77aea11616efc5d7ea699bfcae705123db05d8685537079076c4eade279138d9fd5d7d6e0d892e62b5b40b43e6cd35d4e957500e3235bbd6669505473585edacf636f83e3bce4e15e7d850ae81f3241f779c04d385068b77026e6d8ac5471851a411d643d0d967c58c869817b7e148a84be7c35b32a1c51c6c1fc6efd32f1ce87343a1f93760b57cba862597d1ce979804ad16d614730f51c03efdb2211600cf171539d5c0bf3a266d3172fdb2c5ea47da64dcaa6fdb9910557d726e0219891736bd89a801391712fe9b1565b93e0d7b2067a7ff47ba8fa7000a10f499a98235be164d0e126f7f4275c2bf4da3e7e99d8919a2524e03cc0691901e50666928c408c1b69f2a4fd04fa26b4cf900ed893583d4c5ffb4b032e958814563c41d9dd590dcdbb58f05fb771104bd5ecee7467ce6c445a38080ff5d791611f430dd43bd2f2e167189bcc26cb17d8db66a56cd3cde243b05e0b7dcc7eb80cdf676e07469ca2d9a7c4ad9c6a7947c807e311eed60466e98bab8852dae633e4f7414548322a1c8fe926d68045ef4cb601e90b610f26ee158936c34ad1d97e1f02a661222e1de3fce62113e6e9c74b4e8a20bdaa1d7e7f772f44b00190873176ffe97b6d191c3ddaadb71165f6c5d12cf31f7963b9ba78ae4678f70584db23fe057357bfec6165dbc420a63f672e63e22eb2b06bc252a2f52c18a40536c658f7e972476fa650f0822802130e0f5d587ad5e4b6314ee92a9f3ad4243cef1a31170986cd2577ff8e99987543044190bbddd8932215ddadb0c6bcef7c612f193458d6f6b6daa8ab6a7fe2398836dc07a8e1b2e565d7db79e3024d0723f7829c53a3e77a198e244db8f4a41f5a68fb721877d7c76d8044f6fa285efa3526a4d6c7f4aa80f79f8eabdb3dc9643d6e7d3527e7236314a396c79f1d720d8293e7af3fa12a5a48e630739572f9451aa5a94f5f880722d9a21aa8dd31353689ca560fad23fbde9142c55e9be4b53cdb2d5959f1b2f17dfd06f2d898728dd7d3632bb7c2402a261047ebeef59742bd834fd12d3d7d7c215cd1403633d33d0b509c5b6b1d3f043f13bd5d33a64052380b466c09dd88d316d1eced4d9dba2826bba51367357e5af77c47a5bac1c4204e65966bd8cc88739c66a4d77e7a0e8e141d3e744132cb26732c4570bf1181a7e3e771898b44293214754fb239458fa3c27648a0f5088ee71978f11767954df4f10427f2a9502233f552ade7619a17eff02289fe84876eb318a14bd951c4b5814f59ec97b5229de198f45f6dfaf03676d27332460f97462b3138507688a807350dd9a85efe871a07d0c71bb412b746d004c3e623625c3ff076291f3fbd8285f5e2d3f4439dd7b4070dcd68472b48278f3e8fb5148c3ee9f337c52f300f67829964581952776ec3293687206dda047ecd050855294f4c4023de438aef243319f450f13a63a7b9a85fc1ea303bdcaad584023a9cce9d7fdc714e83eb082a274b713a8cb26ae593289ed45b36021d69083d1753e9718fd7d1fbcb5c52063d5a3f2e3453856cd824617ed6deee9813b53e994ce91d37e1832d9c7a841ca0a2bb6e92b7d086a5f96fde729e4ac7db4206d021192ef34224c059a9001acaad75fb328c32f4641ab9625f02d52e7ff88a1880a5feb18905cc0df89497739d0ad77ad270fe095039eef0492c900913ca598bf50e58055c44b2a16f95215eeb696c065b652b6dbf593cd933075ef66d1639e5e17f2a0978cb0b928135ffac5b132369128bccac0deb3b74614c08da5cf6d02cda8f1cf73fc89219991e721cb793034cfec4e8aab1a588d85462fd815e33cd5568507e1b484910cab486f104af8fd7c16012603093f6bf4f715a6e5576c3a09db522459db76a2c25be4eaf1b4724f7b5abc5c1662417af0c53f2579c9c893910974a7fd1aff1891728a191943c213e530777a5935526156a57436d6671693d5de4954e5ce4edda78cad5efe5f0819c07261e86af9acc0eac34f50fa5f24928848946aa7069a54d8488d22e1b9f3e0a0bbf638d703a1449f5400d09e725d64f671d95e647a945427dd863a482217b60a780e71380f70695d5d564e8cf464d0484f64c88b46b44e0aa8d4ca8a9d0bfdaef6731d916a12deda9731a295f1a560459e0e5fffff21c83829f93855850e59ed862e869c4563e50ad2169e68ed0c94a4a1d0387cece1301c8c9ca8b1cc01bb6524a4b24735fe521c5d2c154594bdbd8ff509ea115442034a843a8209e85852b2237197b5ff02fd9f04ff4d5cf8922297582b0cd178f7463ef303136e28bc0bd5305e83cba3556aa3176ea8cc1d019cc14d809b14261f2a6f1dba6c7586e9c9189ce1e2100c6ca8102179e3125e70deaa5453e72702029a3dfa7ff5162ab30a367b3be9a30dc41c9ae035fb11cb3b3f349a50b4caaa81c987791ba912587c892befad4666deca3b520f076ad6c5d638131c8991506c21bc7ee7ed67fb27cbc4836112841eccf25a640ac637a28a15ad75a9565e2621c6d3be53d0a8dc669f2d0d6c9dfee4f39e10ccdae309c9923aa7194e7baedc60908e0bf4242c8d1f73dd0a6b0487047280bed34cf27c0f932fa0197d275559d3e6b78a3fad26eb06d6e45eb8a1d4bae01809496f54b827c9456b106b25311bb288348730ec1118c638c6f27396a5b7fbc184cb8512eb29415581526a48404850446215fb867ee3c51a7da2c26383945392142174b4afb3e1c0f3947ac14bcd86bf2f03f51c7b9784adec3966a06a59787cf36f6d1fe9cedebe5403ab233904a216658f25094f4ed3df106fbc04b9fa2d1bd86efbbff21038fc525765348314a5ac71b7ff5df5c9deefa6ba8504f48b0d3d0c7fbe48d7b71fba440d27dbb99aa921caa2f13da7e1a66ac6697be22d61d7766637bf247f2b39db95aee6baf2698947b5fe53053b2bd148451f17cfa3be4cc9eddb5242a110e1efbc1c6f238fddc8b08b57a8078d091b90dea68c8ac8bf6ca2b14ebbd2431890671c825d0891c3ecb850234297ba4d362332e13ee1c1768f978306adcf44fe156add68c2bc1392a93bde11582dd4a73b0cbab5f71c8f7636a250bf4210dc13a1829a72acac74e7e666ec985bf6be880c3483170602773ac0844e23f342696429a73544547371d350bebbe672808e027aea9394622efedc5a0cc98cfdddc56c4060905df05728d009577ae62958358909f204ef4957449f715dcca331d270543abd99fb0e7c2bf69d976af6efb36f027a29e0cf49018ec76ec5ccaad8fc4f731cd5af50ca30bcd7e3a10def536846d797b307754c3d21d123b499b505bdebf102196b51a8a9101fdff938d5b8ca3dd8ecb6732d2ef3425cc02314862defba072eb916780ceab0ea863061152f64aeb9a7bd7479104bfd85520d852b064c614c77dd3c815cedbe22170da3872aca5c6471e265387d59b08613580f1b13c43d67d6eb1637dd4c66536cfe2c806c690bd2ea95d143147167650fefa04bfd042e87dd6754ee3c372e29b2f50b7f10145b2f9cf099b8eb0a2b6da4e57a31095da9df680c3cfddcb2774f10bc12b5036cb18a76ce0362b173fb8c621d78ffaac91c1759fd967fa08514db4ea051c1bfad79f4f226e6f0ab78c594638106d816d9724db0ce3d9be2720620ddc454f1b4183b23422d456b65742ae9e3bc00099f45788fd3fa0a7cb9cf41d77da57c99130b77bae0a8c3f0569d341d4cdc78f71e90715d9330b39b08e88dfb8e8ac605c3d5c16071e522826a3a4c8860fc781049ae8fd8954d6c5b3412a576dd07fbd82031683294ccfc4440f09c0afbf4e905c9dbeb3e543e0ed46c0d278936aebfb72290dd5908a581a2b2960bd3061e4ce852bf719c39f7183e5bb645442d5002e2e3a74154bb004893cffdbdadc1460ba94e6512709a7a696c64feacd49972f6d26ede04e4dc22b2241a6c28adf1717b64d5df70630d0130b01f366bd1e34eb5d4f66951185bdd04ac8227cfd55f9cd455041911a3ac376b4b641d5c26431f77895894ebfd2854629fcae14e603d974142cf79747b93e28b35b29e5424316e922961d4de8271d8d953c40e5ec3254a48ae7b835fb2787aa3d26c8283c1b4b7d368aa8d92fb7773fffcac97affcb15b35af020348de362145ecb3270220297edbcb889086279b9cc2a88865e3d93b76ccf1861c326a5bf01e94fd51006c0424daa1c007a4c7e4c76b2dc7ae59e7ac5b34dd96eca80c021f2d8e9d7380921367337c5d01792959ae70288a494ba741a27b092f44f3c931e781a5818e2fc4bb64dd26739ac99462ffa2d6b62574c02ca89e0a96ac45ebcff25a9f7080cf85ac2df1d7cdd1a26af8ee54553176ab6bb1939aa2e914e12e8fb0cb40e3b04172da6b1bf4796f48bea445f046559f8af10bcd5080e7027443f955423f5232206f1c505c54af80f3fb39a7553cb9ae1ab641ba5e4cf27dfc2870185889d8d8d9ad63870c085be58851d96f6b4f4b3216f752cb8fea322ccb53c9a51fe27eb2c87db1064ce9c73d369b0b8b9cab60ee10e5dc39787b10f1105a11a6098c77da3d617ea80fd00cfdc713132fe07522317e5d487d2bf942415537f8a86274065599e8726260f8b3584d29f1349197c8da0bf18e8b877d1adcea0e76b609a43b3fb018af4d7aab4a978788862e3bd2961d891bc9946a97025ed92dc261c40ed3ddaebb6eec5fb0ab73f54e9141a51d257c53d5a3e90654974f7dec52011cb00b86cac8bbc4767e5a3a799c3ed8449b4e915e12c8d6145a598bdfd3290da2554502642463f29fbf6eebe74066bb895c9b7ae011d087b522342fe4010c6a67647315700e04f79f54a6438647f584b4eaa1a8ae293a47dc10216d99249944aadf6ca7586a06da44e88f1e19f3a82c44dac3cd12f60502490c633ba8da8d86c14f39b50242547e62da4fef738232faf9cd8ad69d62abc7567b635cb04f9db6f25cf7b5f333051bd5c676e53cdcbbf8a51f0ba6424b33b811630c0c36835b371154cecb0a35605a57001da10475ab396e921a1f08fb9f7c4ef0b78d01d388a4b33923a6898d40a4363aaeb726cdf53d8f9bbd3dc55b0693c9f6ad5370076dbed03280b61e773ce75553660068c79ac23996f9572e0c6b36cda5c34df3ab83b07dc6197e661977960c87f5231042d2cbe4588ab9c290cd020d365ba4d7b742c14af9dd6b008c3fd26f7303e68aecef60cf98eb1e813191afaa786987721608c0c5989af32b8884463c457f7a1c3d6", 0x1000, 0x7fffffffffffffff, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000940)="b540ca2cb55484c07f3aa8b74d296547400e9b7dfa260ebbe89af09064d8f1ead45fe950617e33248f681cbdb13d1d424035170a1d8903297320ee7e27232dfb0e66ed8c568012", 0x47, 0x4031039dbe, 0x0, 0x2, r3}]) fsetxattr$security_selinux(r3, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000280)={0x9b, 0x7, 0xae9}) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.270249332s ago: executing program 4 (id=2797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="71b28209c8", 0x5}], 0x1}, 0x40004) 1.253529412s ago: executing program 0 (id=2798): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 1.237781012s ago: executing program 3 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="71b28209c8", 0x5}], 0x1}, 0x40004) (fail_nth: 1) 1.224459232s ago: executing program 0 (id=2800): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1.199320693s ago: executing program 4 (id=2801): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x32050) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.020561455s ago: executing program 1 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) 937.780167ms ago: executing program 3 (id=2803): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 937.235637ms ago: executing program 4 (id=2804): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file1\x00', 0x4010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="0eddad4679b8b1cbb70b7e020e45cba0057ac0e004f26a609cf40383c448cd918f1908f31326d1606e430603fd9b36111d315c4802738be7832f4800c261c7c47ae091f9820504339fddd884f468965291e7f01efb19b2531d54dafd4898a1dd59c4919eec933c05"], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$binfmt_aout(r2, &(0x7f0000000600)=ANY=[], 0x120) sendfile(r2, r1, 0x0, 0x7ffff000) 925.868107ms ago: executing program 0 (id=2805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYRES8, @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") 925.426967ms ago: executing program 1 (id=2806): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) (fail_nth: 1) 669.025391ms ago: executing program 1 (id=2807): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a80ff000007007110d22952e0dbee88d4790000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="000a00000000000061fa3c096819908932b15ca1ae115f00"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001f71f5f0e81f7fedf10a9b97f1142ad0460a7e73aefff7b74d2976eb69d23dcdda4ee1edd8638e64a74d5601c3ba7dde583ef37e519198a09ef42980d134656f9acc2e3ecb4cdd8591c1f76287746d50e136bd0d", @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf250600000014000800766c616e3000"/34], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) 569.675892ms ago: executing program 1 (id=2808): r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 518.573223ms ago: executing program 0 (id=2809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 508.280443ms ago: executing program 1 (id=2810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x5, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 409.620564ms ago: executing program 2 (id=2811): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000002000000, 0x2) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xffa8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYRES32=r8, @ANYBLOB="080003"], 0x40}}, 0x0) close(r8) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_io_uring_setup(0x6547, &(0x7f0000000380)={0x0, 0x70af, 0x1, 0x2, 0x171}, &(0x7f0000000040), &(0x7f0000000280)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0xf0bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x9004) io_uring_register$IORING_REGISTER_MEM_REGION(r9, 0x22, &(0x7f0000000500)={&(0x7f0000000300)={&(0x7f0000000a40)="0a65f07e33d752f91a5b0fec7465d9bcc9ec5ff571dd8f3dcebbf3e6523bfd3950d37667549620f7a01a7039c19258b9255ab1e24aec267280441df9f14d243c362eb7712e55c8867f4d852503098ed907e48f012faa8f7d3be51dec6f04e0561973909c7988c3cd6df99408db79941d6a03bec3783d2f8f01a3517ecac75c536446e925199afa3f22c065fd130b22071341fb2d67b1f39c2fc668e5295d81cc8c634bb2e09b6b4b3430034e76487a8d3ddb16fff7c074e4631939f045181f332671331d49f7b05bf4c8183f50d739811442c3d473330b936f255b69446b7682430dc066196fa096d4ca886292cbfdf1e78c32c582e3bb2c1e15877753d96fea6d68315b5e07587598569d9a25dafa7a52121123e832f56ab74254d8eddcc0114bb6a82e4f5edfab97b94b1005bc859a25f698b3efaf407d61d654b4ca623016a417f838e437d9b44f37769cda0247e7975c180de9a3878e497e8838b6706a81f3b50d063f42309c841f8e39eaeb90431ea1b1b5fb3539b1a1bb5dcd942d6d4a60ef9c94c600f9e0d43ae8e679ed5449224a2487a7d5837d2631c90180f03ea99261eab9cecd72c0cc613d926ef848323e1c5ad7a0195d7d3be4365b8b8498f63b23215d448e4636bdf2fc96f48fb564acce6920998300563102892d221b9aa2ec9260a795e368ddaad75af96b217d7540bc2333366c3404f1763c7b7baf2143ad9ad6867e43cbabb5710ab0d9196cefcdbb60108309a9284a3a6110a0df6b617f7bf498b1b4c39bbc0bfb53761e23a6f14f640c2093b023d778863119a05d80db8543282211a28f0b0632bdf4a053a5c36b6ba08ab83385e67b805c45c813514d88db4be43b9ca2e9586bfc9d8f2c346e53ab7fe4ce7fff587805e074e825e1169508064c1b2cdacb11f51e60ece793a412d1e681ec727a25f134d9349e298b78d9bc52dc6f5c02caac56cd0a0fca458d216219635e4bada5e94dac974f4f61a6cfb8d45f63e6cb77cfec12d51fa102f9fae6999b731d47d90f71c65e50e319aa95f382bb93c2231796009c394522ade4e8bfc858898098a312bd8357eded09d98c6e03cea2b86934f4c5b2c4f53d5f1ec49ace47f2282fc4ee614fc9f94d926101d9a90833649ef0637ab1e8d9617fa3424f68ccbd4832c0177540beeca166b4b1b57e7cc12984ed60da19fd1791440c0e4bc60bde3dc0a5937d8596648bc00df4c7c9a7e32eccdb8316a6363f4265645eabc37edaa554e53e3158d95da178ea1681fadec37916b9a4890b9dfa834ad8af48f8b68c988eb01fc6c08090038baa9c4bb61e5aa1c2b19b8e0fdb7b85c1e890e7a6f564fda58153e40c3d7491bdfb9b27a15c94fbcfcd3423389827926d035885b30999148887d49d8140436902f2958fac9a9554f182c1f6ebb3b3990664cf1c9b573e10e954e097818c77eeb40ecea28e95cb4a4cf9e1a52c7c9f202c2633630e1c2c20f34d6b5050375cec79824022de5c8d28e622c08556df7e5df961ca21722d098995a079909dcc827c4e1204eae54c359af20a1b11e0613b62e222d7e4eceab0c51afb29db55c81f5b3fdfe394c90ad789f332af44579f0353587c6d054ad2500c78073c94b686a2a1c2e059f75d784175625fe091a776fc0492c74f23a28d8ee6518f40d6a3abfa7b5ed01bd76b09581ca495e3ddba60d435c6f7153cd56f51df873d32f8d3d7eecdd349c4dccce29207e7feec4f819c6aa8ff11a61b0c70db945448d3159821be09a9020b5ed1cf3573e09a7cf2fd6e27d60d14c47c10990c0f7ae3b69b2a89dd3f12df2122f90ab341db95aaaea19057bc7cd670e806ede178ef36478e3c7bcb01c6fcde07c37203f797c33a7d266fd95fe57369d9be527ad502f59387e3a6c398088e554cdc06ef2ca02ca015c9e2ef2f6137d2cc436ecccd3d05c79e68ce4f453c6e91dbb38ea21afa0fc0dc9f4b067e790479b1dcbb32074ee294ff0d50ec96b45955170d7d37eefcdb82ee7c90e722440530c1c31ac0733579d5214f941863b9447cce9f63b713d4b16959d3ba3d3f886c1be2e34a4719c2381368741eeb9542bbbedfe4b99e1ebb0a54d92e121a543131f4885aa687e6ec252f4529df3ee2931692a0f9cfeaf24df8d1deb293a408e1584b03145d68c42400603c738e71b381aa5f7a9a6b3bcec11671c576a60f9e27a2c7c7185d0758c32e79b7eb162215b717fe12459ae8b146245a8026630e39041e8191105c868b7e6c60bcbd69d8db527b03167353a76c58c4eb7e3b9640c9fcd7aaf0a41b17d98181c321a240d0a43e30d961620eb818c71faaf31a08ee7c6c6fd19ff7e0ae966866601013fc377f01ba26580d6ae418290f67eadf8cade5f77f7bc8451607cd8f766c1fbbff0d353549ef150df9b5b27e508bb5828bf6fa86902968b85029d20ffe8dbf22f2157c1e6b01e4edbbd43b4c717d6a0877724411b0c008b135c51626f79f0b5fd1b4dd348a2952009b1be946cdb6d6bc25e3d1aae339352d88b63b818dce7489ad0e03d9fd30b70d6c7a0d5907dd1a9d47c438aa97e735eaec4bc20cf30e449d6573e2e7ec7f93a9aa65ef57b07efb5456bf21265e330a83202f3cf91939f2a1e46db83c0f7c526146cf6725fb5e5e2ae53fe6f016f813b08062224f0e5f160818d552a91dfaa4fb585cf26e2b2f65b2fafd4c7aaf19df4e4487a84f0eade66fe609b5784a779411fbd74659a2e48680ec5c1df36a93e5ab873fe60ebc964b91a224b6734ccb57ce3542a8f9308c3501aa2f6f6c07153284dac7f2b845eff483d2d13268176bdcf75b6a23e1cfda2c0b28718f81971cdea01fc2221de0718abbf40e279e67c8cd86e924c2f2a8e51b9b46f4f9e2644ced6dc00f51631bee066bd4899d1527b1d898e59c8aedebe7a22fc7ec9670f5e0130154863c456c70523989dd07f36976cbef880a06cd60cd3d57b8b9a414dc74d9393191511486f5a7db93385237b9fe2dd96d137d35cbf7ec8545ed4e11881391b0c90af3678538d2ed9c98c0915091927eeb4f2338c0d4d6bc17b7fdf570e5120202b12021e8e31b7bd40fb56479c25e7a37f5cdcca98fd34a7d1f0dd3fadc88f0988656b2ba5ea1ef59c8ae99f780073853f397abfa3bd2e2d26c218e1e3d7073e50ec329bc522e76d24f6d9f466978403df38e11633909fc724f3da23ab763bca6f1d28942e0ee2943a87249a8ef2a488538eb3185cb501768d905a7192f0de48db6b3385fc7a01ba97c2942d17a5ae622738da2efd1719161ce102d3e906928c2b7ab897aab099545430a0172dacdced590d2aec2d778c9acceeeb8b4722801b49f30fd6c6b2c0f0b95ee2f3d2f7475541bd81fcb5db1cdbf64e23570ee2cb590a9950b033f81999449c74c413f20fe2ad664fa45a0d61ab1d4425778857c7ec9ad5b174605723c2ff99fe974038fbc67f108d09fe438723af635139883457ea974eee6069c30b8b7365c1c504c3dcec0ffac52111889872f40b8c5910a30879b7543a60b1043ebb825163e88c238c8d0d87def59220429741fc91db825b8bcc7e5429dbe49a8f00527c88719cfc85e94ec4b756dc861db86609cdcdd8d9bb1886c47a8c8d05cf33b1f4d527271fe422735afe4c494c94b4a18e9315804ff34ad152bd391e4554462943727991b87c593e5997a64a7b73206d4c5a11e507bed91f8adb31f4d926cd7d46c558081f811257792d9e3880773030478537b2a9c3585a67ff40dd1c885565c7a0ae6498711511b9681f2a56e48852bb9bc2c55417584671bd06b97da5ff7b9c7acce44750489d07bbce4845d2bf6d30d7b5d4e3dc14eb8068ec546bfcbaa8d2dee12c55db29226a9b9def22276a60647e430e1fc06d9b367328ae406251fefd1095724891cd7bfad047be1cc5aa2b51a86249ac43b79f0f966d3759dd938298343df16a0efb195b2eb2c9294260f13fbc264a1c061e5eb9f05d40fb7baa335fa935de4c5eea51f1741e39ab32e605cad6b8fe3e4e350eb5f6c36f30a9b9ab7b82f9ad0453c273c278e0d9be1c793a03771defdd82db7666fdb5b52d0fadb791e6d91489800257c29327f6f64fb46dd7b86858e6686c7d9aff1a084a3b1ef2c474aced510bfa813486fc57e632a54668ab99a507149c9fca4102cfc3bb38c8f2d2b97f92416055715dea7e361872de6717c1ef64529a3bacee728119368c0e5034aabd2c492dd26d7d1eb76147f2f8dc29edc3e7bed5c2731adf95f8bb6bf6d52882351df27dc3daeadd361feb7f96247498ed3a253c933d6f409ee1efc54419f8f8ab4572b2d81c0994a0ce7d7cf6d3d1bc624954a64a07bb9885d4b4b5c6b2f4c0ea2708060923eb01e5d96e6fb5cfa8b9e8e6c6163e8c6225226856b54769b352ec8abb4bccedbb88e3b1c7fba64d57055528d0c226ad9e6d8b58be7ef5b285140a75c6d1a03dbdda4bc2e575b7756fbfa2cfa216c6c25f203dc63a01a932feef783d08dbb77be74866ad0edc9d85d9f4ecd0abed4d3e7d9531bc2c6be8b8e23d42116052f627708b7e32e418851314b7b12e6b50fb30b342b3a50395b9a3cf2fe17086ba13693b16f2f84966d39387e75470749385d1ae5a3b4fc6adba997a9e7644fcc08f2a8245368a810e1782a7fde64c7648ef80e1a45aec0f671c10e168d04d82c2344efbb78661914d062bdfcdec776a6e4331086e00ad79264fd5c4fe123d728710e5a59abaad3f152a44f602d0ba84934c8c4c9952483b6d6cc6552af27aa442010ec42041e8128216efdc0d0f20325a5b634ae2e2c1555a83ea7b487f6423fa2d55606796cdc9afaea1e8cf200084258ba08b0ed5b77d28c550bb3e0c01aa04084ae088cb70ac3fdc7ffbfd1dc6721781ae4f46891066ba58208f870930931fbfc62f47435e35666f6fc6c21ac4fce6b9e3ed35b88de09baa6bec29414120c3239e68aa490359616d720c180649dd0455027343613e173c2b48306548507af5d80cce06406de50d1656331fa59ad19c9ac02d5208e1c34a00fa3c179027bcdbca3d6b6fda635eedce23d2d0cd32e7ce6f12c18cc0bcfdaf9d3ad68cfa25953cdbc05fcfdf4890720279b398d5c113350a3bb54b93760935fa52d73b10d328587e276972a93dc7d181e15f426527b7477f704f630231bd66ac0fe8774271e30a666507ebb1604e4c3e65a6ed81d40a7e01d8ede63c4b8390629362c2f638069d4966b260e8442722e86e1a9424c217e8907a7002f12225f3998fd2d887d9123ef53d372308510c1cf7af25e4bfda02c9bd5e23ba9001cd2b28e473d147d1a69d1477ce28f89df398110a2b9ef8f357f79572bea6608314f2a46c5184450f1584703c5ad9f0600ab4c2054d1d45e44dc83445a20fb27cc9ddb5f893753105edc7c41b5bab94ed0a486d15b1fd360b78a80c8d802f04ee0918918d53b44143ecfb27aa39c4750a23d13325222b0d6ec92b0e8a1a8b0f95f65b1b8d0839ddd291925f9c70fbc6248420b89240bd87872c17e95fcbb45eb894d3f2734a3f8ff7e9eb967b27d5d4938eb3927bddd4febcd0364b7ec308992a869e11f363c92b045b1b53b773a8836b60bdd568a6438d7acb531985f004b913a183e94d991d1ed90418e7649ab1fb13a43cd3659cd208ba236da2302029f45dbb800772e7a548e3d4201f1db5ba7869b16bdd01b3a3d1cbf7223d9f7693e075b6b8e8cc482790a2f76032860b8a171cb2e17290697f5ac716a732bf72e3ea571a62d5519c465de903fd8e638cf55de7d3393d8ccaae4a2deca7bba14114397588a4b4594ef", 0x1000, 0x0, 0xfffffffa, 0x1}, 0x1}, 0x1) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 55.92793ms ago: executing program 2 (id=2812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r1, 0x7) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xc4) futimesat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}) 53.81641ms ago: executing program 4 (id=2813): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r0}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 3.67568ms ago: executing program 4 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x5, 0x400, 0x9, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="cd24d6ca5d2ae6fb15360e4360e7ab8c70725ad8f9d962fa6c27471796bea501f847d940279d11d3253433e0bc1c16dac738f2c79bb4ba4f5bf4aa36c9b3e9b2c7ad8442505b1cb147562a5c9e9e0b3fc14ded858d24e20a0df2c0b60bb9e6daa02007684777ff465e78250fab396b5b0aef3bd969f59b0a402d63e9ecbaee261dad2feaa1", @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000008850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) 0s ago: executing program 0 (id=2815): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x32050) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 158.831340][ T29] audit: type=1326 audit(1751729695.560:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 158.904528][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.926034][ T29] audit: type=1326 audit(1751729695.610:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 158.949527][ T29] audit: type=1326 audit(1751729695.610:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 158.972971][ T29] audit: type=1326 audit(1751729695.610:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 158.996451][ T29] audit: type=1326 audit(1751729695.610:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 159.019880][ T29] audit: type=1326 audit(1751729695.610:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 159.043377][ T29] audit: type=1326 audit(1751729695.610:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 159.082683][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2227'. [ 159.125207][ T9385] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.226224][ T9385] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2224: corrupted inode contents [ 159.239521][ T9401] FAULT_INJECTION: forcing a failure. [ 159.239521][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 159.252297][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.4.2229 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 159.252373][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.252385][ T9401] Call Trace: [ 159.252392][ T9401] [ 159.252401][ T9401] __dump_stack+0x1d/0x30 [ 159.252423][ T9401] dump_stack_lvl+0xe8/0x140 [ 159.252445][ T9401] dump_stack+0x15/0x1b [ 159.252519][ T9401] should_fail_ex+0x265/0x280 [ 159.252586][ T9401] should_failslab+0x8c/0xb0 [ 159.252670][ T9401] kmem_cache_alloc_noprof+0x50/0x310 [ 159.252704][ T9401] ? skb_clone+0x151/0x1f0 [ 159.252728][ T9401] skb_clone+0x151/0x1f0 [ 159.252750][ T9401] __netlink_deliver_tap+0x2c9/0x500 [ 159.252791][ T9401] netlink_unicast+0x64c/0x670 [ 159.252872][ T9401] netlink_sendmsg+0x58b/0x6b0 [ 159.252899][ T9401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.252964][ T9401] __sock_sendmsg+0x145/0x180 [ 159.252988][ T9401] ____sys_sendmsg+0x31e/0x4e0 [ 159.253063][ T9401] ___sys_sendmsg+0x17b/0x1d0 [ 159.253127][ T9401] __x64_sys_sendmsg+0xd4/0x160 [ 159.253213][ T9401] x64_sys_call+0x2999/0x2fb0 [ 159.253234][ T9401] do_syscall_64+0xd2/0x200 [ 159.253254][ T9401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.253290][ T9401] ? clear_bhb_loop+0x40/0x90 [ 159.253366][ T9401] ? clear_bhb_loop+0x40/0x90 [ 159.253390][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.253417][ T9401] RIP: 0033:0x7fe6a45fe929 [ 159.253433][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.253451][ T9401] RSP: 002b:00007fe6a2c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.253473][ T9401] RAX: ffffffffffffffda RBX: 00007fe6a4825fa0 RCX: 00007fe6a45fe929 [ 159.253541][ T9401] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 159.253553][ T9401] RBP: 00007fe6a2c67090 R08: 0000000000000000 R09: 0000000000000000 [ 159.253564][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.253580][ T9401] R13: 0000000000000000 R14: 00007fe6a4825fa0 R15: 00007fff67470968 [ 159.253700][ T9401] [ 159.270420][ T9401] netlink: 'syz.4.2229': attribute type 3 has an invalid length. [ 159.367672][ T9385] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2224: mark_inode_dirty error [ 159.369540][ T9405] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 159.398240][ T9385] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2224: corrupted inode contents [ 159.446616][ T9405] loop2: detected capacity change from 0 to 2048 [ 159.459233][ T9406] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2224: corrupted inode contents [ 159.503323][ T9405] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.511196][ T9406] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2224: mark_inode_dirty error [ 159.539182][ T29] audit: type=1400 audit(1751729696.280:5024): avc: denied { read } for pid=9382 comm="syz.3.2224" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.545987][ T9406] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2224: corrupted inode contents [ 159.621684][ T9406] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2224: mark_inode_dirty error [ 159.638147][ T9406] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2224: corrupted inode contents [ 159.665661][ T9406] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2224: mark_inode_dirty error [ 159.679125][ T9405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.721198][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.747140][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.846864][ T9426] loop2: detected capacity change from 0 to 764 [ 159.854025][ T9426] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.428561][ T9443] FAULT_INJECTION: forcing a failure. [ 160.428561][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 160.441366][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.2.2244 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 160.441431][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.441502][ T9443] Call Trace: [ 160.441507][ T9443] [ 160.441513][ T9443] __dump_stack+0x1d/0x30 [ 160.441530][ T9443] dump_stack_lvl+0xe8/0x140 [ 160.441570][ T9443] dump_stack+0x15/0x1b [ 160.441583][ T9443] should_fail_ex+0x265/0x280 [ 160.441615][ T9443] should_failslab+0x8c/0xb0 [ 160.441645][ T9443] __kmalloc_noprof+0xa5/0x3e0 [ 160.441695][ T9443] ? offload_action_alloc+0x2b/0x180 [ 160.441720][ T9443] offload_action_alloc+0x2b/0x180 [ 160.441762][ T9443] tcf_action_offload_add_ex+0x11f/0x3c0 [ 160.441795][ T9443] tcf_action_init+0x333/0x6d0 [ 160.441814][ T9443] ? mark_reg_read+0x233/0x340 [ 160.441851][ T9443] tc_ctl_action+0x291/0x830 [ 160.441981][ T9443] ? __pfx_tc_ctl_action+0x10/0x10 [ 160.442007][ T9443] rtnetlink_rcv_msg+0x657/0x6d0 [ 160.442135][ T9443] netlink_rcv_skb+0x123/0x220 [ 160.442163][ T9443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.442186][ T9443] rtnetlink_rcv+0x1c/0x30 [ 160.442202][ T9443] netlink_unicast+0x59e/0x670 [ 160.442239][ T9443] netlink_sendmsg+0x58b/0x6b0 [ 160.442313][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.442355][ T9443] __sock_sendmsg+0x145/0x180 [ 160.442426][ T9443] ____sys_sendmsg+0x31e/0x4e0 [ 160.442473][ T9443] ___sys_sendmsg+0x17b/0x1d0 [ 160.442512][ T9443] __x64_sys_sendmsg+0xd4/0x160 [ 160.442543][ T9443] x64_sys_call+0x2999/0x2fb0 [ 160.442575][ T9443] do_syscall_64+0xd2/0x200 [ 160.442590][ T9443] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.442612][ T9443] ? clear_bhb_loop+0x40/0x90 [ 160.442629][ T9443] ? clear_bhb_loop+0x40/0x90 [ 160.442658][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.442735][ T9443] RIP: 0033:0x7f28839ae929 [ 160.442754][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.442768][ T9443] RSP: 002b:00007f2882017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.442783][ T9443] RAX: ffffffffffffffda RBX: 00007f2883bd5fa0 RCX: 00007f28839ae929 [ 160.442793][ T9443] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 160.442803][ T9443] RBP: 00007f2882017090 R08: 0000000000000000 R09: 0000000000000000 [ 160.442813][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.442823][ T9443] R13: 0000000000000000 R14: 00007f2883bd5fa0 R15: 00007ffcf39bafd8 [ 160.442916][ T9443] [ 160.828748][ T9451] loop4: detected capacity change from 0 to 764 [ 160.837026][ T9451] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.867729][ T9450] netlink: 76 bytes leftover after parsing attributes in process `+}[@'. [ 160.882861][ T9457] loop4: detected capacity change from 0 to 512 [ 160.889536][ T9457] EXT4-fs: Ignoring removed bh option [ 160.898400][ T9457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.048086][ T9457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.182683][ T9457] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.623215][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.693662][ T9486] loop3: detected capacity change from 0 to 1024 [ 161.704698][ T9486] EXT4-fs: Ignoring removed orlov option [ 161.722532][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.738150][ T9486] EXT4-fs (loop3): shut down requested (1) [ 161.754633][ T9486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 161.766068][ T9486] FAULT_INJECTION: forcing a failure. [ 161.766068][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.779192][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.3.2261 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 161.779227][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.779254][ T9486] Call Trace: [ 161.779259][ T9486] [ 161.779304][ T9486] __dump_stack+0x1d/0x30 [ 161.779325][ T9486] dump_stack_lvl+0xe8/0x140 [ 161.779347][ T9486] dump_stack+0x15/0x1b [ 161.779379][ T9486] should_fail_ex+0x265/0x280 [ 161.779417][ T9486] should_fail+0xb/0x20 [ 161.779516][ T9486] should_fail_usercopy+0x1a/0x20 [ 161.779582][ T9486] _copy_to_user+0x20/0xa0 [ 161.779610][ T9486] simple_read_from_buffer+0xb5/0x130 [ 161.779651][ T9486] proc_fail_nth_read+0x100/0x140 [ 161.779722][ T9486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.779825][ T9486] vfs_read+0x1a0/0x6f0 [ 161.779863][ T9486] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 161.779904][ T9486] ? __rcu_read_unlock+0x4f/0x70 [ 161.779933][ T9486] ? __fget_files+0x184/0x1c0 [ 161.780006][ T9486] ksys_read+0xda/0x1a0 [ 161.780092][ T9486] __x64_sys_read+0x40/0x50 [ 161.780175][ T9486] x64_sys_call+0x2d77/0x2fb0 [ 161.780201][ T9486] do_syscall_64+0xd2/0x200 [ 161.780219][ T9486] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.780290][ T9486] ? clear_bhb_loop+0x40/0x90 [ 161.780394][ T9486] ? clear_bhb_loop+0x40/0x90 [ 161.780423][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.780451][ T9486] RIP: 0033:0x7f6a6d62d33c [ 161.780471][ T9486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.780560][ T9486] RSP: 002b:00007f6a6bc97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.780583][ T9486] RAX: ffffffffffffffda RBX: 00007f6a6d855fa0 RCX: 00007f6a6d62d33c [ 161.780596][ T9486] RDX: 000000000000000f RSI: 00007f6a6bc970a0 RDI: 0000000000000007 [ 161.780607][ T9486] RBP: 00007f6a6bc97090 R08: 0000000000000000 R09: 0000000000000000 [ 161.780660][ T9486] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 161.780676][ T9486] R13: 0000000000000000 R14: 00007f6a6d855fa0 R15: 00007fff5491d658 [ 161.780766][ T9486] [ 162.069734][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2264'. [ 162.085172][ T9496] netlink: 'syz.0.2264': attribute type 13 has an invalid length. [ 162.093344][ T9496] gretap0: refused to change device tx_queue_len [ 162.099728][ T9496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 162.116950][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.711129][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 162.800034][ T9535] loop3: detected capacity change from 0 to 764 [ 162.826708][ T9535] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.195076][ T9550] netlink: 'syz.4.2288': attribute type 13 has an invalid length. [ 163.222618][ T9550] gretap0: refused to change device tx_queue_len [ 163.229130][ T9550] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.439078][ T9568] loop4: detected capacity change from 0 to 764 [ 163.446294][ T9568] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.643743][ T9585] netlink: 'syz.2.2303': attribute type 13 has an invalid length. [ 163.652094][ T9585] gretap0: refused to change device tx_queue_len [ 163.658565][ T9585] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.411432][ T9604] SELinux: policydb magic number 0x5f637069 does not match expected magic number 0xf97cff8c [ 164.422101][ T9604] SELinux: failed to load policy [ 164.473858][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 164.473921][ T29] audit: type=1326 audit(1751730214.221:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d62e929 code=0x7ffc0000 [ 164.504818][ T29] audit: type=1326 audit(1751730214.231:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d62e929 code=0x7ffc0000 [ 164.528327][ T29] audit: type=1326 audit(1751730214.231:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6a6d62e929 code=0x7ffc0000 [ 164.551779][ T29] audit: type=1326 audit(1751730214.231:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d62e929 code=0x7ffc0000 [ 164.575444][ T29] audit: type=1326 audit(1751730214.231:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d62e929 code=0x7ffc0000 [ 164.603009][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.610522][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.617948][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.625391][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.632826][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.640300][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.647764][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.655238][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.656734][ T29] audit: type=1326 audit(1751730214.411:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.0.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 164.662629][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.693450][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.701016][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.708525][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.709764][ T29] audit: type=1326 audit(1751730214.441:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.0.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 164.715973][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.739336][ T29] audit: type=1326 audit(1751730214.441:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.0.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 164.739371][ T29] audit: type=1326 audit(1751730214.441:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.0.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 164.739403][ T29] audit: type=1326 audit(1751730214.441:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.0.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 164.746909][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.825138][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.832585][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.840073][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.847525][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.855073][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.862466][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.869924][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.877391][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.884824][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.892251][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.899708][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.907182][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.914658][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.922129][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.929571][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.936993][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.944419][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.951861][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.959388][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.966918][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.974341][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.981812][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.989229][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 164.996676][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.004077][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.011517][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.019010][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.026516][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.033943][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 165.133342][ T3381] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz1] on syz0 [ 165.164184][ T9637] loop3: detected capacity change from 0 to 764 [ 165.171951][ T9637] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.224273][ T9641] loop3: detected capacity change from 0 to 764 [ 165.238613][ T9641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.301293][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2329'. [ 165.315097][ T9652] netlink: 'syz.4.2329': attribute type 13 has an invalid length. [ 165.323345][ T9652] gretap0: refused to change device tx_queue_len [ 165.329766][ T9652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.683624][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.691138][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.698586][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.706035][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.713431][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.720985][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.728460][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.735929][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.743337][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.750794][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.758221][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.765796][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.773231][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.780811][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.788254][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.795723][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.797359][ T9665] atomic_op ffff888126c78d28 conn xmit_atomic 0000000000000000 [ 165.803111][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.818109][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.825549][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.832960][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.840460][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.847877][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.855373][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.862783][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.870341][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.877755][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.885264][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.892730][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.900145][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.907604][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.915022][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.922405][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.929833][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.937301][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.944728][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.952127][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.959588][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.967023][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.974432][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.981986][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.989417][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 165.996883][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 166.004292][ T3381] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 166.021316][ T3381] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz1] on syz0 [ 166.216701][ T9704] FAULT_INJECTION: forcing a failure. [ 166.216701][ T9704] name failslab, interval 1, probability 0, space 0, times 0 [ 166.229393][ T9704] CPU: 1 UID: 0 PID: 9704 Comm: syz.3.2349 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 166.229473][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.229488][ T9704] Call Trace: [ 166.229495][ T9704] [ 166.229503][ T9704] __dump_stack+0x1d/0x30 [ 166.229527][ T9704] dump_stack_lvl+0xe8/0x140 [ 166.229554][ T9704] dump_stack+0x15/0x1b [ 166.229569][ T9704] should_fail_ex+0x265/0x280 [ 166.229648][ T9704] should_failslab+0x8c/0xb0 [ 166.229669][ T9704] kmem_cache_alloc_noprof+0x50/0x310 [ 166.229778][ T9704] ? getname_flags+0x80/0x3b0 [ 166.229807][ T9704] getname_flags+0x80/0x3b0 [ 166.229896][ T9704] __x64_sys_renameat2+0x6c/0x90 [ 166.229921][ T9704] x64_sys_call+0x2bf6/0x2fb0 [ 166.229944][ T9704] do_syscall_64+0xd2/0x200 [ 166.229960][ T9704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.230064][ T9704] ? clear_bhb_loop+0x40/0x90 [ 166.230083][ T9704] ? clear_bhb_loop+0x40/0x90 [ 166.230119][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.230144][ T9704] RIP: 0033:0x7f6a6d62e929 [ 166.230161][ T9704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.230181][ T9704] RSP: 002b:00007f6a6bc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 166.230203][ T9704] RAX: ffffffffffffffda RBX: 00007f6a6d855fa0 RCX: 00007f6a6d62e929 [ 166.230274][ T9704] RDX: ffffffffffffffff RSI: 0000200000000380 RDI: ffffffffffffffff [ 166.230290][ T9704] RBP: 00007f6a6bc97090 R08: 0000000000000000 R09: 0000000000000000 [ 166.230322][ T9704] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 166.230338][ T9704] R13: 0000000000000000 R14: 00007f6a6d855fa0 R15: 00007fff5491d658 [ 166.230365][ T9704] [ 166.443854][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2350'. [ 166.453042][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2350'. [ 166.453142][ T9703] loop1: detected capacity change from 0 to 8192 [ 166.477829][ T9706] loop3: detected capacity change from 0 to 1024 [ 166.485585][ T9706] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.506119][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 166.528154][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 166.534641][ T9709] FAULT_INJECTION: forcing a failure. [ 166.534641][ T9709] name failslab, interval 1, probability 0, space 0, times 0 [ 166.538191][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2348'. [ 166.549766][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.0.2351 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 166.549874][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.549893][ T9709] Call Trace: [ 166.549902][ T9709] [ 166.549913][ T9709] __dump_stack+0x1d/0x30 [ 166.549943][ T9709] dump_stack_lvl+0xe8/0x140 [ 166.549970][ T9709] dump_stack+0x15/0x1b [ 166.549993][ T9709] should_fail_ex+0x265/0x280 [ 166.550090][ T9709] should_failslab+0x8c/0xb0 [ 166.550123][ T9709] __kvmalloc_node_noprof+0x123/0x4e0 [ 166.550190][ T9709] ? simple_xattr_alloc+0x43/0x90 [ 166.550244][ T9709] simple_xattr_alloc+0x43/0x90 [ 166.550295][ T9709] shmem_initxattrs+0x18c/0x350 [ 166.550331][ T9709] security_inode_init_security+0x25c/0x330 [ 166.550377][ T9709] ? __pfx_shmem_initxattrs+0x10/0x10 [ 166.550451][ T9709] shmem_mknod+0xad/0x180 [ 166.550484][ T9709] shmem_create+0x34/0x50 [ 166.550584][ T9709] ? __pfx_shmem_create+0x10/0x10 [ 166.550615][ T9709] path_openat+0x1102/0x2170 [ 166.550791][ T9709] do_filp_open+0x109/0x230 [ 166.550942][ T9709] do_sys_openat2+0xa6/0x110 [ 166.550984][ T9709] __x64_sys_creat+0x65/0x90 [ 166.551024][ T9709] x64_sys_call+0x114d/0x2fb0 [ 166.551056][ T9709] do_syscall_64+0xd2/0x200 [ 166.551115][ T9709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.551207][ T9709] ? clear_bhb_loop+0x40/0x90 [ 166.551239][ T9709] ? clear_bhb_loop+0x40/0x90 [ 166.551274][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.551318][ T9709] RIP: 0033:0x7ff84a55e929 [ 166.551340][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.551367][ T9709] RSP: 002b:00007ff848bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 166.551456][ T9709] RAX: ffffffffffffffda RBX: 00007ff84a785fa0 RCX: 00007ff84a55e929 [ 166.551472][ T9709] RDX: 0000000000000000 RSI: ecf86c37d53049dc RDI: 0000200000000000 [ 166.551536][ T9709] RBP: 00007ff848bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.551552][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.551568][ T9709] R13: 0000000000000000 R14: 00007ff84a785fa0 R15: 00007ffc2a661a78 [ 166.551592][ T9709] [ 166.562358][ T9703] loop1: p1 < > p3 p4 < > [ 166.571413][ T9707] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2348'. [ 166.587668][ T9706] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2350: Invalid block bitmap block 0 in block_group 0 [ 166.587824][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2348'. [ 166.594463][ T9706] EXT4-fs (loop3): Remounting filesystem read-only [ 166.700692][ T9703] loop1: p3 size 16744448 extends beyond EOD, [ 166.731609][ T9706] EXT4-fs (loop3): 1 orphan inode deleted [ 166.737393][ T9703] truncated [ 166.787943][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2354'. [ 166.800548][ T9706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.819203][ T9721] netlink: 'syz.0.2354': attribute type 13 has an invalid length. [ 166.869949][ T9721] gretap0: refused to change device tx_queue_len [ 166.876462][ T9721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.892617][ T9706] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.922332][ T9706] syz.3.2350 (9706) used greatest stack depth: 9288 bytes left [ 166.933509][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.960202][ T9725] netlink: 'syz.0.2356': attribute type 21 has an invalid length. [ 166.982346][ T9732] sctp: [Deprecated]: syz.1.2359 (pid 9732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.982346][ T9732] Use struct sctp_sack_info instead [ 167.073904][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2361'. [ 167.085796][ T9743] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 167.099496][ T9742] loop2: detected capacity change from 0 to 512 [ 167.107258][ T9742] journal_path: Non-blockdev passed as './bus' [ 167.113473][ T9742] EXT4-fs: error: could not find journal device path [ 167.181300][ T9753] loop3: detected capacity change from 0 to 764 [ 167.189279][ T9753] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.217230][ T9755] loop1: detected capacity change from 0 to 764 [ 167.225664][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.233152][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.240589][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.242037][ T9755] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.248066][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.263525][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.271019][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.278522][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.285975][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.293383][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.300851][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.308303][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.315730][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.323295][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.330738][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.338215][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.345654][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.353061][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.360507][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.368025][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.375467][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.382967][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.390416][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.397852][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.405304][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.412720][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.420130][ T3377] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 167.432013][ T3377] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz1] on syz0 [ 167.527713][ T9774] syzkaller0: entered allmulticast mode [ 167.534809][ T9774] syzkaller0 (unregistering): left allmulticast mode [ 167.575712][ T9778] loop2: detected capacity change from 0 to 2048 [ 167.589162][ T9784] loop3: detected capacity change from 0 to 764 [ 167.596798][ T9784] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.645063][ T9778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.673907][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.682152][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.689705][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.697334][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.698002][ T9778] EXT4-fs (loop2): shut down requested (0) [ 167.704768][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.718062][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.725547][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.733104][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.740569][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.748002][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.755478][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.762974][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.770698][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.778202][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.785662][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.793094][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.800534][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.807989][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.815491][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.822898][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.830401][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.837857][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.845287][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.852711][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.860163][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.867691][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 167.877767][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz1] on syz0 [ 167.889783][ T9798] tipc: Started in network mode [ 167.894808][ T9798] tipc: Node identity ac14140f, cluster identity 4711 [ 167.902747][ T9798] tipc: New replicast peer: 255.255.255.255 [ 167.908855][ T9798] tipc: Enabled bearer , priority 10 [ 167.948003][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.975120][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 167.983918][ T9810] serio: Serial port ptm0 [ 167.989119][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 167.996743][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.004238][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.011727][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.019354][ T9814] loop3: detected capacity change from 0 to 764 [ 168.025669][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.033353][ T9814] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 168.033412][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.048912][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.056361][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.063897][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.071436][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.078955][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.086596][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.094282][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.101728][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.109252][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.116700][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.124105][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.131569][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.139054][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.146466][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.153850][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.161307][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.168789][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.176200][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.183614][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.191869][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz1] on syz0 [ 168.265719][ T9829] batadv_slave_1: entered promiscuous mode [ 168.273489][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.277954][ T9828] batadv_slave_1: left promiscuous mode [ 168.281298][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.293965][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.301523][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.309095][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.316586][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.324059][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.331661][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.339108][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.346568][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.354056][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.361509][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.370868][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.378375][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.385999][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.393595][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.401230][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.408681][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.416166][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.423577][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.431030][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.438445][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.438598][ T9827] loop2: detected capacity change from 0 to 8192 [ 168.445929][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.445955][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.446044][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.446066][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 168.450057][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz1] on syz0 [ 168.501778][ T9838] netlink: 'syz.3.2398': attribute type 13 has an invalid length. [ 168.509952][ T9838] gretap0: refused to change device tx_queue_len [ 168.515615][ T9827] loop2: p1 p3 p4 [ 168.516474][ T9838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.520174][ T9827] loop2: p1 size 8390912 extends beyond EOD, truncated [ 168.557973][ T9841] loop4: detected capacity change from 0 to 512 [ 168.566093][ T9841] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.576149][ T9827] loop2: p3 size 589824 extends beyond EOD, truncated [ 168.590914][ T9841] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.604310][ T9841] EXT4-fs (loop4): 1 truncate cleaned up [ 168.610731][ T9841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.640556][ T9849] netlink: 'syz.3.2402': attribute type 13 has an invalid length. [ 168.658195][ T9849] gretap0: refused to change device tx_queue_len [ 168.664628][ T9849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.706167][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.755379][ T9861] loop1: detected capacity change from 0 to 764 [ 168.766057][ T9861] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 168.820744][ T9870] loop4: detected capacity change from 0 to 764 [ 168.836113][ T9870] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 168.850250][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.859143][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.867454][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.874921][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.882327][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.889788][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.896204][ T9876] netlink: 'syz.2.2416': attribute type 13 has an invalid length. [ 168.898002][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.905665][ T9876] gretap0: refused to change device tx_queue_len [ 168.912374][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.918736][ T9876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.926950][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.949301][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.956784][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.964190][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.981850][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.989400][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.997630][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.005117][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.005431][ T9885] FAULT_INJECTION: forcing a failure. [ 169.005431][ T9885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.012553][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.025703][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.4.2418 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 169.025738][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.025753][ T9885] Call Trace: [ 169.025759][ T9885] [ 169.025767][ T9885] __dump_stack+0x1d/0x30 [ 169.025793][ T9885] dump_stack_lvl+0xe8/0x140 [ 169.025880][ T9885] dump_stack+0x15/0x1b [ 169.025901][ T9885] should_fail_ex+0x265/0x280 [ 169.025938][ T9885] should_fail+0xb/0x20 [ 169.025969][ T9885] should_fail_usercopy+0x1a/0x20 [ 169.026068][ T9885] _copy_from_user+0x1c/0xb0 [ 169.026138][ T9885] ___sys_sendmsg+0xc1/0x1d0 [ 169.026192][ T9885] __sys_sendmmsg+0x178/0x300 [ 169.026303][ T9885] __x64_sys_sendmmsg+0x57/0x70 [ 169.026412][ T9885] x64_sys_call+0x2f2f/0x2fb0 [ 169.026441][ T9885] do_syscall_64+0xd2/0x200 [ 169.026467][ T9885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.026504][ T9885] ? clear_bhb_loop+0x40/0x90 [ 169.026573][ T9885] ? clear_bhb_loop+0x40/0x90 [ 169.026603][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.026632][ T9885] RIP: 0033:0x7fe6a45fe929 [ 169.026653][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.026679][ T9885] RSP: 002b:00007fe6a2c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.026759][ T9885] RAX: ffffffffffffffda RBX: 00007fe6a4825fa0 RCX: 00007fe6a45fe929 [ 169.026776][ T9885] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 169.026796][ T9885] RBP: 00007fe6a2c67090 R08: 0000000000000000 R09: 0000000000000000 [ 169.026813][ T9885] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 169.026830][ T9885] R13: 0000000000000000 R14: 00007fe6a4825fa0 R15: 00007fff67470968 [ 169.026905][ T9885] [ 169.026948][ T10] tipc: Node number set to 2886997007 [ 169.033662][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.190544][ T9892] loop2: detected capacity change from 0 to 8192 [ 169.190921][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.246170][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.253572][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.261027][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.269162][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.276602][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.284019][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.291479][ T3381] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 169.301663][ T3381] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.00 Device [syz1] on syz0 [ 169.319919][ T9892] loop2: p1 p3 p4 [ 169.328397][ T9892] loop2: p1 size 8390912 extends beyond EOD, truncated [ 169.342098][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.350096][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.350182][ T9892] loop2: p3 size 589824 extends beyond EOD, [ 169.357568][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.357597][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.363552][ T9892] truncated [ 169.381742][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.389252][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.396701][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.404128][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.411599][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.419400][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.426853][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.434261][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.444822][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.452296][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.459838][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.467390][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.474891][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.482680][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.490183][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.497762][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.505261][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.512703][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.520149][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.527604][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.529107][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 169.529134][ T29] audit: type=1326 audit(1751730219.262:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.535014][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.541187][ T29] audit: type=1326 audit(1751730219.262:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.564714][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 169.568702][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.00 Device [syz1] on syz0 [ 169.572698][ T29] audit: type=1326 audit(1751730219.262:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.637821][ T29] audit: type=1326 audit(1751730219.262:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.661457][ T29] audit: type=1326 audit(1751730219.262:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.685625][ T29] audit: type=1326 audit(1751730219.262:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.709182][ T29] audit: type=1326 audit(1751730219.262:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.733327][ T29] audit: type=1326 audit(1751730219.262:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.757570][ T29] audit: type=1326 audit(1751730219.262:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.781045][ T29] audit: type=1326 audit(1751730219.262:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.0.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84a55e929 code=0x7ffc0000 [ 169.879670][ T9934] netlink: 'syz.1.2439': attribute type 13 has an invalid length. [ 169.889607][ T9934] gretap0: refused to change device tx_queue_len [ 169.896101][ T9934] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.921171][ T9936] loop3: detected capacity change from 0 to 764 [ 169.931742][ T9936] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.949688][ T9938] SELinux: Context Ü is not valid (left unmapped). [ 170.382656][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.390374][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.397828][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.405989][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.413423][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.417252][ T9956] syz.4.2447 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.420915][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.420966][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.420993][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.421019][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.461578][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.469582][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.477049][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.484633][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.492048][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.500241][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.507706][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.515116][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.522508][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.530535][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.538010][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.545423][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.552964][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.560923][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.568343][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.575799][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.583202][ T3381] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 170.591716][ T3381] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.00 Device [syz1] on syz0 [ 170.672398][ T9961] __nla_validate_parse: 8 callbacks suppressed [ 170.672415][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 170.820072][ T9968] loop3: detected capacity change from 0 to 764 [ 170.827512][ T9968] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 170.864407][ T9972] loop2: detected capacity change from 0 to 1024 [ 170.871298][ T9972] EXT4-fs: Ignoring removed nobh option [ 170.879304][ T9972] EXT4-fs: Ignoring removed bh option [ 170.897278][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.914874][ T9972] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 170.946494][ T9972] EXT4-fs (loop2): Remounting filesystem read-only [ 171.023858][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.184048][ T9989] loop2: detected capacity change from 0 to 128 [ 171.194203][ T9989] netlink: 'syz.2.2461': attribute type 21 has an invalid length. [ 171.202193][ T9989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2461'. [ 171.213405][ T9989] netlink: 'syz.2.2461': attribute type 4 has an invalid length. [ 171.476286][T10002] FAULT_INJECTION: forcing a failure. [ 171.476286][T10002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.489624][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.0.2466 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 171.489711][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.489728][T10002] Call Trace: [ 171.489735][T10002] [ 171.489744][T10002] __dump_stack+0x1d/0x30 [ 171.489854][T10002] dump_stack_lvl+0xe8/0x140 [ 171.489872][T10002] dump_stack+0x15/0x1b [ 171.489886][T10002] should_fail_ex+0x265/0x280 [ 171.489912][T10002] should_fail_alloc_page+0xf2/0x100 [ 171.489934][T10002] __alloc_frozen_pages_noprof+0xff/0x360 [ 171.489971][T10002] alloc_pages_mpol+0xb3/0x250 [ 171.489997][T10002] folio_alloc_noprof+0x97/0x150 [ 171.490023][T10002] filemap_alloc_folio_noprof+0x66/0x210 [ 171.490077][T10002] __filemap_get_folio+0x28f/0x6b0 [ 171.490111][T10002] ? aio_setup_ring+0x1e8/0x760 [ 171.490129][T10002] aio_setup_ring+0x26c/0x760 [ 171.490148][T10002] ioctx_alloc+0x2c4/0x4e0 [ 171.490180][T10002] ? fput+0x8f/0xc0 [ 171.490202][T10002] __se_sys_io_setup+0x6b/0x1b0 [ 171.490233][T10002] __x64_sys_io_setup+0x31/0x40 [ 171.490328][T10002] x64_sys_call+0x2f0e/0x2fb0 [ 171.490349][T10002] do_syscall_64+0xd2/0x200 [ 171.490365][T10002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.490388][T10002] ? clear_bhb_loop+0x40/0x90 [ 171.490427][T10002] ? clear_bhb_loop+0x40/0x90 [ 171.490447][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.490466][T10002] RIP: 0033:0x7ff84a55e929 [ 171.490479][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.490495][T10002] RSP: 002b:00007ff848bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 171.490553][T10002] RAX: ffffffffffffffda RBX: 00007ff84a785fa0 RCX: 00007ff84a55e929 [ 171.490564][T10002] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 171.490575][T10002] RBP: 00007ff848bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.490586][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.490597][T10002] R13: 0000000000000000 R14: 00007ff84a785fa0 R15: 00007ffc2a661a78 [ 171.490614][T10002] [ 171.780961][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2470'. [ 171.797201][T10009] netlink: 'syz.0.2470': attribute type 13 has an invalid length. [ 171.807437][T10009] gretap0: refused to change device tx_queue_len [ 171.813833][T10009] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.858097][T10016] netlink: 'syz.1.2474': attribute type 13 has an invalid length. [ 171.867770][T10016] gretap0: refused to change device tx_queue_len [ 171.874152][T10016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.913752][T10020] loop1: detected capacity change from 0 to 1024 [ 171.914200][T10022] mmap: syz.4.2478 (10022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.920834][T10020] EXT4-fs: Ignoring removed oldalloc option [ 171.939198][T10020] EXT4-fs: Ignoring removed bh option [ 171.969599][T10020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.017900][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.408427][T10067] wireguard0: entered promiscuous mode [ 172.414119][T10067] wireguard0: entered allmulticast mode [ 172.739656][T10083] FAULT_INJECTION: forcing a failure. [ 172.739656][T10083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.753577][T10083] CPU: 1 UID: 0 PID: 10083 Comm: syz.1.2497 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 172.753689][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.753705][T10083] Call Trace: [ 172.753761][T10083] [ 172.753770][T10083] __dump_stack+0x1d/0x30 [ 172.753795][T10083] dump_stack_lvl+0xe8/0x140 [ 172.753819][T10083] dump_stack+0x15/0x1b [ 172.753840][T10083] should_fail_ex+0x265/0x280 [ 172.753879][T10083] should_fail_alloc_page+0xf2/0x100 [ 172.753920][T10083] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.754062][T10083] alloc_pages_mpol+0xb3/0x250 [ 172.754101][T10083] alloc_migration_target_by_mpol+0x11b/0x280 [ 172.754188][T10083] migrate_pages_batch+0x2e4/0x17d0 [ 172.754222][T10083] ? update_and_free_hugetlb_folio+0xee/0x1b0 [ 172.754337][T10083] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 172.754422][T10083] ? __folio_put+0x5e/0x150 [ 172.754456][T10083] ? hugetlb_cgroup_migrate+0x190/0x1b0 [ 172.754583][T10083] migrate_pages+0xf5f/0x1770 [ 172.754613][T10083] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 172.754643][T10083] __se_sys_mbind+0x975/0xac0 [ 172.754752][T10083] __x64_sys_mbind+0x78/0x90 [ 172.754780][T10083] x64_sys_call+0x14af/0x2fb0 [ 172.754802][T10083] do_syscall_64+0xd2/0x200 [ 172.754882][T10083] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.754909][T10083] ? clear_bhb_loop+0x40/0x90 [ 172.754931][T10083] ? clear_bhb_loop+0x40/0x90 [ 172.754954][T10083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.754975][T10083] RIP: 0033:0x7f3a5554e929 [ 172.755013][T10083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.755032][T10083] RSP: 002b:00007f3a53bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 172.755051][T10083] RAX: ffffffffffffffda RBX: 00007f3a55775fa0 RCX: 00007f3a5554e929 [ 172.755064][T10083] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 172.755118][T10083] RBP: 00007f3a53bb7090 R08: 0000000000000000 R09: 0000000000000002 [ 172.755130][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.755143][T10083] R13: 0000000000000000 R14: 00007f3a55775fa0 R15: 00007fffacd68118 [ 172.755162][T10083] [ 173.069723][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 173.161244][T10100] loop1: detected capacity change from 0 to 8192 [ 173.253729][T10100] loop1: p1 p3 p4 [ 173.260684][T10100] loop1: p1 size 8390912 extends beyond EOD, truncated [ 173.268679][T10100] loop1: p3 size 589824 extends beyond EOD, truncated [ 173.864181][T10141] netlink: 'syz.1.2520': attribute type 13 has an invalid length. [ 173.873600][T10141] gretap0: refused to change device tx_queue_len [ 173.880026][T10141] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.920119][T10143] bridge: RTM_NEWNEIGH with invalid ether address [ 174.022492][T10149] loop1: detected capacity change from 0 to 764 [ 174.046368][T10149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 174.167113][T10159] FAULT_INJECTION: forcing a failure. [ 174.167113][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 174.180349][T10159] CPU: 1 UID: 0 PID: 10159 Comm: syz.1.2529 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 174.180407][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.180424][T10159] Call Trace: [ 174.180431][T10159] [ 174.180440][T10159] __dump_stack+0x1d/0x30 [ 174.180465][T10159] dump_stack_lvl+0xe8/0x140 [ 174.180491][T10159] dump_stack+0x15/0x1b [ 174.180580][T10159] should_fail_ex+0x265/0x280 [ 174.180611][T10159] ? kobject_uevent_env+0x1c0/0x570 [ 174.180680][T10159] should_failslab+0x8c/0xb0 [ 174.180709][T10159] __kmalloc_cache_noprof+0x4c/0x320 [ 174.180740][T10159] kobject_uevent_env+0x1c0/0x570 [ 174.180801][T10159] kobject_uevent+0x1d/0x30 [ 174.180983][T10159] __kobject_del+0x88/0x190 [ 174.181014][T10159] kobject_put+0x127/0x190 [ 174.181038][T10159] net_rx_queue_update_kobjects+0x477/0x520 [ 174.181079][T10159] netdev_unregister_kobject+0xbf/0x270 [ 174.181177][T10159] unregister_netdevice_many_notify+0x1292/0x1690 [ 174.181212][T10159] unregister_netdevice_queue+0x1f5/0x220 [ 174.181255][T10159] vti6_siocdevprivate+0x273/0x8e0 [ 174.181289][T10159] dev_ifsioc+0x8f5/0xaa0 [ 174.181357][T10159] dev_ioctl+0x78d/0x960 [ 174.181375][T10159] sock_ioctl+0x593/0x610 [ 174.181397][T10159] ? __pfx_sock_ioctl+0x10/0x10 [ 174.181491][T10159] __se_sys_ioctl+0xce/0x140 [ 174.181517][T10159] __x64_sys_ioctl+0x43/0x50 [ 174.181610][T10159] x64_sys_call+0x19a8/0x2fb0 [ 174.181629][T10159] do_syscall_64+0xd2/0x200 [ 174.181664][T10159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.181695][T10159] ? clear_bhb_loop+0x40/0x90 [ 174.181718][T10159] ? clear_bhb_loop+0x40/0x90 [ 174.181738][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.181807][T10159] RIP: 0033:0x7f3a5554e929 [ 174.181822][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.181839][T10159] RSP: 002b:00007f3a53bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.181855][T10159] RAX: ffffffffffffffda RBX: 00007f3a55775fa0 RCX: 00007f3a5554e929 [ 174.181876][T10159] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000003 [ 174.181887][T10159] RBP: 00007f3a53bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.181902][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.181916][T10159] R13: 0000000000000000 R14: 00007f3a55775fa0 R15: 00007fffacd68118 [ 174.181945][T10159] [ 174.861460][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 174.861480][ T29] audit: type=1326 audit(1751730224.612:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 174.892209][ T29] audit: type=1326 audit(1751730224.612:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 174.916510][ T29] audit: type=1326 audit(1751730224.612:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 174.940046][ T29] audit: type=1326 audit(1751730224.612:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 174.964334][ T29] audit: type=1326 audit(1751730224.612:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 174.988579][ T29] audit: type=1326 audit(1751730224.612:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 175.012209][ T29] audit: type=1326 audit(1751730224.612:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 175.036429][ T29] audit: type=1326 audit(1751730224.612:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 175.059957][ T29] audit: type=1326 audit(1751730224.612:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 175.084144][ T29] audit: type=1326 audit(1751730224.612:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6a45fe929 code=0x7ffc0000 [ 175.645325][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2542'. [ 175.657362][T10198] ipt_REJECT: TCP_RESET invalid for non-tcp [ 175.678730][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2544'. [ 176.052252][T10225] netlink: 'syz.1.2555': attribute type 13 has an invalid length. [ 176.092076][T10225] gretap0: refused to change device tx_queue_len [ 176.098593][T10225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.935583][T10264] netlink: 'syz.1.2569': attribute type 10 has an invalid length. [ 176.953324][T10264] team0: Port device dummy0 added [ 176.965642][T10264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=10264 comm=syz.1.2569 [ 177.018577][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.028363][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.035849][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.043269][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.050731][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.058857][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.066333][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.073837][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.081293][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.089541][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.097051][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.104488][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.119001][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.126496][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.133922][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.141401][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.149635][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.157082][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.164508][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.171970][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.179995][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.187488][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.194905][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.202363][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.210590][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.218064][ T3381] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 177.225679][T10280] loop3: detected capacity change from 0 to 764 [ 177.233776][T10280] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 177.275658][ T3381] hid-generic 0000:0000:0000.0019: hidraw0: HID v8.00 Device [syz1] on syz0 [ 177.349524][T10295] loop3: detected capacity change from 0 to 512 [ 177.453721][T10306] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 177.978921][T10322] loop3: detected capacity change from 0 to 764 [ 177.989830][T10322] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.474875][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 178.644900][T10366] netlink: 'syz.1.2611': attribute type 13 has an invalid length. [ 178.658316][T10348] loop4: detected capacity change from 0 to 8192 [ 178.661516][T10366] gretap0: refused to change device tx_queue_len [ 178.671213][T10366] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.704741][T10348] loop4: p1 p3 p4 [ 178.708702][T10348] loop4: p1 size 8390912 extends beyond EOD, truncated [ 178.749059][T10348] loop4: p3 size 589824 extends beyond EOD, truncated [ 179.100135][T10382] loop4: detected capacity change from 0 to 764 [ 179.236314][T10382] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.299345][T10343] chnl_net:caif_netlink_parms(): no params data found [ 179.382233][ T6973] hsr_slave_0: left promiscuous mode [ 179.407217][ T6973] hsr_slave_1: left promiscuous mode [ 179.427216][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.436994][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.500948][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 179.512246][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 179.573199][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.580381][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.587602][T10343] bridge_slave_0: entered allmulticast mode [ 179.594178][T10343] bridge_slave_0: entered promiscuous mode [ 179.601133][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.608313][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.615689][T10343] bridge_slave_1: entered allmulticast mode [ 179.622515][T10343] bridge_slave_1: entered promiscuous mode [ 179.700089][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.720312][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 179.731679][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.752470][T10404] loop2: detected capacity change from 0 to 2048 [ 179.764952][T10343] team0: Port device team_slave_0 added [ 179.781271][T10343] team0: Port device team_slave_1 added [ 179.806017][T10406] netlink: 'syz.1.2624': attribute type 13 has an invalid length. [ 179.807939][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.814725][T10404] loop2: p1 p2 < > p3 p4 < p5 > [ 179.820907][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.826680][T10404] loop2: partition table partially beyond EOD, truncated [ 179.851748][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.872334][T10406] gretap0: refused to change device tx_queue_len [ 179.878773][T10406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.897162][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.904228][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.911861][T10404] loop2: p1 start 234883329 is beyond EOD, [ 179.930256][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.947477][T10404] truncated [ 179.950612][T10404] loop2: p2 start 4294902784 is beyond EOD, truncated [ 179.958086][T10404] loop2: p3 start 4278191616 is beyond EOD, truncated [ 179.965536][T10404] loop2: p5 start 234883329 is beyond EOD, truncated [ 179.985526][T10408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10408 comm=syz.1.2625 [ 179.998835][T10408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10408 comm=syz.1.2625 [ 179.998861][T10343] hsr_slave_0: entered promiscuous mode [ 180.017975][T10343] hsr_slave_1: entered promiscuous mode [ 180.033096][T10408] lo speed is unknown, defaulting to 1000 [ 180.045301][T10408] lo speed is unknown, defaulting to 1000 [ 180.060628][T10408] lo speed is unknown, defaulting to 1000 [ 180.067482][T10408] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.076611][T10408] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 180.090292][T10408] lo speed is unknown, defaulting to 1000 [ 180.097828][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 180.097844][ T29] audit: type=1400 audit(1751730229.852:5744): avc: denied { mount } for pid=10414 comm="syz.0.2627" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.135228][T10408] lo speed is unknown, defaulting to 1000 [ 180.146054][T10408] lo speed is unknown, defaulting to 1000 [ 180.158290][ T29] audit: type=1400 audit(1751730229.912:5745): avc: granted { setsecparam } for pid=10414 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 180.182864][T10408] lo speed is unknown, defaulting to 1000 [ 180.199070][T10408] lo speed is unknown, defaulting to 1000 [ 180.502651][T10433] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2634'. [ 180.532722][T10343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.555105][T10343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.580676][T10343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.601461][T10435] netlink: 'syz.1.2635': attribute type 13 has an invalid length. [ 180.616017][T10343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.623564][ T29] audit: type=1400 audit(1751730230.242:5746): avc: denied { read open } for pid=10432 comm="syz.1.2634" path="/" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.652565][T10435] gretap0: refused to change device tx_queue_len [ 180.658996][T10435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 180.757120][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.773989][ T29] audit: type=1326 audit(1751730230.522:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a555458e7 code=0x7ffc0000 [ 180.798328][ T29] audit: type=1326 audit(1751730230.522:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a554eab19 code=0x7ffc0000 [ 180.821787][ T29] audit: type=1326 audit(1751730230.522:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a555458e7 code=0x7ffc0000 [ 180.845957][ T29] audit: type=1326 audit(1751730230.522:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a554eab19 code=0x7ffc0000 [ 180.869499][ T29] audit: type=1326 audit(1751730230.522:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a555458e7 code=0x7ffc0000 [ 180.893511][ T29] audit: type=1326 audit(1751730230.522:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a554eab19 code=0x7ffc0000 [ 180.917514][ T29] audit: type=1326 audit(1751730230.522:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.1.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a555458e7 code=0x7ffc0000 [ 180.948431][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.959164][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.966402][ T6973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.970865][T10445] FAULT_INJECTION: forcing a failure. [ 180.970865][T10445] name failslab, interval 1, probability 0, space 0, times 0 [ 180.986462][T10445] CPU: 0 UID: 0 PID: 10445 Comm: syz.1.2637 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 180.986497][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.986498][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.986513][T10445] Call Trace: [ 180.986519][T10445] [ 180.986525][T10445] __dump_stack+0x1d/0x30 [ 180.986546][T10445] dump_stack_lvl+0xe8/0x140 [ 180.986580][T10445] dump_stack+0x15/0x1b [ 180.986600][T10445] should_fail_ex+0x265/0x280 [ 180.986664][T10445] should_failslab+0x8c/0xb0 [ 180.986701][T10445] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 180.986746][T10445] ? sidtab_sid2str_get+0xa0/0x130 [ 180.986782][T10445] kmemdup_noprof+0x2b/0x70 [ 180.986887][T10445] sidtab_sid2str_get+0xa0/0x130 [ 180.986922][T10445] security_sid_to_context_core+0x1eb/0x2e0 [ 180.986957][T10445] security_sid_to_context+0x27/0x40 [ 180.987035][T10445] selinux_lsmprop_to_secctx+0x67/0xf0 [ 180.987071][T10445] security_lsmprop_to_secctx+0x43/0x80 [ 180.987123][T10445] audit_log_task_context+0x77/0x190 [ 180.987173][T10445] audit_log_task+0xf4/0x250 [ 180.987246][T10445] ? kmem_cache_free+0xdf/0x300 [ 180.987289][T10445] audit_seccomp+0x61/0x100 [ 180.987327][T10445] ? __seccomp_filter+0x68c/0x10d0 [ 180.987361][T10445] __seccomp_filter+0x69d/0x10d0 [ 180.987421][T10445] ? x86_task_fpu+0x36/0x60 [ 180.987461][T10445] ? should_fail_ex+0xdb/0x280 [ 180.987515][T10445] ? 0xffffffffff600000 [ 180.987585][T10445] __secure_computing+0x82/0x150 [ 180.987616][T10445] ? 0xffffffffff600000 [ 180.987638][T10445] emulate_vsyscall+0x95b/0xa00 [ 180.987728][T10445] ? 0xffffffffff600000 [ 180.987746][T10445] ? 0xffffffffff600000 [ 180.987763][T10445] do_user_addr_fault+0x1e0/0x1090 [ 180.987904][T10445] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.987939][T10445] ? 0xffffffffff600000 [ 180.987957][T10445] exc_page_fault+0x62/0xa0 [ 180.988021][T10445] asm_exc_page_fault+0x26/0x30 [ 180.988049][T10445] RIP: 0033:_end+0x763d8000/0x0 [ 180.988079][T10445] Code: Unable to access opcode bytes at 0xffffffffff5fffd6. [ 180.988093][T10445] RSP: 002b:00007f3a53bb6a78 EFLAGS: 00010246 ORIG_RAX: 0000000000000060 [ 180.988120][T10445] RAX: ffffffffffffffda RBX: 00007f3a55775fa0 RCX: 00007f3a5554e929 [ 180.988138][T10445] RDX: 00007f3a53bb6a80 RSI: 00007f3a53bb6bb0 RDI: 0000000000000019 [ 180.988201][T10445] RBP: 00007f3a53bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.988218][T10445] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 180.988313][T10445] R13: 0000000000000000 R14: 00007f3a55775fa0 R15: 00007fffacd68118 [ 180.988339][T10445] [ 181.241782][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.330118][T10461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.352699][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.418561][T10464] loop2: detected capacity change from 0 to 512 [ 181.442200][T10464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.453095][T10464] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2641: bg 0: block 248: padding at end of block bitmap is not set [ 181.474905][T10464] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2641: Failed to acquire dquot type 1 [ 181.510419][T10343] veth0_vlan: entered promiscuous mode [ 181.517597][T10464] EXT4-fs (loop2): 1 truncate cleaned up [ 181.544149][T10343] veth1_vlan: entered promiscuous mode [ 181.552264][T10464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.573557][T10343] veth0_macvtap: entered promiscuous mode [ 181.599786][T10343] veth1_macvtap: entered promiscuous mode [ 181.614267][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2641'. [ 181.622190][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.636050][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.647820][T10343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.656807][T10343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.665760][T10343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.674558][T10343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.737473][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.411367][T10506] loop1: detected capacity change from 0 to 764 [ 182.419482][T10506] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 182.498006][T10512] IPv6: Can't replace route, no match found [ 182.663211][T10521] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 182.843906][T10535] netlink: 'syz.2.2663': attribute type 13 has an invalid length. [ 182.862494][T10535] gretap0: refused to change device tx_queue_len [ 182.868944][T10535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 182.923831][T10538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10538 comm=syz.2.2664 [ 183.412012][T10544] Falling back ldisc for ptm0. [ 183.632141][T10556] tipc: Started in network mode [ 183.637250][T10556] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 183.646978][T10556] tipc: Enabling of bearer rejected, failed to enable media [ 183.855735][T10568] netlink: 'syz.0.2676': attribute type 13 has an invalid length. [ 183.874211][T10568] gretap0: refused to change device tx_queue_len [ 183.880730][T10568] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.940728][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 184.055238][T10578] loop2: detected capacity change from 0 to 8192 [ 184.094666][T10578] loop2: p1 p3 p4 [ 184.098593][T10578] loop2: p1 size 8390912 extends beyond EOD, truncated [ 184.109398][T10578] loop2: p3 size 589824 extends beyond EOD, truncated [ 184.136452][T10593] siw: device registration error -23 [ 184.147467][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2688'. [ 184.160329][T10589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2673'. [ 184.206769][T10591] loop4: detected capacity change from 0 to 512 [ 184.230910][T10591] EXT4-fs: Ignoring removed i_version option [ 184.238171][T10591] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.246946][T10591] journal_path: Lookup failure for './file2' [ 184.253288][T10591] EXT4-fs: error: could not find journal device path [ 184.340844][T10589] lo speed is unknown, defaulting to 1000 [ 184.550233][T10591] loop4: detected capacity change from 0 to 512 [ 184.572505][T10609] netlink: 'syz.2.2691': attribute type 13 has an invalid length. [ 184.574214][T10591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.595172][T10609] gretap0: refused to change device tx_queue_len [ 184.601603][T10609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.644597][T10591] EXT4-fs (loop4): 1 truncate cleaned up [ 184.700834][T10591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.754759][T10591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.989603][T10647] loop4: detected capacity change from 0 to 1024 [ 185.016991][T10647] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 185.028049][T10647] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 185.045082][T10647] JBD2: no valid journal superblock found [ 185.050929][T10647] EXT4-fs (loop4): Could not load journal inode [ 185.068313][T10647] loop4: detected capacity change from 0 to 1024 [ 185.089512][T10647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.106140][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 185.106159][ T29] audit: type=1400 audit(1751730234.862:6049): avc: denied { mount } for pid=10646 comm="syz.4.2705" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.106203][T10647] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.108033][T10647] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2705: bg 0: block 393: padding at end of block bitmap is not set [ 185.112531][ T29] audit: type=1400 audit(1751730234.862:6050): avc: denied { add_name } for pid=10646 comm="syz.4.2705" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.136767][T10647] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 185.144851][ T29] audit: type=1400 audit(1751730234.862:6051): avc: denied { create } for pid=10646 comm="syz.4.2705" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.209149][ T29] audit: type=1400 audit(1751730234.862:6052): avc: denied { read append } for pid=10646 comm="syz.4.2705" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.232099][ T29] audit: type=1400 audit(1751730234.862:6053): avc: denied { open } for pid=10646 comm="syz.4.2705" path="/505/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.255340][ T29] audit: type=1400 audit(1751730234.862:6054): avc: denied { write } for pid=10646 comm="syz.4.2705" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.278780][ T29] audit: type=1400 audit(1751730234.942:6055): avc: denied { create } for pid=10656 comm="syz.2.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.299244][ T29] audit: type=1400 audit(1751730234.942:6056): avc: denied { connect } for pid=10656 comm="syz.2.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.322496][ T29] audit: type=1400 audit(1751730235.052:6057): avc: denied { append } for pid=10646 comm="syz.4.2705" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.323396][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2709'. [ 185.346377][ T29] audit: type=1400 audit(1751730235.052:6058): avc: denied { create } for pid=10646 comm="syz.4.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.393217][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.477211][T10670] FAULT_INJECTION: forcing a failure. [ 185.477211][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 185.489926][T10670] CPU: 1 UID: 0 PID: 10670 Comm: syz.2.2714 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 185.489999][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.490023][T10670] Call Trace: [ 185.490031][T10670] [ 185.490040][T10670] __dump_stack+0x1d/0x30 [ 185.490067][T10670] dump_stack_lvl+0xe8/0x140 [ 185.490124][T10670] dump_stack+0x15/0x1b [ 185.490140][T10670] should_fail_ex+0x265/0x280 [ 185.490176][T10670] ? get_mountpoint+0x180/0x2e0 [ 185.490292][T10670] should_failslab+0x8c/0xb0 [ 185.490324][T10670] __kmalloc_cache_noprof+0x4c/0x320 [ 185.490354][T10670] ? __rcu_read_unlock+0x4f/0x70 [ 185.490377][T10670] get_mountpoint+0x180/0x2e0 [ 185.490490][T10670] do_lock_mount+0x28e/0x340 [ 185.490525][T10670] do_move_mount+0x35/0x600 [ 185.490573][T10670] ? selinux_move_mount+0x1fb/0x250 [ 185.490617][T10670] vfs_move_mount+0x64/0x4a0 [ 185.490650][T10670] __se_sys_move_mount+0x3ba/0x440 [ 185.490672][T10670] __x64_sys_move_mount+0x67/0x80 [ 185.490740][T10670] x64_sys_call+0x1f00/0x2fb0 [ 185.490762][T10670] do_syscall_64+0xd2/0x200 [ 185.490786][T10670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.490820][T10670] ? clear_bhb_loop+0x40/0x90 [ 185.490848][T10670] ? clear_bhb_loop+0x40/0x90 [ 185.490877][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.490899][T10670] RIP: 0033:0x7f28839ae929 [ 185.490914][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.490932][T10670] RSP: 002b:00007f2882017038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 185.490956][T10670] RAX: ffffffffffffffda RBX: 00007f2883bd5fa0 RCX: 00007f28839ae929 [ 185.490973][T10670] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000006 [ 185.491012][T10670] RBP: 00007f2882017090 R08: 0000000000000000 R09: 0000000000000000 [ 185.491027][T10670] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 185.491042][T10670] R13: 0000000000000000 R14: 00007f2883bd5fa0 R15: 00007ffcf39bafd8 [ 185.491066][T10670] [ 185.766863][T10679] sg_read: process 1344 (syz.1.2717) changed security contexts after opening file descriptor, this is not allowed. [ 185.788341][T10682] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2719'. [ 185.808785][T10682] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2719'. [ 185.877223][T10687] netlink: 484 bytes leftover after parsing attributes in process `syz.0.2721'. [ 185.991466][T10694] loop2: detected capacity change from 0 to 764 [ 185.999813][T10694] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.159849][T10709] FAULT_INJECTION: forcing a failure. [ 186.159849][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 186.173129][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.0.2731 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 186.173154][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.173165][T10709] Call Trace: [ 186.173170][T10709] [ 186.173177][T10709] __dump_stack+0x1d/0x30 [ 186.173213][T10709] dump_stack_lvl+0xe8/0x140 [ 186.173323][T10709] dump_stack+0x15/0x1b [ 186.173337][T10709] should_fail_ex+0x265/0x280 [ 186.173365][T10709] should_failslab+0x8c/0xb0 [ 186.173385][T10709] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 186.173410][T10709] ? __d_alloc+0x3d/0x350 [ 186.173471][T10709] __d_alloc+0x3d/0x350 [ 186.173489][T10709] ? avc_has_perm_noaudit+0x1b1/0x200 [ 186.173544][T10709] d_alloc_parallel+0x53/0xc40 [ 186.173676][T10709] ? selinux_inode_permission+0x532/0x620 [ 186.173698][T10709] ? lockref_get_not_dead+0x120/0x1c0 [ 186.173717][T10709] ? __rcu_read_unlock+0x4f/0x70 [ 186.173738][T10709] __lookup_slow+0x8c/0x250 [ 186.173809][T10709] lookup_slow+0x3c/0x60 [ 186.173901][T10709] walk_component+0x1ec/0x220 [ 186.173923][T10709] path_lookupat+0xfe/0x2a0 [ 186.174022][T10709] filename_lookup+0x147/0x340 [ 186.174053][T10709] kern_path+0x3b/0x130 [ 186.174074][T10709] lookup_bdev+0x66/0x150 [ 186.174102][T10709] __se_sys_quotactl+0x1b7/0x670 [ 186.174132][T10709] ? fput+0x8f/0xc0 [ 186.174166][T10709] __x64_sys_quotactl+0x55/0x70 [ 186.174279][T10709] x64_sys_call+0x2886/0x2fb0 [ 186.174312][T10709] do_syscall_64+0xd2/0x200 [ 186.174340][T10709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.174391][T10709] ? clear_bhb_loop+0x40/0x90 [ 186.174423][T10709] ? clear_bhb_loop+0x40/0x90 [ 186.174582][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.174611][T10709] RIP: 0033:0x7ff84a55e929 [ 186.174629][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.174651][T10709] RSP: 002b:00007ff848bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 186.174683][T10709] RAX: ffffffffffffffda RBX: 00007ff84a785fa0 RCX: 00007ff84a55e929 [ 186.174695][T10709] RDX: 0000000000000000 RSI: 00002000000080c0 RDI: ffffffff80000901 [ 186.174709][T10709] RBP: 00007ff848bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.174722][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.174733][T10709] R13: 0000000000000000 R14: 00007ff84a785fa0 R15: 00007ffc2a661a78 [ 186.174750][T10709] [ 186.456991][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 186.467168][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 186.541563][T10715] netlink: 'syz.0.2734': attribute type 21 has an invalid length. [ 186.613437][T10719] loop4: detected capacity change from 0 to 512 [ 186.620350][T10719] ext4: Unknown parameter 'smackfshat' [ 186.643542][T10717] lo speed is unknown, defaulting to 1000 [ 186.726620][T10729] FAULT_INJECTION: forcing a failure. [ 186.726620][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 186.739377][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.0.2740 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 186.739412][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.739424][T10729] Call Trace: [ 186.739431][T10729] [ 186.739438][T10729] __dump_stack+0x1d/0x30 [ 186.739460][T10729] dump_stack_lvl+0xe8/0x140 [ 186.739484][T10729] dump_stack+0x15/0x1b [ 186.739505][T10729] should_fail_ex+0x265/0x280 [ 186.739599][T10729] should_failslab+0x8c/0xb0 [ 186.739627][T10729] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 186.739702][T10729] ? security_set_bools+0x85/0x340 [ 186.739735][T10729] kmemdup_noprof+0x2b/0x70 [ 186.739764][T10729] security_set_bools+0x85/0x340 [ 186.739800][T10729] sel_commit_bools_write+0x1ea/0x270 [ 186.739832][T10729] vfs_writev+0x403/0x8b0 [ 186.739890][T10729] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 186.739933][T10729] ? mutex_lock+0xd/0x30 [ 186.739966][T10729] do_writev+0xe7/0x210 [ 186.740026][T10729] __x64_sys_writev+0x45/0x50 [ 186.740052][T10729] x64_sys_call+0x2006/0x2fb0 [ 186.740093][T10729] do_syscall_64+0xd2/0x200 [ 186.740122][T10729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.740155][T10729] ? clear_bhb_loop+0x40/0x90 [ 186.740236][T10729] ? clear_bhb_loop+0x40/0x90 [ 186.740322][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.740351][T10729] RIP: 0033:0x7ff84a55e929 [ 186.740371][T10729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.740416][T10729] RSP: 002b:00007ff848bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 186.740437][T10729] RAX: ffffffffffffffda RBX: 00007ff84a785fa0 RCX: 00007ff84a55e929 [ 186.740449][T10729] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000006 [ 186.740461][T10729] RBP: 00007ff848bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.740481][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.740493][T10729] R13: 0000000000000000 R14: 00007ff84a785fa0 R15: 00007ffc2a661a78 [ 186.740518][T10729] [ 187.016259][T10742] xt_connbytes: Forcing CT accounting to be enabled [ 187.033562][T10742] Cannot find set identified by id 0 to match [ 187.085799][T10747] loop2: detected capacity change from 0 to 512 [ 187.096814][T10747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.113193][T10747] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.170340][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.329526][T10761] lo speed is unknown, defaulting to 1000 [ 187.461793][T10785] loop1: detected capacity change from 0 to 764 [ 187.485380][T10785] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 187.503643][T10789] FAULT_INJECTION: forcing a failure. [ 187.503643][T10789] name failslab, interval 1, probability 0, space 0, times 0 [ 187.517057][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.3.2765 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 187.517093][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.517108][T10789] Call Trace: [ 187.517116][T10789] [ 187.517123][T10789] __dump_stack+0x1d/0x30 [ 187.517145][T10789] dump_stack_lvl+0xe8/0x140 [ 187.517170][T10789] dump_stack+0x15/0x1b [ 187.517189][T10789] should_fail_ex+0x265/0x280 [ 187.517228][T10789] should_failslab+0x8c/0xb0 [ 187.517253][T10789] kmem_cache_alloc_noprof+0x50/0x310 [ 187.517280][T10789] ? vm_area_alloc+0x2c/0xb0 [ 187.517317][T10789] vm_area_alloc+0x2c/0xb0 [ 187.517352][T10789] mmap_region+0xa43/0x1580 [ 187.517413][T10789] do_mmap+0x9b3/0xbe0 [ 187.517458][T10789] aio_setup_ring+0x504/0x760 [ 187.517488][T10789] ioctx_alloc+0x2c4/0x4e0 [ 187.517511][T10789] ? fput+0x8f/0xc0 [ 187.517543][T10789] __se_sys_io_setup+0x6b/0x1b0 [ 187.517578][T10789] __x64_sys_io_setup+0x31/0x40 [ 187.517615][T10789] x64_sys_call+0x2f0e/0x2fb0 [ 187.517642][T10789] do_syscall_64+0xd2/0x200 [ 187.517664][T10789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.517692][T10789] ? clear_bhb_loop+0x40/0x90 [ 187.517712][T10789] ? clear_bhb_loop+0x40/0x90 [ 187.517734][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.517760][T10789] RIP: 0033:0x7f9e70bbe929 [ 187.517778][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.517800][T10789] RSP: 002b:00007f9e6f227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 187.517818][T10789] RAX: ffffffffffffffda RBX: 00007f9e70de5fa0 RCX: 00007f9e70bbe929 [ 187.517829][T10789] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 187.517841][T10789] RBP: 00007f9e6f227090 R08: 0000000000000000 R09: 0000000000000000 [ 187.517852][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.517863][T10789] R13: 0000000000000000 R14: 00007f9e70de5fa0 R15: 00007fffc76d4568 [ 187.517882][T10789] [ 187.833758][T10798] unsupported nla_type 52263 [ 187.843964][T10801] FAULT_INJECTION: forcing a failure. [ 187.843964][T10801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.857236][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.4.2770 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 187.857263][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.857307][T10801] Call Trace: [ 187.857315][T10801] [ 187.857367][T10801] __dump_stack+0x1d/0x30 [ 187.857388][T10801] dump_stack_lvl+0xe8/0x140 [ 187.857407][T10801] dump_stack+0x15/0x1b [ 187.857423][T10801] should_fail_ex+0x265/0x280 [ 187.857459][T10801] should_fail+0xb/0x20 [ 187.857546][T10801] should_fail_usercopy+0x1a/0x20 [ 187.857623][T10801] _copy_to_user+0x20/0xa0 [ 187.857643][T10801] simple_read_from_buffer+0xb5/0x130 [ 187.857714][T10801] proc_fail_nth_read+0x100/0x140 [ 187.857754][T10801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.857794][T10801] vfs_read+0x1a0/0x6f0 [ 187.857865][T10801] ? __rcu_read_unlock+0x4f/0x70 [ 187.857891][T10801] ? __fget_files+0x184/0x1c0 [ 187.857920][T10801] ksys_read+0xda/0x1a0 [ 187.858018][T10801] __x64_sys_read+0x40/0x50 [ 187.858049][T10801] x64_sys_call+0x2d77/0x2fb0 [ 187.858152][T10801] do_syscall_64+0xd2/0x200 [ 187.858169][T10801] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.858201][T10801] ? clear_bhb_loop+0x40/0x90 [ 187.858221][T10801] ? clear_bhb_loop+0x40/0x90 [ 187.858306][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.858330][T10801] RIP: 0033:0x7fe6a45fd33c [ 187.858344][T10801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.858364][T10801] RSP: 002b:00007fe6a2c67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.858387][T10801] RAX: ffffffffffffffda RBX: 00007fe6a4825fa0 RCX: 00007fe6a45fd33c [ 187.858459][T10801] RDX: 000000000000000f RSI: 00007fe6a2c670a0 RDI: 0000000000000004 [ 187.858471][T10801] RBP: 00007fe6a2c67090 R08: 0000000000000000 R09: 0000000000000000 [ 187.858482][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.858504][T10801] R13: 0000000000000000 R14: 00007fe6a4825fa0 R15: 00007fff67470968 [ 187.858526][T10801] [ 188.134974][T10805] FAULT_INJECTION: forcing a failure. [ 188.134974][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.148101][T10805] CPU: 0 UID: 0 PID: 10805 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 188.148141][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.148154][T10805] Call Trace: [ 188.148160][T10805] [ 188.148168][T10805] __dump_stack+0x1d/0x30 [ 188.148187][T10805] dump_stack_lvl+0xe8/0x140 [ 188.148206][T10805] dump_stack+0x15/0x1b [ 188.148299][T10805] should_fail_ex+0x265/0x280 [ 188.148330][T10805] should_fail+0xb/0x20 [ 188.148363][T10805] should_fail_usercopy+0x1a/0x20 [ 188.148433][T10805] _copy_from_user+0x1c/0xb0 [ 188.148454][T10805] ___sys_sendmsg+0xc1/0x1d0 [ 188.148511][T10805] __x64_sys_sendmsg+0xd4/0x160 [ 188.148557][T10805] x64_sys_call+0x2999/0x2fb0 [ 188.148650][T10805] do_syscall_64+0xd2/0x200 [ 188.148670][T10805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.148702][T10805] ? clear_bhb_loop+0x40/0x90 [ 188.148818][T10805] ? clear_bhb_loop+0x40/0x90 [ 188.148916][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.148943][T10805] RIP: 0033:0x7f3a5554e929 [ 188.148959][T10805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.148981][T10805] RSP: 002b:00007f3a53bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.149033][T10805] RAX: ffffffffffffffda RBX: 00007f3a55775fa0 RCX: 00007f3a5554e929 [ 188.149049][T10805] RDX: 0000000020000098 RSI: 0000200000001980 RDI: 0000000000000004 [ 188.149065][T10805] RBP: 00007f3a53bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.149132][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.149144][T10805] R13: 0000000000000000 R14: 00007f3a55775fa0 R15: 00007fffacd68118 [ 188.149162][T10805] [ 188.457381][T10816] loop1: detected capacity change from 0 to 764 [ 188.476171][T10811] loop4: detected capacity change from 0 to 512 [ 188.483281][T10816] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 188.492808][T10811] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 188.609785][T10829] __nla_validate_parse: 2 callbacks suppressed [ 188.609806][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 188.625140][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 188.847815][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 188.863149][T10829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.872089][T10829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.880920][T10829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.889746][T10829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.045310][T10833] loop2: detected capacity change from 0 to 8192 [ 189.104888][T10833] loop2: p1 p3 p4 [ 189.108952][T10833] loop2: p1 size 8390912 extends beyond EOD, truncated [ 189.128689][T10833] loop2: p3 size 589824 extends beyond EOD, truncated [ 189.147551][T10844] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2785'. [ 189.309956][T10849] loop1: detected capacity change from 0 to 128 [ 189.427969][T10856] FAULT_INJECTION: forcing a failure. [ 189.427969][T10856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.441356][T10856] CPU: 0 UID: 0 PID: 10856 Comm: syz.3.2790 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 189.441394][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.441432][T10856] Call Trace: [ 189.441440][T10856] [ 189.441449][T10856] __dump_stack+0x1d/0x30 [ 189.441476][T10856] dump_stack_lvl+0xe8/0x140 [ 189.441513][T10856] dump_stack+0x15/0x1b [ 189.441534][T10856] should_fail_ex+0x265/0x280 [ 189.441573][T10856] should_fail_alloc_page+0xf2/0x100 [ 189.441650][T10856] __alloc_frozen_pages_noprof+0xff/0x360 [ 189.441697][T10856] alloc_pages_mpol+0xb3/0x250 [ 189.441754][T10856] vma_alloc_folio_noprof+0x1aa/0x300 [ 189.441796][T10856] do_wp_page+0x673/0x2400 [ 189.441879][T10856] ? __rcu_read_lock+0x37/0x50 [ 189.441910][T10856] handle_mm_fault+0x77d/0x2be0 [ 189.441939][T10856] ? mas_walk+0xf2/0x120 [ 189.441984][T10856] do_user_addr_fault+0x636/0x1090 [ 189.442073][T10856] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 189.442181][T10856] exc_page_fault+0x62/0xa0 [ 189.442217][T10856] asm_exc_page_fault+0x26/0x30 [ 189.442251][T10856] RIP: 0033:0x7f9e70a80d50 [ 189.442269][T10856] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 189.442308][T10856] RSP: 002b:00007f9e6f2264a0 EFLAGS: 00010202 [ 189.442328][T10856] RAX: 0000000000003005 RBX: 00007f9e6f226540 RCX: 0000000000000101 [ 189.442344][T10856] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007f9e6f2265e0 [ 189.442364][T10856] RBP: 0000000000000102 R08: 00007f9e66e07000 R09: 0000000000000008 [ 189.442379][T10856] R10: 0000200000000602 R11: 00000000000004f0 R12: 0000000000000601 [ 189.442393][T10856] R13: 00007f9e70c5c200 R14: 0000000000000015 R15: 00007f9e6f2265e0 [ 189.442417][T10856] [ 189.442428][T10856] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 189.462977][T10849] syz.1.2787: attempt to access beyond end of device [ 189.462977][T10849] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 189.473627][T10856] loop3: detected capacity change from 0 to 512 [ 189.476688][T10849] buffer_io_error: 6 callbacks suppressed [ 189.476737][T10849] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 189.483416][T10849] syz.1.2787: attempt to access beyond end of device [ 189.483416][T10849] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 189.495511][T10856] EXT4-fs (loop3): too many log groups per flexible block group [ 189.496591][T10849] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 189.501573][T10856] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 189.507787][T10849] syz.1.2787: attempt to access beyond end of device [ 189.507787][T10849] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 189.511666][T10856] EXT4-fs (loop3): mount failed [ 189.516129][T10849] Buffer I/O error on dev loop1, logical block 139, lost async page write [ 189.632997][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.642189][T10849] syz.1.2787: attempt to access beyond end of device [ 189.642189][T10849] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 189.674714][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.683017][T10849] Buffer I/O error on dev loop1, logical block 140, lost async page write [ 189.746340][T10849] syz.1.2787: attempt to access beyond end of device [ 189.746340][T10849] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 189.754292][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.762381][T10849] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 189.770239][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.783615][T10849] syz.1.2787: attempt to access beyond end of device [ 189.783615][T10849] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 189.790960][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.790989][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791015][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791041][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791136][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791161][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791186][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.791299][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.827231][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.829326][T10849] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 189.835907][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.874907][T10849] syz.1.2787: attempt to access beyond end of device [ 189.874907][T10849] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 189.880625][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.888771][T10849] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 189.896524][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941305][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941338][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941364][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941387][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941408][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941496][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941517][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941543][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941565][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941604][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 189.941857][T10849] syz.1.2787: attempt to access beyond end of device [ 189.941857][T10849] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 189.941968][T10849] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 189.941993][T10849] syz.1.2787: attempt to access beyond end of device [ 189.941993][T10849] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 189.942014][T10849] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 189.942036][T10849] syz.1.2787: attempt to access beyond end of device [ 189.942036][T10849] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 189.942063][T10849] Buffer I/O error on dev loop1, logical block 148, lost async page write [ 189.948302][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v8.00 Device [syz1] on syz0 [ 190.142282][T10883] FAULT_INJECTION: forcing a failure. [ 190.142282][T10883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.156108][T10883] CPU: 1 UID: 0 PID: 10883 Comm: syz.3.2799 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 190.156209][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.156224][T10883] Call Trace: [ 190.156232][T10883] [ 190.156242][T10883] __dump_stack+0x1d/0x30 [ 190.156301][T10883] dump_stack_lvl+0xe8/0x140 [ 190.156340][T10883] dump_stack+0x15/0x1b [ 190.156356][T10883] should_fail_ex+0x265/0x280 [ 190.156475][T10883] should_fail+0xb/0x20 [ 190.156506][T10883] should_fail_usercopy+0x1a/0x20 [ 190.156562][T10883] _copy_from_user+0x1c/0xb0 [ 190.156589][T10883] ___sys_sendmsg+0xc1/0x1d0 [ 190.156647][T10883] __x64_sys_sendmsg+0xd4/0x160 [ 190.156685][T10883] x64_sys_call+0x2999/0x2fb0 [ 190.156788][T10883] do_syscall_64+0xd2/0x200 [ 190.156810][T10883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.156901][T10883] ? clear_bhb_loop+0x40/0x90 [ 190.156925][T10883] ? clear_bhb_loop+0x40/0x90 [ 190.156947][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.156976][T10883] RIP: 0033:0x7f9e70bbe929 [ 190.156995][T10883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.157020][T10883] RSP: 002b:00007f9e6f227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.157038][T10883] RAX: ffffffffffffffda RBX: 00007f9e70de5fa0 RCX: 00007f9e70bbe929 [ 190.157051][T10883] RDX: 0000000000040004 RSI: 0000200000000240 RDI: 0000000000000007 [ 190.157102][T10883] RBP: 00007f9e6f227090 R08: 0000000000000000 R09: 0000000000000000 [ 190.157117][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.157135][T10883] R13: 0000000000000000 R14: 00007f9e70de5fa0 R15: 00007fffc76d4568 [ 190.157206][T10883] [ 190.399939][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 190.399959][ T29] audit: type=1400 audit(1751730240.142:6582): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 190.449252][T10895] FAULT_INJECTION: forcing a failure. [ 190.449252][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 190.462080][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.1.2806 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 190.462164][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.462179][T10895] Call Trace: [ 190.462186][T10895] [ 190.462217][T10895] __dump_stack+0x1d/0x30 [ 190.462243][T10895] dump_stack_lvl+0xe8/0x140 [ 190.462266][T10895] dump_stack+0x15/0x1b [ 190.462286][T10895] should_fail_ex+0x265/0x280 [ 190.462353][T10895] should_failslab+0x8c/0xb0 [ 190.462381][T10895] kmem_cache_alloc_noprof+0x50/0x310 [ 190.462413][T10895] ? fcntl_setlease+0x82/0x300 [ 190.462450][T10895] fcntl_setlease+0x82/0x300 [ 190.462484][T10895] ? __rcu_read_unlock+0x4f/0x70 [ 190.462539][T10895] do_fcntl+0x524/0xdf0 [ 190.462569][T10895] ? selinux_file_fcntl+0x1b4/0x1e0 [ 190.462601][T10895] __se_sys_fcntl+0xb1/0x120 [ 190.462632][T10895] __x64_sys_fcntl+0x43/0x50 [ 190.462734][T10895] x64_sys_call+0x1f1d/0x2fb0 [ 190.462759][T10895] do_syscall_64+0xd2/0x200 [ 190.462781][T10895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.462833][T10895] ? clear_bhb_loop+0x40/0x90 [ 190.462858][T10895] ? clear_bhb_loop+0x40/0x90 [ 190.462884][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.463001][T10895] RIP: 0033:0x7f3a5554e929 [ 190.463090][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.463113][T10895] RSP: 002b:00007f3a53bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 190.463136][T10895] RAX: ffffffffffffffda RBX: 00007f3a55775fa0 RCX: 00007f3a5554e929 [ 190.463151][T10895] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 190.463166][T10895] RBP: 00007f3a53bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.463180][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.463195][T10895] R13: 0000000000000000 R14: 00007f3a55775fa0 R15: 00007fffacd68118 [ 190.463263][T10895] [ 190.707669][T10897] netlink: 'syz.1.2807': attribute type 13 has an invalid length. [ 190.715743][T10893] loop4: detected capacity change from 0 to 8192 [ 190.722897][T10897] gretap0: refused to change device tx_queue_len [ 190.729369][T10897] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.871477][ T29] audit: type=1400 audit(1751730240.622:6583): avc: denied { ioctl } for pid=10903 comm="syz.1.2810" path="socket:[28462]" dev="sockfs" ino=28462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.904847][T10905] loop1: detected capacity change from 0 to 512 [ 190.914181][T10905] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.966774][ T29] audit: type=1326 audit(1751730240.722:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 190.990434][ T29] audit: type=1326 audit(1751730240.722:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 191.015640][ T29] audit: type=1326 audit(1751730240.772:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 191.039107][ T29] audit: type=1326 audit(1751730240.772:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 191.062715][ T29] audit: type=1326 audit(1751730240.772:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 191.083875][T10905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2810: bg 0: block 248: padding at end of block bitmap is not set [ 191.086322][ T29] audit: type=1326 audit(1751730240.772:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28839ae929 code=0x7ffc0000 [ 191.203782][T10905] Quota error (device loop1): write_blk: dquota write failed [ 191.212022][T10905] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 191.222026][T10905] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2810: Failed to acquire dquot type 1 [ 191.285525][T10905] EXT4-fs (loop1): 1 truncate cleaned up [ 191.327146][T10905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.350900][T10905] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 191.379237][T10905] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 191.414816][T10927] random: crng reseeded on system resumption [ 191.421619][ T167] ================================================================== [ 191.429727][ T167] BUG: KCSAN: data-race in prepare_kernel_cred / prepare_kernel_cred [ 191.437829][ T167] [ 191.440172][ T167] write to 0xffffffff868610a0 of 4 bytes by task 59 on cpu 1: [ 191.447642][ T167] prepare_kernel_cred+0xf5/0x680 [ 191.452699][ T167] _request_firmware+0x446/0xbb0 [ 191.457676][ T167] __async_dev_cache_fw_image+0x66/0x160 [ 191.463348][ T167] async_run_entry_fn+0x4f/0x180 [ 191.468324][ T167] process_scheduled_works+0x4cb/0x9d0 [ 191.473819][ T167] worker_thread+0x582/0x770 [ 191.478447][ T167] kthread+0x489/0x510 [ 191.482544][ T167] ret_from_fork+0xda/0x150 [ 191.487070][ T167] ret_from_fork_asm+0x1a/0x30 [ 191.491878][ T167] [ 191.494218][ T167] read to 0xffffffff86860ff8 of 184 bytes by task 167 on cpu 0: [ 191.501877][ T167] prepare_kernel_cred+0x114/0x680 [ 191.507027][ T167] _request_firmware+0x446/0xbb0 [ 191.511991][ T167] __async_dev_cache_fw_image+0x66/0x160 [ 191.517659][ T167] async_run_entry_fn+0x4f/0x180 [ 191.522633][ T167] process_scheduled_works+0x4cb/0x9d0 [ 191.528141][ T167] worker_thread+0x582/0x770 [ 191.532764][ T167] kthread+0x489/0x510 [ 191.536857][ T167] ret_from_fork+0xda/0x150 [ 191.541389][ T167] ret_from_fork_asm+0x1a/0x30 [ 191.546194][ T167] [ 191.548528][ T167] Reported by Kernel Concurrency Sanitizer on: [ 191.554696][ T167] CPU: 0 UID: 0 PID: 167 Comm: kworker/u8:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 191.567222][ T167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.577302][ T167] Workqueue: async async_run_entry_fn [ 191.582726][ T167] ================================================================== [ 191.594003][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.