last executing test programs: 1.808680291s ago: executing program 1 (id=1055): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffca0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) r7 = epoll_create(0x5) close_range(r7, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r1, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff2, @loopback, 0xbb}, 0x1c) 1.806528171s ago: executing program 1 (id=1057): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(r3, 0x0, 0x20000000, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7) keyctl$restrict_keyring(0x1d, r7, &(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)='\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0x3) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x2, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xf, 0x0, 0x1, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.674923913s ago: executing program 4 (id=1062): r0 = syz_open_dev$vcsn(0x0, 0x1, 0x83000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x20040005, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.600571674s ago: executing program 4 (id=1064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50) (async) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r3, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x18, 0x2c, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r6, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.547022435s ago: executing program 3 (id=1066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000000a00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5f}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r6, 0x4, 0x40800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$eventfd(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff004) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18008000000000000000000000000000180100002000faffffffffffff1f20207b1af8ff00000000bfa10000000000000701495a0000f8ffffffb702000000000000b7030800deab44f4850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='btrfs_find_cluster\x00', r10, 0x0, 0x12e0}, 0x18) 1.454930026s ago: executing program 2 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.418259807s ago: executing program 3 (id=1070): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2004008, &(0x7f0000000200)={[{@errors_remount}, {}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'errors=remount-ro'}}, {@audit}, {@subj_user={'subj_user', 0x3d, 'trans=fd,'}}, {@measure}, {@fowner_lt}]}, 0x4, 0x512, &(0x7f0000000a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c00fe7e028e5da716e6ead796a6d8f26db1e54e5db8db065893999c50ffc7f6d083dbc4f4802a9edddad0bb776c824e2172c1d7048b90f38de0bd507f8779ea28e69f7a881086fd882461f4850887dba12fa200743e0e2bbd8deeb1ffab1d47d762795fb90fe65ecb8a64b8a92e47b7a8f28b0993fd54840cc2590e7061ac3d724637476777d37f4b21c6e4469c6da35150ff3feb1e193d2af9d5bed45b5097"]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x2100}, {r0, 0x2126}, {r1, 0x41c0}, {r0, 0x451}, {r0, 0x1028}, {0xffffffffffffffff, 0x1062}, {r1, 0x1000}, {r3, 0x80}], 0x8, &(0x7f00000000c0)={r4, r5+10000000}, &(0x7f0000000100)={[0x7]}, 0x8) geteuid() fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000040)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@getpolicy={0x148, 0x15, 0x8, 0x70bd2a, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, 0x4e21, 0x800, 0x4e20, 0x7b, 0xa, 0xa0, 0x50, 0x32, 0x0, r8}, 0x6e6bbf, 0x4}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0xae}, 0xa, @in=@rand_addr=0x64010101, 0x3507, 0x3, 0x2, 0x0, 0x2, 0x0, 0x7}, {{@in6=@remote, 0x4d3, 0x33}, 0x2, @in6=@private2, 0x3507, 0x3, 0x0, 0x5, 0x5, 0x4, 0x80000001}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x3, 0x2, 0x14, 0x2, 0x0, 0x1000}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7c76}, @mark={0xc, 0x15, {0x35075b, 0x5}}, @extra_flags={0x8, 0x18, 0x3}, @replay_thresh={0x8, 0xb, 0x7}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x4840) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {r8, r6}}, './file0\x00'}) setresuid(r8, 0xee00, r9) setsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) msgctl$IPC_SET(0x0, 0x1, 0x0) 1.417491946s ago: executing program 2 (id=1071): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 1.383589927s ago: executing program 4 (id=1072): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8ed", 0x4a}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="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", 0x156}], 0x3}, 0x88d4) 1.382845827s ago: executing program 2 (id=1073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = syz_io_uring_setup(0x4ea, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0xd070, 0x0, 0x0, 0x0) 1.380608887s ago: executing program 4 (id=1074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f800", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) 1.362219467s ago: executing program 4 (id=1075): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=ANY=[], 0xc4}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 1.256192829s ago: executing program 2 (id=1078): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usbip_server_init(0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x700) 926.192175ms ago: executing program 1 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) modify_ldt$write(0x1, &(0x7f0000000000)={0x806, 0x20001000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f000008d000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) ioctl$FITHAW(r2, 0xc0045878) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000340)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40050) modify_ldt$write2(0x11, &(0x7f0000000180)={0x10000, 0xffffffffffffffff, 0x400, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) accept4(r4, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000200)=0x80, 0x80000) pipe2(&(0x7f0000000440), 0x80080) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x1, 0x101, 0x0) 925.539355ms ago: executing program 0 (id=1091): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd18dc54380539784745369c5e0c80047bd4ebe944bf2cdb103866ec73a264c", 0xf0}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74e1b014", 0x48}, {&(0x7f0000000cc0)="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", 0x192}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000a00)="327c9c22be8088c1fa09d0c9daa9f276299cc47854d20d847cc1e9b8a85adbef57e00b13659f96129608de176bd23acac8c26797a5ceb8576985c9fe6f39111975687eb244af68b4f0f8669b9514d8f575738a761b10c84f533b89156601a692f386f42b2b7976d53365cfa0d5e6e6d680362d7f6b2456ff14d80ff2e859964fbeaa5891e41d241cf6ec13391ea73c56644c82d82729600e1857f923aa9bbe0623cdd37b87c8d18dd3c8f5765c33fb008e51e2f36605f59b04a82d955ecd79465a779ec869843f01ecf2faaeed7243", 0xcf}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f423e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6dfcdbde7", 0x6e}, {&(0x7f0000000980)="3c977216b675039a1d3cb992fe27ba25eb95bb5c4801fb54160ea8c5a2dda4a5874012f67276c6bafea3", 0x2a}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f0000000bc0)="299b", 0x2}, {&(0x7f0000000c00)="7b46e46eb2c6ae4d7dd8c492d688b3033c53c84cbe501602594847e03766de6e7b9bb07e843b7f0c1598b481b797bf9f77622efce832da2d9aa2774ea7d10089c47ac3dce46c1e7d5652d1c42ebf011fee3fa11cfa5a4e977234607e62597e80db88350adb9e389f5127e723129fc7f0", 0x70}, {&(0x7f00000010c0)="e3c4a0df7c3e06f46da0791a6be8b68550d4f836190a46f85c40ff", 0x1b}, {&(0x7f0000000080)="06c57e0e567fe507d1a94376dc1049c4ff5055d0265ead626f29151aa3875c6407339dbc73a5b61a4ba97cdc00478adb10c28b016c13e10feccd628077993690", 0x40}], 0x8}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 924.906555ms ago: executing program 1 (id=1092): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="000018ff7f0000500000001300"/22, @ANYBLOB="8799f05ea0afcbb648628ce02d9d2b906fa98543a309000000a99616a82a70cc246171f6a402053caafcc7f64e9f0ec2e17fe6bd510cc23a51ac6b57179312f1d45252190b22083d7332b9f55f961a5a0f189e29287ef01dd03dd78433deff37662b7d8acefc869bd8e2d669", @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000010000000000000003000600000400000200000000000000000000000000000002000100997900000000020d00000000030005000000000002000000ac1414000000000000000000"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000800) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x3000) syz_clone3(0x0, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) setreuid(0xee01, 0xee01) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000a40)='\x16`\t\xe2\xff!\xc4)R\x80S\x03\xd2\xd6H\xf3`#\x97sXDhq\xbd\a\x04\x1f\x10\x95\x8c\x96P\x03+\xcb7\a\xef\xa7-xS\x15I\xcc\xabhB\xe6\x96\x897\x9ePWK\x8c\xefY\x93\xce\x17LV\xfaHZ\xfa\x0fk\xfc\x99C\xb2\xb1\xf5x\xb4\x86C\xeb@\xbbO\x91\xb8\xc5\x89{V\xc6J\x9fg5W9\xac_\xdb\xdb9R\x8d\xed~y\xd4\x92P\x15\xd3\xeb\x81D\xc1p\"\xc9\xddH\xcb\xd0\x8d\x84\x05G\x8f\x0e\xe522P\x90;\xd8\xbb\xb8\xf6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85+\xd5\xba\xe6h\xf2\x86\xa9\xef\xdf}\b\xf8\xeb\x8e\x8aKm\x1cY:\x92\x18\xa69o\xa1\xc1\x81\x05\xc5g\x10\xc8\xece9\xf5\xf3O\xf6_xr\x0e\x1e\x05\xdbP\x82\xd3\xb0\xc5\xe9\x1aj\xe7\x1e\x99\xffC\x0f\xf0?\"\xed\x89\x85\xb3\xbc\xc1\x9a\x1c\x82|Q!\xe4\x9b\xfb\xc8\xe3t\x95\xe8\x84z\"e\x18\x1dq\xfdj[\xc6\xb4\xabK\x90\xc5\xaa\xda\xfc\xeb\x90\x1d\xe3\xe2\x04y\xc1\\,\x1e\xf1u\xca6\xe7\xd4\xcc\x86\xe7\x83~\xb4jrn\a\x96\x12\x9e3f<\x1a>?2\xd6{\xc1p\x00\x91P\x99&\x98\xa10\'k,i)\xf8m\xb9\x14t\xf1\x14R\x88\x97aMr\xe5o\xd2a \xab\xfd\xedZ \xac$\x020\x1d\x97\xad\xe5\x17\xe2\xd5\xe3B\xa4\xc6\xa2\xd7\x97\xf9\xf0\xf6\xa0=$\x1c\xa0\x0fi\xb7\x1e\xf1\xbaOb\xb0k\x9bQ,\xdf:\xc1h\xd5\xbf\xbaw\x99\xfd\x9eL\x86\xd5\xe9\fd\x91}=p}\xecWSE\xb4dy!\x82\xd1\xb6\xe6\v\x866M\xd8\xb3t\xdf\xa5u\xe3a\v\x95\xdd\xd8\xc1\xbbVsR\x18\xdb\x1de\x03\xf8!\xbf&\x1d') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000494000/0x2000)=nil, 0x2000) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) socket$inet(0x2, 0x1, 0x0) 912.092795ms ago: executing program 0 (id=1093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="050000000000fcdbdf", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 719.897258ms ago: executing program 0 (id=1094): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xe7, &(0x7f0000000340)=""/231, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x10) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 18) 633.87887ms ago: executing program 0 (id=1095): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) getpid() process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x80, 0x7800, 0x7fff, 0x7, {{0x5, 0x4, 0x3, 0x1e, 0x14, 0x64, 0x0, 0x92, 0x2f, 0x0, @empty, @rand_addr=0x64010101}}}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000001600)="d6d5bae4de746e8527819be7747fccbb0c1dead5f844b1d939284ca0a4c221b2249cc82c9346344b37edbc001ea728fb1bb7a4fa43b0395840a6783738e0c3d754583675ee7162b40ab1e178ccba797a19fbbbcef3a4580c1ea8af371125620a93af618c8cd55098c9e1b8dae3d9c8f0ab5bde29b13ef00acc74a2aaf8eaa7a208280fbd5b6ddd94e70f470a48fdd29015dcda39f0704e9c27454b8cae5651b8cf55", 0xa2, 0x20040845, &(0x7f00000001c0)={0xa, 0x2, 0x3fd, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) shutdown(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 633.22838ms ago: executing program 0 (id=1096): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0x10001, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file2\x00', 0x187843, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18c0c012e910a43d64db97000000000000001e0002000031590000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)={0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x401, [0x5, 0x4, 0x8, 0xffff, 0x7fff, 0x6]}}]}, 0x58) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3, 0x0, 0x20000000}, 0x18) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x5cb]}, 0x0, 0x8) ioctl$TCFLSH(r1, 0x540b, 0x0) getrusage(0x0, &(0x7f00000006c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r6, 0xfffffffffffffc87) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x3920e, r1, 0xfffffffe, 0x0, 0x2}) 609.58596ms ago: executing program 2 (id=1097): capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 558.632751ms ago: executing program 3 (id=1098): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 491.443422ms ago: executing program 0 (id=1099): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000400)=r4, 0x12) sendfile(r1, r0, 0x0, 0x100000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') statx(r6, 0x0, 0x1000, 0x10, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r8, 0x2007ffb) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendfile(r7, r8, 0x0, 0x1000000201005) unlinkat(r6, &(0x7f0000001880)='./file1\x00', 0x200) openat$ppp(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x6, 0x800, 0x141e87caefcf7592, 0xffffffffffffffff, 0x7967, '\x00', 0x0, r6, 0x5, 0x3, 0x3, 0x9, @void, @value, @value=r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x1, 0x0, r9, 0xfffffff8, '\x00', 0x0, r8, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") 490.552792ms ago: executing program 3 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) link(&(0x7f00000001c0)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) 487.995582ms ago: executing program 4 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000500010006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) unshare(0x68040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) ftruncate(r9, 0x10001) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") chdir(&(0x7f0000000240)='./file0\x00') 47.823119ms ago: executing program 3 (id=1102): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioperm(0x0, 0x8, 0x8000000000004) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) 46.83045ms ago: executing program 1 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) modify_ldt$write(0x1, &(0x7f0000000000)={0x806, 0x20001000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f000008d000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) ioctl$FITHAW(r2, 0xc0045878) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000340)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40050) modify_ldt$write2(0x11, &(0x7f0000000180)={0x10000, 0xffffffffffffffff, 0x400, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) accept4(r4, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000200)=0x80, 0x80000) pipe2(&(0x7f0000000440), 0x80080) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x1, 0x101, 0x0) 887.54µs ago: executing program 3 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="050000000000fcdbdf252e000000", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 356.35µs ago: executing program 2 (id=1105): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000400)="590e492b14c2f3c324e57354767fceae6cfe720ca00d7ef8c2724c451778d17fe0ae2e75605eff9ceebf212f644abff10a5c2bc5169ed7277cf525b87224377828bdd980019295f60a876340f924e5f576a672275ceedcc95c686ee3522236ee6949f004639dd13a969b07dc459a88db5e3899aeffb40ef899fa4b1ef131c6731e839fcfebb17c0bc415"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f38}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)='(', 0x1, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x4) keyctl$revoke(0x3, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req={0x100005, 0x0, 0xbe7, 0x8000002}, 0x10) 0s ago: executing program 1 (id=1106): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(0x0) r1 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0xaf0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0), 0xfb, 0x46b, &(0x7f0000000580)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1032, &(0x7f0000001480)={@link_local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1020, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x4e21, 0x880b, 0x100c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "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"}}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kernel console output (not intermixed with test programs): fffffda RBX: 00007fc60a845fa0 RCX: 00007fc60a61e929 [ 32.691625][ T3671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000f [ 32.691645][ T3671] RBP: 00007fc608c87090 R08: 0000000000000000 R09: 0000000000000000 [ 32.691652][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.691711][ T3671] R13: 0000000000000000 R14: 00007fc60a845fa0 R15: 00007ffd39a280c8 [ 32.691727][ T3671] [ 32.913181][ T3535] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 8) [ 32.928493][ T3535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 32.940917][ T3535] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.940917][ T3535] [ 32.959756][ T3679] loop2: detected capacity change from 0 to 1024 [ 32.991216][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.997245][ T3679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.060365][ T3686] FAULT_INJECTION: forcing a failure. [ 33.060365][ T3686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.073494][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: syz.3.42 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 33.073584][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.073595][ T3686] Call Trace: [ 33.073600][ T3686] [ 33.073606][ T3686] __dump_stack+0x1d/0x30 [ 33.073625][ T3686] dump_stack_lvl+0xe8/0x140 [ 33.073640][ T3686] dump_stack+0x15/0x1b [ 33.073709][ T3686] should_fail_ex+0x265/0x280 [ 33.073733][ T3686] should_fail+0xb/0x20 [ 33.073755][ T3686] should_fail_usercopy+0x1a/0x20 [ 33.073856][ T3686] _copy_to_user+0x20/0xa0 [ 33.073874][ T3686] simple_read_from_buffer+0xb5/0x130 [ 33.073906][ T3686] proc_fail_nth_read+0x100/0x140 [ 33.074011][ T3686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 33.074038][ T3686] vfs_read+0x19d/0x6f0 [ 33.074063][ T3686] ? __rcu_read_unlock+0x4f/0x70 [ 33.074080][ T3686] ? __fget_files+0x184/0x1c0 [ 33.074139][ T3686] ksys_read+0xda/0x1a0 [ 33.074165][ T3686] __x64_sys_read+0x40/0x50 [ 33.074205][ T3686] x64_sys_call+0x2d77/0x2fb0 [ 33.074221][ T3686] do_syscall_64+0xd2/0x200 [ 33.074236][ T3686] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.074256][ T3686] ? clear_bhb_loop+0x40/0x90 [ 33.074311][ T3686] ? clear_bhb_loop+0x40/0x90 [ 33.074329][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.074346][ T3686] RIP: 0033:0x7f47a4a4d33c [ 33.074362][ T3686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 33.074377][ T3686] RSP: 002b:00007f47a30b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.074392][ T3686] RAX: ffffffffffffffda RBX: 00007f47a4c75fa0 RCX: 00007f47a4a4d33c [ 33.074462][ T3686] RDX: 000000000000000f RSI: 00007f47a30b70a0 RDI: 0000000000000006 [ 33.074471][ T3686] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.074480][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.074489][ T3686] R13: 0000000000000000 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 33.074502][ T3686] [ 33.119009][ T3679] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.188339][ T3687] loop4: detected capacity change from 0 to 2048 [ 33.205905][ T3691] FAULT_INJECTION: forcing a failure. [ 33.205905][ T3691] name failslab, interval 1, probability 0, space 0, times 0 [ 33.302206][ T3698] loop3: detected capacity change from 0 to 512 [ 33.303587][ T3691] CPU: 0 UID: 0 PID: 3691 Comm: syz.1.46 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 33.303615][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.303627][ T3691] Call Trace: [ 33.303634][ T3691] [ 33.303642][ T3691] __dump_stack+0x1d/0x30 [ 33.303674][ T3691] dump_stack_lvl+0xe8/0x140 [ 33.303693][ T3691] dump_stack+0x15/0x1b [ 33.303707][ T3691] should_fail_ex+0x265/0x280 [ 33.303728][ T3691] should_failslab+0x8c/0xb0 [ 33.303747][ T3691] kmem_cache_alloc_node_noprof+0x57/0x320 [ 33.303782][ T3691] ? __alloc_skb+0x101/0x320 [ 33.303811][ T3691] __alloc_skb+0x101/0x320 [ 33.303844][ T3691] netlink_ack+0xfd/0x500 [ 33.303948][ T3691] netlink_rcv_skb+0x192/0x220 [ 33.304013][ T3691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 33.304040][ T3691] rtnetlink_rcv+0x1c/0x30 [ 33.304058][ T3691] netlink_unicast+0x59e/0x670 [ 33.304088][ T3691] netlink_sendmsg+0x58b/0x6b0 [ 33.304126][ T3691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.304145][ T3691] __sock_sendmsg+0x142/0x180 [ 33.304185][ T3691] ____sys_sendmsg+0x31e/0x4e0 [ 33.304218][ T3691] ___sys_sendmsg+0x17b/0x1d0 [ 33.304259][ T3691] __x64_sys_sendmsg+0xd4/0x160 [ 33.304372][ T3691] x64_sys_call+0x2999/0x2fb0 [ 33.304393][ T3691] do_syscall_64+0xd2/0x200 [ 33.304410][ T3691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.304435][ T3691] ? clear_bhb_loop+0x40/0x90 [ 33.304468][ T3691] ? clear_bhb_loop+0x40/0x90 [ 33.304489][ T3691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.304510][ T3691] RIP: 0033:0x7f351bb8e929 [ 33.304524][ T3691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.304541][ T3691] RSP: 002b:00007f351a1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.304617][ T3691] RAX: ffffffffffffffda RBX: 00007f351bdb5fa0 RCX: 00007f351bb8e929 [ 33.304629][ T3691] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004 [ 33.304641][ T3691] RBP: 00007f351a1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.304653][ T3691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.304665][ T3691] R13: 0000000000000000 R14: 00007f351bdb5fa0 R15: 00007ffee5332e48 [ 33.304707][ T3691] [ 33.345278][ T3690] loop0: detected capacity change from 0 to 512 [ 33.437769][ T3698] syz.3.48: attempt to access beyond end of device [ 33.437769][ T3698] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 33.463611][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.467487][ T3698] EXT4-fs (loop3): unable to read superblock [ 33.475153][ T3687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.501684][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.561621][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.568949][ T3690] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.580193][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.650161][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.659752][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.668552][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.730041][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.798572][ T3534] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 8) [ 33.820006][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 33.820018][ T29] audit: type=1400 audit(33.799:375): avc: denied { create } for pid=3722 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.832503][ T3414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3414 comm=kworker/0:4 [ 33.867294][ T3534] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 33.877946][ T3728] 9pnet: p9_errstr2errno: server reported unknown error [ 33.879608][ T3534] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.879608][ T3534] [ 33.901394][ T29] audit: type=1400 audit(33.879:376): avc: denied { create } for pid=3727 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 33.933724][ T29] audit: type=1400 audit(33.879:377): avc: denied { create } for pid=3717 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 33.934678][ T3733] loop0: detected capacity change from 0 to 512 [ 33.969285][ T3731] loop4: detected capacity change from 0 to 512 [ 33.976294][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.001921][ T3731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.032882][ T3743] loop2: detected capacity change from 0 to 1024 [ 34.039567][ T3743] EXT4-fs: Ignoring removed orlov option [ 34.062765][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.073974][ T3733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.092807][ T29] audit: type=1400 audit(34.069:378): avc: denied { setattr } for pid=3732 comm="syz.0.60" path="/15/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.164177][ T29] audit: type=1400 audit(34.089:379): avc: denied { tracepoint } for pid=3732 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.183366][ T29] audit: type=1326 audit(34.139:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe176558e7 code=0x7ffc0000 [ 34.206060][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 34.206073][ T3035] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 34.206086][ T3035] audit: backlog limit exceeded [ 34.206097][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 34.247049][ T3755] capability: warning: `syz.0.60' uses 32-bit capabilities (legacy support in use) [ 34.375749][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.731457][ T3762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=3762 comm=syz.4.65 [ 34.896100][ T3767] FAULT_INJECTION: forcing a failure. [ 34.896100][ T3767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.909368][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.3.66 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 34.909392][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.909404][ T3767] Call Trace: [ 34.909411][ T3767] [ 34.909419][ T3767] __dump_stack+0x1d/0x30 [ 34.909471][ T3767] dump_stack_lvl+0xe8/0x140 [ 34.909489][ T3767] dump_stack+0x15/0x1b [ 34.909503][ T3767] should_fail_ex+0x265/0x280 [ 34.909530][ T3767] should_fail_alloc_page+0xf2/0x100 [ 34.909606][ T3767] __alloc_frozen_pages_noprof+0xff/0x360 [ 34.909639][ T3767] alloc_pages_mpol+0xb3/0x250 [ 34.909669][ T3767] alloc_pages_noprof+0x90/0x130 [ 34.909763][ T3767] kimage_alloc_control_pages+0x2ec/0x7d0 [ 34.909795][ T3767] do_kexec_load+0x2c6/0x510 [ 34.909813][ T3767] __se_sys_kexec_load+0x134/0x160 [ 34.909896][ T3767] __x64_sys_kexec_load+0x55/0x70 [ 34.909913][ T3767] x64_sys_call+0xa36/0x2fb0 [ 34.909933][ T3767] do_syscall_64+0xd2/0x200 [ 34.909990][ T3767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.910011][ T3767] ? clear_bhb_loop+0x40/0x90 [ 34.910029][ T3767] ? clear_bhb_loop+0x40/0x90 [ 34.910062][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.910083][ T3767] RIP: 0033:0x7f47a4a4e929 [ 34.910133][ T3767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.910149][ T3767] RSP: 002b:00007f47a30b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 34.910168][ T3767] RAX: ffffffffffffffda RBX: 00007f47a4c75fa0 RCX: 00007f47a4a4e929 [ 34.910180][ T3767] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 34.910191][ T3767] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.910203][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.910215][ T3767] R13: 0000000000000001 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 34.910231][ T3767] [ 35.105540][ T3767] kexec: Could not allocate control_code_buffer [ 35.370904][ T3782] FAULT_INJECTION: forcing a failure. [ 35.370904][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 35.383911][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.3.71 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 35.383940][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.383952][ T3782] Call Trace: [ 35.383958][ T3782] [ 35.383984][ T3782] __dump_stack+0x1d/0x30 [ 35.384006][ T3782] dump_stack_lvl+0xe8/0x140 [ 35.384111][ T3782] dump_stack+0x15/0x1b [ 35.384128][ T3782] should_fail_ex+0x265/0x280 [ 35.384154][ T3782] ? clsact_init+0x38b/0x6c0 [ 35.384241][ T3782] should_failslab+0x8c/0xb0 [ 35.384264][ T3782] __kmalloc_cache_noprof+0x4c/0x320 [ 35.384350][ T3782] clsact_init+0x38b/0x6c0 [ 35.384411][ T3782] ? __pfx_clsact_init+0x10/0x10 [ 35.384435][ T3782] qdisc_create+0x591/0x9e0 [ 35.384503][ T3782] tc_modify_qdisc+0x9bd/0x1380 [ 35.384568][ T3782] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 35.384663][ T3782] rtnetlink_rcv_msg+0x65a/0x6d0 [ 35.384691][ T3782] netlink_rcv_skb+0x120/0x220 [ 35.384722][ T3782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.384814][ T3782] rtnetlink_rcv+0x1c/0x30 [ 35.384830][ T3782] netlink_unicast+0x59e/0x670 [ 35.384857][ T3782] netlink_sendmsg+0x58b/0x6b0 [ 35.384951][ T3782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.384969][ T3782] __sock_sendmsg+0x142/0x180 [ 35.384993][ T3782] ____sys_sendmsg+0x31e/0x4e0 [ 35.385021][ T3782] ___sys_sendmsg+0x17b/0x1d0 [ 35.385106][ T3782] __x64_sys_sendmsg+0xd4/0x160 [ 35.385195][ T3782] x64_sys_call+0x2999/0x2fb0 [ 35.385217][ T3782] do_syscall_64+0xd2/0x200 [ 35.385237][ T3782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.385341][ T3782] ? clear_bhb_loop+0x40/0x90 [ 35.385363][ T3782] ? clear_bhb_loop+0x40/0x90 [ 35.385419][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.385440][ T3782] RIP: 0033:0x7f47a4a4e929 [ 35.385456][ T3782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.385482][ T3782] RSP: 002b:00007f47a30b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.385540][ T3782] RAX: ffffffffffffffda RBX: 00007f47a4c75fa0 RCX: 00007f47a4a4e929 [ 35.385551][ T3782] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 35.385561][ T3782] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.385571][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.385582][ T3782] R13: 0000000000000000 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 35.385728][ T3782] [ 35.386123][ T3781] netlink: 'syz.2.70': attribute type 2 has an invalid length. [ 35.698064][ T3780] FAULT_INJECTION: forcing a failure. [ 35.698064][ T3780] name failslab, interval 1, probability 0, space 0, times 0 [ 35.713862][ T3780] CPU: 0 UID: 0 PID: 3780 Comm: syz.4.69 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 35.713897][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.713910][ T3780] Call Trace: [ 35.713918][ T3780] [ 35.713927][ T3780] __dump_stack+0x1d/0x30 [ 35.713945][ T3780] dump_stack_lvl+0xe8/0x140 [ 35.713963][ T3780] dump_stack+0x15/0x1b [ 35.713989][ T3780] should_fail_ex+0x265/0x280 [ 35.714015][ T3780] should_failslab+0x8c/0xb0 [ 35.714038][ T3780] kmem_cache_alloc_noprof+0x50/0x310 [ 35.714134][ T3780] ? skb_clone+0x151/0x1f0 [ 35.714150][ T3780] skb_clone+0x151/0x1f0 [ 35.714188][ T3780] __netlink_deliver_tap+0x2c9/0x500 [ 35.714259][ T3780] netlink_unicast+0x64c/0x670 [ 35.714291][ T3780] netlink_sendmsg+0x58b/0x6b0 [ 35.714313][ T3780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.714350][ T3780] __sock_sendmsg+0x142/0x180 [ 35.714373][ T3780] __sys_sendto+0x268/0x330 [ 35.714405][ T3780] __x64_sys_sendto+0x76/0x90 [ 35.714817][ T3780] x64_sys_call+0x2eb6/0x2fb0 [ 35.714873][ T3780] do_syscall_64+0xd2/0x200 [ 35.714894][ T3780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.714996][ T3780] ? clear_bhb_loop+0x40/0x90 [ 35.715045][ T3780] ? clear_bhb_loop+0x40/0x90 [ 35.715068][ T3780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.715152][ T3780] RIP: 0033:0x7fc60a61e929 [ 35.715169][ T3780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.715186][ T3780] RSP: 002b:00007fc608c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 35.715203][ T3780] RAX: ffffffffffffffda RBX: 00007fc60a845fa0 RCX: 00007fc60a61e929 [ 35.715252][ T3780] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000004 [ 35.715265][ T3780] RBP: 00007fc608c87090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 35.715278][ T3780] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 35.715291][ T3780] R13: 0000000000000000 R14: 00007fc60a845fa0 R15: 00007ffd39a280c8 [ 35.715310][ T3780] [ 35.715330][ T3780] netlink: 87 bytes leftover after parsing attributes in process `syz.4.69'. [ 35.903457][ T3781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 35.970147][ T36] IPVS: starting estimator thread 0... [ 36.085836][ T3788] IPVS: using max 2640 ests per chain, 132000 per kthread [ 36.095128][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.103352][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.112395][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.131631][ T3799] loop3: detected capacity change from 0 to 512 [ 36.145111][ T3799] EXT4-fs: Ignoring removed nobh option [ 36.152713][ T36] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 36.165243][ T3799] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.194605][ T3801] tipc: Started in network mode [ 36.200936][ T3801] tipc: Node identity 8, cluster identity 3 [ 36.208315][ T3801] tipc: Node number set to 8 [ 36.219747][ T3803] loop4: detected capacity change from 0 to 2048 [ 36.236961][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.77: corrupted inode contents [ 36.308030][ T3807] fido_id[3807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.333677][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.344054][ T3799] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.77: mark_inode_dirty error [ 36.361172][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.77: corrupted inode contents [ 36.375970][ T3799] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.77: mark_inode_dirty error [ 36.390413][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.410525][ T3799] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.77: Failed to acquire dquot type 0 [ 36.641896][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.77: corrupted inode contents [ 36.771303][ T3799] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.77: mark_inode_dirty error [ 36.823386][ T3820] loop2: detected capacity change from 0 to 128 [ 36.848440][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.77: corrupted inode contents [ 36.895730][ T3823] lo speed is unknown, defaulting to 1000 [ 36.905571][ T3799] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.77: mark_inode_dirty error [ 36.917640][ T3823] lo speed is unknown, defaulting to 1000 [ 36.929383][ T3823] lo speed is unknown, defaulting to 1000 [ 36.941215][ T3823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.949459][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.77: corrupted inode contents [ 36.974474][ T3826] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.80'. [ 36.980168][ T3823] lo speed is unknown, defaulting to 1000 [ 37.011973][ T3824] loop2: detected capacity change from 0 to 2048 [ 37.059996][ T3823] lo speed is unknown, defaulting to 1000 [ 37.061186][ T3799] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 37.068109][ T3823] lo speed is unknown, defaulting to 1000 [ 37.105949][ T3799] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.77: corrupted inode contents [ 37.131528][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.146820][ T3823] lo speed is unknown, defaulting to 1000 [ 37.161961][ T3823] lo speed is unknown, defaulting to 1000 [ 37.169973][ T3799] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.77: mark_inode_dirty error [ 37.209174][ T3799] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 37.232865][ T3799] EXT4-fs (loop3): 1 truncate cleaned up [ 37.247498][ T3799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.295573][ T3799] syz.3.77 (3799) used greatest stack depth: 9768 bytes left [ 37.315021][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.356048][ T3845] FAULT_INJECTION: forcing a failure. [ 37.356048][ T3845] name failslab, interval 1, probability 0, space 0, times 0 [ 37.371913][ T3845] CPU: 1 UID: 0 PID: 3845 Comm: syz.3.86 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 37.371939][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.371951][ T3845] Call Trace: [ 37.371958][ T3845] [ 37.371966][ T3845] __dump_stack+0x1d/0x30 [ 37.372091][ T3845] dump_stack_lvl+0xe8/0x140 [ 37.372110][ T3845] dump_stack+0x15/0x1b [ 37.372124][ T3845] should_fail_ex+0x265/0x280 [ 37.372172][ T3845] should_failslab+0x8c/0xb0 [ 37.372194][ T3845] kmem_cache_alloc_noprof+0x50/0x310 [ 37.372275][ T3845] ? security_file_alloc+0x32/0x100 [ 37.372499][ T3845] security_file_alloc+0x32/0x100 [ 37.372527][ T3845] init_file+0x5c/0x1d0 [ 37.372557][ T3845] alloc_empty_file+0x8b/0x200 [ 37.372657][ T3845] alloc_file_pseudo+0xc6/0x160 [ 37.372807][ T3845] __shmem_file_setup+0x1de/0x210 [ 37.372837][ T3845] shmem_file_setup+0x3b/0x50 [ 37.372894][ T3845] __se_sys_memfd_create+0x2c3/0x590 [ 37.372920][ T3845] __x64_sys_memfd_create+0x31/0x40 [ 37.372948][ T3845] x64_sys_call+0x122f/0x2fb0 [ 37.373043][ T3845] do_syscall_64+0xd2/0x200 [ 37.373064][ T3845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.373088][ T3845] ? clear_bhb_loop+0x40/0x90 [ 37.373158][ T3845] ? clear_bhb_loop+0x40/0x90 [ 37.373181][ T3845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.373203][ T3845] RIP: 0033:0x7f47a4a4e929 [ 37.373220][ T3845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.373238][ T3845] RSP: 002b:00007f47a30b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 37.373259][ T3845] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f47a4a4e929 [ 37.373344][ T3845] RDX: 00007f47a30b6ef0 RSI: 0000000000000000 RDI: 00007f47a4ad14cc [ 37.373354][ T3845] RBP: 0000200000000600 R08: 00007f47a30b6bb7 R09: 00007f47a30b6e40 [ 37.373364][ T3845] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 37.373375][ T3845] R13: 00007f47a30b6ef0 R14: 00007f47a30b6eb0 R15: 0000200000000440 [ 37.373390][ T3845] [ 37.691981][ T3850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.87'. [ 37.701803][ T3850] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 37.765847][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.833920][ T3858] netlink: 1 bytes leftover after parsing attributes in process `syz.1.89'. [ 37.889365][ T3865] loop3: detected capacity change from 0 to 256 [ 37.949274][ T3869] loop0: detected capacity change from 0 to 164 [ 37.958869][ T3869] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.968512][ T3869] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.980118][ T3869] rock: directory entry would overflow storage [ 37.986877][ T3869] rock: sig=0x4f50, size=4, remaining=3 [ 37.993001][ T3869] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.040059][ T3872] loop0: detected capacity change from 0 to 1024 [ 38.143238][ T3872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.223202][ T3872] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.96: Allocating blocks 497-513 which overlap fs metadata [ 38.503658][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.524550][ T3895] vti0: entered allmulticast mode [ 38.554831][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.587204][ T3898] loop3: detected capacity change from 0 to 512 [ 38.646733][ T3898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.669299][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.747137][ T3898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.858799][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 38.858813][ T29] audit: type=1326 audit(38.829:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 38.895120][ T29] audit: type=1400 audit(38.869:638): avc: denied { shutdown } for pid=3899 comm="syz.0.103" laddr=::1 lport=58174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.938010][ T3898] netlink: 'syz.3.102': attribute type 16 has an invalid length. [ 38.947291][ T3898] netlink: 'syz.3.102': attribute type 3 has an invalid length. [ 38.955130][ T3898] netlink: 63858 bytes leftover after parsing attributes in process `syz.3.102'. [ 38.967128][ T3905] FAULT_INJECTION: forcing a failure. [ 38.967128][ T3905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.981765][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: syz.0.104 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 38.981810][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.981822][ T3905] Call Trace: [ 38.981829][ T3905] [ 38.981837][ T3905] __dump_stack+0x1d/0x30 [ 38.981856][ T3905] dump_stack_lvl+0xe8/0x140 [ 38.981873][ T3905] dump_stack+0x15/0x1b [ 38.981887][ T3905] should_fail_ex+0x265/0x280 [ 38.981949][ T3905] should_fail+0xb/0x20 [ 38.981977][ T3905] should_fail_usercopy+0x1a/0x20 [ 38.982113][ T3905] _copy_from_user+0x1c/0xb0 [ 38.982135][ T3905] __sys_bpf+0x178/0x790 [ 38.982243][ T3905] __x64_sys_bpf+0x41/0x50 [ 38.982270][ T3905] x64_sys_call+0x2478/0x2fb0 [ 38.982289][ T3905] do_syscall_64+0xd2/0x200 [ 38.982311][ T3905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.982337][ T3905] ? clear_bhb_loop+0x40/0x90 [ 38.982424][ T3905] ? clear_bhb_loop+0x40/0x90 [ 38.982442][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.982463][ T3905] RIP: 0033:0x7fbe1765e929 [ 38.982494][ T3905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.982524][ T3905] RSP: 002b:00007fbe15cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.982541][ T3905] RAX: ffffffffffffffda RBX: 00007fbe17885fa0 RCX: 00007fbe1765e929 [ 38.982551][ T3905] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 000000000000000f [ 38.982562][ T3905] RBP: 00007fbe15cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.982573][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.982586][ T3905] R13: 0000000000000000 R14: 00007fbe17885fa0 R15: 00007fffc211a9f8 [ 38.982618][ T3905] [ 39.090795][ T29] audit: type=1400 audit(38.879:639): avc: denied { map } for pid=3892 comm="syz.3.102" path="socket:[6168]" dev="sockfs" ino=6168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.143346][ T3893] syz.4.99 (3893) used greatest stack depth: 9688 bytes left [ 39.147333][ T29] audit: type=1400 audit(38.879:640): avc: denied { read } for pid=3892 comm="syz.3.102" path="socket:[6168]" dev="sockfs" ino=6168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.192146][ T3895] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 39.194493][ T29] audit: type=1400 audit(38.899:641): avc: denied { setopt } for pid=3899 comm="syz.0.103" laddr=::1 lport=58174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.282258][ T29] audit: type=1326 audit(38.909:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 39.307176][ T29] audit: type=1326 audit(38.909:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 39.344636][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.405030][ T3912] FAULT_INJECTION: forcing a failure. [ 39.405030][ T3912] name failslab, interval 1, probability 0, space 0, times 0 [ 39.419226][ T3912] CPU: 1 UID: 0 PID: 3912 Comm: syz.0.107 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 39.419251][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.419288][ T3912] Call Trace: [ 39.419296][ T3912] [ 39.419304][ T3912] __dump_stack+0x1d/0x30 [ 39.419324][ T3912] dump_stack_lvl+0xe8/0x140 [ 39.419344][ T3912] dump_stack+0x15/0x1b [ 39.419368][ T3912] should_fail_ex+0x265/0x280 [ 39.419402][ T3912] should_failslab+0x8c/0xb0 [ 39.419426][ T3912] kmem_cache_alloc_noprof+0x50/0x310 [ 39.419450][ T3912] ? copy_mm+0xc6/0x370 [ 39.419527][ T3912] copy_mm+0xc6/0x370 [ 39.419547][ T3912] copy_process+0xcf1/0x1fe0 [ 39.419625][ T3912] kernel_clone+0x16c/0x5b0 [ 39.419651][ T3912] ? vfs_write+0x75e/0x8e0 [ 39.419697][ T3912] __x64_sys_clone+0xe6/0x120 [ 39.419726][ T3912] x64_sys_call+0x2c59/0x2fb0 [ 39.419749][ T3912] do_syscall_64+0xd2/0x200 [ 39.419770][ T3912] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.419820][ T3912] ? clear_bhb_loop+0x40/0x90 [ 39.419843][ T3912] ? clear_bhb_loop+0x40/0x90 [ 39.419905][ T3912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.419952][ T3912] RIP: 0033:0x7fbe1765e929 [ 39.419975][ T3912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.419993][ T3912] RSP: 002b:00007fbe15cc6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.420032][ T3912] RAX: ffffffffffffffda RBX: 00007fbe17885fa0 RCX: 00007fbe1765e929 [ 39.420044][ T3912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020083400 [ 39.420065][ T3912] RBP: 00007fbe15cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.420078][ T3912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 39.420091][ T3912] R13: 0000000000000000 R14: 00007fbe17885fa0 R15: 00007fffc211a9f8 [ 39.420109][ T3912] [ 39.432074][ T29] audit: type=1326 audit(39.169:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 39.513158][ T3915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.514868][ T29] audit: type=1326 audit(39.169:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47a4a4e963 code=0x7ffc0000 [ 39.526352][ T3915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.531037][ T29] audit: type=1326 audit(39.169:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47a4a4e963 code=0x7ffc0000 [ 39.641210][ T3915] loop0: detected capacity change from 0 to 164 [ 39.786887][ T3920] netlink: 96 bytes leftover after parsing attributes in process `syz.4.108'. [ 39.805170][ T3915] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.050842][ T3942] loop2: detected capacity change from 0 to 1024 [ 40.100506][ T3942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.121158][ T3942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.261787][ T3956] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 40.269754][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.412156][ T3966] FAULT_INJECTION: forcing a failure. [ 40.412156][ T3966] name failslab, interval 1, probability 0, space 0, times 0 [ 40.432461][ T3966] CPU: 1 UID: 0 PID: 3966 Comm: syz.0.119 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 40.432486][ T3966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.432497][ T3966] Call Trace: [ 40.432504][ T3966] [ 40.432512][ T3966] __dump_stack+0x1d/0x30 [ 40.432535][ T3966] dump_stack_lvl+0xe8/0x140 [ 40.432561][ T3966] dump_stack+0x15/0x1b [ 40.432575][ T3966] should_fail_ex+0x265/0x280 [ 40.432603][ T3966] should_failslab+0x8c/0xb0 [ 40.432628][ T3966] kmem_cache_alloc_noprof+0x50/0x310 [ 40.432735][ T3966] ? security_inode_alloc+0x37/0x100 [ 40.432761][ T3966] security_inode_alloc+0x37/0x100 [ 40.432841][ T3966] inode_init_always_gfp+0x4b7/0x500 [ 40.432872][ T3966] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 40.432901][ T3966] alloc_inode+0x58/0x170 [ 40.432999][ T3966] new_inode+0x1d/0xe0 [ 40.433018][ T3966] hugetlbfs_get_inode+0x7b/0x370 [ 40.433058][ T3966] hugetlb_file_setup+0x192/0x3d0 [ 40.433088][ T3966] ksys_mmap_pgoff+0x157/0x310 [ 40.433199][ T3966] x64_sys_call+0x1602/0x2fb0 [ 40.433221][ T3966] do_syscall_64+0xd2/0x200 [ 40.433239][ T3966] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.433275][ T3966] ? clear_bhb_loop+0x40/0x90 [ 40.433357][ T3966] ? clear_bhb_loop+0x40/0x90 [ 40.433376][ T3966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.433425][ T3966] RIP: 0033:0x7fbe1765e929 [ 40.433442][ T3966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.433459][ T3966] RSP: 002b:00007fbe15cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 40.433477][ T3966] RAX: ffffffffffffffda RBX: 00007fbe17885fa0 RCX: 00007fbe1765e929 [ 40.433491][ T3966] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 40.433504][ T3966] RBP: 00007fbe15cc7090 R08: ffffffffffffffff R09: 0000000000002000 [ 40.433517][ T3966] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000001 [ 40.433530][ T3966] R13: 0000000000000000 R14: 00007fbe17885fa0 R15: 00007fffc211a9f8 [ 40.433590][ T3966] [ 40.720213][ T3969] FAULT_INJECTION: forcing a failure. [ 40.720213][ T3969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.734408][ T3969] CPU: 0 UID: 0 PID: 3969 Comm: syz.3.120 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 40.734469][ T3969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.734480][ T3969] Call Trace: [ 40.734487][ T3969] [ 40.734494][ T3969] __dump_stack+0x1d/0x30 [ 40.734512][ T3969] dump_stack_lvl+0xe8/0x140 [ 40.734527][ T3969] dump_stack+0x15/0x1b [ 40.734624][ T3969] should_fail_ex+0x265/0x280 [ 40.734652][ T3969] should_fail_alloc_page+0xf2/0x100 [ 40.734674][ T3969] __alloc_frozen_pages_noprof+0xff/0x360 [ 40.734785][ T3969] alloc_pages_mpol+0xb3/0x250 [ 40.734823][ T3969] vma_alloc_folio_noprof+0x1aa/0x300 [ 40.734854][ T3969] handle_mm_fault+0xec2/0x2be0 [ 40.734920][ T3969] ? mas_walk+0xf2/0x120 [ 40.734950][ T3969] do_user_addr_fault+0x636/0x1090 [ 40.735040][ T3969] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 40.735070][ T3969] exc_page_fault+0x62/0xa0 [ 40.735095][ T3969] asm_exc_page_fault+0x26/0x30 [ 40.735116][ T3969] RIP: 0033:0x7f47a4910ca3 [ 40.735131][ T3969] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 40.735149][ T3969] RSP: 002b:00007f47a30b64a0 EFLAGS: 00010202 [ 40.735165][ T3969] RAX: 000000000000a000 RBX: 00007f47a30b6540 RCX: 00007f479ac97000 [ 40.735178][ T3969] RDX: 00007f47a30b66e0 RSI: 000000000000001a RDI: 00007f47a30b65e0 [ 40.735191][ T3969] RBP: 0000000000000054 R08: 0000000000000005 R09: 0000000000000004 [ 40.735260][ T3969] R10: 0000000000000008 R11: 00007f47a30b6540 R12: 0000000000000001 [ 40.735271][ T3969] R13: 00007f47a4aec200 R14: 0000000000000001 R15: 00007f47a30b65e0 [ 40.735322][ T3969] [ 40.735332][ T3969] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 40.836331][ T3971] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 41.021897][ T3971] netlink: 56 bytes leftover after parsing attributes in process `syz.2.121'. [ 41.253292][ T3969] loop3: detected capacity change from 0 to 164 [ 41.347736][ T3969] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.453696][ T3985] netlink: 'syz.1.127': attribute type 15 has an invalid length. [ 41.469345][ T3969] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.482439][ T3986] netlink: 9 bytes leftover after parsing attributes in process `syz.0.126'. [ 41.502445][ T3986] 0: renamed from hsr0 (while UP) [ 41.508756][ T3969] rock: directory entry would overflow storage [ 41.516532][ T3969] rock: sig=0x4f50, size=4, remaining=3 [ 41.523841][ T3969] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 41.533268][ T3986] 0: entered allmulticast mode [ 41.539355][ T3986] hsr_slave_0: entered allmulticast mode [ 41.546512][ T3986] hsr_slave_1: entered allmulticast mode [ 41.744432][ T3986] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 41.782931][ T3989] lo speed is unknown, defaulting to 1000 [ 42.176091][ T4004] 9pnet_fd: Insufficient options for proto=fd [ 42.244662][ T4006] loop0: detected capacity change from 0 to 2048 [ 42.302278][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.651580][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.700425][ T4022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'. [ 42.760762][ T4022] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.760762][ T4022] program syz.0.137 not setting count and/or reply_len properly [ 42.850602][ T4028] loop2: detected capacity change from 0 to 128 [ 42.868183][ T4032] netlink: 100 bytes leftover after parsing attributes in process `syz.0.140'. [ 42.882248][ T4030] loop4: detected capacity change from 0 to 512 [ 42.912438][ T4028] syz.2.138: attempt to access beyond end of device [ 42.912438][ T4028] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 42.967936][ T4030] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.139: casefold flag without casefold feature [ 42.983754][ T4028] syz.2.138: attempt to access beyond end of device [ 42.983754][ T4028] loop2: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 42.999409][ T4030] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 43.014222][ T4028] syz.2.138: attempt to access beyond end of device [ 43.014222][ T4028] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 43.037016][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.048561][ T4043] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.062508][ T4045] netlink: 80 bytes leftover after parsing attributes in process `syz.1.144'. [ 43.074321][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.081868][ T4028] syz.2.138: attempt to access beyond end of device [ 43.081868][ T4028] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 43.106245][ T4028] syz.2.138: attempt to access beyond end of device [ 43.106245][ T4028] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 43.122644][ T4028] syz.2.138: attempt to access beyond end of device [ 43.122644][ T4028] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 43.139958][ T4028] syz.2.138: attempt to access beyond end of device [ 43.139958][ T4028] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 43.156468][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 43.166688][ T4028] syz.2.138: attempt to access beyond end of device [ 43.166688][ T4028] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 43.209913][ T4028] syz.2.138: attempt to access beyond end of device [ 43.209913][ T4028] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 43.257996][ T4053] loop3: detected capacity change from 0 to 128 [ 43.281414][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.285480][ T4053] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.527946][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.567232][ T4064] netlink: 92 bytes leftover after parsing attributes in process `syz.3.151'. [ 43.577687][ T4064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 43.642814][ T4071] loop3: detected capacity change from 0 to 512 [ 43.653956][ T4071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.662240][ T4071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.672494][ T4071] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 43.715558][ T4054] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 43.722326][ T4054] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 43.731058][ T4054] vhci_hcd vhci_hcd.0: Device attached [ 43.798662][ T4076] loop3: detected capacity change from 0 to 512 [ 43.838745][ T4079] netlink: 124 bytes leftover after parsing attributes in process `syz.1.155'. [ 43.855303][ T4074] vhci_hcd: connection closed [ 43.856114][ T3563] vhci_hcd: stop threads [ 43.866236][ T3563] vhci_hcd: release socket [ 43.871891][ T3563] vhci_hcd: disconnect device [ 43.930902][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 43.930915][ T29] audit: type=1400 audit(43.909:910): avc: denied { remount } for pid=4084 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.141073][ T4090] loop3: detected capacity change from 0 to 1024 [ 44.149368][ T4090] ext4: Unknown parameter 'uid<00000000000000000000' [ 44.159679][ T4090] FAULT_INJECTION: forcing a failure. [ 44.159679][ T4090] name failslab, interval 1, probability 0, space 0, times 0 [ 44.173865][ T4090] CPU: 0 UID: 0 PID: 4090 Comm: syz.3.159 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 44.173959][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.173972][ T4090] Call Trace: [ 44.173987][ T4090] [ 44.173995][ T4090] __dump_stack+0x1d/0x30 [ 44.174076][ T4090] dump_stack_lvl+0xe8/0x140 [ 44.174092][ T4090] dump_stack+0x15/0x1b [ 44.174110][ T4090] should_fail_ex+0x265/0x280 [ 44.174229][ T4090] should_failslab+0x8c/0xb0 [ 44.174248][ T4090] kmem_cache_alloc_noprof+0x50/0x310 [ 44.174273][ T4090] ? getname_kernel+0x3c/0x1f0 [ 44.174297][ T4090] getname_kernel+0x3c/0x1f0 [ 44.174357][ T4090] kern_path+0x23/0x130 [ 44.174382][ T4090] lookup_bdev+0x66/0x150 [ 44.174404][ T4090] __se_sys_quotactl+0x1b7/0x670 [ 44.174457][ T4090] __x64_sys_quotactl+0x55/0x70 [ 44.174484][ T4090] x64_sys_call+0x2886/0x2fb0 [ 44.174506][ T4090] do_syscall_64+0xd2/0x200 [ 44.174559][ T4090] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.174585][ T4090] ? clear_bhb_loop+0x40/0x90 [ 44.174674][ T4090] ? clear_bhb_loop+0x40/0x90 [ 44.174693][ T4090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.174711][ T4090] RIP: 0033:0x7f47a4a4e929 [ 44.174724][ T4090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.174740][ T4090] RSP: 002b:00007f47a30b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 44.174837][ T4090] RAX: ffffffffffffffda RBX: 00007f47a4c75fa0 RCX: 00007f47a4a4e929 [ 44.174850][ T4090] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffff80000202 [ 44.174863][ T4090] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.174895][ T4090] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 44.174908][ T4090] R13: 0000000000000000 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 44.174927][ T4090] [ 44.702129][ T29] audit: type=1400 audit(44.669:911): avc: denied { read write } for pid=4091 comm="syz.0.160" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 44.728488][ T29] audit: type=1400 audit(44.669:912): avc: denied { open } for pid=4091 comm="syz.0.160" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 44.753051][ T29] audit: type=1400 audit(44.669:913): avc: denied { read } for pid=4091 comm="syz.0.160" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.775294][ T29] audit: type=1400 audit(44.669:914): avc: denied { open } for pid=4091 comm="syz.0.160" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.798558][ T29] audit: type=1400 audit(44.669:915): avc: denied { ioctl } for pid=4091 comm="syz.0.160" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.835363][ T29] audit: type=1400 audit(44.809:916): avc: denied { read } for pid=4099 comm="syz.2.162" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.859643][ T29] audit: type=1400 audit(44.809:917): avc: denied { open } for pid=4099 comm="syz.2.162" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.883692][ T29] audit: type=1400 audit(44.809:918): avc: denied { open } for pid=4099 comm="syz.2.162" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.950639][ T29] audit: type=1326 audit(44.919:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.1.163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f351bb858e7 code=0x0 [ 45.102480][ T4119] loop0: detected capacity change from 0 to 128 [ 45.120252][ T4119] vfat: Unknown parameter '' [ 45.121599][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 45.127032][ T4119] loop0: detected capacity change from 0 to 128 [ 45.135296][ T4120] bridge_slave_1: left allmulticast mode [ 45.149384][ T4120] bridge_slave_1: left promiscuous mode [ 45.155959][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.170753][ T4119] vfat: Unknown parameter '' [ 45.177561][ T4120] bridge_slave_0: left allmulticast mode [ 45.184385][ T4120] bridge_slave_0: left promiscuous mode [ 45.191390][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.206408][ T4119] loop0: detected capacity change from 0 to 128 [ 45.232128][ T4119] vfat: Unknown parameter '' [ 45.252731][ T4123] loop2: detected capacity change from 0 to 1024 [ 45.261676][ T4123] ext4: Unknown parameter 'uid<00000000000000000000' [ 45.283467][ T4119] loop0: detected capacity change from 0 to 128 [ 45.291223][ T4119] vfat: Unknown parameter '' [ 45.312429][ T4119] loop0: detected capacity change from 0 to 128 [ 45.321057][ T4119] vfat: Unknown parameter '' [ 45.337990][ T4119] loop0: detected capacity change from 0 to 128 [ 45.358454][ T4119] vfat: Unknown parameter '' [ 45.369582][ T4119] loop0: detected capacity change from 0 to 128 [ 45.381529][ T4119] vfat: Unknown parameter '' [ 45.395908][ T4119] loop0: detected capacity change from 0 to 128 [ 45.409266][ T4119] vfat: Unknown parameter '' [ 45.453332][ T4119] loop0: detected capacity change from 0 to 128 [ 45.458519][ T4132] loop4: detected capacity change from 0 to 2048 [ 45.461904][ T4130] lo speed is unknown, defaulting to 1000 [ 45.473462][ T4132] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.486202][ T4119] vfat: Unknown parameter '' [ 45.508524][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.533507][ T4119] loop0: detected capacity change from 0 to 128 [ 45.544178][ T4119] vfat: Unknown parameter '' [ 45.556678][ T4119] loop0: detected capacity change from 0 to 128 [ 45.571239][ T4119] vfat: Unknown parameter '' [ 45.591359][ T4137] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.173: bg 0: block 234: padding at end of block bitmap is not set [ 45.608500][ T4137] EXT4-fs (loop4): Remounting filesystem read-only [ 45.614733][ T4119] loop0: detected capacity change from 0 to 128 [ 45.625578][ T4119] vfat: Unknown parameter '' [ 45.645720][ T4119] loop0: detected capacity change from 0 to 128 [ 45.654947][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.666420][ T4119] vfat: Unknown parameter '' [ 45.704805][ T4119] loop0: detected capacity change from 0 to 128 [ 45.714470][ T4119] vfat: Unknown parameter '' [ 45.734257][ T4119] loop0: detected capacity change from 0 to 128 [ 45.741195][ T4140] loop4: detected capacity change from 0 to 164 [ 45.753714][ T4119] vfat: Unknown parameter '' [ 45.757803][ T4140] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.796315][ T4119] loop0: detected capacity change from 0 to 128 [ 45.807916][ T4143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=4143 comm=syz.1.175 [ 45.829018][ T4119] vfat: Unknown parameter '' [ 45.846222][ T4119] loop0: detected capacity change from 0 to 128 [ 45.874694][ T4119] vfat: Unknown parameter '' [ 45.891450][ T4119] loop0: detected capacity change from 0 to 128 [ 45.897925][ T4119] vfat: Unknown parameter '' [ 45.947178][ T4140] Unknown options in mask 5 [ 45.959083][ T4140] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.968227][ T4140] rock: directory entry would overflow storage [ 45.969668][ T4119] loop0: detected capacity change from 0 to 128 [ 45.975001][ T4140] rock: sig=0x4f50, size=4, remaining=3 [ 45.988888][ T4140] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 46.038492][ T4119] vfat: Unknown parameter '' [ 46.048337][ T4149] lo speed is unknown, defaulting to 1000 [ 46.149897][ T4118] loop0: detected capacity change from 0 to 512 [ 46.258584][ T4173] FAULT_INJECTION: forcing a failure. [ 46.258584][ T4173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.273190][ T4173] CPU: 1 UID: 0 PID: 4173 Comm: syz.3.185 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 46.273258][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.273271][ T4173] Call Trace: [ 46.273278][ T4173] [ 46.273339][ T4173] __dump_stack+0x1d/0x30 [ 46.273360][ T4173] dump_stack_lvl+0xe8/0x140 [ 46.273415][ T4173] dump_stack+0x15/0x1b [ 46.273430][ T4173] should_fail_ex+0x265/0x280 [ 46.273473][ T4173] should_fail+0xb/0x20 [ 46.273562][ T4173] should_fail_usercopy+0x1a/0x20 [ 46.273592][ T4173] copy_folio_from_iter_atomic+0x278/0x1170 [ 46.273614][ T4173] ? shmem_write_begin+0xa8/0x190 [ 46.273657][ T4173] ? shmem_write_begin+0xe1/0x190 [ 46.273683][ T4173] generic_perform_write+0x2c2/0x490 [ 46.273705][ T4173] shmem_file_write_iter+0xc5/0xf0 [ 46.273784][ T4173] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 46.273827][ T4173] vfs_write+0x49d/0x8e0 [ 46.273858][ T4173] ksys_write+0xda/0x1a0 [ 46.273888][ T4173] __x64_sys_write+0x40/0x50 [ 46.273945][ T4173] x64_sys_call+0x2cdd/0x2fb0 [ 46.273966][ T4173] do_syscall_64+0xd2/0x200 [ 46.273985][ T4173] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.274046][ T4173] ? clear_bhb_loop+0x40/0x90 [ 46.274064][ T4173] ? clear_bhb_loop+0x40/0x90 [ 46.274082][ T4173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.274101][ T4173] RIP: 0033:0x7f47a4a4d3df [ 46.274117][ T4173] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 46.274132][ T4173] RSP: 002b:00007f47a30b6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 46.274150][ T4173] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f47a4a4d3df [ 46.274162][ T4173] RDX: 0000000000040000 RSI: 00007f479ac97000 RDI: 0000000000000007 [ 46.274238][ T4173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000445 [ 46.274250][ T4173] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000007 [ 46.274261][ T4173] R13: 00007f47a30b6ef0 R14: 00007f47a30b6eb0 R15: 00007f479ac97000 [ 46.274279][ T4173] [ 46.516768][ T4173] loop3: detected capacity change from 0 to 512 [ 46.530656][ T4173] EXT4-fs: Ignoring removed oldalloc option [ 46.548782][ T4173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.185: Parent and EA inode have the same ino 15 [ 46.604793][ T4173] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.645356][ T4173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.185: Parent and EA inode have the same ino 15 [ 46.646039][ T4183] lo speed is unknown, defaulting to 1000 [ 46.733108][ T4173] EXT4-fs (loop3): 1 orphan inode deleted [ 46.750470][ T4188] __nla_validate_parse: 1 callbacks suppressed [ 46.750486][ T4188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 46.755077][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.781600][ T4187] loop2: detected capacity change from 0 to 512 [ 46.830918][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.852932][ T4187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.892445][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.917764][ T4194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.190'. [ 46.986225][ T4196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 47.019649][ T4201] FAULT_INJECTION: forcing a failure. [ 47.019649][ T4201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.032873][ T4201] CPU: 1 UID: 0 PID: 4201 Comm: syz.3.194 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 47.032898][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.032908][ T4201] Call Trace: [ 47.032914][ T4201] [ 47.032921][ T4201] __dump_stack+0x1d/0x30 [ 47.032940][ T4201] dump_stack_lvl+0xe8/0x140 [ 47.033045][ T4201] dump_stack+0x15/0x1b [ 47.033123][ T4201] should_fail_ex+0x265/0x280 [ 47.033151][ T4201] should_fail+0xb/0x20 [ 47.033211][ T4201] should_fail_usercopy+0x1a/0x20 [ 47.033269][ T4201] _copy_to_user+0x20/0xa0 [ 47.033286][ T4201] simple_read_from_buffer+0xb5/0x130 [ 47.033328][ T4201] proc_fail_nth_read+0x100/0x140 [ 47.033360][ T4201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.033391][ T4201] vfs_read+0x19d/0x6f0 [ 47.033456][ T4201] ? __rcu_read_unlock+0x4f/0x70 [ 47.033476][ T4201] ? __rcu_read_unlock+0x4f/0x70 [ 47.033498][ T4201] ? __fget_files+0x184/0x1c0 [ 47.033515][ T4201] ksys_read+0xda/0x1a0 [ 47.033620][ T4201] __x64_sys_read+0x40/0x50 [ 47.033652][ T4201] x64_sys_call+0x2d77/0x2fb0 [ 47.033670][ T4201] do_syscall_64+0xd2/0x200 [ 47.033694][ T4201] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.033841][ T4201] ? clear_bhb_loop+0x40/0x90 [ 47.033863][ T4201] ? clear_bhb_loop+0x40/0x90 [ 47.033898][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.033916][ T4201] RIP: 0033:0x7f47a4a4d33c [ 47.034000][ T4201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.034060][ T4201] RSP: 002b:00007f47a30b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.034080][ T4201] RAX: ffffffffffffffda RBX: 00007f47a4c75fa0 RCX: 00007f47a4a4d33c [ 47.034093][ T4201] RDX: 000000000000000f RSI: 00007f47a30b70a0 RDI: 0000000000000003 [ 47.034105][ T4201] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.034116][ T4201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.034126][ T4201] R13: 0000000000000001 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 47.034141][ T4201] [ 47.258715][ T4203] netlink: 300 bytes leftover after parsing attributes in process `syz.4.192'. [ 47.269362][ T4203] netlink: 'syz.4.192': attribute type 21 has an invalid length. [ 47.285646][ T4206] loop3: detected capacity change from 0 to 512 [ 47.293800][ T4206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.317170][ T4206] EXT4-fs (loop3): 1 truncate cleaned up [ 47.330433][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.351284][ T4206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 47.362944][ T4206] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.195: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 47.384338][ T4206] EXT4-fs (loop3): Remounting filesystem read-only [ 47.391057][ T4206] EXT4-fs warning (device loop3): ext4_rename_delete:3726: inode #2: comm syz.3.195: Deleting old file: nlink 5, error=-117 [ 47.426135][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.455049][ T4212] atomic_op ffff88811cedbd28 conn xmit_atomic 0000000000000000 [ 47.681671][ T4234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.692614][ T4234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.740953][ T4237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.759892][ T4237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.309719][ T4254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.286103][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 50.286121][ T29] audit: type=1400 audit(49.429:1075): avc: denied { bind } for pid=4295 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.411985][ T29] audit: type=1400 audit(50.389:1076): avc: denied { read } for pid=4310 comm="syz.2.233" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 50.611010][ T29] audit: type=1400 audit(50.389:1077): avc: denied { open } for pid=4310 comm="syz.2.233" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 50.709833][ T29] audit: type=1400 audit(50.679:1078): avc: denied { create } for pid=4320 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.948750][ T29] audit: type=1400 audit(50.909:1079): avc: denied { getopt } for pid=4330 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.060534][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 51.619209][ T4342] tipc: Enabling of bearer rejected, failed to enable media [ 51.748296][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 51.805775][ T4352] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 51.845487][ T4352] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 51.856952][ T3568] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 51.868414][ T4352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.969979][ T3542] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 52.904839][ T29] audit: type=1400 audit(52.879:1080): avc: denied { write } for pid=4382 comm="syz.0.256" name="ip_vs" dev="proc" ino=4026532447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.936711][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 52.956113][ T4384] vlan2: entered promiscuous mode [ 52.961595][ T4384] team0: entered promiscuous mode [ 52.966992][ T4384] team_slave_0: entered promiscuous mode [ 52.973264][ T4384] team_slave_1: entered promiscuous mode [ 53.024349][ T4392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 53.192261][ T29] audit: type=1400 audit(53.159:1081): avc: denied { accept } for pid=4390 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.263639][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.275482][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.794513][ T4405] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 53.802865][ T4405] netlink: 196 bytes leftover after parsing attributes in process `syz.0.263'. [ 53.927133][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 54.240022][ T29] audit: type=1400 audit(54.189:1082): avc: denied { connect } for pid=4422 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.260398][ T29] audit: type=1400 audit(54.189:1083): avc: denied { read } for pid=4422 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.554417][ T29] audit: type=1400 audit(54.419:1084): avc: denied { append } for pid=4410 comm="syz.1.265" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.353626][ T4449] tipc: Started in network mode [ 55.358530][ T4449] tipc: Node identity ., cluster identity 4711 [ 55.365032][ T4449] tipc: Enabling of bearer rejected, failed to enable media [ 55.545370][ T4460] netlink: 452 bytes leftover after parsing attributes in process `syz.0.281'. [ 56.534367][ T4473] lo speed is unknown, defaulting to 1000 [ 56.831137][ T29] audit: type=1400 audit(56.759:1085): avc: denied { setopt } for pid=4475 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.689462][ T29] audit: type=1400 audit(57.659:1086): avc: denied { write } for pid=4507 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.720573][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 57.730705][ T4512] bridge_slave_1: left allmulticast mode [ 57.736746][ T4512] bridge_slave_1: left promiscuous mode [ 57.742945][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.750677][ T4512] bridge_slave_0: left allmulticast mode [ 57.757206][ T4512] bridge_slave_0: left promiscuous mode [ 57.763131][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.831939][ T29] audit: type=1400 audit(57.809:1087): avc: denied { listen } for pid=4517 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.865127][ T29] audit: type=1400 audit(57.839:1088): avc: denied { getopt } for pid=4517 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.865221][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 57.910555][ T4516] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.919463][ T4516] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.929916][ T4516] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.940293][ T4516] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.975604][ T4516] vxlan0: entered promiscuous mode [ 58.192249][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.214974][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.396374][ T29] audit: type=1400 audit(58.360:1089): avc: denied { read } for pid=2981 comm="acpid" name="mouse0" dev="devtmpfs" ino=753 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 58.418327][ T29] audit: type=1400 audit(58.360:1090): avc: denied { open } for pid=2981 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=753 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 58.440484][ T29] audit: type=1400 audit(58.360:1091): avc: denied { ioctl } for pid=2981 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=753 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 58.675023][ T29] audit: type=1400 audit(58.590:1092): avc: denied { setopt } for pid=4538 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.846422][ T29] audit: type=1400 audit(58.790:1093): avc: denied { listen } for pid=4550 comm="syz.1.316" lport=47962 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.073484][ T4560] syz_tun: entered allmulticast mode [ 59.111758][ T29] audit: type=1400 audit(58.850:1094): avc: denied { accept } for pid=4550 comm="syz.1.316" lport=47962 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.747957][ T4603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.326908][ T4603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.635512][ T4612] netlink: 96 bytes leftover after parsing attributes in process `syz.3.335'. [ 61.128554][ T4631] lo speed is unknown, defaulting to 1000 [ 61.305640][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 61.768673][ T4663] netlink: 'syz.3.355': attribute type 10 has an invalid length. [ 61.892533][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 61.892543][ T29] audit: type=1400 audit(61.871:1120): avc: denied { connect } for pid=4674 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.918180][ T29] audit: type=1400 audit(61.881:1121): avc: denied { read } for pid=4674 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.358520][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 62.368675][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 63.111623][ T29] audit: type=1326 audit(63.092:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4709 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7bc1e929 code=0x7ffc0000 [ 63.135619][ T29] audit: type=1326 audit(63.092:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4709 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7bc1e929 code=0x7ffc0000 [ 63.159389][ T29] audit: type=1326 audit(63.092:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4709 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4e7bc1e929 code=0x7ffc0000 [ 63.182185][ T29] audit: type=1326 audit(63.092:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4709 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7bc1e929 code=0x7ffc0000 [ 63.205465][ T29] audit: type=1326 audit(63.092:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4709 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7bc1e929 code=0x7ffc0000 [ 63.397568][ T29] audit: type=1400 audit(63.382:1127): avc: denied { write } for pid=4698 comm="syz.3.368" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.772087][ T36] kernel write not supported for file /cpu/0/msr (pid: 36 comm: kworker/1:1) [ 63.931190][ T4735] loop7: detected capacity change from 0 to 16384 [ 63.951750][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.961674][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.342000][ T4735] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 64.354905][ T4735] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 [ 64.365335][ T4735] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.374826][ T4735] Buffer I/O error on dev loop7, logical block 640, async page read [ 64.410472][ T4734] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.420418][ T4734] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 64.428988][ T4734] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 64.437374][ T4734] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 64.445837][ T4734] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 64.454252][ T4734] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 64.463079][ T4734] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 64.472866][ T4734] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 64.483531][ T4734] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 64.492305][ T4734] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 64.504357][ T4734] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.536801][ T4734] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.550460][ T4734] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.563045][ T4734] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 67.294323][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.302833][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.352734][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.361673][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.917502][ T29] audit: type=1400 audit(67.904:1128): avc: denied { mount } for pid=4845 comm="syz.4.421" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.939760][ T29] audit: type=1400 audit(67.904:1129): avc: denied { execute } for pid=4845 comm="syz.4.421" path="/79/cpuacct.usage_sys" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.966057][ T29] audit: type=1400 audit(67.904:1130): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.691584][ T4878] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 68.700267][ T4878] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 68.708971][ T4878] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 68.717949][ T4878] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 68.752108][ T4882] 9p: Unknown Cache mode or invalid value r [ 69.317865][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 69.379228][ T29] audit: type=1400 audit(69.025:1131): avc: denied { audit_write } for pid=4887 comm="syz.1.437" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.400024][ T29] audit: type=1400 audit(69.125:1132): avc: denied { append } for pid=4887 comm="syz.1.437" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.401370][ T4902] smc: net device bond0 applied user defined pnetid SY [ 69.453436][ T4907] smc: net device bond0 erased user defined pnetid SY [ 69.506289][ T4914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.662595][ T29] audit: type=1400 audit(69.645:1133): avc: denied { watch_reads } for pid=4910 comm="syz.3.443" path="/91" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.184226][ T29] audit: type=1400 audit(70.176:1134): avc: denied { ioctl } for pid=4922 comm="syz.1.445" path="socket:[9274]" dev="sockfs" ino=9274 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.558962][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 70.649624][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.660635][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.745445][ T4961] netlink: 208 bytes leftover after parsing attributes in process `syz.1.462'. [ 71.221369][ T4993] xt_cluster: node mask cannot exceed total number of nodes [ 71.348239][ T5000] syzkaller1: entered promiscuous mode [ 71.353846][ T5000] syzkaller1: entered allmulticast mode [ 71.478627][ T5007] netlink: 'syz.1.481': attribute type 29 has an invalid length. [ 71.494495][ T5007] netlink: 'syz.1.481': attribute type 29 has an invalid length. [ 71.503464][ T5007] netlink: 500 bytes leftover after parsing attributes in process `syz.1.481'. [ 71.797447][ T5026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 71.937193][ T29] audit: type=1400 audit(71.916:1135): avc: denied { name_connect } for pid=5020 comm="syz.1.486" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 72.031543][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.048382][ T29] audit: type=1400 audit(72.036:1136): avc: denied { write } for pid=5031 comm="syz.2.488" path="socket:[8714]" dev="sockfs" ino=8714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.087936][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.462996][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 72.472160][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 72.505892][ T5039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.492'. [ 72.671724][ T5050] Illegal XDP return value 4294967262 on prog (id 157) dev N/A, expect packet loss! [ 73.181917][ T5063] syz.3.499 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.298146][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.320100][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.769833][ T29] audit: type=1400 audit(73.757:1137): avc: denied { read } for pid=5088 comm="syz.3.512" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.779714][ T5093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.793518][ T29] audit: type=1400 audit(73.757:1138): avc: denied { open } for pid=5088 comm="syz.3.512" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.803857][ T29] audit: type=1400 audit(73.797:1139): avc: denied { read } for pid=5094 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.866629][ T29] audit: type=1400 audit(73.847:1140): avc: denied { getopt } for pid=5094 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.973565][ T5103] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 73.981276][ T5103] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 74.504565][ T29] audit: type=1400 audit(74.498:1141): avc: denied { bind } for pid=5120 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.576887][ T29] audit: type=1400 audit(74.568:1142): avc: denied { ioctl } for pid=5120 comm="syz.2.524" path="socket:[9498]" dev="sockfs" ino=9498 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.602043][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 74.876630][ T29] audit: type=1400 audit(74.868:1143): avc: denied { bind } for pid=5138 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.896128][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 74.939579][ T5142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.961435][ T5142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.999334][ T5148] tipc: Started in network mode [ 75.004852][ T5148] tipc: Node identity 423d752a9dbe, cluster identity 4711 [ 75.012252][ T5148] tipc: Enabled bearer , priority 0 [ 75.055932][ T5148] syzkaller0: entered promiscuous mode [ 75.061438][ T5148] syzkaller0: entered allmulticast mode [ 75.081747][ T5148] tipc: Resetting bearer [ 75.111397][ T5146] tipc: Resetting bearer [ 75.128748][ T5146] tipc: Disabling bearer [ 75.396242][ T29] audit: type=1400 audit(75.388:1144): avc: denied { read } for pid=5167 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.825154][ T29] audit: type=1400 audit(75.818:1145): avc: denied { create } for pid=5181 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 76.492482][ T5205] loop7: detected capacity change from 0 to 16384 [ 76.616804][ T5205] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 0 [ 76.779388][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.788267][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.929598][ T29] audit: type=1400 audit(76.909:1146): avc: denied { ioctl } for pid=5229 comm="syz.2.568" path="/dev/input/event2" dev="devtmpfs" ino=251 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.133463][ T5272] loop8: detected capacity change from 0 to 79 [ 78.557953][ T5298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5298 comm=syz.1.591 [ 78.732684][ T5302] usb usb1: usbfs: process 5302 (syz.2.596) did not claim interface 0 before use [ 79.611180][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.620461][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.340832][ T29] audit: type=1400 audit(81.331:1147): avc: denied { accept } for pid=5399 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.079034][ T29] audit: type=1400 audit(82.071:1148): avc: denied { lock } for pid=5431 comm="syz.1.648" path="socket:[10448]" dev="sockfs" ino=10448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.099634][ T5432] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 82.106576][ T29] audit: type=1400 audit(82.091:1149): avc: denied { listen } for pid=5431 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.118869][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 82.135153][ T29] audit: type=1400 audit(82.091:1150): avc: denied { ioctl } for pid=5431 comm="syz.1.648" path="socket:[9956]" dev="sockfs" ino=9956 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.828532][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.840004][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.181408][ T5467] can0: slcan on ttyS3. [ 83.661417][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.663'. [ 83.771707][ T5480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 83.781642][ T5459] can0 (unregistered): slcan off ttyS3. [ 84.380083][ T29] audit: type=1400 audit(84.373:1151): avc: denied { ioctl } for pid=5508 comm="syz.1.679" path="socket:[10119]" dev="sockfs" ino=10119 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.185085][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.193957][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.407919][ T5562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 86.399610][ T5617] can0: slcan on ttyS3. [ 86.763029][ T29] audit: type=1326 audit(86.754:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.786638][ T29] audit: type=1326 audit(86.754:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.855343][ T29] audit: type=1326 audit(86.804:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.878275][ T29] audit: type=1326 audit(86.804:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.901163][ T29] audit: type=1326 audit(86.804:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.924681][ T29] audit: type=1326 audit(86.804:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.948077][ T29] audit: type=1326 audit(86.804:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.971899][ T29] audit: type=1326 audit(86.804:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 86.994926][ T29] audit: type=1326 audit(86.814:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 87.018326][ T29] audit: type=1326 audit(86.814:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 87.074776][ T5635] tipc: Enabled bearer , priority 0 [ 87.086773][ T5632] tipc: Disabling bearer [ 87.135599][ T5606] can0 (unregistered): slcan off ttyS3. [ 87.228381][ T5624] loop4: detected capacity change from 0 to 512 [ 87.242692][ T5624] EXT4-fs (loop4): 1 truncate cleaned up [ 87.249178][ T5624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.419677][ T5655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.564536][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 87.605361][ T5663] loop0: detected capacity change from 0 to 128 [ 87.619041][ T5663] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.676452][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.714782][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.754312][ T5674] can0: slcan on ttyS3. [ 87.895032][ T5673] can0 (unregistered): slcan off ttyS3. [ 88.103723][ T5680] loop0: detected capacity change from 0 to 256 [ 88.153440][ T5680] vfat: Unknown parameter '{2M5w. >A㗃{ǫ[qALQAΪDvGO@Xb8/0 EߜaZ8΢FgyE|Y9D>ߴĉZY-Y}&' [ 88.256341][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 88.364843][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 88.427839][ T5706] can0: slcan on ttyS3. [ 88.614513][ T5705] can0 (unregistered): slcan off ttyS3. [ 88.851987][ T5711] loop3: detected capacity change from 0 to 2048 [ 88.895302][ T5711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.061604][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 89.193698][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.203865][ T5735] can0: slcan on ttyS3. [ 89.254304][ T5734] can0 (unregistered): slcan off ttyS3. [ 89.281542][ T5742] loop0: detected capacity change from 0 to 2048 [ 89.333843][ T5742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.692284][ T5775] tipc: Started in network mode [ 89.697329][ T5775] tipc: Node identity 8, cluster identity 3 [ 89.703310][ T5775] tipc: Node number set to 8 [ 89.806901][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.626427][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 90.640097][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.665027][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.982622][ T5820] usb usb1: usbfs: process 5820 (syz.2.799) did not claim interface 0 before use [ 91.028272][ T5824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=5824 comm=syz.2.801 [ 91.863180][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 91.863195][ T29] audit: type=1326 audit(91.866:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 91.863689][ T5865] usb usb1: usbfs: process 5865 (syz.0.819) did not claim interface 0 before use [ 91.893886][ T29] audit: type=1326 audit(91.866:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 91.958458][ T29] audit: type=1326 audit(91.956:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 91.982393][ T29] audit: type=1326 audit(91.986:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.005421][ T29] audit: type=1326 audit(91.986:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.030260][ T29] audit: type=1326 audit(92.026:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.053138][ T29] audit: type=1326 audit(92.026:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.075996][ T29] audit: type=1326 audit(92.026:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.082958][ T5850] loop3: detected capacity change from 0 to 512 [ 92.105450][ T29] audit: type=1326 audit(92.056:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f47a4a4e929 code=0x7ffc0000 [ 92.128184][ T29] audit: type=1326 audit(92.056:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47a4a4e963 code=0x7ffc0000 [ 92.290475][ T5850] EXT4-fs (loop3): 1 truncate cleaned up [ 92.297272][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.438237][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.276463][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.843'. [ 94.379042][ T5980] loop4: detected capacity change from 0 to 2048 [ 94.415812][ T5980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.718777][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.837197][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 95.438025][ T6036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=6036 comm=syz.1.886 [ 95.734562][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 96.126659][ T6062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=6062 comm=syz.3.897 [ 96.240357][ T6048] loop4: detected capacity change from 0 to 512 [ 96.251777][ T6048] EXT4-fs (loop4): 1 truncate cleaned up [ 96.257879][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.299521][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 96.336411][ T6063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 96.342947][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.350772][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 96.369441][ T6080] FAULT_INJECTION: forcing a failure. [ 96.369441][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.382973][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.3.903 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 96.383048][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.383060][ T6080] Call Trace: [ 96.383068][ T6080] [ 96.383077][ T6080] __dump_stack+0x1d/0x30 [ 96.383098][ T6080] dump_stack_lvl+0xe8/0x140 [ 96.383203][ T6080] dump_stack+0x15/0x1b [ 96.383218][ T6080] should_fail_ex+0x265/0x280 [ 96.383247][ T6080] should_fail+0xb/0x20 [ 96.383284][ T6080] should_fail_usercopy+0x1a/0x20 [ 96.383313][ T6080] _copy_from_user+0x1c/0xb0 [ 96.383382][ T6080] kstrtouint_from_user+0x69/0xf0 [ 96.383482][ T6080] ? 0xffffffff81000000 [ 96.383495][ T6080] ? selinux_file_permission+0x1e4/0x320 [ 96.383576][ T6080] proc_fail_nth_write+0x50/0x160 [ 96.383593][ T6080] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.383627][ T6080] vfs_write+0x266/0x8e0 [ 96.383671][ T6080] ? vfs_read+0x47f/0x6f0 [ 96.383695][ T6080] ? __rcu_read_unlock+0x4f/0x70 [ 96.383758][ T6080] ? __fget_files+0x184/0x1c0 [ 96.383781][ T6080] ksys_write+0xda/0x1a0 [ 96.383869][ T6080] __x64_sys_write+0x40/0x50 [ 96.383883][ T6080] x64_sys_call+0x2cdd/0x2fb0 [ 96.383955][ T6080] do_syscall_64+0xd2/0x200 [ 96.383974][ T6080] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.383997][ T6080] ? clear_bhb_loop+0x40/0x90 [ 96.384018][ T6080] ? clear_bhb_loop+0x40/0x90 [ 96.384038][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.384107][ T6080] RIP: 0033:0x7f47a4a4d3df [ 96.384123][ T6080] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 96.384142][ T6080] RSP: 002b:00007f47a30b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.384160][ T6080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47a4a4d3df [ 96.384172][ T6080] RDX: 0000000000000001 RSI: 00007f47a30b70a0 RDI: 000000000000000a [ 96.384200][ T6080] RBP: 00007f47a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.384213][ T6080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 96.384226][ T6080] R13: 0000000000000000 R14: 00007f47a4c75fa0 R15: 00007fff4ba69858 [ 96.384245][ T6080] [ 96.649840][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.712310][ T6077] vhci_hcd: connection closed [ 96.712371][ T3527] vhci_hcd: stop threads [ 96.721599][ T3527] vhci_hcd: release socket [ 96.726065][ T3527] vhci_hcd: disconnect device [ 96.730412][ T3413] usb 6-1: SetAddress Request (2) to port 0 [ 96.737813][ T3413] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 97.492657][ T6122] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 97.492657][ T6122] program syz.0.918 not setting count and/or reply_len properly [ 97.865151][ T6141] Invalid ELF header magic: != ELF [ 97.878916][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 97.878932][ T29] audit: type=1400 audit(97.869:1978): avc: denied { module_load } for pid=6132 comm="syz.0.923" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 98.074529][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 98.088841][ T6155] FAULT_INJECTION: forcing a failure. [ 98.088841][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 98.101750][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.2.931 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 98.101784][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.101868][ T6155] Call Trace: [ 98.101875][ T6155] [ 98.101883][ T6155] __dump_stack+0x1d/0x30 [ 98.101905][ T6155] dump_stack_lvl+0xe8/0x140 [ 98.101925][ T6155] dump_stack+0x15/0x1b [ 98.101965][ T6155] should_fail_ex+0x265/0x280 [ 98.101997][ T6155] should_failslab+0x8c/0xb0 [ 98.102020][ T6155] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 98.102118][ T6155] ? strncmp+0x34/0x70 [ 98.102200][ T6155] ? match_strdup+0x37/0x40 [ 98.102219][ T6155] ? strcmp+0x22/0x50 [ 98.102285][ T6155] kmemdup_nul+0x36/0xc0 [ 98.102307][ T6155] match_strdup+0x37/0x40 [ 98.102325][ T6155] p9_client_create+0x2c9/0xbc0 [ 98.102353][ T6155] v9fs_session_init+0xf7/0xde0 [ 98.102437][ T6155] ? obj_cgroup_charge_account+0x122/0x1a0 [ 98.102469][ T6155] ? __rcu_read_unlock+0x4f/0x70 [ 98.102530][ T6155] ? should_fail_ex+0xdb/0x280 [ 98.102584][ T6155] ? v9fs_mount+0x51/0x590 [ 98.102612][ T6155] ? should_failslab+0x8c/0xb0 [ 98.102634][ T6155] ? __kmalloc_cache_noprof+0x189/0x320 [ 98.102701][ T6155] v9fs_mount+0x67/0x590 [ 98.102779][ T6155] ? __pfx_v9fs_mount+0x10/0x10 [ 98.102985][ T6155] legacy_get_tree+0x78/0xd0 [ 98.103017][ T6155] vfs_get_tree+0x54/0x1d0 [ 98.103034][ T6155] do_new_mount+0x207/0x680 [ 98.103124][ T6155] path_mount+0x4a4/0xb20 [ 98.103155][ T6155] ? user_path_at+0x109/0x130 [ 98.103192][ T6155] __se_sys_mount+0x28f/0x2e0 [ 98.103210][ T6155] ? fput+0x8f/0xc0 [ 98.103236][ T6155] __x64_sys_mount+0x67/0x80 [ 98.103255][ T6155] x64_sys_call+0xd36/0x2fb0 [ 98.103273][ T6155] do_syscall_64+0xd2/0x200 [ 98.103361][ T6155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.103480][ T6155] ? clear_bhb_loop+0x40/0x90 [ 98.103581][ T6155] ? clear_bhb_loop+0x40/0x90 [ 98.103604][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.103625][ T6155] RIP: 0033:0x7f4e7bc1e929 [ 98.103640][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.103704][ T6155] RSP: 002b:00007f4e7a287038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.103723][ T6155] RAX: ffffffffffffffda RBX: 00007f4e7be45fa0 RCX: 00007f4e7bc1e929 [ 98.103736][ T6155] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 98.103749][ T6155] RBP: 00007f4e7a287090 R08: 0000200000000300 R09: 0000000000000000 [ 98.103761][ T6155] R10: 0000000002008440 R11: 0000000000000246 R12: 0000000000000002 [ 98.103774][ T6155] R13: 0000000000000000 R14: 00007f4e7be45fa0 R15: 00007ffcd1e01af8 [ 98.103792][ T6155] [ 98.394025][ T6158] loop3: detected capacity change from 0 to 128 [ 98.422148][ T29] audit: type=1326 audit(98.420:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.449425][ T29] audit: type=1326 audit(98.420:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.472214][ T29] audit: type=1326 audit(98.420:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.495301][ T29] audit: type=1326 audit(98.490:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.524368][ T29] audit: type=1326 audit(98.510:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.530992][ T6158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.547034][ T29] audit: type=1326 audit(98.520:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.581906][ T29] audit: type=1326 audit(98.520:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.604767][ T29] audit: type=1326 audit(98.520:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 98.627563][ T29] audit: type=1326 audit(98.520:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f351bb8e929 code=0x7ffc0000 [ 99.135281][ T6186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=6186 comm=syz.0.941 [ 99.166912][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 99.207501][ T6192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39968 sclass=netlink_route_socket pid=6192 comm=syz.1.944 [ 99.243114][ T6194] loop4: detected capacity change from 0 to 2048 [ 99.261105][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.281174][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.343031][ T6201] loop3: detected capacity change from 0 to 2048 [ 99.361923][ T6201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.489212][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.515782][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.934158][ T6221] can0: slcan on ttyS3. [ 100.367881][ T6246] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 100.451853][ T6253] FAULT_INJECTION: forcing a failure. [ 100.451853][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 100.464593][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.1.966 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 100.464609][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.464622][ T6253] Call Trace: [ 100.464627][ T6253] [ 100.464632][ T6253] __dump_stack+0x1d/0x30 [ 100.464646][ T6253] dump_stack_lvl+0xe8/0x140 [ 100.464668][ T6253] dump_stack+0x15/0x1b [ 100.464677][ T6253] should_fail_ex+0x265/0x280 [ 100.464760][ T6253] should_failslab+0x8c/0xb0 [ 100.464774][ T6253] __kmalloc_noprof+0xa5/0x3e0 [ 100.464789][ T6253] ? ethnl_default_notify+0xe0/0x5e0 [ 100.464801][ T6253] ethnl_default_notify+0xe0/0x5e0 [ 100.464899][ T6253] ethtool_notify+0xbe/0x1c0 [ 100.464909][ T6253] ethnl_default_set_doit+0x381/0x5b0 [ 100.464922][ T6253] genl_family_rcv_msg_doit+0x140/0x1b0 [ 100.465064][ T6253] genl_rcv_msg+0x422/0x460 [ 100.465078][ T6253] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 100.465090][ T6253] netlink_rcv_skb+0x120/0x220 [ 100.465170][ T6253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.465186][ T6253] genl_rcv+0x28/0x40 [ 100.465197][ T6253] netlink_unicast+0x59e/0x670 [ 100.465214][ T6253] netlink_sendmsg+0x58b/0x6b0 [ 100.465279][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.465289][ T6253] __sock_sendmsg+0x142/0x180 [ 100.465305][ T6253] ____sys_sendmsg+0x31e/0x4e0 [ 100.465407][ T6253] ___sys_sendmsg+0x17b/0x1d0 [ 100.465431][ T6253] __x64_sys_sendmsg+0xd4/0x160 [ 100.465500][ T6253] x64_sys_call+0x2999/0x2fb0 [ 100.465512][ T6253] do_syscall_64+0xd2/0x200 [ 100.465593][ T6253] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.465608][ T6253] ? clear_bhb_loop+0x40/0x90 [ 100.465620][ T6253] ? clear_bhb_loop+0x40/0x90 [ 100.465661][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.465672][ T6253] RIP: 0033:0x7f351bb8e929 [ 100.465682][ T6253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.465696][ T6253] RSP: 002b:00007f351a1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.465707][ T6253] RAX: ffffffffffffffda RBX: 00007f351bdb5fa0 RCX: 00007f351bb8e929 [ 100.465768][ T6253] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 100.465851][ T6253] RBP: 00007f351a1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.465858][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.465864][ T6253] R13: 0000000000000000 R14: 00007f351bdb5fa0 R15: 00007ffee5332e48 [ 100.465875][ T6253] [ 100.781706][ T6219] can0 (unregistered): slcan off ttyS3. [ 101.157219][ T6268] loop3: detected capacity change from 0 to 2048 [ 101.181663][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.350514][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.988633][ T3413] usb 6-1: device descriptor read/8, error -110 [ 102.146725][ T3413] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 102.225458][ T6304] loop4: detected capacity change from 0 to 2048 [ 102.260800][ T6304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.286923][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 102.880641][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.314288][ T6356] tipc: Started in network mode [ 103.319289][ T6356] tipc: Node identity ff, cluster identity 4711 [ 103.325594][ T6356] tipc: Enabling of bearer rejected, failed to enable media [ 103.571017][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 103.571032][ T29] audit: type=1326 audit(103.572:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 103.617837][ T6384] loop0: detected capacity change from 0 to 512 [ 103.635394][ T6384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1006: bg 0: block 16: invalid block bitmap [ 103.649591][ T6384] EXT4-fs (loop0): Remounting filesystem read-only [ 103.656459][ T6384] EXT4-fs (loop0): 1 truncate cleaned up [ 103.663369][ T29] audit: type=1400 audit(103.672:2166): avc: denied { getopt } for pid=6380 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.666260][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.685236][ T29] audit: type=1326 audit(103.672:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 103.719566][ T29] audit: type=1326 audit(103.672:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 103.742729][ T29] audit: type=1326 audit(103.672:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a61e929 code=0x7ffc0000 [ 103.812276][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.894288][ T29] audit: type=1326 audit(103.892:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1765e929 code=0x7ffc0000 [ 103.917302][ T29] audit: type=1326 audit(103.892:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1765e929 code=0x7ffc0000 [ 103.930599][ T6394] lo speed is unknown, defaulting to 1000 [ 103.940909][ T29] audit: type=1326 audit(103.892:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe1765e929 code=0x7ffc0000 [ 103.969228][ T29] audit: type=1326 audit(103.892:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1765e929 code=0x7ffc0000 [ 103.993234][ T29] audit: type=1326 audit(103.892:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1765e929 code=0x7ffc0000 [ 104.025383][ T6396] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 104.092816][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 104.166156][ T6414] netlink: 'syz.4.1012': attribute type 6 has an invalid length. [ 104.174471][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1012'. [ 104.456303][ T6424] loop3: detected capacity change from 0 to 512 [ 104.467702][ T6424] EXT4-fs: Mount option(s) incompatible with ext2 [ 104.515959][ T6427] loop3: detected capacity change from 0 to 256 [ 104.670176][ T6396] loop0: detected capacity change from 0 to 1024 [ 104.688929][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 104.703956][ T6396] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 104.713932][ T6396] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 104.724173][ T6396] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.760947][ T6444] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.767354][ T6396] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.1013: unexpected bad inode w/o EXT4_IGET_BAD [ 104.787910][ T6396] EXT4-fs (loop0): no journal found [ 104.793355][ T6396] EXT4-fs (loop0): can't get journal size [ 104.803613][ T6444] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 104.838535][ T6444] team0: Port device dummy0 added [ 104.865510][ T6449] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 104.878476][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.906953][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 104.927793][ T6449] team0: Port device dummy0 removed [ 104.947089][ T6449] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.137619][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.604191][ T6479] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 105.612852][ T6475] lo speed is unknown, defaulting to 1000 [ 105.780018][ T6500] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.792025][ T6500] bond0: (slave lo): Error: Device can not be enslaved while up [ 105.994060][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 106.004304][ T6526] loop2: detected capacity change from 0 to 512 [ 106.026235][ T6526] EXT4-fs: Ignoring removed bh option [ 106.043686][ T6526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.053037][ T6526] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 106.074800][ T6526] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 106.087379][ T6526] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 106.108374][ T6526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.124850][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 106.147378][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.173617][ T6549] smc: net device bond0 applied user defined pnetid SYZ2 [ 106.181806][ T6550] smc: net device bond0 erased user defined pnetid SYZ2 [ 106.189807][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 106.201510][ T6558] netlink: '+}[@': attribute type 1 has an invalid length. [ 106.214665][ T6556] program syz.3.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.218002][ T6558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.224580][ T6556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.279560][ T6570] loop3: detected capacity change from 0 to 512 [ 106.286289][ T6570] ext4: Unknown parameter 'mask' [ 106.467818][ T6590] vhci_hcd vhci_hcd.0: port 0 already used [ 106.476095][ T6590] loop2: detected capacity change from 0 to 512 [ 106.487784][ T6590] EXT4-fs (loop2): 1 orphan inode deleted [ 106.502579][ T6590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.515489][ T3550] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 1 [ 106.552610][ T6601] loop0: detected capacity change from 0 to 1024 [ 106.559769][ T6601] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 106.570833][ T6601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 106.579558][ T6601] System zones: 0-1, 3-36 [ 106.584103][ T6601] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.592251][ T6601] EXT4-fs (loop0): 1 orphan inode deleted [ 106.598668][ T6601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.619647][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.648978][ T6609] loop0: detected capacity change from 0 to 764 [ 106.656102][ T6609] rock: directory entry would overflow storage [ 106.662263][ T6609] rock: sig=0x4654, size=5, remaining=4 [ 106.865196][ T6644] ------------[ cut here ]------------ [ 106.870827][ T6644] WARNING: CPU: 1 PID: 6644 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 106.880981][ T6644] Modules linked in: [ 106.884923][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.1092 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 106.897387][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.907547][ T6644] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 106.914244][ T6644] Code: 83 3d 33 30 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 7a 28 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 106.934007][ T6644] RSP: 0018:ffffc90000ef3a98 EFLAGS: 00010246 [ 106.940130][ T6644] RAX: 998379cc398b4e00 RBX: 0000000000000016 RCX: 0000000000000000 [ 106.948339][ T6644] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 106.956377][ T6644] RBP: 0000000000000dc0 R08: ffff88811ee9ec18 R09: 0000000000000000 [ 106.964401][ T6644] R10: ffff88811be98810 R11: 000188811be98810 R12: ffffc90000ef3d28 [ 106.972406][ T6644] R13: 000000006a626f3a R14: 0000000000040dc0 R15: 0000000000000000 [ 106.980467][ T6644] FS: 00007f351a1d66c0(0000) GS:ffff8882aef30000(0000) knlGS:0000000000000000 [ 106.989655][ T6644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.991998][ T6647] FAULT_INJECTION: forcing a failure. [ 106.991998][ T6647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.996364][ T6644] CR2: 0000200000002000 CR3: 0000000120d04000 CR4: 00000000003506f0 [ 107.009518][ T6647] CPU: 0 UID: 0 PID: 6647 Comm: syz.0.1094 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 107.009574][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.009586][ T6647] Call Trace: [ 107.009594][ T6647] [ 107.009602][ T6647] __dump_stack+0x1d/0x30 [ 107.009623][ T6647] dump_stack_lvl+0xe8/0x140 [ 107.009640][ T6647] dump_stack+0x15/0x1b [ 107.009657][ T6647] should_fail_ex+0x265/0x280 [ 107.009819][ T6647] should_fail_alloc_page+0xf2/0x100 [ 107.009844][ T6647] __alloc_frozen_pages_noprof+0xff/0x360 [ 107.009905][ T6647] alloc_pages_mpol+0xb3/0x250 [ 107.009988][ T6647] vma_alloc_folio_noprof+0x1aa/0x300 [ 107.010019][ T6647] do_wp_page+0x673/0x2400 [ 107.010039][ T6647] ? __rcu_read_lock+0x37/0x50 [ 107.010062][ T6647] handle_mm_fault+0x77d/0x2be0 [ 107.010122][ T6647] ? __rcu_read_unlock+0x4f/0x70 [ 107.010148][ T6647] do_user_addr_fault+0x3fe/0x1090 [ 107.010210][ T6647] exc_page_fault+0x62/0xa0 [ 107.010242][ T6647] asm_exc_page_fault+0x26/0x30 [ 107.010263][ T6647] RIP: 0010:__put_user_4+0xd/0x20 [ 107.010293][ T6647] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 107.010311][ T6647] RSP: 0018:ffffc90000f03d80 EFLAGS: 00050202 [ 107.010390][ T6647] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 107.010402][ T6647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.010467][ T6647] RBP: 0000000000040000 R08: 0001c90000f03c07 R09: 0000000000000000 [ 107.010479][ T6647] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000000000000001 [ 107.010490][ T6647] R13: 0000200000008000 R14: 0000200000007fc0 R15: 00000000000003ff [ 107.010505][ T6647] __sys_sendmmsg+0x19b/0x300 [ 107.010528][ T6647] __x64_sys_sendmmsg+0x57/0x70 [ 107.010555][ T6647] x64_sys_call+0x2f2f/0x2fb0 [ 107.010576][ T6647] do_syscall_64+0xd2/0x200 [ 107.010593][ T6647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.010617][ T6647] ? clear_bhb_loop+0x40/0x90 [ 107.010637][ T6647] ? clear_bhb_loop+0x40/0x90 [ 107.010707][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.010767][ T6647] RIP: 0033:0x7fbe1765e929 [ 107.010782][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.010798][ T6647] RSP: 002b:00007fbe15cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.010911][ T6647] RAX: ffffffffffffffda RBX: 00007fbe17885fa0 RCX: 00007fbe1765e929 [ 107.010924][ T6647] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 107.010935][ T6647] RBP: 00007fbe15cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.010947][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.010959][ T6647] R13: 0000000000000000 R14: 00007fbe17885fa0 R15: 00007fffc211a9f8 [ 107.010975][ T6647] [ 107.054305][ T6652] loop0: detected capacity change from 0 to 512 [ 107.055204][ T6644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.055218][ T6644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.055232][ T6644] Call Trace: [ 107.086366][ T6652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.090142][ T6644] [ 107.232907][ T6661] futex_wake_op: syz.4.1101 tries to shift op by -1; fix this program [ 107.236361][ T6644] ? __rcu_read_unlock+0x4f/0x70 [ 107.361466][ T6644] __alloc_pages_noprof+0x9/0x20 [ 107.366497][ T6644] ___kmalloc_large_node+0x73/0x140 [ 107.371703][ T6644] __kmalloc_large_node_noprof+0x16/0xa0 [ 107.377488][ T6644] __kmalloc_noprof+0x2ab/0x3e0 [ 107.382344][ T6644] ? hashtab_init+0x9b/0xe0 [ 107.386892][ T6644] hashtab_init+0x9b/0xe0 [ 107.391242][ T6644] symtab_init+0x2c/0x40 [ 107.395525][ T6644] policydb_read+0x516/0x1330 [ 107.400236][ T6644] ? security_load_policy+0x90/0x890 [ 107.405684][ T6644] security_load_policy+0xba/0x890 [ 107.410823][ T6644] ? rep_movs_alternative+0x4a/0x90 [ 107.416087][ T6661] lo speed is unknown, defaulting to 1000 [ 107.416251][ T6644] sel_write_load+0x1d4/0x380 [ 107.426744][ T6644] ? __pfx_sel_write_load+0x10/0x10 [ 107.431975][ T6644] vfs_write+0x266/0x8e0 [ 107.436273][ T6644] ? __rcu_read_unlock+0x4f/0x70 [ 107.441229][ T6644] ? __fget_files+0x184/0x1c0 [ 107.445951][ T6644] ? finish_task_switch+0xad/0x2b0 [ 107.451206][ T6644] ksys_write+0xda/0x1a0 [ 107.451344][ T6661] sd 0:0:1:0: device reset [ 107.455484][ T6644] __x64_sys_write+0x40/0x50 [ 107.455506][ T6644] x64_sys_call+0x2cdd/0x2fb0 [ 107.469218][ T6644] do_syscall_64+0xd2/0x200 [ 107.473730][ T6644] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.478431][ T6661] loop4: detected capacity change from 0 to 2048 [ 107.479842][ T6644] ? clear_bhb_loop+0x40/0x90 [ 107.490806][ T6644] ? clear_bhb_loop+0x40/0x90 [ 107.495606][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.501579][ T6644] RIP: 0033:0x7f351bb8e929 [ 107.506100][ T6644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.506133][ T6661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.537792][ T6644] RSP: 002b:00007f351a1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.546226][ T6644] RAX: ffffffffffffffda RBX: 00007f351bdb6080 RCX: 00007f351bb8e929 [ 107.554462][ T6644] RDX: 0000000000003000 RSI: 0000200000000000 RDI: 0000000000000006 [ 107.562514][ T6644] RBP: 00007f351bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 107.570523][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.578510][ T6644] R13: 0000000000000000 R14: 00007f351bdb6080 R15: 00007ffee5332e48 [ 107.586515][ T6644] [ 107.589586][ T6644] ---[ end trace 0000000000000000 ]--- [ 107.595133][ T6644] SELinux: failed to load policy [ 107.602004][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'. [ 107.607698][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.615480][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.710075][ T6679] ================================================================== [ 107.718180][ T6679] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 107.724951][ T6679] [ 107.727264][ T6679] write to 0xffff8881095d79f0 of 8 bytes by task 6678 on cpu 1: [ 107.734880][ T6679] vms_clear_ptes+0x18f/0x2d0 [ 107.739553][ T6679] mmap_region+0x6e8/0x1580 [ 107.744047][ T6679] do_mmap+0x9b3/0xbe0 [ 107.748113][ T6679] vm_mmap_pgoff+0x17a/0x2e0 [ 107.752697][ T6679] ksys_mmap_pgoff+0xc2/0x310 [ 107.757373][ T6679] x64_sys_call+0x1602/0x2fb0 [ 107.762051][ T6679] do_syscall_64+0xd2/0x200 [ 107.766542][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.772427][ T6679] [ 107.774736][ T6679] read to 0xffff8881095d79f0 of 8 bytes by task 6679 on cpu 0: [ 107.782263][ T6679] getrusage+0xa52/0xbb0 [ 107.786499][ T6679] io_sq_thread+0x5dd/0x1180 [ 107.791075][ T6679] ret_from_fork+0xda/0x150 [ 107.795566][ T6679] ret_from_fork_asm+0x1a/0x30 [ 107.800322][ T6679] [ 107.802628][ T6679] value changed: 0x00000000000014ea -> 0x00000000000016b4 [ 107.809718][ T6679] [ 107.812026][ T6679] Reported by Kernel Concurrency Sanitizer on: [ 107.818163][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: iou-sqp-6678 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 107.832365][ T6679] Tainted: [W]=WARN [ 107.836164][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.846209][ T6679] ================================================================== [ 107.999795][ T6688] loop0: detected capacity change from 0 to 512 [ 108.006825][ T6688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.017494][ T6688] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1099: invalid block [ 108.029776][ T6688] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1099: invalid indirect mapped block 4294967295 (level 1) [ 108.084039][ T6688] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1099: invalid indirect mapped block 4294967295 (level 1) [ 108.145960][ T6688] EXT4-fs (loop0): 2 truncates cleaned up [ 108.151815][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.155152][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.495834][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.659927][ T3413] usb 6-1: device descriptor read/8, error -110