last executing test programs: 1m10.964295671s ago: executing program 3 (id=197): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x2000000000000047, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000380)='svc_wake_up\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xc, 0x2f, 0x0, @empty, @multicast1}}}}) 1m10.153590667s ago: executing program 3 (id=216): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x37b) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) ppoll(&(0x7f00000000c0)=[{r0, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0xfffffe96) 1m10.095890109s ago: executing program 3 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000400"], 0x20000600}}, 0x0) 1m10.08813662s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4000000000}, 0x18) unshare(0x62041f00) mknodat(r4, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x80000001) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, 0x0, &(0x7f0000000100)) 1m8.037491929s ago: executing program 3 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x6, 0x6, 0x2, 0x9, 0x2, 0x6, 0x10, 0xf, 0x38, 0x346, 0x5, 0x4305, 0x20, 0x1, 0x3, 0x8001, 0x7}, [{0x1, 0x289, 0x40, 0x400080, 0x8, 0x8001, 0x4, 0x80}], "7c7a5a028fa62708774a31eebf768edef7c55446bcbda51925dcb28b55e63dbe3eba264a2cb08df01dff50a73c9242043a3029ea25cb2ce12510fa1bbc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x995) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1m7.978414872s ago: executing program 3 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000080)=r3}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 54.796208497s ago: executing program 0 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc870000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x7ff}, 0x18) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000220404001400350077673000"], 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x250000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, r7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57e, &(0x7f0000000ec0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x20000000002, 0x2}) 54.726268971s ago: executing program 0 (id=470): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7], 0x70}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x7}, {0x1}}}, 0x24}}, 0x41) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000500)={@multicast1, @remote}, &(0x7f0000000540)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x7800, 0x80, 0x8000, 0x8, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x65, 0x0, 0xf, 0x29, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x2b, 0xf7, [@rand_addr=0x64010102, @multicast1, @loopback, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @local, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x5, [{@loopback, 0x5}, {@multicast1, 0x39}, {@loopback}]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @remote]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r8, 0x2) 54.361951356s ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7f454c4603040000ff7f08000000000002003e"], 0x678) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 54.348241967s ago: executing program 0 (id=475): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x5}, {{&(0x7f0000000280)=@ax25={{0x3, @null}, [@rose, @bcast, @netrom, @default, @rose, @rose, @rose, @netrom]}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/246, 0xf6}, 0x81}], 0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r1, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000000000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300004001000000000200000000000700800000"], 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x44000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800e5ff000000000000000000000000000000082020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) getgid() setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "b28b0bbff168b179", "05fc55d2b782628dee5495d8ca41e0ed", "d025a5d5", "11379d468c0a0493"}, 0x28) 54.28244019s ago: executing program 0 (id=479): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x18) r2 = socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x57, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0, 0x0, 0xfffffffffffffefe}, 0x18) write(r2, &(0x7f00000002c0)="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", 0xfc) 53.971196483s ago: executing program 0 (id=486): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 53.948063375s ago: executing program 32 (id=486): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 52.965447978s ago: executing program 33 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000080)=r3}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 13.628435825s ago: executing program 1 (id=1313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0xd1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xa, 0x2, 0x8, 0x8, 0x40910d4cf854ce55}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x41000, 0x14, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x6, 0xff, 0x7}, 0x10, 0x0, r4, 0x1, &(0x7f0000000400)=[r0, r0, r5, r0, r0, r0, r0, r0, r0], &(0x7f0000000440)=[{0x2, 0x3, 0x5, 0xe}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) move_pages(0x0, 0x13, &(0x7f00000004c0)=[&(0x7f000000a000/0x2000)=nil], 0x0, &(0x7f0000000500), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000005c0)={0x5, &(0x7f0000000580)=[{0x7, 0xe, 0x4, 0x1ff}, {0x7, 0x7, 0x9, 0x6}, {0xad50, 0x3, 0x3, 0x9}, {0x7, 0x2, 0x8}, {0xe, 0x3, 0xd, 0x5}]}) 13.479556141s ago: executing program 1 (id=1317): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") (fail_nth: 6) 13.27601386s ago: executing program 1 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601280000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fc000000000000000000000000000000060004400e1f001005000700880000000369ea3219b52d522faec2e727d7343a1c647283250e91"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 13.198197284s ago: executing program 1 (id=1322): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473", 0x9}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) 13.162612815s ago: executing program 1 (id=1323): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r6 = socket(0xa, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x2}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$phonet_pipe(r6, &(0x7f0000000580)={0x23, 0x6, 0x4, 0x3f}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) read(r0, &(0x7f0000000300)=""/212, 0xd4) 12.298377833s ago: executing program 1 (id=1339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000280), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000280), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) flistxattr(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000001cc0), 0x80000) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000340)=r8) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000340)=r8) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000140)=r8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}]}}) 1.37732684s ago: executing program 6 (id=1541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.356511961s ago: executing program 6 (id=1542): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x37b) sendmmsg$inet6(r1, &(0x7f0000007240), 0x0, 0x1c000) shutdown(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0xfffffe96) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) close(r3) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 681.978041ms ago: executing program 2 (id=1552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 655.922672ms ago: executing program 2 (id=1553): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 637.974442ms ago: executing program 2 (id=1555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0)) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 537.659937ms ago: executing program 2 (id=1558): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) 501.673658ms ago: executing program 2 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 472.548249ms ago: executing program 6 (id=1562): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd77f2e9332f24016, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 445.313851ms ago: executing program 2 (id=1564): bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, 0x0, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc4dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000100000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 410.793273ms ago: executing program 4 (id=1566): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) 402.017133ms ago: executing program 6 (id=1567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 361.720964ms ago: executing program 4 (id=1569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0)) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 318.825306ms ago: executing program 6 (id=1571): r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000f80)=""/162, 0xa2}], 0x1, 0x47}}], 0x48, 0x4000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x185) lseek(r3, 0xfffffffff7ffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000540)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x3}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0xe, 0x10, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x4, 0x8, 0x81, 0xf9, 'veth0_to_batadv\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x10c}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 263.992358ms ago: executing program 4 (id=1572): r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 252.031139ms ago: executing program 6 (id=1573): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x37b) sendmmsg$inet6(r1, &(0x7f0000007240), 0x0, 0x1c000) shutdown(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0xfffffe96) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) close(r3) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 240.07818ms ago: executing program 4 (id=1574): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}]}, 0xff, 0x264, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 172.245243ms ago: executing program 5 (id=1575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 171.439093ms ago: executing program 5 (id=1576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x100800, 0x26) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0xccc1, 0x0, 0x6, 0x4}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x90) epoll_create1(0x80000) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="560000000000000061110c00000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)="67b9c22104bdffc04a57f947cd77cd198458ba157764760481f93f3fd51561a7076a8dcd0a9d6b4b11bf0e3ece5a1383d91c9cae652cedeb187d8ee1f9e16c2002a1be09c766ed7042e6181d71aa4ec5d4e15277a7acc583695f50cb653852683a6e57c9e03fb433aa2a17a42b4937e4bc0a4059908141b8903526be9b481fa879d5d95282b86541660e859c8a57733df7150251462b8c24605c03f85e0af1524b9618bf0b685b58f9ae1140f54b3b93e0e9a29180fcd814a65c4bd4ce143b8ac7", 0xc1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 130.800704ms ago: executing program 5 (id=1577): inotify_init1(0x80000) 117.782125ms ago: executing program 5 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrjquota}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") 48.137198ms ago: executing program 5 (id=1579): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) 30.377659ms ago: executing program 4 (id=1580): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x18) r2 = socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0, 0x0, 0xfffffffffffffefe}, 0x18) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) 29.942659ms ago: executing program 5 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1}, 0x50) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, 0x0, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc4dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000100000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@jmp={0x5, 0x1, 0x5, 0xe, 0x7, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000040), 0x7e, 0x458, &(0x7f0000000180)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000c80)=ANY=[], 0x0) 0s ago: executing program 4 (id=1582): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x4e21, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x35, 0x0, &(0x7f0000000c40)="19ac8e9c249926f369f0ba63bd06000000c614ec39d31d62a102877de4e7d51a71bb0700000069d9024c54dfe6d32e5eed5fd729d67b64af6799d7479229da5e9534f7050a0c38e32d80b3980b1320e30d8305ac64d326e5f5fabba2fed7421e14c7453bca72c80b14fb119a2bbc959b998199156bae254f57b883e12e68982a", 0x0, 0xd01, 0x0, 0x0, 0x44, 0x0, 0x0}, 0x50) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") kernel console output (not intermixed with test programs): .236577][ T5763] SET target dimension over the limit! [ 75.340385][ T29] kauditd_printk_skb: 1109 callbacks suppressed [ 75.340477][ T29] audit: type=1400 audit(1764805777.687:6804): avc: denied { bind } for pid=5770 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.399705][ T5773] __nla_validate_parse: 12 callbacks suppressed [ 75.399720][ T5773] netlink: 204 bytes leftover after parsing attributes in process `syz.4.785'. [ 75.406533][ T29] audit: type=1400 audit(1764805777.687:6805): avc: denied { write } for pid=5770 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.415070][ T5773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.785'. [ 75.434293][ T29] audit: type=1400 audit(1764805777.687:6806): avc: denied { mount } for pid=5770 comm="syz.2.783" name="/" dev="mqueue" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.465860][ T29] audit: type=1400 audit(1764805777.687:6807): avc: denied { read } for pid=5770 comm="syz.2.783" dev="nsfs" ino=4026532826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.471122][ T5778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.786'. [ 75.486963][ T29] audit: type=1400 audit(1764805777.687:6808): avc: denied { open } for pid=5770 comm="syz.2.783" path="net:[4026532826]" dev="nsfs" ino=4026532826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.519383][ T29] audit: type=1400 audit(1764805777.687:6809): avc: denied { create } for pid=5770 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.526295][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 75.539256][ T29] audit: type=1326 audit(1764805777.717:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26baaf749 code=0x7ffc0000 [ 75.547977][ T5773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.785'. [ 75.571327][ T29] audit: type=1326 audit(1764805777.717:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26baaf749 code=0x7ffc0000 [ 75.586460][ T5780] loop4: detected capacity change from 0 to 512 [ 75.603516][ T29] audit: type=1326 audit(1764805777.717:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb26baaf749 code=0x7ffc0000 [ 75.633030][ T29] audit: type=1400 audit(1764805777.717:6813): avc: denied { kexec_image_load } for pid=5772 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.641280][ T5784] ip6t_srh: unknown srh match flags 4000 [ 75.661272][ T5783] siw: device registration error -23 [ 75.669102][ T5780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 75.679229][ T5780] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.747407][ T5773] FAT-fs (loop4): FAT read failed (blocknr 128) [ 75.968814][ T5786] loop4: detected capacity change from 0 to 1024 [ 75.975487][ T5786] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 76.030555][ T5791] netlink: 'syz.4.789': attribute type 27 has an invalid length. [ 76.064807][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.070285][ T5793] FAULT_INJECTION: forcing a failure. [ 76.070285][ T5793] name failslab, interval 1, probability 0, space 0, times 0 [ 76.072071][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.084555][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.1.790 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.084581][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.084592][ T5793] Call Trace: [ 76.084599][ T5793] [ 76.084607][ T5793] __dump_stack+0x1d/0x30 [ 76.084631][ T5793] dump_stack_lvl+0xe8/0x140 [ 76.084722][ T5793] dump_stack+0x15/0x1b [ 76.084740][ T5793] should_fail_ex+0x265/0x280 [ 76.084807][ T5793] should_failslab+0x8c/0xb0 [ 76.084832][ T5793] __kmalloc_noprof+0xa5/0x570 [ 76.084856][ T5793] ? security_bpf_prog_load+0x60/0x140 [ 76.084921][ T5793] ? strncpy_from_user+0x13a/0x260 [ 76.084960][ T5793] security_bpf_prog_load+0x60/0x140 [ 76.084989][ T5793] bpf_prog_load+0xef8/0x1100 [ 76.085025][ T5793] ? security_bpf+0x2b/0x90 [ 76.085130][ T5793] __sys_bpf+0x469/0x7c0 [ 76.085163][ T5793] __x64_sys_bpf+0x41/0x50 [ 76.085240][ T5793] x64_sys_call+0x28e1/0x3000 [ 76.085305][ T5793] do_syscall_64+0xd8/0x2a0 [ 76.085393][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.085413][ T5793] RIP: 0033:0x7fa7502df749 [ 76.085428][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.085445][ T5793] RSP: 002b:00007fa74ed3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.085464][ T5793] RAX: ffffffffffffffda RBX: 00007fa750535fa0 RCX: 00007fa7502df749 [ 76.085476][ T5793] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 76.085512][ T5793] RBP: 00007fa74ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.085524][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.085537][ T5793] R13: 00007fa750536038 R14: 00007fa750535fa0 R15: 00007ffd7a0ec298 [ 76.085555][ T5793] [ 76.340927][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.355999][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.422383][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.431696][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.442354][ T5794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.462255][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.474184][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.483165][ T5810] tipc: Enabling of bearer rejected, already enabled [ 76.491371][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.519385][ T5806] lo speed is unknown, defaulting to 1000 [ 76.525242][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.539375][ T5806] lo speed is unknown, defaulting to 1000 [ 76.569010][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.584376][ T5814] loop5: detected capacity change from 0 to 1024 [ 76.588382][ T5816] netlink: 108 bytes leftover after parsing attributes in process `syz.4.800'. [ 76.608055][ T5814] EXT4-fs: Ignoring removed nobh option [ 76.613671][ T5814] EXT4-fs: Ignoring removed bh option [ 76.642027][ T5814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.707424][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.816888][ T5834] loop5: detected capacity change from 0 to 512 [ 76.845120][ T5834] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.854232][ T5834] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 76.879433][ T5834] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 76.888692][ T5828] loop6: detected capacity change from 0 to 2048 [ 76.892579][ T5834] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 76.923319][ T5834] System zones: 0-2, 18-18, 34-35 [ 76.934020][ T5834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.955051][ T5834] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.966759][ T5828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.002591][ T5847] SET target dimension over the limit! [ 77.052996][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.086115][ T5855] capability: warning: `syz.5.813' uses 32-bit capabilities (legacy support in use) [ 77.116690][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.135999][ T5858] loop1: detected capacity change from 0 to 1024 [ 77.142937][ T5858] EXT4-fs: Ignoring removed nobh option [ 77.148514][ T5858] EXT4-fs: Ignoring removed bh option [ 77.183249][ T5858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.227751][ T5866] netlink: 204 bytes leftover after parsing attributes in process `syz.2.817'. [ 77.227785][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.817'. [ 77.227801][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 77.227822][ T5866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.817'. [ 77.230876][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.246307][ T5868] netlink: 'syz.6.816': attribute type 12 has an invalid length. [ 77.293859][ T5872] bridge: RTM_NEWNEIGH with invalid ether address [ 77.314604][ T5874] ip6t_srh: unknown srh match flags 4000 [ 77.352373][ T5876] loop6: detected capacity change from 0 to 512 [ 77.354363][ T5876] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 77.354565][ T5876] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.505435][ T5883] loop6: detected capacity change from 0 to 512 [ 77.511449][ T5883] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.511769][ T5883] EXT4-fs (loop6): mount failed [ 77.519631][ T5888] FAULT_INJECTION: forcing a failure. [ 77.519631][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.519669][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.2.824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.519761][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.519771][ T5888] Call Trace: [ 77.519776][ T5888] [ 77.519783][ T5888] __dump_stack+0x1d/0x30 [ 77.519806][ T5888] dump_stack_lvl+0xe8/0x140 [ 77.519880][ T5888] dump_stack+0x15/0x1b [ 77.519898][ T5888] should_fail_ex+0x265/0x280 [ 77.519985][ T5888] should_fail+0xb/0x20 [ 77.520001][ T5888] should_fail_usercopy+0x1a/0x20 [ 77.520020][ T5888] _copy_to_user+0x20/0xa0 [ 77.520047][ T5888] simple_read_from_buffer+0xb5/0x130 [ 77.520081][ T5888] proc_fail_nth_read+0x10e/0x150 [ 77.520124][ T5888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.520152][ T5888] vfs_read+0x1a8/0x770 [ 77.520176][ T5888] ? __rcu_read_unlock+0x4f/0x70 [ 77.520207][ T5888] ? __fget_files+0x184/0x1c0 [ 77.520232][ T5888] ? mutex_lock+0x58/0x90 [ 77.520260][ T5888] ksys_read+0xda/0x1a0 [ 77.520293][ T5888] __x64_sys_read+0x40/0x50 [ 77.520315][ T5888] x64_sys_call+0x2889/0x3000 [ 77.520337][ T5888] do_syscall_64+0xd8/0x2a0 [ 77.520359][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.520481][ T5888] RIP: 0033:0x7f2311ede15c [ 77.520498][ T5888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.520526][ T5888] RSP: 002b:00007f2310947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.520547][ T5888] RAX: ffffffffffffffda RBX: 00007f2312135fa0 RCX: 00007f2311ede15c [ 77.520561][ T5888] RDX: 000000000000000f RSI: 00007f23109470a0 RDI: 0000000000000004 [ 77.520574][ T5888] RBP: 00007f2310947090 R08: 0000000000000000 R09: 0000000000000000 [ 77.520587][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.520600][ T5888] R13: 00007f2312136038 R14: 00007f2312135fa0 R15: 00007ffc65051dd8 [ 77.520619][ T5888] [ 77.701461][ T5897] loop5: detected capacity change from 0 to 1024 [ 77.701887][ T5897] EXT4-fs: Ignoring removed nobh option [ 77.701986][ T5897] EXT4-fs: Ignoring removed bh option [ 77.713150][ T5897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.908258][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.208946][ T5907] netlink: 'syz.5.831': attribute type 1 has an invalid length. [ 78.224107][ T5907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.270396][ T5907] bond1 (unregistering): Released all slaves [ 78.328236][ T5918] loop1: detected capacity change from 0 to 1024 [ 78.444074][ T5922] loop5: detected capacity change from 0 to 128 [ 78.491906][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 78.621984][ T5933] SELinux: failed to load policy [ 78.769540][ T5943] ip6t_srh: unknown srh match flags 4000 [ 79.258819][ T5926] SET target dimension over the limit! [ 79.272685][ T5918] syz.1.835 (5918) used greatest stack depth: 7288 bytes left [ 79.303874][ T5951] SELinux: failed to load policy [ 79.347181][ T5957] loop1: detected capacity change from 0 to 256 [ 79.484487][ T5972] macvtap1: entered promiscuous mode [ 79.489862][ T5972] macvtap1: entered allmulticast mode [ 79.521379][ T5975] ip6t_srh: unknown srh match flags 4000 [ 79.582097][ T5982] SELinux: failed to load policy [ 79.629916][ T5985] loop6: detected capacity change from 0 to 2048 [ 79.753422][ T5999] loop5: detected capacity change from 0 to 2048 [ 79.797413][ T6001] loop1: detected capacity change from 0 to 128 [ 79.818836][ T6001] EXT4-fs: Ignoring removed nobh option [ 79.826483][ T6001] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.870: iget: checksum invalid [ 79.838550][ T6001] EXT4-fs (loop1): get root inode failed [ 79.844328][ T6001] EXT4-fs (loop1): mount failed [ 79.877180][ T6005] ip6t_srh: unknown srh match flags 4000 [ 79.888929][ T6001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 79.895585][ T6001] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.903372][ T6001] vhci_hcd vhci_hcd.0: Device attached [ 79.918866][ T6001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 79.925480][ T6001] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.933179][ T6001] vhci_hcd vhci_hcd.0: Device attached [ 79.950174][ T6008] vhci_hcd: connection closed [ 79.950209][ T6006] vhci_hcd: connection closed [ 79.955121][ T2326] vhci_hcd: stop threads [ 79.964064][ T2326] vhci_hcd: release socket [ 79.968477][ T2326] vhci_hcd: disconnect device [ 79.979264][ T6011] SELinux: failed to load policy [ 79.984294][ T2326] vhci_hcd: stop threads [ 79.988554][ T2326] vhci_hcd: release socket [ 79.993088][ T2326] vhci_hcd: disconnect device [ 80.011155][ T6013] Driver unsupported XDP return value 0 on prog (id 633) dev N/A, expect packet loss! [ 80.323755][ T6032] loop4: detected capacity change from 0 to 512 [ 80.332475][ T6034] SELinux: failed to load policy [ 80.339407][ T6032] EXT4-fs: Ignoring removed bh option [ 80.344842][ T6032] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.354279][ T6036] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 80.365517][ T6032] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 80.380362][ T6036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.387306][ T6032] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.395556][ T6032] EXT4-fs (loop4): failed to initialize system zone (-117) [ 80.403003][ T6032] EXT4-fs (loop4): mount failed [ 80.403843][ T6036] bond1 (unregistering): Released all slaves [ 80.495981][ T6044] __nla_validate_parse: 24 callbacks suppressed [ 80.495995][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 80.511280][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 80.511295][ T29] audit: type=1400 audit(1764805782.847:7443): avc: denied { firmware_load } for pid=6045 comm="syz.2.889" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.558684][ T29] audit: type=1400 audit(1764805782.897:7444): avc: denied { append } for pid=6045 comm="syz.2.889" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.560499][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 80.582059][ T29] audit: type=1400 audit(1764805782.907:7445): avc: denied { create } for pid=6045 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.591794][ T6049] loop1: detected capacity change from 0 to 2048 [ 80.611094][ T29] audit: type=1400 audit(1764805782.907:7446): avc: denied { write } for pid=6045 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.697968][ T6051] ip6gretap0: entered promiscuous mode [ 80.714427][ T6057] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.734415][ T6051] ip6gretap0: left promiscuous mode [ 80.740268][ T6059] SELinux: failed to load policy [ 80.745550][ T29] audit: type=1400 audit(1764805783.087:7447): avc: denied { create } for pid=6056 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.765799][ T29] audit: type=1400 audit(1764805783.087:7448): avc: denied { connect } for pid=6056 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.797227][ T6054] loop1: detected capacity change from 0 to 512 [ 80.804559][ T6054] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 80.826861][ T6054] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.835285][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 80.842722][ T29] audit: type=1326 audit(1764805783.137:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7502df749 code=0x7ffc0000 [ 80.869370][ T29] audit: type=1326 audit(1764805783.137:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa7502df749 code=0x7ffc0000 [ 80.892735][ T29] audit: type=1326 audit(1764805783.137:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7502df749 code=0x7ffc0000 [ 80.916264][ T29] audit: type=1326 audit(1764805783.137:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7502df749 code=0x7ffc0000 [ 80.951180][ T6067] loop4: detected capacity change from 0 to 512 [ 81.003778][ T6067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.896: bg 0: block 35: padding at end of block bitmap is not set [ 81.009763][ T6054] FAT-fs (loop1): FAT read failed (blocknr 128) [ 81.024535][ T6067] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.039291][ T6067] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.896: invalid indirect mapped block 4294967295 (level 1) [ 81.053803][ T6065] ip6gretap0: entered promiscuous mode [ 81.063831][ T6065] ip6gretap0: left promiscuous mode [ 81.074168][ T6067] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.896: invalid indirect mapped block 4294967295 (level 2) [ 81.089286][ T6067] EXT4-fs (loop4): 1 truncate cleaned up [ 81.095345][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.116480][ T6077] macvtap1: entered promiscuous mode [ 81.121843][ T6077] macvtap1: entered allmulticast mode [ 81.126229][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.128041][ T6075] SET target dimension over the limit! [ 81.136695][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.255812][ T6082] xt_connbytes: Forcing CT accounting to be enabled [ 81.262568][ T6082] set match dimension is over the limit! [ 81.305685][ T6091] ip6t_srh: unknown srh match flags 4000 [ 81.311594][ T6086] loop6: detected capacity change from 0 to 2048 [ 81.312534][ T6090] SELinux: failed to load policy [ 81.356324][ T6095] loop6: detected capacity change from 0 to 512 [ 81.365521][ T6095] EXT4-fs: Ignoring removed bh option [ 81.371056][ T6095] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.378240][ T6095] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 81.389322][ T6095] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 81.397261][ T6095] EXT4-fs (loop6): failed to initialize system zone (-117) [ 81.405242][ T6095] EXT4-fs (loop6): mount failed [ 81.438678][ T6099] macvtap1: entered promiscuous mode [ 81.444085][ T6099] macvtap1: entered allmulticast mode [ 81.501308][ T6101] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 81.513048][ T6101] loop6: detected capacity change from 0 to 512 [ 81.524998][ T6101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.544196][ T6101] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.568104][ T6101] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.593948][ T6106] loop5: detected capacity change from 0 to 128 [ 81.620778][ T6106] 9pnet_fd: Insufficient options for proto=fd [ 81.670017][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.690267][ T6117] SELinux: failed to load policy [ 81.707986][ T6115] tipc: Enabling of bearer rejected, already enabled [ 81.726440][ T6119] loop4: detected capacity change from 0 to 2048 [ 81.777459][ T6124] macvtap1: entered promiscuous mode [ 81.782919][ T6124] macvtap1: entered allmulticast mode [ 81.789146][ T6124] gretap0: entered promiscuous mode [ 81.794351][ T6124] gretap0: entered allmulticast mode [ 81.800646][ T6124] team0: Device macvtap1 failed to register rx_handler [ 81.807632][ T6124] gretap0: left allmulticast mode [ 81.812855][ T6124] gretap0: left promiscuous mode [ 81.905477][ T6131] loop1: detected capacity change from 0 to 1024 [ 81.912850][ T6131] EXT4-fs: Ignoring removed orlov option [ 81.923056][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.939130][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 82.060278][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.089752][ T6134] lo speed is unknown, defaulting to 1000 [ 82.095984][ T6134] lo speed is unknown, defaulting to 1000 [ 82.146538][ T6141] SET target dimension over the limit! [ 82.152282][ T6139] loop1: detected capacity change from 0 to 736 [ 82.194511][ T6139] rock: directory entry would overflow storage [ 82.200731][ T6139] rock: sig=0x4f50, size=4, remaining=3 [ 82.206280][ T6139] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 82.293099][ T6147] loop1: detected capacity change from 0 to 512 [ 82.303221][ T6147] EXT4-fs: Ignoring removed bh option [ 82.308687][ T6147] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.326385][ T6147] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.341994][ T6147] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.352033][ T6147] EXT4-fs (loop1): failed to initialize system zone (-117) [ 82.359565][ T6147] EXT4-fs (loop1): mount failed [ 82.436576][ T6156] 9pnet_fd: Insufficient options for proto=fd [ 82.477431][ T6163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.934'. [ 82.533945][ T6166] ip6gretap0: entered promiscuous mode [ 82.544342][ T6166] ip6gretap0: left promiscuous mode [ 82.559135][ T6171] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 82.629865][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 82.672677][ T6184] loop4: detected capacity change from 0 to 128 [ 82.689028][ T6180] loop5: detected capacity change from 0 to 512 [ 82.698222][ T6180] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 82.717608][ T6180] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.730307][ T6184] 9pnet_fd: Insufficient options for proto=fd [ 82.742383][ T6188] loop6: detected capacity change from 0 to 512 [ 82.759541][ T6188] EXT4-fs: Ignoring removed bh option [ 82.765005][ T6188] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.777286][ T6188] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.800162][ T6188] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 82.807542][ T6180] FAT-fs (loop5): FAT read failed (blocknr 128) [ 82.811435][ T6188] EXT4-fs (loop6): failed to initialize system zone (-117) [ 82.824704][ T6188] EXT4-fs (loop6): mount failed [ 82.879899][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 83.005371][ T6203] loop6: detected capacity change from 0 to 2048 [ 83.050109][ T6203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.062787][ T6203] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.111658][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.135408][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.956'. [ 83.189220][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.958'. [ 83.211882][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.959'. [ 83.245420][ T6224] loop6: detected capacity change from 0 to 1024 [ 83.265280][ T6224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 83.280274][ T6224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.295094][ T6224] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.960: bg 0: block 88: padding at end of block bitmap is not set [ 83.309957][ T6224] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 83.336610][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.385269][ T6236] loop1: detected capacity change from 0 to 1024 [ 83.392896][ T6236] EXT4-fs: Ignoring removed orlov option [ 83.410234][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.451405][ T6241] loop6: detected capacity change from 0 to 4096 [ 83.460845][ T6241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.600384][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.615374][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.724651][ T6258] Cannot find del_set index 3 as target [ 83.755893][ T6262] ip6gretap0: entered promiscuous mode [ 83.764033][ T6262] ip6gretap0: left promiscuous mode [ 83.774997][ T6264] macvtap1: entered promiscuous mode [ 83.780339][ T6264] macvtap1: entered allmulticast mode [ 83.795767][ T6265] lo speed is unknown, defaulting to 1000 [ 83.801806][ T6265] lo speed is unknown, defaulting to 1000 [ 83.837854][ T6269] loop1: detected capacity change from 0 to 128 [ 83.855116][ T6269] 9pnet_fd: Insufficient options for proto=fd [ 83.907307][ T6274] netlink: 'syz.5.980': attribute type 12 has an invalid length. [ 83.923374][ T6276] SET target dimension over the limit! [ 83.964762][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.113028][ T6288] loop5: detected capacity change from 0 to 1024 [ 84.124580][ T6288] EXT4-fs: Ignoring removed orlov option [ 84.135717][ T6288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.273045][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.341759][ T6292] Cannot find del_set index 3 as target [ 84.683699][ T6304] loop5: detected capacity change from 0 to 1024 [ 84.692472][ T6304] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 84.756295][ T6324] netlink: 'syz.6.1000': attribute type 12 has an invalid length. [ 84.887867][ T6334] loop1: detected capacity change from 0 to 512 [ 84.914590][ T6334] EXT4-fs: inline encryption not supported [ 84.927892][ T6338] macvtap1: entered promiscuous mode [ 84.933327][ T6338] macvtap1: entered allmulticast mode [ 84.946408][ T6336] SELinux: policydb magic number 0x10000e0 does not match expected magic number 0xf97cff8c [ 84.956872][ T6336] SELinux: failed to load policy [ 84.962455][ T6336] netlink: 'syz.6.1005': attribute type 39 has an invalid length. [ 84.962537][ T6334] EXT4-fs (loop1): failed to initialize system zone (-117) [ 84.979987][ T6334] EXT4-fs (loop1): mount failed [ 85.094562][ T6353] loop1: detected capacity change from 0 to 1024 [ 85.111942][ T6353] EXT4-fs: Ignoring removed orlov option [ 85.136823][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.288046][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.345351][ T6370] loop6: detected capacity change from 0 to 512 [ 85.381890][ T6370] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 85.424615][ T6370] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.502566][ T6370] FAT-fs (loop6): FAT read failed (blocknr 128) [ 85.556407][ T6385] tipc: Enabling of bearer rejected, already enabled [ 85.564264][ T29] kauditd_printk_skb: 1612 callbacks suppressed [ 85.564329][ T29] audit: type=1326 audit(1764805787.897:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.6.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 85.594041][ T29] audit: type=1326 audit(1764805787.897:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.6.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 85.599663][ T6387] __nla_validate_parse: 5 callbacks suppressed [ 85.599678][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 85.617558][ T29] audit: type=1326 audit(1764805787.897:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.6.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 85.656045][ T29] audit: type=1400 audit(1764805787.897:9068): avc: denied { write } for pid=6384 comm="syz.5.1026" name="ip_mr_cache" dev="proc" ino=4026533392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.679318][ T29] audit: type=1400 audit(1764805787.897:9069): avc: denied { setattr } for pid=6384 comm="syz.5.1026" name="ip_mr_cache" dev="proc" ino=4026533392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.718197][ T6359] loop4: detected capacity change from 0 to 1024 [ 85.749420][ T6359] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 85.749514][ T6392] loop1: detected capacity change from 0 to 1024 [ 85.766411][ T29] audit: type=1326 audit(1764805788.117:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 85.790270][ T29] audit: type=1326 audit(1764805788.117:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 85.814905][ T6391] loop5: detected capacity change from 0 to 512 [ 85.825120][ T6391] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 85.838982][ T6394] SET target dimension over the limit! [ 85.847195][ T6392] EXT4-fs: Ignoring removed orlov option [ 85.857577][ T29] audit: type=1326 audit(1764805788.117:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 85.864738][ T6391] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.881038][ T29] audit: type=1326 audit(1764805788.117:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 85.914859][ T29] audit: type=1326 audit(1764805788.117:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 85.943786][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.965413][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'. [ 85.976351][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 85.991576][ T6391] FAT-fs (loop5): FAT read failed (blocknr 128) [ 86.051714][ T6403] loop4: detected capacity change from 0 to 512 [ 86.070811][ T6403] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 86.080558][ T6403] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.143846][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1035'. [ 86.144749][ T6403] FAT-fs (loop4): FAT read failed (blocknr 128) [ 86.170980][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.227961][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1039'. [ 86.262001][ T6421] loop5: detected capacity change from 0 to 512 [ 86.277707][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 86.290970][ T6421] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.329880][ T6431] bridge: RTM_NEWNEIGH with invalid ether address [ 86.345716][ T6421] EXT4-fs (loop5): mount failed [ 86.385499][ T6436] 9pnet_fd: Insufficient options for proto=fd [ 86.407773][ T6438] loop6: detected capacity change from 0 to 1024 [ 86.427956][ T6438] EXT4-fs: Ignoring removed orlov option [ 86.443321][ T6440] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1049'. [ 86.452422][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 86.462092][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 86.465267][ T6438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.471044][ T6440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1049'. [ 86.509820][ T6440] loop1: detected capacity change from 0 to 512 [ 86.521526][ T6440] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 86.531355][ T6440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.571747][ T6454] loop5: detected capacity change from 0 to 256 [ 86.587209][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.636254][ T6440] FAT-fs (loop1): FAT read failed (blocknr 128) [ 86.688001][ T6461] loop6: detected capacity change from 0 to 8192 [ 86.735577][ T6461] loop6: detected capacity change from 0 to 1024 [ 86.751998][ T6461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.849769][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.903236][ T6489] netlink: 'syz.6.1069': attribute type 1 has an invalid length. [ 86.946185][ T6495] Cannot find del_set index 3 as target [ 87.001513][ T6493] loop6: detected capacity change from 0 to 2048 [ 87.073806][ T6506] Cannot find del_set index 3 as target [ 87.172638][ T6518] netlink: 'syz.5.1082': attribute type 3 has an invalid length. [ 87.180549][ T6518] netlink: 'syz.5.1082': attribute type 3 has an invalid length. [ 87.238068][ T6525] loop5: detected capacity change from 0 to 1024 [ 87.249061][ T6525] EXT4-fs: Ignoring removed orlov option [ 87.323521][ T6533] FAULT_INJECTION: forcing a failure. [ 87.323521][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 87.336377][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.2.1087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.336404][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.336484][ T6533] Call Trace: [ 87.336489][ T6533] [ 87.336495][ T6533] __dump_stack+0x1d/0x30 [ 87.336549][ T6533] dump_stack_lvl+0xe8/0x140 [ 87.336569][ T6533] dump_stack+0x15/0x1b [ 87.336587][ T6533] should_fail_ex+0x265/0x280 [ 87.336611][ T6533] should_failslab+0x8c/0xb0 [ 87.336637][ T6533] __kvmalloc_node_noprof+0x12e/0x670 [ 87.336789][ T6533] ? alloc_fdtable+0xc2/0x1d0 [ 87.336811][ T6533] alloc_fdtable+0xc2/0x1d0 [ 87.336846][ T6533] dup_fd+0x492/0x510 [ 87.336869][ T6533] ? _raw_spin_unlock+0x26/0x50 [ 87.336903][ T6533] ksys_unshare+0x346/0x6d0 [ 87.336995][ T6533] __x64_sys_unshare+0x1f/0x30 [ 87.337012][ T6533] x64_sys_call+0x2ae6/0x3000 [ 87.337030][ T6533] do_syscall_64+0xd8/0x2a0 [ 87.337048][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.337131][ T6533] RIP: 0033:0x7f2311edf749 [ 87.337148][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.337165][ T6533] RSP: 002b:00007f2310947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.337182][ T6533] RAX: ffffffffffffffda RBX: 00007f2312135fa0 RCX: 00007f2311edf749 [ 87.337220][ T6533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 87.337233][ T6533] RBP: 00007f2310947090 R08: 0000000000000000 R09: 0000000000000000 [ 87.337246][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.337405][ T6533] R13: 00007f2312136038 R14: 00007f2312135fa0 R15: 00007ffc65051dd8 [ 87.337501][ T6533] [ 87.509944][ T6523] loop6: detected capacity change from 0 to 32768 [ 87.531900][ T6538] tipc: Enabled bearer , priority 10 [ 87.538785][ T6538] capability: warning: `syz.2.1089' uses deprecated v2 capabilities in a way that may be insecure [ 87.559348][ T6523] loop6: p1 p3 < p5 p6 > [ 87.587968][ T3014] loop6: p1 p3 < p5 p6 > [ 87.637578][ T6546] Cannot find add_set index 0 as target [ 87.758439][ T3996] udevd[3996]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 87.769837][ T4847] udevd[4847]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 87.781020][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 87.793161][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 87.805290][ T6557] tipc: Enabling of bearer rejected, already enabled [ 87.830418][ T6562] FAULT_INJECTION: forcing a failure. [ 87.830418][ T6562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.843516][ T6562] CPU: 1 UID: 60928 PID: 6562 Comm: syz.6.1100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.843563][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.843575][ T6562] Call Trace: [ 87.843581][ T6562] [ 87.843589][ T6562] __dump_stack+0x1d/0x30 [ 87.843612][ T6562] dump_stack_lvl+0xe8/0x140 [ 87.843646][ T6562] dump_stack+0x15/0x1b [ 87.843739][ T6562] should_fail_ex+0x265/0x280 [ 87.843806][ T6562] should_fail+0xb/0x20 [ 87.843826][ T6562] should_fail_usercopy+0x1a/0x20 [ 87.843846][ T6562] _copy_to_user+0x20/0xa0 [ 87.843910][ T6562] simple_read_from_buffer+0xb5/0x130 [ 87.844182][ T6562] proc_fail_nth_read+0x10e/0x150 [ 87.844280][ T6562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.844325][ T6562] vfs_read+0x1a8/0x770 [ 87.844346][ T6562] ? __rcu_read_unlock+0x4f/0x70 [ 87.844461][ T6562] ? __fget_files+0x184/0x1c0 [ 87.844489][ T6562] ? mutex_lock+0x58/0x90 [ 87.844514][ T6562] ksys_read+0xda/0x1a0 [ 87.844533][ T6562] __x64_sys_read+0x40/0x50 [ 87.844596][ T6562] x64_sys_call+0x2889/0x3000 [ 87.844619][ T6562] do_syscall_64+0xd8/0x2a0 [ 87.844643][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.844665][ T6562] RIP: 0033:0x7fed0480e15c [ 87.844681][ T6562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.844734][ T6562] RSP: 002b:00007fed0326f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.844752][ T6562] RAX: ffffffffffffffda RBX: 00007fed04a65fa0 RCX: 00007fed0480e15c [ 87.844763][ T6562] RDX: 000000000000000f RSI: 00007fed0326f0a0 RDI: 0000000000000006 [ 87.844776][ T6562] RBP: 00007fed0326f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.844789][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.844803][ T6562] R13: 00007fed04a66038 R14: 00007fed04a65fa0 R15: 00007ffe17a409d8 [ 87.844892][ T6562] [ 87.859510][ T4847] udevd[4847]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 87.873899][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 87.890793][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 87.970696][ T3996] udevd[3996]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 88.042369][ T6567] loop5: detected capacity change from 0 to 1024 [ 88.116832][ T6574] Cannot find add_set index 0 as target [ 88.193554][ T6577] Cannot find add_set index 0 as target [ 88.211336][ T6567] EXT4-fs: Ignoring removed orlov option [ 88.537828][ T6588] loop4: detected capacity change from 0 to 512 [ 88.575016][ T6588] EXT4-fs: inline encryption not supported [ 88.729496][ T6588] EXT4-fs (loop4): failed to initialize system zone (-117) [ 88.739346][ T6591] netem: change failed [ 88.751009][ T6588] EXT4-fs (loop4): mount failed [ 88.901159][ T6602] loop5: detected capacity change from 0 to 128 [ 88.914282][ T6602] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.954789][ T4157] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 88.958901][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.4.1113 [ 88.962499][ T4157] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 88.989231][ T4157] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 88.999731][ T4157] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 89.019965][ T6610] 9pnet_fd: Insufficient options for proto=fd [ 89.080035][ T6612] fido_id[6612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.135685][ T6621] 9pnet_fd: Insufficient options for proto=fd [ 89.174394][ T6626] loop5: detected capacity change from 0 to 128 [ 89.213805][ T6626] 9pnet_fd: Insufficient options for proto=fd [ 89.287690][ T6630] loop1: detected capacity change from 0 to 1024 [ 89.317207][ T6630] EXT4-fs: Ignoring removed orlov option [ 89.388836][ T6591] loop6: detected capacity change from 0 to 32768 [ 89.614514][ T6637] netlink: 'syz.6.1127': attribute type 1 has an invalid length. [ 89.696586][ T6641] loop1: detected capacity change from 0 to 512 [ 89.705867][ T6641] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 89.730509][ T6641] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.784976][ T6641] FAT-fs (loop1): FAT read failed (blocknr 128) [ 89.827009][ T6645] loop6: detected capacity change from 0 to 512 [ 89.848655][ T6645] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 89.862309][ T6645] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.883088][ T6654] SET target dimension over the limit! [ 89.908190][ T6645] FAT-fs (loop6): FAT read failed (blocknr 128) [ 89.936737][ T6656] FAULT_INJECTION: forcing a failure. [ 89.936737][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 89.949404][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.1.1136 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.949478][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.949491][ T6656] Call Trace: [ 89.949498][ T6656] [ 89.949506][ T6656] __dump_stack+0x1d/0x30 [ 89.949529][ T6656] dump_stack_lvl+0xe8/0x140 [ 89.949548][ T6656] dump_stack+0x15/0x1b [ 89.949642][ T6656] should_fail_ex+0x265/0x280 [ 89.949666][ T6656] ? __se_sys_memfd_create+0x1c6/0x5f0 [ 89.949685][ T6656] should_failslab+0x8c/0xb0 [ 89.949719][ T6656] __kmalloc_cache_noprof+0x4c/0x4a0 [ 89.949749][ T6656] __se_sys_memfd_create+0x1c6/0x5f0 [ 89.949772][ T6656] __x64_sys_memfd_create+0x31/0x40 [ 89.949851][ T6656] x64_sys_call+0x28cb/0x3000 [ 89.949870][ T6656] do_syscall_64+0xd8/0x2a0 [ 89.949889][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.949919][ T6656] RIP: 0033:0x7fa7502df749 [ 89.949935][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.949953][ T6656] RSP: 002b:00007fa74ed3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 89.949971][ T6656] RAX: ffffffffffffffda RBX: 000000000000052b RCX: 00007fa7502df749 [ 89.949985][ T6656] RDX: 00007fa74ed3eef0 RSI: 0000000000000000 RDI: 00007fa750364960 [ 89.949997][ T6656] RBP: 0000200000000a00 R08: 00007fa74ed3ebb7 R09: 00007fa74ed3ee40 [ 89.950079][ T6656] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 89.950090][ T6656] R13: 00007fa74ed3eef0 R14: 00007fa74ed3eeb0 R15: 0000200000000080 [ 89.950109][ T6656] [ 89.956112][ T6658] FAULT_INJECTION: forcing a failure. [ 89.956112][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 90.023308][ T6661] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 90.025765][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.4.1137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.025865][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.025878][ T6658] Call Trace: [ 90.025884][ T6658] [ 90.025892][ T6658] __dump_stack+0x1d/0x30 [ 90.025988][ T6658] dump_stack_lvl+0xe8/0x140 [ 90.026008][ T6658] dump_stack+0x15/0x1b [ 90.026026][ T6658] should_fail_ex+0x265/0x280 [ 90.026048][ T6658] should_failslab+0x8c/0xb0 [ 90.026127][ T6658] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 90.026161][ T6658] ? __request_module+0x1df/0x3e0 [ 90.026181][ T6658] ? should_failslab+0x8c/0xb0 [ 90.026214][ T6658] kstrdup+0x3e/0xd0 [ 90.026237][ T6658] __request_module+0x1df/0x3e0 [ 90.026257][ T6658] ? capable+0x7c/0xb0 [ 90.026284][ T6658] ? security_capable+0x83/0x90 [ 90.026303][ T6658] dev_load+0x61/0xc0 [ 90.026392][ T6658] dev_ioctl+0x777/0x960 [ 90.026417][ T6658] sock_ioctl+0x593/0x610 [ 90.026445][ T6658] ? __pfx_sock_ioctl+0x10/0x10 [ 90.026471][ T6658] __se_sys_ioctl+0xce/0x140 [ 90.026506][ T6658] __x64_sys_ioctl+0x43/0x50 [ 90.026526][ T6658] x64_sys_call+0x14b0/0x3000 [ 90.026547][ T6658] do_syscall_64+0xd8/0x2a0 [ 90.026570][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.026590][ T6658] RIP: 0033:0x7fb26baaf749 [ 90.026619][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.026636][ T6658] RSP: 002b:00007fb26a517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.026656][ T6658] RAX: ffffffffffffffda RBX: 00007fb26bd05fa0 RCX: 00007fb26baaf749 [ 90.026669][ T6658] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 90.026681][ T6658] RBP: 00007fb26a517090 R08: 0000000000000000 R09: 0000000000000000 [ 90.026693][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.026706][ T6658] R13: 00007fb26bd06038 R14: 00007fb26bd05fa0 R15: 00007ffdbb2e99e8 [ 90.026808][ T6658] [ 90.123194][ T6666] loop4: detected capacity change from 0 to 512 [ 90.144690][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.157313][ T6666] EXT4-fs (loop4): inodes count not valid: 66 vs 32 [ 90.427280][ T6681] lo speed is unknown, defaulting to 1000 [ 90.433558][ T6681] lo speed is unknown, defaulting to 1000 [ 90.449311][ T6685] loop6: detected capacity change from 0 to 512 [ 90.455939][ T6685] EXT4-fs: inline encryption not supported [ 90.463829][ T6685] EXT4-fs (loop6): failed to initialize system zone (-117) [ 90.478881][ T6685] EXT4-fs (loop6): mount failed [ 90.524288][ T6691] loop6: detected capacity change from 0 to 512 [ 90.531798][ T6691] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 90.541313][ T6691] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.575840][ T6693] loop5: detected capacity change from 0 to 128 [ 90.588059][ T6693] 9pnet_fd: Insufficient options for proto=fd [ 90.613551][ T6691] FAT-fs (loop6): FAT read failed (blocknr 128) [ 90.613748][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 90.613760][ T29] audit: type=1326 audit(1764805792.947:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.649598][ T29] audit: type=1326 audit(1764805792.947:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.673135][ T29] audit: type=1326 audit(1764805792.947:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.696617][ T29] audit: type=1326 audit(1764805792.947:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.720172][ T29] audit: type=1326 audit(1764805792.947:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.743622][ T29] audit: type=1326 audit(1764805792.947:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.767271][ T29] audit: type=1326 audit(1764805792.947:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.790820][ T29] audit: type=1326 audit(1764805792.947:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.814315][ T29] audit: type=1326 audit(1764805792.947:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.838150][ T29] audit: type=1326 audit(1764805792.947:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d008f749 code=0x7ffc0000 [ 90.921991][ T6701] netlink: 'syz.6.1151': attribute type 1 has an invalid length. [ 90.935174][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.942557][ T6703] ip6t_srh: unknown srh match flags 4000 [ 90.945249][ T6701] __nla_validate_parse: 31 callbacks suppressed [ 90.945263][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1151'. [ 90.970410][ T6701] bond1 (unregistering): Released all slaves [ 91.003572][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 91.052560][ T6709] tipc: Enabling of bearer rejected, already enabled [ 91.132401][ T6719] loop4: detected capacity change from 0 to 512 [ 91.156243][ T6719] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.171366][ T6717] loop6: detected capacity change from 0 to 2048 [ 91.172746][ T6719] EXT4-fs (loop4): mount failed [ 91.203469][ T6717] 9pnet_fd: Insufficient options for proto=fd [ 91.266115][ T6734] bridge: RTM_NEWNEIGH with invalid ether address [ 91.294046][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1165'. [ 91.294243][ T6738] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1166'. [ 91.343008][ T6747] netlink: 'syz.6.1169': attribute type 12 has an invalid length. [ 91.378043][ T6749] ip6gretap0: entered promiscuous mode [ 91.385839][ T6749] ip6gretap0: left promiscuous mode [ 91.451468][ T6753] ip6gretap0: entered promiscuous mode [ 91.460005][ T6753] ip6gretap0: left promiscuous mode [ 91.471762][ T6755] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1172'. [ 91.531929][ T6761] bridge: RTM_NEWNEIGH with invalid ether address [ 91.535292][ T6760] loop6: detected capacity change from 0 to 2048 [ 91.586852][ T6760] 9pnet_fd: Insufficient options for proto=fd [ 91.632637][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1176'. [ 91.641708][ T6766] netlink: 'syz.5.1176': attribute type 1 has an invalid length. [ 91.649471][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1176'. [ 91.694048][ T6770] FAULT_INJECTION: forcing a failure. [ 91.694048][ T6770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.707425][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.2.1178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.707450][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.707497][ T6770] Call Trace: [ 91.707503][ T6770] [ 91.707511][ T6770] __dump_stack+0x1d/0x30 [ 91.707535][ T6770] dump_stack_lvl+0xe8/0x140 [ 91.707556][ T6770] dump_stack+0x15/0x1b [ 91.707571][ T6770] should_fail_ex+0x265/0x280 [ 91.707594][ T6770] should_fail_alloc_page+0xf2/0x100 [ 91.707625][ T6770] __alloc_frozen_pages_noprof+0xff/0x360 [ 91.707660][ T6770] alloc_pages_mpol+0xb3/0x260 [ 91.707746][ T6770] folio_alloc_mpol_noprof+0x39/0x80 [ 91.707766][ T6770] shmem_get_folio_gfp+0x3cf/0xd60 [ 91.707803][ T6770] shmem_fault+0xf6/0x250 [ 91.707848][ T6770] __do_fault+0xbc/0x200 [ 91.707869][ T6770] handle_mm_fault+0xf78/0x2be0 [ 91.707889][ T6770] ? mt_find+0x21b/0x330 [ 91.707942][ T6770] do_user_addr_fault+0x3fe/0x1080 [ 91.708019][ T6770] exc_page_fault+0x62/0xa0 [ 91.708048][ T6770] asm_exc_page_fault+0x26/0x30 [ 91.708069][ T6770] RIP: 0010:__get_user_4+0x14/0x20 [ 91.708094][ T6770] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 0d 02 00 90 90 90 90 90 90 90 90 90 90 [ 91.708181][ T6770] RSP: 0018:ffffc90000e5be48 EFLAGS: 00050283 [ 91.708199][ T6770] RAX: 0000200000002ffe RBX: 0000000000000000 RCX: ffff8881257ca100 [ 91.708213][ T6770] RDX: 00007ffffffff000 RSI: ffffffff8685e140 RDI: 0000000020080522 [ 91.708227][ T6770] RBP: ffffc90000e5bed0 R08: ffff8881257ca100 R09: 0000000000000003 [ 91.708240][ T6770] R10: 0000000020080522 R11: 0000000000000000 R12: 0000000000000000 [ 91.708252][ T6770] R13: 00000000ffffffff R14: 0000200000002ffe R15: 0000000000000018 [ 91.708269][ T6770] __se_sys_capset+0x13f/0x450 [ 91.708332][ T6770] __x64_sys_capset+0x31/0x40 [ 91.708353][ T6770] x64_sys_call+0x2868/0x3000 [ 91.708371][ T6770] do_syscall_64+0xd8/0x2a0 [ 91.708394][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.708496][ T6770] RIP: 0033:0x7f2311edf749 [ 91.708508][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.708523][ T6770] RSP: 002b:00007f2310947038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 91.708539][ T6770] RAX: ffffffffffffffda RBX: 00007f2312135fa0 RCX: 00007f2311edf749 [ 91.708599][ T6770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002ffa [ 91.708613][ T6770] RBP: 00007f2310947090 R08: 0000000000000000 R09: 0000000000000000 [ 91.708626][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.708638][ T6770] R13: 00007f2312136038 R14: 00007f2312135fa0 R15: 00007ffc65051dd8 [ 91.708654][ T6770] [ 91.996239][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1180'. [ 92.181651][ T6787] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 92.205312][ T6787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.223248][ T6740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.241390][ T6790] bridge: RTM_NEWNEIGH with invalid ether address [ 92.251337][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 92.310112][ T6787] bond2 (unregistering): Released all slaves [ 92.340701][ T6794] FAULT_INJECTION: forcing a failure. [ 92.340701][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.353851][ T6794] CPU: 0 UID: 0 PID: 6794 Comm: syz.6.1189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.353875][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.353926][ T6794] Call Trace: [ 92.353934][ T6794] [ 92.353941][ T6794] __dump_stack+0x1d/0x30 [ 92.353960][ T6794] dump_stack_lvl+0xe8/0x140 [ 92.354076][ T6794] dump_stack+0x15/0x1b [ 92.354093][ T6794] should_fail_ex+0x265/0x280 [ 92.354118][ T6794] should_fail+0xb/0x20 [ 92.354137][ T6794] should_fail_usercopy+0x1a/0x20 [ 92.354159][ T6794] _copy_to_user+0x20/0xa0 [ 92.354181][ T6794] simple_read_from_buffer+0xb5/0x130 [ 92.354251][ T6794] proc_fail_nth_read+0x10e/0x150 [ 92.354282][ T6794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.354387][ T6794] vfs_read+0x1a8/0x770 [ 92.354408][ T6794] ? __rcu_read_unlock+0x4f/0x70 [ 92.354491][ T6794] ? __fget_files+0x184/0x1c0 [ 92.354518][ T6794] ? mutex_lock+0x58/0x90 [ 92.354545][ T6794] ksys_read+0xda/0x1a0 [ 92.354566][ T6794] __x64_sys_read+0x40/0x50 [ 92.354661][ T6794] x64_sys_call+0x2889/0x3000 [ 92.354683][ T6794] do_syscall_64+0xd8/0x2a0 [ 92.354754][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.354779][ T6794] RIP: 0033:0x7fed0480e15c [ 92.354792][ T6794] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.354807][ T6794] RSP: 002b:00007fed0326f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.354889][ T6794] RAX: ffffffffffffffda RBX: 00007fed04a65fa0 RCX: 00007fed0480e15c [ 92.354901][ T6794] RDX: 000000000000000f RSI: 00007fed0326f0a0 RDI: 0000000000000005 [ 92.354914][ T6794] RBP: 00007fed0326f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.354926][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.354937][ T6794] R13: 00007fed04a66038 R14: 00007fed04a65fa0 R15: 00007ffe17a409d8 [ 92.354953][ T6794] [ 92.554037][ T6792] loop5: detected capacity change from 0 to 4096 [ 92.622586][ T6797] SELinux: failed to load policy [ 92.701923][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1192'. [ 92.725859][ T6802] netlink: 'syz.4.1190': attribute type 12 has an invalid length. [ 92.863785][ T6808] ip6t_srh: unknown srh match flags 4000 [ 93.225989][ T6821] loop1: detected capacity change from 0 to 512 [ 93.230727][ T6823] loop5: detected capacity change from 0 to 128 [ 93.245753][ T6825] loop4: detected capacity change from 0 to 512 [ 93.265641][ T6821] EXT4-fs: Ignoring removed bh option [ 93.271209][ T6821] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.279460][ T6821] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 93.301620][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.301620][ T6823] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 93.315348][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.315348][ T6823] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 93.318676][ T6825] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.329494][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.329494][ T6823] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 93.357112][ T6821] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.365163][ T6821] EXT4-fs (loop1): failed to initialize system zone (-117) [ 93.372525][ T6825] EXT4-fs (loop4): mount failed [ 93.373621][ T6821] EXT4-fs (loop1): mount failed [ 93.394618][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.394618][ T6823] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 93.411622][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.411622][ T6823] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 93.425683][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.425683][ T6823] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 93.439535][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.439535][ T6823] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 93.467808][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.467808][ T6823] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 93.481400][ T6831] loop4: detected capacity change from 0 to 256 [ 93.498442][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.498442][ T6823] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 93.521343][ T6823] syz.5.1196: attempt to access beyond end of device [ 93.521343][ T6823] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 93.673027][ T6843] loop1: detected capacity change from 0 to 2048 [ 93.758587][ T6851] loop1: detected capacity change from 0 to 512 [ 93.774956][ T6851] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 93.783647][ T6853] lo speed is unknown, defaulting to 1000 [ 93.790050][ T6851] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.800984][ T6853] lo speed is unknown, defaulting to 1000 [ 93.840107][ T6849] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 93.848027][ T6849] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 93.882110][ T6851] FAT-fs (loop1): FAT read failed (blocknr 128) [ 93.976569][ T6859] FAULT_INJECTION: forcing a failure. [ 93.976569][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 93.989361][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.989386][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.989397][ T6859] Call Trace: [ 93.989404][ T6859] [ 93.989411][ T6859] __dump_stack+0x1d/0x30 [ 93.989430][ T6859] dump_stack_lvl+0xe8/0x140 [ 93.989471][ T6859] dump_stack+0x15/0x1b [ 93.989486][ T6859] should_fail_ex+0x265/0x280 [ 93.989509][ T6859] ? audit_log_d_path+0x8d/0x150 [ 93.989567][ T6859] should_failslab+0x8c/0xb0 [ 93.989593][ T6859] __kmalloc_cache_noprof+0x4c/0x4a0 [ 93.989654][ T6859] audit_log_d_path+0x8d/0x150 [ 93.989679][ T6859] audit_log_d_path_exe+0x42/0x70 [ 93.989713][ T6859] audit_log_task+0x1e9/0x250 [ 93.989742][ T6859] ? kstrtouint+0x76/0xc0 [ 93.989762][ T6859] audit_seccomp+0x61/0x100 [ 93.989787][ T6859] ? __seccomp_filter+0x82d/0x1250 [ 93.989873][ T6859] __seccomp_filter+0x83e/0x1250 [ 93.989897][ T6859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.989925][ T6859] ? vfs_write+0x7e8/0x960 [ 93.989954][ T6859] ? __cond_resched+0x4e/0x90 [ 93.990050][ T6859] __secure_computing+0x82/0x150 [ 93.990069][ T6859] syscall_trace_enter+0xcf/0x1e0 [ 93.990114][ T6859] do_syscall_64+0xb2/0x2a0 [ 93.990185][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.990207][ T6859] RIP: 0033:0x7fb26baaf749 [ 93.990274][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.990335][ T6859] RSP: 002b:00007fb26a517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 93.990357][ T6859] RAX: ffffffffffffffda RBX: 00007fb26bd05fa0 RCX: 00007fb26baaf749 [ 93.990369][ T6859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.990427][ T6859] RBP: 00007fb26a517090 R08: 0000000000000000 R09: 0000000000000000 [ 93.990441][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.990454][ T6859] R13: 00007fb26bd06038 R14: 00007fb26bd05fa0 R15: 00007ffdbb2e99e8 [ 93.990474][ T6859] [ 94.220672][ T6862] loop6: detected capacity change from 0 to 256 [ 94.294348][ T6866] bridge: RTM_NEWNEIGH with invalid ether address [ 94.399161][ T6873] loop4: detected capacity change from 0 to 2048 [ 94.411714][ T6880] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 94.449035][ T6880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.477878][ T6884] SELinux: failed to load policy [ 94.493538][ T6886] loop4: detected capacity change from 0 to 1024 [ 94.498629][ T6888] loop5: detected capacity change from 0 to 256 [ 94.532363][ T6893] bridge: RTM_NEWNEIGH with invalid ether address [ 94.550724][ T6886] EXT4-fs: Ignoring removed orlov option [ 94.663175][ T6910] loop1: detected capacity change from 0 to 2048 [ 94.690857][ T6912] SELinux: failed to load policy [ 94.833929][ T6921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6921 comm=syz.4.1241 [ 94.848449][ T6923] bridge: RTM_NEWNEIGH with invalid ether address [ 94.886232][ T6925] loop1: detected capacity change from 0 to 512 [ 94.904854][ T6925] EXT4-fs: inline encryption not supported [ 94.928649][ T6925] EXT4-fs (loop1): failed to initialize system zone (-117) [ 94.936177][ T6925] EXT4-fs (loop1): mount failed [ 95.498647][ T6932] ip6t_srh: unknown srh match flags 4000 [ 95.577964][ T6938] SELinux: failed to load policy [ 95.638267][ T6943] loop4: detected capacity change from 0 to 1024 [ 95.656033][ T6945] loop6: detected capacity change from 0 to 512 [ 95.657634][ T6943] EXT4-fs: Ignoring removed orlov option [ 95.675799][ T6943] EXT4-fs mount: 18 callbacks suppressed [ 95.675830][ T6943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.694551][ T6945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.733270][ T6945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.788799][ T6945] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.908612][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.934931][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.958156][ T6957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.977700][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 95.977712][ T29] audit: type=1400 audit(1764805798.317:10396): avc: denied { execute } for pid=6966 comm="syz.4.1258" name="file0" dev="tmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.006801][ T6967] FAULT_INJECTION: forcing a failure. [ 96.006801][ T6967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.019907][ T6967] CPU: 1 UID: 0 PID: 6967 Comm: syz.4.1258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.019931][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.019941][ T6967] Call Trace: [ 96.020006][ T6967] [ 96.020013][ T6967] __dump_stack+0x1d/0x30 [ 96.020032][ T6967] dump_stack_lvl+0xe8/0x140 [ 96.020049][ T6967] dump_stack+0x15/0x1b [ 96.020066][ T6967] should_fail_ex+0x265/0x280 [ 96.020136][ T6967] should_fail+0xb/0x20 [ 96.020156][ T6967] should_fail_usercopy+0x1a/0x20 [ 96.020180][ T6967] _copy_from_user+0x1c/0xb0 [ 96.020205][ T6967] memdup_user+0x5e/0xd0 [ 96.020296][ T6967] autofs_dev_ioctl+0x167/0x6a0 [ 96.020317][ T6967] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 96.020339][ T6967] __se_sys_ioctl+0xce/0x140 [ 96.020360][ T6967] __x64_sys_ioctl+0x43/0x50 [ 96.020380][ T6967] x64_sys_call+0x14b0/0x3000 [ 96.020487][ T6967] do_syscall_64+0xd8/0x2a0 [ 96.020507][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.020530][ T6967] RIP: 0033:0x7fb26baaf749 [ 96.020553][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.020611][ T6967] RSP: 002b:00007fb26a517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.020631][ T6967] RAX: ffffffffffffffda RBX: 00007fb26bd05fa0 RCX: 00007fb26baaf749 [ 96.020643][ T6967] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000005 [ 96.020686][ T6967] RBP: 00007fb26a517090 R08: 0000000000000000 R09: 0000000000000000 [ 96.020700][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.020713][ T6967] R13: 00007fb26bd06038 R14: 00007fb26bd05fa0 R15: 00007ffdbb2e99e8 [ 96.020733][ T6967] [ 96.038753][ T29] audit: type=1400 audit(1764805798.347:10397): avc: denied { read write } for pid=6966 comm="syz.4.1258" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.231072][ T6969] loop4: detected capacity change from 0 to 1024 [ 96.237831][ T6969] EXT4-fs: test_dummy_encryption option not supported [ 96.245353][ T6969] __nla_validate_parse: 12 callbacks suppressed [ 96.245365][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1259'. [ 96.313760][ T6973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.334971][ T6982] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1259'. [ 96.355834][ T29] audit: type=1400 audit(1764805798.697:10398): avc: denied { read } for pid=3053 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 96.406473][ T29] audit: type=1400 audit(1764805798.747:10399): avc: denied { read write } for pid=6968 comm="syz.4.1259" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.431317][ T29] audit: type=1400 audit(1764805798.747:10400): avc: denied { open } for pid=6968 comm="syz.4.1259" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.439308][ T6987] loop1: detected capacity change from 0 to 512 [ 96.499663][ T6987] EXT4-fs: Ignoring removed bh option [ 96.505098][ T6987] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.526299][ T6991] loop4: detected capacity change from 0 to 2048 [ 96.540916][ T6991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.557642][ T6991] 9pnet_fd: Insufficient options for proto=fd [ 96.567451][ T6987] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 96.588500][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.609229][ T6987] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.617246][ T6987] EXT4-fs (loop1): failed to initialize system zone (-117) [ 96.654244][ T6987] EXT4-fs (loop1): mount failed [ 96.672976][ T29] audit: type=1400 audit(1764805799.017:10401): avc: denied { audit_write } for pid=6995 comm="syz.4.1267" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.694305][ T29] audit: type=1107 audit(1764805799.017:10402): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' 1s' [ 96.717711][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1267'. [ 96.786604][ T7001] ip6gretap0: entered promiscuous mode [ 96.840262][ T7001] ip6gretap0: left promiscuous mode [ 96.881406][ T29] audit: type=1400 audit(1764805799.157:10403): avc: denied { create } for pid=7004 comm="syz.4.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.911207][ T29] audit: type=1400 audit(1764805799.237:10404): avc: denied { bind } for pid=7015 comm="syz.6.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.949650][ T29] audit: type=1400 audit(1764805799.297:10405): avc: denied { setopt } for pid=7015 comm="syz.6.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.112600][ T7029] loop6: detected capacity change from 0 to 1024 [ 97.119673][ T7029] EXT4-fs: Ignoring removed orlov option [ 97.129840][ T7022] lo speed is unknown, defaulting to 1000 [ 97.150876][ T7022] lo speed is unknown, defaulting to 1000 [ 97.163728][ T7029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.179118][ T7024] loop5: detected capacity change from 0 to 512 [ 97.249863][ T7024] EXT4-fs: inline encryption not supported [ 97.266816][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 97.276083][ T7035] loop4: detected capacity change from 0 to 2048 [ 97.284690][ T7024] EXT4-fs (loop5): failed to initialize system zone (-117) [ 97.296565][ T7024] EXT4-fs (loop5): mount failed [ 97.390918][ T7040] blktrace: Concurrent blktraces are not allowed on loop5 [ 97.407570][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.439069][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 97.463551][ T7042] loop5: detected capacity change from 0 to 512 [ 97.473684][ T7046] loop6: detected capacity change from 0 to 128 [ 97.479557][ T7044] 9pnet_fd: Insufficient options for proto=fd [ 97.498216][ T7042] ext4: Unknown parameter 'uid' [ 97.763419][ T7049] loop6: detected capacity change from 0 to 4096 [ 97.826902][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 97.864021][ T7054] SELinux: failed to load policy [ 98.032260][ T7058] Cannot find add_set index 0 as target [ 98.115122][ T7064] loop6: detected capacity change from 0 to 1024 [ 98.143558][ T7064] EXT4-fs: Ignoring removed orlov option [ 98.152263][ T7060] loop1: detected capacity change from 0 to 2048 [ 98.167554][ T7064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.194823][ T7068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.208567][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'. [ 98.238664][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.252100][ T7077] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 98.260113][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1296'. [ 98.279814][ T7079] loop5: detected capacity change from 0 to 1024 [ 98.297517][ T7079] EXT4-fs: Ignoring removed oldalloc option [ 98.360419][ T7079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.381976][ T7086] SELinux: failed to load policy [ 98.382977][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.401877][ T7079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.446749][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 98.483955][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.602002][ T7106] Cannot find add_set index 0 as target [ 98.615038][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.674808][ T7108] loop5: detected capacity change from 0 to 1024 [ 98.709485][ T7108] EXT4-fs: Ignoring removed orlov option [ 98.724966][ T7108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.746557][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1310'. [ 98.755722][ T7115] netlink: 'syz.6.1310': attribute type 1 has an invalid length. [ 98.765710][ T7121] SELinux: failed to load policy [ 98.822659][ T7124] Cannot find add_set index 0 as target [ 98.834149][ T7125] loop1: detected capacity change from 0 to 1024 [ 98.849410][ T7125] EXT4-fs: Ignoring removed oldalloc option [ 98.855625][ T7125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.872714][ T7125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.930435][ T7131] vlan2: entered allmulticast mode [ 98.935601][ T7131] veth1: entered allmulticast mode [ 98.945340][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.970353][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.985196][ T7132] 9pnet: Could not find request transport: 18446744073709551615 [ 99.026105][ T7137] FAULT_INJECTION: forcing a failure. [ 99.026105][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 99.038838][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.1.1317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.038862][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.038872][ T7137] Call Trace: [ 99.038879][ T7137] [ 99.038886][ T7137] __dump_stack+0x1d/0x30 [ 99.038975][ T7137] dump_stack_lvl+0xe8/0x140 [ 99.038996][ T7137] dump_stack+0x15/0x1b [ 99.039014][ T7137] should_fail_ex+0x265/0x280 [ 99.039036][ T7137] should_failslab+0x8c/0xb0 [ 99.039061][ T7137] kmem_cache_alloc_noprof+0x50/0x480 [ 99.039247][ T7137] ? alloc_empty_file+0x76/0x200 [ 99.039279][ T7137] alloc_empty_file+0x76/0x200 [ 99.039307][ T7137] alloc_file_pseudo+0xc6/0x160 [ 99.039351][ T7137] __shmem_file_setup+0x1de/0x210 [ 99.039424][ T7137] shmem_file_setup+0x3b/0x50 [ 99.039529][ T7137] __se_sys_memfd_create+0x2ef/0x5f0 [ 99.039554][ T7137] __x64_sys_memfd_create+0x31/0x40 [ 99.039583][ T7137] x64_sys_call+0x28cb/0x3000 [ 99.039675][ T7137] do_syscall_64+0xd8/0x2a0 [ 99.039693][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.039712][ T7137] RIP: 0033:0x7fa7502df749 [ 99.039728][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.039810][ T7137] RSP: 002b:00007fa74ed3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 99.039843][ T7137] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007fa7502df749 [ 99.039856][ T7137] RDX: 00007fa74ed3eef0 RSI: 0000000000000000 RDI: 00007fa750364960 [ 99.039880][ T7137] RBP: 0000200000000bc0 R08: 00007fa74ed3ebb7 R09: 00007fa74ed3ee40 [ 99.039891][ T7137] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 99.039902][ T7137] R13: 00007fa74ed3eef0 R14: 00007fa74ed3eeb0 R15: 00002000000007c0 [ 99.039919][ T7137] [ 99.054889][ T7141] loop5: detected capacity change from 0 to 256 [ 99.328627][ T7156] FAULT_INJECTION: forcing a failure. [ 99.328627][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.341816][ T7156] CPU: 1 UID: 0 PID: 7156 Comm: syz.4.1325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.341841][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.341851][ T7156] Call Trace: [ 99.341858][ T7156] [ 99.341865][ T7156] __dump_stack+0x1d/0x30 [ 99.341886][ T7156] dump_stack_lvl+0xe8/0x140 [ 99.341986][ T7156] dump_stack+0x15/0x1b [ 99.342003][ T7156] should_fail_ex+0x265/0x280 [ 99.342024][ T7156] should_fail+0xb/0x20 [ 99.342115][ T7156] should_fail_usercopy+0x1a/0x20 [ 99.342198][ T7156] _copy_from_user+0x1c/0xb0 [ 99.342220][ T7156] kstrtouint_from_user+0x69/0xf0 [ 99.342293][ T7156] ? 0xffffffff81000000 [ 99.342304][ T7156] ? selinux_file_permission+0x1e4/0x320 [ 99.342403][ T7156] proc_fail_nth_write+0x50/0x160 [ 99.342460][ T7156] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.342489][ T7156] vfs_write+0x269/0x960 [ 99.342582][ T7156] ? vfs_read+0x4e6/0x770 [ 99.342602][ T7156] ? __rcu_read_unlock+0x4f/0x70 [ 99.342637][ T7156] ? __fget_files+0x184/0x1c0 [ 99.342705][ T7156] ? mutex_lock+0x58/0x90 [ 99.342731][ T7156] ksys_write+0xda/0x1a0 [ 99.342800][ T7156] __x64_sys_write+0x40/0x50 [ 99.342829][ T7156] x64_sys_call+0x2847/0x3000 [ 99.342848][ T7156] do_syscall_64+0xd8/0x2a0 [ 99.342867][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.342885][ T7156] RIP: 0033:0x7fb26baae1ff [ 99.342898][ T7156] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 99.342976][ T7156] RSP: 002b:00007fb26a517030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 99.342997][ T7156] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb26baae1ff [ 99.343008][ T7156] RDX: 0000000000000001 RSI: 00007fb26a5170a0 RDI: 0000000000000005 [ 99.343019][ T7156] RBP: 00007fb26a517090 R08: 0000000000000000 R09: 0000000000000000 [ 99.343120][ T7156] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 99.343131][ T7156] R13: 00007fb26bd06038 R14: 00007fb26bd05fa0 R15: 00007ffdbb2e99e8 [ 99.343151][ T7156] [ 99.631181][ T7161] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 99.639926][ T7161] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 99.653673][ T7161] loop4: detected capacity change from 0 to 1024 [ 99.692267][ T7161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.721008][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.730289][ T7169] loop6: detected capacity change from 0 to 512 [ 99.738639][ T7169] EXT4-fs: Ignoring removed bh option [ 99.744094][ T7169] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.750628][ T7170] loop5: detected capacity change from 0 to 512 [ 99.757761][ T7172] loop4: detected capacity change from 0 to 512 [ 99.768768][ T7172] EXT4-fs: Ignoring removed bh option [ 99.774205][ T7172] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.823590][ T7170] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1324: bg 0: block 35: padding at end of block bitmap is not set [ 99.840457][ T7169] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 99.852833][ T7172] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 99.870269][ T7169] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 99.878619][ T7169] EXT4-fs (loop6): failed to initialize system zone (-117) [ 99.886311][ T7169] EXT4-fs (loop6): mount failed [ 99.892481][ T7170] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 99.899459][ T7172] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.909519][ T7170] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1324: invalid indirect mapped block 4294967295 (level 1) [ 99.909618][ T7172] EXT4-fs (loop4): failed to initialize system zone (-117) [ 99.964404][ T7172] EXT4-fs (loop4): mount failed [ 99.970512][ T7170] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1324: invalid indirect mapped block 4294967295 (level 2) [ 100.026559][ T7170] EXT4-fs (loop5): 1 truncate cleaned up [ 100.055293][ T7170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.077307][ T7192] loop6: detected capacity change from 0 to 256 [ 100.100800][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.135590][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.213161][ T7205] loop6: detected capacity change from 0 to 1024 [ 100.222453][ T7205] EXT4-fs: Ignoring removed orlov option [ 100.240470][ T7205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.245391][ T7212] loop4: detected capacity change from 0 to 512 [ 100.262122][ T7212] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 100.332654][ T7214] SELinux: failed to load policy [ 100.367213][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.387184][ T7218] netlink: 'syz.6.1346': attribute type 1 has an invalid length. [ 100.412336][ T7220] FAULT_INJECTION: forcing a failure. [ 100.412336][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 100.425108][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.6.1348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.425202][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.425215][ T7220] Call Trace: [ 100.425220][ T7220] [ 100.425228][ T7220] __dump_stack+0x1d/0x30 [ 100.425294][ T7220] dump_stack_lvl+0xe8/0x140 [ 100.425313][ T7220] dump_stack+0x15/0x1b [ 100.425331][ T7220] should_fail_ex+0x265/0x280 [ 100.425354][ T7220] ? allocate_cgrp_cset_links+0x7e/0x1f0 [ 100.425415][ T7220] should_failslab+0x8c/0xb0 [ 100.425440][ T7220] __kmalloc_cache_noprof+0x4c/0x4a0 [ 100.425542][ T7220] allocate_cgrp_cset_links+0x7e/0x1f0 [ 100.425646][ T7220] find_css_set+0x596/0xd20 [ 100.425680][ T7220] ? selinux_inode_permission+0x6bf/0x7c0 [ 100.425709][ T7220] cgroup_migrate_prepare_dst+0x75/0x3f0 [ 100.425810][ T7220] cgroup_attach_task+0x1a6/0x420 [ 100.425922][ T7220] __cgroup_procs_write+0x1ff/0x250 [ 100.425952][ T7220] ? __pfx_cgroup_procs_write+0x10/0x10 [ 100.426135][ T7220] cgroup_procs_write+0x27/0x50 [ 100.426226][ T7220] cgroup_file_write+0x19d/0x350 [ 100.426305][ T7220] ? __pfx_cgroup_file_write+0x10/0x10 [ 100.426360][ T7220] kernfs_fop_write_iter+0x1eb/0x300 [ 100.426383][ T7220] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 100.426404][ T7220] vfs_write+0x52a/0x960 [ 100.426428][ T7220] ksys_write+0xda/0x1a0 [ 100.426451][ T7220] __x64_sys_write+0x40/0x50 [ 100.426470][ T7220] x64_sys_call+0x2847/0x3000 [ 100.426490][ T7220] do_syscall_64+0xd8/0x2a0 [ 100.426516][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.426608][ T7220] RIP: 0033:0x7fed0480f749 [ 100.426624][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.426642][ T7220] RSP: 002b:00007fed0326f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.426661][ T7220] RAX: ffffffffffffffda RBX: 00007fed04a65fa0 RCX: 00007fed0480f749 [ 100.426675][ T7220] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000009 [ 100.426688][ T7220] RBP: 00007fed0326f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.426701][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.426713][ T7220] R13: 00007fed04a66038 R14: 00007fed04a65fa0 R15: 00007ffe17a409d8 [ 100.426779][ T7220] [ 100.665120][ T7224] loop6: detected capacity change from 0 to 256 [ 100.692257][ T7226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7226 comm=syz.4.1350 [ 100.774981][ T7233] bridge: RTM_NEWNEIGH with invalid ether address [ 100.809058][ T7237] xt_hashlimit: max too large, truncated to 1048576 [ 100.815721][ T7237] No such timeout policy "syz1" [ 100.820962][ T7234] loop6: detected capacity change from 0 to 2048 [ 100.826494][ T7237] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 100.865702][ T7234] Alternate GPT is invalid, using primary GPT. [ 100.872144][ T7234] loop6: p2 p3 p7 [ 100.894990][ T3014] Alternate GPT is invalid, using primary GPT. [ 100.901454][ T3014] loop6: p2 p3 p7 [ 100.924720][ T7251] loop4: detected capacity change from 0 to 1024 [ 100.928329][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 100.933314][ T7254] FAULT_INJECTION: forcing a failure. [ 100.933314][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 100.953633][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.6.1357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.953660][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.953673][ T7254] Call Trace: [ 100.953680][ T7254] [ 100.953688][ T7254] __dump_stack+0x1d/0x30 [ 100.953712][ T7254] dump_stack_lvl+0xe8/0x140 [ 100.953790][ T7254] dump_stack+0x15/0x1b [ 100.953851][ T7254] should_fail_ex+0x265/0x280 [ 100.953872][ T7254] should_failslab+0x8c/0xb0 [ 100.953898][ T7254] __kmalloc_noprof+0xa5/0x570 [ 100.953924][ T7254] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 100.954060][ T7254] ? __kfree_skb+0x109/0x150 [ 100.954084][ T7254] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 100.954116][ T7254] ? nlmon_xmit+0x4f/0x60 [ 100.954196][ T7254] genl_family_rcv_msg_doit+0x48/0x1b0 [ 100.954228][ T7254] ? genl_get_cmd+0x425/0x660 [ 100.954319][ T7254] ? __dev_queue_xmit+0x148/0x1fd0 [ 100.954425][ T7254] genl_rcv_msg+0x422/0x460 [ 100.954532][ T7254] ? __pfx_ctrl_getfamily+0x10/0x10 [ 100.954562][ T7254] netlink_rcv_skb+0x123/0x220 [ 100.954594][ T7254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.954638][ T7254] genl_rcv+0x28/0x40 [ 100.954707][ T7254] netlink_unicast+0x5c0/0x690 [ 100.954731][ T7254] netlink_sendmsg+0x58b/0x6b0 [ 100.954753][ T7254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.954822][ T7254] __sock_sendmsg+0x145/0x180 [ 100.954853][ T7254] __sys_sendto+0x268/0x330 [ 100.954885][ T7254] __x64_sys_sendto+0x76/0x90 [ 100.954913][ T7254] x64_sys_call+0x29a7/0x3000 [ 100.954937][ T7254] do_syscall_64+0xd8/0x2a0 [ 100.954964][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.954985][ T7254] RIP: 0033:0x7fed048115dc [ 100.955081][ T7254] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 100.955098][ T7254] RSP: 002b:00007fed0326dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 100.955150][ T7254] RAX: ffffffffffffffda RBX: 00007fed0326dfc0 RCX: 00007fed048115dc [ 100.955164][ T7254] RDX: 0000000000000020 RSI: 00007fed0326e010 RDI: 0000000000000003 [ 100.955178][ T7254] RBP: 0000000000000000 R08: 00007fed0326df14 R09: 000000000000000c [ 100.955191][ T7254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 100.955205][ T7254] R13: 00007fed0326df68 R14: 00007fed0326e010 R15: 0000000000000000 [ 100.955254][ T7254] [ 100.957386][ T7251] EXT4-fs: Ignoring removed orlov option [ 100.978827][ T3996] udevd[3996]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 100.982625][ T4847] udevd[4847]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 101.110340][ T7267] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 101.224959][ T7251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.236234][ T7270] lo speed is unknown, defaulting to 1000 [ 101.238621][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 101.238635][ T29] audit: type=1400 audit(1764805803.567:10606): avc: denied { ioctl } for pid=7269 comm="syz.6.1359" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.243926][ T7270] lo speed is unknown, defaulting to 1000 [ 101.256583][ T3996] udevd[3996]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 101.277862][ T4847] udevd[4847]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 101.289868][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 101.326786][ T7251] __nla_validate_parse: 12 callbacks suppressed [ 101.326803][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 101.432180][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.477327][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 101.521951][ T7287] SELinux: failed to load policy [ 101.572450][ T7289] bridge: RTM_NEWNEIGH with invalid ether address [ 101.623465][ T7293] FAULT_INJECTION: forcing a failure. [ 101.623465][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 101.636128][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.4.1367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.636267][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.636281][ T7293] Call Trace: [ 101.636289][ T7293] [ 101.636296][ T7293] __dump_stack+0x1d/0x30 [ 101.636316][ T7293] dump_stack_lvl+0xe8/0x140 [ 101.636406][ T7293] dump_stack+0x15/0x1b [ 101.636420][ T7293] should_fail_ex+0x265/0x280 [ 101.636441][ T7293] should_failslab+0x8c/0xb0 [ 101.636465][ T7293] kmem_cache_alloc_noprof+0x50/0x480 [ 101.636488][ T7293] ? io_submit_one+0xb8/0x1280 [ 101.636525][ T7293] io_submit_one+0xb8/0x1280 [ 101.636585][ T7293] __se_sys_io_submit+0xfb/0x280 [ 101.636651][ T7293] __x64_sys_io_submit+0x43/0x50 [ 101.636695][ T7293] x64_sys_call+0x2e40/0x3000 [ 101.636783][ T7293] do_syscall_64+0xd8/0x2a0 [ 101.636806][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.636839][ T7293] RIP: 0033:0x7fb26baaf749 [ 101.636865][ T7293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.636882][ T7293] RSP: 002b:00007fb26a517038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 101.636901][ T7293] RAX: ffffffffffffffda RBX: 00007fb26bd05fa0 RCX: 00007fb26baaf749 [ 101.636988][ T7293] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fb26a4d3000 [ 101.637073][ T7293] RBP: 00007fb26a517090 R08: 0000000000000000 R09: 0000000000000000 [ 101.637084][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.637095][ T7293] R13: 00007fb26bd06038 R14: 00007fb26bd05fa0 R15: 00007ffdbb2e99e8 [ 101.637133][ T7293] [ 101.812771][ T29] audit: type=1326 audit(1764805804.157:10607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 101.836770][ T29] audit: type=1326 audit(1764805804.157:10608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 101.860447][ T29] audit: type=1326 audit(1764805804.157:10609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed048065e7 code=0x7ffc0000 [ 101.884062][ T29] audit: type=1326 audit(1764805804.157:10610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed047ab829 code=0x7ffc0000 [ 101.907643][ T29] audit: type=1326 audit(1764805804.157:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 101.931313][ T29] audit: type=1326 audit(1764805804.157:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 101.954895][ T29] audit: type=1326 audit(1764805804.157:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 101.978532][ T29] audit: type=1326 audit(1764805804.157:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 102.002168][ T29] audit: type=1326 audit(1764805804.157:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.6.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed0480f783 code=0x7ffc0000 [ 102.091046][ T7298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7298 comm=syz.6.1369 [ 102.234521][ T7302] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1370'. [ 102.317983][ T7306] SET target dimension over the limit! [ 102.326209][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.368004][ T7308] loop5: detected capacity change from 0 to 4096 [ 102.380603][ T7308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.402718][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.425047][ T7313] SELinux: failed to load policy [ 102.444401][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1376'. [ 102.477201][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1378'. [ 102.509943][ T7321] SET target dimension over the limit! [ 102.950553][ T7338] ip6t_srh: unknown srh match flags 4000 [ 102.973060][ T7340] SELinux: failed to load policy [ 103.014018][ T7342] SELinux: policydb magic number 0x10000e0 does not match expected magic number 0xf97cff8c [ 103.024200][ T7342] SELinux: failed to load policy [ 103.031040][ T7342] loop6: detected capacity change from 0 to 128 [ 103.041400][ T7342] netlink: 'syz.6.1387': attribute type 39 has an invalid length. [ 103.317885][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 103.357787][ T7352] SET target dimension over the limit! [ 103.510650][ T7364] SELinux: failed to load policy [ 103.619515][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'. [ 103.647444][ T7373] netlink: 'syz.5.1401': attribute type 1 has an invalid length. [ 103.660653][ T7373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.673404][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 103.684227][ T7373] bond2 (unregistering): Released all slaves [ 103.752431][ T7376] SET target dimension over the limit! [ 103.821929][ T7384] FAULT_INJECTION: forcing a failure. [ 103.821929][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 103.834663][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.5.1405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.834744][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.834756][ T7384] Call Trace: [ 103.834763][ T7384] [ 103.834772][ T7384] __dump_stack+0x1d/0x30 [ 103.834796][ T7384] dump_stack_lvl+0xe8/0x140 [ 103.834815][ T7384] dump_stack+0x15/0x1b [ 103.834831][ T7384] should_fail_ex+0x265/0x280 [ 103.834855][ T7384] should_failslab+0x8c/0xb0 [ 103.834879][ T7384] kmem_cache_alloc_noprof+0x50/0x480 [ 103.834906][ T7384] ? sctp_get_port_local+0x438/0xae0 [ 103.835013][ T7384] sctp_get_port_local+0x438/0xae0 [ 103.835037][ T7384] sctp_do_bind+0x398/0x4b0 [ 103.835120][ T7384] sctp_connect_new_asoc+0x153/0x3a0 [ 103.835143][ T7384] sctp_sendmsg+0xf10/0x18d0 [ 103.835162][ T7384] ? selinux_socket_sendmsg+0x161/0x1b0 [ 103.835185][ T7384] ? __pfx_sctp_sendmsg+0x10/0x10 [ 103.835215][ T7384] inet_sendmsg+0xc5/0xd0 [ 103.835271][ T7384] __sock_sendmsg+0x102/0x180 [ 103.835297][ T7384] __sys_sendto+0x268/0x330 [ 103.835331][ T7384] __x64_sys_sendto+0x76/0x90 [ 103.835353][ T7384] x64_sys_call+0x29a7/0x3000 [ 103.835412][ T7384] do_syscall_64+0xd8/0x2a0 [ 103.835432][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.835450][ T7384] RIP: 0033:0x7f38d008f749 [ 103.835465][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.835521][ T7384] RSP: 002b:00007f38ceaef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 103.835546][ T7384] RAX: ffffffffffffffda RBX: 00007f38d02e5fa0 RCX: 00007f38d008f749 [ 103.835560][ T7384] RDX: 000000000000ffe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 103.835577][ T7384] RBP: 00007f38ceaef090 R08: 0000200000000100 R09: 000000000000001c [ 103.835590][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.835604][ T7384] R13: 00007f38d02e6038 R14: 00007f38d02e5fa0 R15: 00007ffc29041a18 [ 103.835676][ T7384] [ 104.072532][ T7386] loop5: detected capacity change from 0 to 512 [ 104.107237][ T7390] SELinux: failed to load policy [ 104.116269][ T7386] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.131522][ T7386] EXT4-fs (loop5): mount failed [ 104.174207][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 104.183770][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1411'. [ 104.193540][ T7399] loop4: detected capacity change from 0 to 2048 [ 104.214152][ T7399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.270896][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.312473][ T7408] SET target dimension over the limit! [ 104.365957][ T7416] loop5: detected capacity change from 0 to 512 [ 104.372763][ T7417] ip6t_srh: unknown srh match flags 4000 [ 104.381628][ T7416] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1418: EA inode hash validation failed [ 104.394532][ T7416] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #15: comm syz.5.1418: corrupted inode contents [ 104.408902][ T7416] EXT4-fs error (device loop5): ext4_dirty_inode:6513: inode #15: comm syz.5.1418: mark_inode_dirty error [ 104.420844][ T7416] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #15: comm syz.5.1418: corrupted inode contents [ 104.429750][ T7420] FAULT_INJECTION: forcing a failure. [ 104.429750][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 104.434284][ T7416] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.1418: mark_inode_dirty error [ 104.445255][ T7420] CPU: 0 UID: 0 PID: 7420 Comm: syz.2.1419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.445333][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.445345][ T7420] Call Trace: [ 104.445353][ T7420] [ 104.445362][ T7420] __dump_stack+0x1d/0x30 [ 104.445384][ T7420] dump_stack_lvl+0xe8/0x140 [ 104.445404][ T7420] dump_stack+0x15/0x1b [ 104.445453][ T7420] should_fail_ex+0x265/0x280 [ 104.445477][ T7420] should_failslab+0x8c/0xb0 [ 104.445502][ T7420] kmem_cache_alloc_noprof+0x50/0x480 [ 104.445527][ T7420] ? io_submit_one+0xb8/0x1280 [ 104.445572][ T7420] io_submit_one+0xb8/0x1280 [ 104.445607][ T7420] __se_sys_io_submit+0xfb/0x280 [ 104.445697][ T7420] __x64_sys_io_submit+0x43/0x50 [ 104.445723][ T7420] x64_sys_call+0x2e40/0x3000 [ 104.445745][ T7420] do_syscall_64+0xd8/0x2a0 [ 104.445768][ T7420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.445856][ T7420] RIP: 0033:0x7f2311edf749 [ 104.445872][ T7420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.445889][ T7420] RSP: 002b:00007f2310947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 104.445914][ T7420] RAX: ffffffffffffffda RBX: 00007f2312135fa0 RCX: 00007f2311edf749 [ 104.445927][ T7420] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f2310903000 [ 104.445940][ T7420] RBP: 00007f2310947090 R08: 0000000000000000 R09: 0000000000000000 [ 104.445952][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.445965][ T7420] R13: 00007f2312136038 R14: 00007f2312135fa0 R15: 00007ffc65051dd8 [ 104.445987][ T7420] [ 104.621258][ T7416] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1418: mark inode dirty (error -117) [ 104.634038][ T7416] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 104.643119][ T7416] EXT4-fs (loop5): 1 orphan inode deleted [ 104.649146][ T7416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.691542][ T7422] Cannot find del_set index 3 as target [ 104.723607][ T7427] SELinux: failed to load policy [ 104.809445][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.832277][ T7434] loop5: detected capacity change from 0 to 512 [ 104.839371][ T7434] EXT4-fs: inline encryption not supported [ 104.846264][ T7434] EXT4-fs (loop5): failed to initialize system zone (-117) [ 104.853707][ T7434] EXT4-fs (loop5): mount failed [ 105.155471][ T7451] loop4: detected capacity change from 0 to 512 [ 105.171032][ T7451] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.185965][ T7451] EXT4-fs (loop4): mount failed [ 105.798683][ T7466] 9pnet_virtio: no channels available for device GPL [ 105.966768][ T7472] tipc: Enabling of bearer rejected, already enabled [ 106.200819][ T7483] tipc: Enabling of bearer rejected, already enabled [ 106.211369][ T7485] bridge: RTM_NEWNEIGH with invalid ether address [ 106.266513][ T7493] loop6: detected capacity change from 0 to 512 [ 106.275793][ T7493] EXT4-fs: inline encryption not supported [ 106.284708][ T7493] EXT4-fs (loop6): failed to initialize system zone (-117) [ 106.292618][ T7493] EXT4-fs (loop6): mount failed [ 106.327770][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 106.327786][ T29] audit: type=1326 audit(1764805808.667:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.359120][ T29] audit: type=1326 audit(1764805808.667:10820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.382610][ T29] audit: type=1326 audit(1764805808.667:10821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.405997][ T29] audit: type=1326 audit(1764805808.667:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.429514][ T29] audit: type=1326 audit(1764805808.667:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.453100][ T29] audit: type=1326 audit(1764805808.667:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 106.476602][ T29] audit: type=1326 audit(1764805808.677:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed0480f783 code=0x7ffc0000 [ 106.499941][ T29] audit: type=1326 audit(1764805808.677:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed048065e7 code=0x7ffc0000 [ 106.523521][ T29] audit: type=1326 audit(1764805808.677:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed047ab829 code=0x7ffc0000 [ 106.546960][ T29] audit: type=1326 audit(1764805808.677:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed048065e7 code=0x7ffc0000 [ 106.638130][ T7500] __nla_validate_parse: 5 callbacks suppressed [ 106.638222][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 106.657747][ T7502] tipc: Enabling of bearer rejected, already enabled [ 106.715969][ T7508] loop6: detected capacity change from 0 to 512 [ 106.727263][ T7508] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.740905][ T3014] udevd[3014]: worker [3315] terminated by signal 33 (Unknown signal 33) [ 106.749434][ T3014] udevd[3014]: worker [3315] failed while handling '/devices/virtual/block/loop6' [ 106.756678][ T7508] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1454: bad orphan inode 15 [ 106.771282][ T7508] ext4_test_bit(bit=14, block=18) = 1 [ 106.776671][ T7508] is_bad_inode(inode)=0 [ 106.780931][ T7508] NEXT_ORPHAN(inode)=1023 [ 106.785257][ T7508] max_ino=32 [ 106.788435][ T7508] i_nlink=0 [ 106.791737][ T7508] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2967: inode #15: comm syz.6.1454: corrupted xattr block 19: e_value size too large [ 106.806136][ T7508] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 106.815677][ T7508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.838281][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.869062][ T7516] ip6t_srh: unknown srh match flags 4000 [ 106.957098][ T7526] Cannot find add_set index 0 as target [ 106.982251][ T7528] loop6: detected capacity change from 0 to 512 [ 107.001302][ T7528] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.016826][ T7528] EXT4-fs (loop6): mount failed [ 107.051169][ T7532] tipc: Enabling of bearer rejected, already enabled [ 107.096169][ T7536] SET target dimension over the limit! [ 107.130802][ T7540] loop5: detected capacity change from 0 to 128 [ 107.154698][ T7542] ip6t_srh: unknown srh match flags 4000 [ 107.750397][ T7561] tipc: Enabling of bearer rejected, already enabled [ 107.949476][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1476'. [ 107.979728][ T7567] Cannot find add_set index 0 as target [ 107.995914][ T7569] loop5: detected capacity change from 0 to 512 [ 108.003397][ T7569] EXT4-fs: inline encryption not supported [ 108.019505][ T7569] EXT4-fs (loop5): failed to initialize system zone (-117) [ 108.026749][ T7569] EXT4-fs (loop5): mount failed [ 108.049245][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 108.089811][ T7578] ip6gretap0: entered promiscuous mode [ 108.109300][ T7578] ip6gretap0: left promiscuous mode [ 108.127415][ T7582] loop6: detected capacity change from 0 to 2048 [ 108.193985][ T7580] loop4: detected capacity change from 0 to 2048 [ 108.214566][ T7580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.234893][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1487'. [ 108.244780][ T7591] ip6t_srh: unknown srh match flags 4000 [ 108.297824][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.317723][ T7595] loop4: detected capacity change from 0 to 128 [ 108.522790][ T7598] loop6: detected capacity change from 0 to 1024 [ 108.529481][ T7598] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.848125][ T7603] loop6: detected capacity change from 0 to 1024 [ 108.855332][ T7603] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.914537][ T7611] loop6: detected capacity change from 0 to 1024 [ 108.921580][ T7611] EXT4-fs: Ignoring removed orlov option [ 108.930304][ T7611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.945854][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1495'. [ 109.037427][ T7614] loop5: detected capacity change from 0 to 512 [ 109.056517][ T4885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.067426][ T7614] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.082583][ T7614] EXT4-fs (loop5): mount failed [ 109.112849][ T7620] loop6: detected capacity change from 0 to 256 [ 109.254666][ T7629] lo speed is unknown, defaulting to 1000 [ 109.266071][ T7626] loop4: detected capacity change from 0 to 2048 [ 109.281758][ T7629] lo speed is unknown, defaulting to 1000 [ 109.303897][ T7626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.377073][ T7638] loop6: detected capacity change from 0 to 2048 [ 109.422572][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.540210][ T7644] lo speed is unknown, defaulting to 1000 [ 109.546318][ T7644] lo speed is unknown, defaulting to 1000 [ 109.555022][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 109.620433][ T7648] netlink: 'syz.2.1508': attribute type 6 has an invalid length. [ 109.629889][ T7648] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 109.662764][ T7650] loop4: detected capacity change from 0 to 512 [ 109.669607][ T7648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.705210][ T7650] EXT4-fs: Ignoring removed bh option [ 109.710691][ T7650] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.735461][ T7648] bond3: (slave geneve3): making interface the new active one [ 109.814003][ T7650] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 109.829797][ T7648] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 109.839803][ T356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.850196][ T7650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.856754][ T356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.869229][ T7650] EXT4-fs (loop4): failed to initialize system zone (-117) [ 109.889944][ T7650] EXT4-fs (loop4): mount failed [ 109.924122][ T356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.959380][ T356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.971536][ T7655] loop4: detected capacity change from 0 to 128 [ 110.174102][ T7660] FAULT_INJECTION: forcing a failure. [ 110.174102][ T7660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.187180][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.2.1513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.187244][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.187296][ T7660] Call Trace: [ 110.187302][ T7660] [ 110.187308][ T7660] __dump_stack+0x1d/0x30 [ 110.187328][ T7660] dump_stack_lvl+0xe8/0x140 [ 110.187345][ T7660] dump_stack+0x15/0x1b [ 110.187424][ T7660] should_fail_ex+0x265/0x280 [ 110.187458][ T7660] should_fail+0xb/0x20 [ 110.187486][ T7660] should_fail_usercopy+0x1a/0x20 [ 110.187580][ T7660] _copy_from_user+0x1c/0xb0 [ 110.187602][ T7660] __sys_bpf+0x183/0x7c0 [ 110.187705][ T7660] __x64_sys_bpf+0x41/0x50 [ 110.187727][ T7660] x64_sys_call+0x28e1/0x3000 [ 110.187745][ T7660] do_syscall_64+0xd8/0x2a0 [ 110.187771][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.187831][ T7660] RIP: 0033:0x7f2311edf749 [ 110.187844][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.187927][ T7660] RSP: 002b:00007f2310947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.187944][ T7660] RAX: ffffffffffffffda RBX: 00007f2312135fa0 RCX: 00007f2311edf749 [ 110.187955][ T7660] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000f [ 110.187967][ T7660] RBP: 00007f2310947090 R08: 0000000000000000 R09: 0000000000000000 [ 110.187977][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.188050][ T7660] R13: 00007f2312136038 R14: 00007f2312135fa0 R15: 00007ffc65051dd8 [ 110.188067][ T7660] [ 110.386087][ T7664] SET target dimension over the limit! [ 110.557092][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1520'. [ 110.602815][ T7680] Cannot find del_set index 3 as target [ 110.646822][ T7684] IPv6: Can't replace route, no match found [ 110.655786][ T7684] sch_fq: defrate 4294967295 ignored. [ 110.711740][ T7691] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1529'. [ 110.721050][ T7691] 8021q: VLANs not supported on ip_vti0 [ 110.737398][ T7692] SET target dimension over the limit! [ 110.742076][ T7691] lo speed is unknown, defaulting to 1000 [ 110.749192][ T7691] lo speed is unknown, defaulting to 1000 [ 110.869349][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 110.931630][ T7706] Cannot find del_set index 3 as target [ 110.976914][ T7712] loop6: detected capacity change from 0 to 512 [ 111.005090][ T7712] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.021075][ T7712] EXT4-fs (loop6): mount failed [ 111.086470][ T7724] loop6: detected capacity change from 0 to 128 [ 111.149511][ T7720] loop4: detected capacity change from 0 to 1024 [ 111.156265][ T7720] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 111.338109][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 111.338171][ T29] audit: type=1326 audit(1764805813.677:11315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.379978][ T29] audit: type=1326 audit(1764805813.707:11316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.403479][ T29] audit: type=1326 audit(1764805813.727:11317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.429301][ T29] audit: type=1326 audit(1764805813.767:11318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.453981][ T29] audit: type=1326 audit(1764805813.797:11319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.477856][ T29] audit: type=1326 audit(1764805813.817:11320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.501559][ T29] audit: type=1326 audit(1764805813.847:11321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.532804][ T7740] loop4: detected capacity change from 0 to 164 [ 111.539905][ T7740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.552809][ T29] audit: type=1326 audit(1764805813.877:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.576282][ T29] audit: type=1326 audit(1764805813.887:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.599770][ T29] audit: type=1326 audit(1764805813.897:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.6.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed0480f749 code=0x7ffc0000 [ 111.637443][ T7740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.649916][ T7740] Symlink component flag not implemented [ 111.655563][ T7740] Symlink component flag not implemented [ 111.663762][ T7742] Cannot find del_set index 3 as target [ 111.710109][ T7746] bridge: RTM_NEWNEIGH with invalid ether address [ 111.876031][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1557'. [ 111.885102][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1557'. [ 111.950853][ T7766] Cannot find del_set index 3 as target [ 111.978873][ T7771] bridge: RTM_NEWNEIGH with invalid ether address [ 112.152784][ T7790] ip6t_srh: unknown srh match flags 4000 [ 112.199822][ T7796] loop6: detected capacity change from 0 to 128 [ 112.226978][ T7794] loop4: detected capacity change from 0 to 128 [ 112.247925][ T7794] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.276532][ T7794] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.322339][ T7806] loop5: detected capacity change from 0 to 512 [ 112.329440][ T7806] EXT4-fs: inline encryption not supported [ 112.337290][ T7806] EXT4-fs (loop5): failed to initialize system zone (-117) [ 112.345373][ T7806] EXT4-fs (loop5): mount failed [ 112.399991][ T3332] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.442082][ T7815] loop4: detected capacity change from 0 to 512 [ 112.449434][ T3014] ================================================================== [ 112.457505][ T3014] BUG: KCSAN: data-race in set_nlink / set_nlink [ 112.463820][ T3014] [ 112.466130][ T3014] read to 0xffff88810750d5f0 of 4 bytes by task 3996 on cpu 0: [ 112.473656][ T3014] set_nlink+0x29/0xb0 [ 112.477715][ T3014] kernfs_iop_permission+0x1e2/0x220 [ 112.482993][ T3014] inode_permission+0x2de/0x3c0 [ 112.487832][ T3014] link_path_walk+0x779/0xe30 [ 112.492500][ T3014] path_openat+0x1c0/0x23b0 [ 112.496991][ T3014] do_filp_open+0x109/0x230 [ 112.501479][ T3014] do_sys_openat2+0xa6/0x150 [ 112.506060][ T3014] __x64_sys_openat+0xf2/0x120 [ 112.510815][ T3014] x64_sys_call+0x2b07/0x3000 [ 112.515478][ T3014] do_syscall_64+0xd8/0x2a0 [ 112.519964][ T3014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.525844][ T3014] [ 112.528151][ T3014] write to 0xffff88810750d5f0 of 4 bytes by task 3014 on cpu 1: [ 112.535760][ T3014] set_nlink+0x99/0xb0 [ 112.539816][ T3014] kernfs_iop_permission+0x1e2/0x220 [ 112.545093][ T3014] inode_permission+0x2de/0x3c0 [ 112.549934][ T3014] link_path_walk+0x779/0xe30 [ 112.554600][ T3014] path_lookupat+0x8c/0x500 [ 112.559092][ T3014] filename_lookup+0x147/0x340 [ 112.563852][ T3014] vfs_statx+0x9d/0x390 [ 112.567999][ T3014] vfs_fstatat+0x115/0x170 [ 112.572403][ T3014] __se_sys_newfstatat+0x55/0x260 [ 112.577418][ T3014] __x64_sys_newfstatat+0x55/0x70 [ 112.582432][ T3014] x64_sys_call+0x111f/0x3000 [ 112.587097][ T3014] do_syscall_64+0xd8/0x2a0 [ 112.591584][ T3014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.597461][ T3014] [ 112.599765][ T3014] value changed: 0x00000008 -> 0x00000009 [ 112.605461][ T3014] [ 112.607765][ T3014] Reported by Kernel Concurrency Sanitizer on: [ 112.613898][ T3014] CPU: 1 UID: 0 PID: 3014 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.623167][ T3014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.633202][ T3014] ================================================================== [ 112.646921][ T7816] loop5: detected capacity change from 0 to 512 [ 112.657777][ T7816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1581: bg 0: block 35: padding at end of block bitmap is not set [ 112.672780][ T7816] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.676777][ T7815] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.681761][ T7816] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1581: invalid indirect mapped block 4294967295 (level 1) [ 112.696881][ T7815] EXT4-fs (loop4): mount failed [ 112.715102][ T7816] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1581: invalid indirect mapped block 4294967295 (level 2) [ 112.729398][ T7816] EXT4-fs (loop5): 1 truncate cleaned up [ 112.735522][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.755412][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.763963][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.416617][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.