last executing test programs: 20.735422366s ago: executing program 0 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 20.706686837s ago: executing program 0 (id=677): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 19.85779522s ago: executing program 0 (id=702): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) 19.806849691s ago: executing program 0 (id=703): unshare(0x2040400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 19.783065051s ago: executing program 0 (id=704): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x10000000000ac6}, 0x18) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r8, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='afs_cm_no_server_u\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xcf0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.749079361s ago: executing program 0 (id=705): pipe2(&(0x7f0000001cc0), 0x80000) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 4.719155339s ago: executing program 32 (id=705): pipe2(&(0x7f0000001cc0), 0x80000) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 1.774969963s ago: executing program 1 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 1.691069644s ago: executing program 1 (id=1073): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x10000000000ac6}, 0x18) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r8, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='afs_cm_no_server_u\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xcf0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.649147285s ago: executing program 1 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x10000050) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x92, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}, {[@generic={0x86, 0x10, "fe218f3427a1da71bc6411e641ad"}, @lsrr={0x83, 0x23, 0x59, [@broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x7, [{@multicast2, 0x1}]}, @generic={0x44, 0xc, "163f22914db7d55fc38f"}, @timestamp={0x44, 0x1c, 0x70, 0x0, 0x3, [0x7, 0x10000, 0x8, 0x101, 0x2, 0x1]}]}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 1.597657816s ago: executing program 3 (id=1076): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00), 0x0, 0x8001) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad6, 0x20, 0x0, 0x173}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9d8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x82\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f0000000480)=""/205, &(0x7f0000000380)=0xcd) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r7, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r7, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 1.492388787s ago: executing program 1 (id=1078): unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 1.447057428s ago: executing program 1 (id=1079): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) 728.197399ms ago: executing program 3 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 691.08576ms ago: executing program 3 (id=1099): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x10000000000ac6}, 0x18) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r8, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='afs_cm_no_server_u\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xcf0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 624.690231ms ago: executing program 3 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) 559.339721ms ago: executing program 1 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000f00), 0x0, 0x8001) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad6, 0x20, 0x0, 0x173}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0xfffffffffffffbff}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) shutdown(r1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r4, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x42, 0x2, 0xfffffffc}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000440), 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000deff00010000000000000000000000485eea071febdfcc1c0000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/239, 0xef}], 0x1}, 0x43) 559.131231ms ago: executing program 2 (id=1103): unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 558.941962ms ago: executing program 3 (id=1104): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000ffa000/0x3000)=nil, 0x3) 531.504342ms ago: executing program 2 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_io_uring_setup(0x4b1c, &(0x7f00000006c0)={0x0, 0x2b04, 0x3180, 0x2, 0x14e}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 458.713533ms ago: executing program 2 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x9}}}, 0x24}}, 0x0) 407.427844ms ago: executing program 4 (id=1107): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a010200000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000002c0), 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r5) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") 321.834195ms ago: executing program 2 (id=1110): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x10000000000ac6}, 0x18) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r8, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='afs_cm_no_server_u\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xcf0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 285.791606ms ago: executing program 2 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 237.195426ms ago: executing program 3 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_usb_connect(0x5, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r2, 0x3) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, r2, 0x0) 190.893177ms ago: executing program 2 (id=1113): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) 131.202678ms ago: executing program 5 (id=1114): unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 130.953698ms ago: executing program 5 (id=1115): unshare(0x2040400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 130.536998ms ago: executing program 5 (id=1116): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getdents64(r1, &(0x7f0000001f00)=""/4093, 0xffd) 114.810288ms ago: executing program 5 (id=1117): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900e0c13b47efb6b7077fd8998d20c90e01f5bae80da358cd54297825c2d1c678"], 0x64}}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x32}, 0x108000, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0xffff, 0x5, 0x4, 0x6, 0x7ff, 0x3, 0x5, 0x5, r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600, 0x0, 0xa4}, 0x21) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r10 = dup(r9) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000000)={{0x7fffffff, 0xffffffff}, {0xffffffffffffff49, 0x5}, 0x80001005, 0x4}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x8, 0x1, 0x0, 0x0, 0x0, 0x37a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500, 0x6d}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x2) 105.436519ms ago: executing program 4 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) timer_getoverrun(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00'}, 0x5) socket$tipc(0x1e, 0x5, 0x0) r2 = memfd_secret(0x80000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0xfffffffffffff821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x7e}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28, 0x10000000}}]}, 0x154}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r6, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}]}, 0x50}}, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r7, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setresgid(r10, 0xee01, r10) setresgid(0xee01, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfdd6}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x50}, 0x0) 75.300109ms ago: executing program 4 (id=1119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 49.024ms ago: executing program 5 (id=1120): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 48.61224ms ago: executing program 4 (id=1121): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x10000000000ac6}, 0x18) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r8, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='afs_cm_no_server_u\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xcf0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.81272ms ago: executing program 4 (id=1122): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xa2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 3.30266ms ago: executing program 4 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 9) 0s ago: executing program 5 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) kernel console output (not intermixed with test programs): 00000000001ba [ 40.735319][ T4127] RAX: ffffffffffffffda RBX: 00007f555c665fa0 RCX: 00007f555c43e929 [ 40.735331][ T4127] RDX: 0000000000000000 RSI: 0000200000000500 RDI: ffffffffffffffff [ 40.735343][ T4127] RBP: 00007f555aaa7090 R08: 0000000000000020 R09: 0000000000000000 [ 40.735355][ T4127] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 40.735435][ T4127] R13: 0000000000000000 R14: 00007f555c665fa0 R15: 00007fff9eca1c68 [ 40.735452][ T4127] [ 40.738870][ T4129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.757196][ T29] audit: type=1326 audit(1752080825.109:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555c43e929 code=0x7ffc0000 [ 41.009909][ T29] audit: type=1326 audit(1752080825.119:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555c43e929 code=0x7ffc0000 [ 41.033112][ T29] audit: type=1326 audit(1752080825.169:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f555c43d290 code=0x7ffc0000 [ 41.056386][ T29] audit: type=1326 audit(1752080825.169:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f555c43d3df code=0x7ffc0000 [ 41.108663][ T29] audit: type=1326 audit(1752080825.169:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f555c43e929 code=0x7ffc0000 [ 41.131455][ T29] audit: type=1326 audit(1752080825.529:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f555c43d33c code=0x7ffc0000 [ 41.154562][ T29] audit: type=1326 audit(1752080825.529:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f555c43d3df code=0x7ffc0000 [ 41.195506][ T4133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.205213][ T4131] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 41.220689][ T4133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.300289][ T4139] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.307640][ T4139] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 41.396610][ T4143] loop3: detected capacity change from 0 to 512 [ 41.418916][ T4143] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.443021][ T4143] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.454756][ T4143] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.468558][ T4143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.492393][ T4143] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.269: Invalid block bitmap block 0 in block_group 0 [ 41.506914][ T4143] EXT4-fs (loop3): Remounting filesystem read-only [ 41.507180][ T4143] EXT4-fs (loop3): 1 orphan inode deleted [ 41.533522][ T4143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.549475][ T4148] serio: Serial port ptm0 [ 41.650125][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.711617][ T4153] FAULT_INJECTION: forcing a failure. [ 41.711617][ T4153] name failslab, interval 1, probability 0, space 0, times 0 [ 41.724268][ T4153] CPU: 0 UID: 0 PID: 4153 Comm: syz.3.273 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 41.724339][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.724352][ T4153] Call Trace: [ 41.724358][ T4153] [ 41.724407][ T4153] __dump_stack+0x1d/0x30 [ 41.724424][ T4153] dump_stack_lvl+0xe8/0x140 [ 41.724467][ T4153] dump_stack+0x15/0x1b [ 41.724484][ T4153] should_fail_ex+0x265/0x280 [ 41.724512][ T4153] should_failslab+0x8c/0xb0 [ 41.724531][ T4153] kmem_cache_alloc_noprof+0x50/0x310 [ 41.724591][ T4153] ? skb_clone+0x151/0x1f0 [ 41.724624][ T4153] skb_clone+0x151/0x1f0 [ 41.724650][ T4153] pfkey_sendmsg+0x2cc/0x900 [ 41.724720][ T4153] ? avc_has_perm+0xd3/0x150 [ 41.724752][ T4153] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 41.724845][ T4153] __sock_sendmsg+0x142/0x180 [ 41.724943][ T4153] ____sys_sendmsg+0x31e/0x4e0 [ 41.725035][ T4153] ___sys_sendmsg+0x17b/0x1d0 [ 41.725154][ T4153] __x64_sys_sendmsg+0xd4/0x160 [ 41.725183][ T4153] x64_sys_call+0x2999/0x2fb0 [ 41.725257][ T4153] do_syscall_64+0xd2/0x200 [ 41.725286][ T4153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.725311][ T4153] ? clear_bhb_loop+0x40/0x90 [ 41.725328][ T4153] ? clear_bhb_loop+0x40/0x90 [ 41.725367][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.725385][ T4153] RIP: 0033:0x7f1b2aace929 [ 41.725397][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.725433][ T4153] RSP: 002b:00007f1b29137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.725450][ T4153] RAX: ffffffffffffffda RBX: 00007f1b2acf5fa0 RCX: 00007f1b2aace929 [ 41.725460][ T4153] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 41.725534][ T4153] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000000 [ 41.725544][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.725554][ T4153] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 41.725574][ T4153] [ 42.148524][ T4183] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.171773][ T4182] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.217148][ T4188] loop0: detected capacity change from 0 to 512 [ 42.280400][ T4188] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.306205][ T4188] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 42.343057][ T4188] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.351511][ T4188] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.368607][ T4188] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.283: Invalid block bitmap block 0 in block_group 0 [ 42.399871][ T4186] xt_CT: No such helper "pptp" [ 42.410825][ T4186] loop1: detected capacity change from 0 to 1024 [ 42.417775][ T4186] EXT4-fs: Ignoring removed nobh option [ 42.423627][ T4186] EXT4-fs: Ignoring removed bh option [ 42.447211][ T4188] EXT4-fs (loop0): Remounting filesystem read-only [ 42.454334][ T4188] EXT4-fs (loop0): 1 orphan inode deleted [ 42.490719][ T4188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.512208][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.521332][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.530233][ T4186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.607084][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.628920][ T4210] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 42.897901][ T4228] FAULT_INJECTION: forcing a failure. [ 42.897901][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 42.910642][ T4228] CPU: 1 UID: 0 PID: 4228 Comm: syz.2.295 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 42.910670][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.910677][ T4228] Call Trace: [ 42.910681][ T4228] [ 42.910761][ T4228] __dump_stack+0x1d/0x30 [ 42.910828][ T4228] dump_stack_lvl+0xe8/0x140 [ 42.910847][ T4228] dump_stack+0x15/0x1b [ 42.910864][ T4228] should_fail_ex+0x265/0x280 [ 42.910886][ T4228] should_failslab+0x8c/0xb0 [ 42.910922][ T4228] kmem_cache_alloc_noprof+0x50/0x310 [ 42.910936][ T4228] ? getname_kernel+0x3c/0x1f0 [ 42.910949][ T4228] getname_kernel+0x3c/0x1f0 [ 42.910961][ T4228] kern_path+0x23/0x130 [ 42.911101][ T4228] do_move_mount_old+0x62/0xe0 [ 42.911191][ T4228] path_mount+0x54c/0xb20 [ 42.911211][ T4228] ? user_path_at+0x109/0x130 [ 42.911225][ T4228] __se_sys_mount+0x28f/0x2e0 [ 42.911317][ T4228] ? fput+0x8f/0xc0 [ 42.911330][ T4228] __x64_sys_mount+0x67/0x80 [ 42.911347][ T4228] x64_sys_call+0xd36/0x2fb0 [ 42.911360][ T4228] do_syscall_64+0xd2/0x200 [ 42.911378][ T4228] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.911393][ T4228] ? clear_bhb_loop+0x40/0x90 [ 42.911521][ T4228] ? clear_bhb_loop+0x40/0x90 [ 42.911533][ T4228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.911544][ T4228] RIP: 0033:0x7f346d4ee929 [ 42.911553][ T4228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.911563][ T4228] RSP: 002b:00007f346bb57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.911609][ T4228] RAX: ffffffffffffffda RBX: 00007f346d715fa0 RCX: 00007f346d4ee929 [ 42.911616][ T4228] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 42.911623][ T4228] RBP: 00007f346bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 42.911629][ T4228] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 42.911636][ T4228] R13: 0000000000000000 R14: 00007f346d715fa0 R15: 00007ffcf1a2a2b8 [ 42.911653][ T4228] [ 43.179186][ T4236] serio: Serial port ptm0 [ 43.224017][ T4186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.327275][ T4253] __nla_validate_parse: 24 callbacks suppressed [ 43.327288][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 43.342494][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 43.826103][ T4283] loop2: detected capacity change from 0 to 512 [ 43.844185][ T4285] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.890572][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.903269][ T4283] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.916309][ T4283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 43.933174][ T4283] EXT4-fs (loop2): Remounting filesystem read-only [ 43.950080][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 43.958894][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 44.052286][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.091065][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 44.099945][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 44.107656][ T4300] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 44.122737][ T4296] loop4: detected capacity change from 0 to 512 [ 44.130794][ T4296] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.146259][ T4296] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 44.160075][ T4296] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.170156][ T4304] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.186473][ T4296] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.193225][ T4304] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 44.201094][ T4296] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.326: Invalid block bitmap block 0 in block_group 0 [ 44.214661][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 44.221770][ T4296] EXT4-fs (loop4): 1 orphan inode deleted [ 44.255791][ T4296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.277575][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.292935][ T4317] loop9: detected capacity change from 0 to 7 [ 44.299299][ T4317] buffer_io_error: 29 callbacks suppressed [ 44.299311][ T4317] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.310534][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.315732][ T4317] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.328663][ T4317] loop9: unable to read partition table [ 44.338994][ T4317] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.338994][ T4317] ) failed (rc=-5) [ 44.340286][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.379015][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.387566][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.389206][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.405470][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.414242][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.612275][ T4349] loop9: detected capacity change from 0 to 7 [ 44.618666][ T4349] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.626895][ T4349] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.634825][ T4349] loop9: unable to read partition table [ 44.650643][ T4349] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.650643][ T4349] ) failed (rc=-5) [ 44.669002][ T3510] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.687762][ T4355] loop0: detected capacity change from 0 to 512 [ 44.703021][ T4355] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 44.716846][ T4358] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.766504][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 44.931426][ T4387] loop9: detected capacity change from 0 to 7 [ 44.945897][ T4387] loop9: unable to read partition table [ 44.971758][ T4387] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.971758][ T4387] ) failed (rc=-5) [ 45.042029][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 45.050952][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 45.096998][ T4406] loop3: detected capacity change from 0 to 512 [ 45.145409][ T4406] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.189134][ T4406] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 45.352329][ T4406] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.385186][ T4406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.394362][ T4406] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.373: Invalid block bitmap block 0 in block_group 0 [ 45.409269][ T4406] EXT4-fs (loop3): Remounting filesystem read-only [ 45.416000][ T4406] EXT4-fs (loop3): 1 orphan inode deleted [ 45.422717][ T4406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.644099][ T4437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.663822][ T4437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.719891][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 45.790547][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.825207][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 45.825220][ T29] audit: type=1400 audit(1752080830.269:603): avc: denied { write } for pid=4447 comm="syz.4.392" name="igmp6" dev="proc" ino=4026532702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.825594][ T4452] siw: device registration error -23 [ 45.929311][ T4462] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.937759][ T4462] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 46.010848][ T4468] serio: Serial port ptm0 [ 46.441614][ T4478] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.779863][ T4494] siw: device registration error -23 [ 46.803500][ T29] audit: type=1326 audit(1752080831.249:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.871401][ T29] audit: type=1326 audit(1752080831.279:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.894669][ T29] audit: type=1326 audit(1752080831.279:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.918020][ T29] audit: type=1326 audit(1752080831.279:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.941327][ T29] audit: type=1326 audit(1752080831.279:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.953608][ T4507] loop9: detected capacity change from 0 to 7 [ 46.964551][ T29] audit: type=1326 audit(1752080831.279:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 46.993945][ T29] audit: type=1326 audit(1752080831.279:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c45cf58e7 code=0x7ffc0000 [ 47.017091][ T29] audit: type=1326 audit(1752080831.279:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c45c9ab19 code=0x7ffc0000 [ 47.034164][ T3297] loop9: unable to read partition table [ 47.040208][ T29] audit: type=1326 audit(1752080831.279:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 47.079469][ T4507] loop9: unable to read partition table [ 47.085248][ T4507] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 47.085248][ T4507] ) failed (rc=-5) [ 47.196914][ T4517] siw: device registration error -23 [ 47.312041][ T4528] loop1: detected capacity change from 0 to 512 [ 47.319234][ T4528] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.326590][ T4528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 47.338233][ T4528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.348504][ T4528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.362084][ T4528] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.428: Invalid block bitmap block 0 in block_group 0 [ 47.386456][ T4528] EXT4-fs (loop1): Remounting filesystem read-only [ 47.393586][ T4528] EXT4-fs (loop1): 1 orphan inode deleted [ 47.401889][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.488933][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.499186][ T4534] loop3: detected capacity change from 0 to 512 [ 47.506228][ T4534] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.526003][ T4534] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 47.560239][ T4534] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.569949][ T4534] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.577017][ T4534] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.431: Invalid block bitmap block 0 in block_group 0 [ 47.591466][ T4534] EXT4-fs (loop3): Remounting filesystem read-only [ 47.598393][ T4534] EXT4-fs (loop3): 1 orphan inode deleted [ 47.604687][ T4534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.716670][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.812976][ T4553] loop3: detected capacity change from 0 to 512 [ 47.829437][ T4557] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 47.850430][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.865376][ T4553] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.879306][ T4553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 47.895275][ T4553] EXT4-fs (loop3): Remounting filesystem read-only [ 47.899692][ T4562] loop0: detected capacity change from 0 to 512 [ 47.909492][ T4562] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.919747][ T4562] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 47.930473][ T4562] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 47.939690][ T4562] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.946772][ T4562] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.442: Invalid block bitmap block 0 in block_group 0 [ 47.961895][ T4562] EXT4-fs (loop0): Remounting filesystem read-only [ 47.971620][ T4562] EXT4-fs (loop0): 1 orphan inode deleted [ 47.978227][ T4562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.007902][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.042934][ T4567] loop9: detected capacity change from 0 to 7 [ 48.049633][ T4567] loop9: unable to read partition table [ 48.055320][ T4567] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 48.055320][ T4567] ) failed (rc=-5) [ 48.086309][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.179168][ T4577] loop4: detected capacity change from 0 to 512 [ 48.186573][ T4577] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.210460][ T4577] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 48.225199][ T4577] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.233740][ T4577] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.241244][ T4577] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.449: Invalid block bitmap block 0 in block_group 0 [ 48.256026][ T4577] EXT4-fs (loop4): Remounting filesystem read-only [ 48.263308][ T4577] EXT4-fs (loop4): 1 orphan inode deleted [ 48.272357][ T4577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.291871][ T4586] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.408507][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.443876][ T4610] siw: device registration error -23 [ 48.450281][ T4614] loop2: detected capacity change from 0 to 512 [ 48.482503][ T4614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.495179][ T4614] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.586861][ T4626] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.627485][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.678875][ T4635] loop2: detected capacity change from 0 to 764 [ 48.719298][ T4644] loop9: detected capacity change from 0 to 7 [ 48.734934][ T4644] loop9: unable to read partition table [ 48.747827][ T4644] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 48.747827][ T4644] ) failed (rc=-5) [ 49.320836][ T4665] loop0: detected capacity change from 0 to 512 [ 49.331317][ T4664] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.359691][ T4665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.387813][ T4665] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.452275][ T4665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.468512][ T4665] EXT4-fs (loop0): Remounting filesystem read-only [ 49.657291][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.747661][ T4685] loop9: detected capacity change from 0 to 7 [ 49.767866][ T3297] buffer_io_error: 34 callbacks suppressed [ 49.767879][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.808132][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.812776][ T4692] __nla_validate_parse: 15 callbacks suppressed [ 49.812788][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 49.815961][ T3297] loop9: unable to read partition table [ 49.822208][ T4692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 49.862306][ T4685] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.870011][ T4695] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.870231][ T4685] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.886346][ T4685] loop9: unable to read partition table [ 49.892670][ T4685] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 49.892670][ T4685] ) failed (rc=-5) [ 49.906449][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.914688][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.922890][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.940045][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.966139][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.162681][ T4719] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.273650][ T4729] loop9: detected capacity change from 0 to 7 [ 50.281320][ T4729] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.289833][ T4729] loop9: unable to read partition table [ 50.295587][ T4729] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 50.295587][ T4729] ) failed (rc=-5) [ 50.352635][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.361663][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.373647][ T4635] syz.2.471 (4635) used greatest stack depth: 6584 bytes left [ 50.485553][ T4744] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.285873][ T4786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.296041][ T4786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.390058][ T4793] loop9: detected capacity change from 0 to 7 [ 51.396568][ T4793] loop9: unable to read partition table [ 51.399566][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 51.404782][ T4793] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 51.404782][ T4793] ) failed (rc=-5) [ 51.411021][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 51.472331][ T4792] loop3: detected capacity change from 0 to 512 [ 51.486672][ T4792] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.503390][ T4792] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 51.520350][ T4792] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.528587][ T4792] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.535471][ T4792] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.543: Invalid block bitmap block 0 in block_group 0 [ 51.549888][ T4792] EXT4-fs (loop3): Remounting filesystem read-only [ 51.556786][ T4792] __quota_error: 333 callbacks suppressed [ 51.556798][ T4792] Quota error (device loop3): write_blk: dquota write failed [ 51.570213][ T4792] Quota error (device loop3): write_blk: dquota write failed [ 51.577598][ T4792] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 51.587880][ T4792] EXT4-fs (loop3): 1 orphan inode deleted [ 51.596687][ T4792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.679695][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 51.688502][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 51.697738][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.711854][ T4810] loop2: detected capacity change from 0 to 512 [ 51.718739][ T4810] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.729243][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 51.742904][ T4810] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.751322][ T4810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.759505][ T4810] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.552: Invalid block bitmap block 0 in block_group 0 [ 51.778983][ T4810] EXT4-fs (loop2): Remounting filesystem read-only [ 51.785615][ T4810] Quota error (device loop2): write_blk: dquota write failed [ 51.793235][ T4810] Quota error (device loop2): write_blk: dquota write failed [ 51.800761][ T4810] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 51.810343][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 51.810855][ T4810] EXT4-fs (loop2): 1 orphan inode deleted [ 51.825750][ T4810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.842310][ T29] audit: type=1400 audit(1752080836.289:934): avc: denied { lock } for pid=4814 comm="syz.3.553" path="socket:[8871]" dev="sockfs" ino=8871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 51.901419][ T4829] loop9: detected capacity change from 0 to 7 [ 51.908163][ T4829] loop9: unable to read partition table [ 51.913949][ T4829] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 51.913949][ T4829] ) failed (rc=-5) [ 51.946578][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.959010][ T4832] siw: device registration error -23 [ 52.102310][ T4846] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.255738][ T4857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.264880][ T4857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.856760][ T4867] serio: Serial port ptm0 [ 53.076984][ T4892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.086649][ T4894] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 53.094361][ T4894] netlink: 224 bytes leftover after parsing attributes in process `syz.2.585'. [ 53.094581][ T4892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.123997][ T29] audit: type=1400 audit(1752080837.569:935): avc: denied { search } for pid=3036 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.145428][ T29] audit: type=1400 audit(1752080837.569:936): avc: denied { search } for pid=3036 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.166930][ T29] audit: type=1400 audit(1752080837.569:937): avc: denied { search } for pid=3036 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.241902][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 53.252505][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 53.266355][ T4911] loop2: detected capacity change from 0 to 512 [ 53.280289][ T4911] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.297016][ T4911] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 53.303020][ T4911] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.315396][ T4911] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.323092][ T4911] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.592: Invalid block bitmap block 0 in block_group 0 [ 53.324784][ T4913] serio: Serial port ptm0 [ 53.336860][ T4911] EXT4-fs (loop2): Remounting filesystem read-only [ 53.347822][ T4911] EXT4-fs (loop2): 1 orphan inode deleted [ 53.355660][ T4911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.469640][ T4920] random: crng reseeded on system resumption [ 53.493646][ T4920] loop3: detected capacity change from 0 to 128 [ 53.521939][ T4920] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.534519][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.540820][ T4920] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.583945][ T4920] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 53.892229][ T4947] loop0: detected capacity change from 0 to 512 [ 53.913832][ T4947] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.949497][ T4947] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 53.973922][ T4947] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.987774][ T4936] gre1: entered allmulticast mode [ 53.994653][ T4947] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.030183][ T4947] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.606: Invalid block bitmap block 0 in block_group 0 [ 54.065769][ T4947] EXT4-fs (loop0): Remounting filesystem read-only [ 54.073590][ T4947] EXT4-fs (loop0): 1 orphan inode deleted [ 54.080965][ T4947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.157831][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.389394][ T4973] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.485681][ T4983] Invalid ELF header magic: != ELF [ 54.580121][ T4939] Process accounting resumed [ 54.591723][ T4993] loop0: detected capacity change from 0 to 512 [ 54.612901][ T4993] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.643129][ T4993] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 54.668210][ T4993] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.685412][ T4993] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.698739][ T4993] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.626: Invalid block bitmap block 0 in block_group 0 [ 54.719118][ T4993] EXT4-fs (loop0): Remounting filesystem read-only [ 54.735163][ T4993] EXT4-fs (loop0): 1 orphan inode deleted [ 54.753610][ T4993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.861459][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.958221][ T5015] __nla_validate_parse: 10 callbacks suppressed [ 54.958236][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 55.029695][ T5022] loop0: detected capacity change from 0 to 256 [ 55.162103][ T5030] serio: Serial port ptm0 [ 55.232203][ T5037] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 55.239954][ T5037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.646'. [ 55.400124][ T5052] loop9: detected capacity change from 0 to 7 [ 55.425186][ T5050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.438347][ T5052] buffer_io_error: 20 callbacks suppressed [ 55.438357][ T5052] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.471889][ T5052] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.475798][ T5055] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.479742][ T5052] loop9: unable to read partition table [ 55.514031][ T5050] bridge_slave_0: left allmulticast mode [ 55.519763][ T5050] bridge_slave_0: left promiscuous mode [ 55.525561][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.551504][ T5052] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 55.551504][ T5052] ) failed (rc=-5) [ 55.568722][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.586331][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.594553][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.603007][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.620779][ T5050] bridge_slave_1: left allmulticast mode [ 55.626460][ T5050] bridge_slave_1: left promiscuous mode [ 55.632245][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.640731][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.650861][ T5050] bond0: (slave bond_slave_0): Releasing backup interface [ 55.676998][ T5050] bond0: (slave bond_slave_1): Releasing backup interface [ 55.677443][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 55.693012][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 55.752154][ T5077] loop1: detected capacity change from 0 to 512 [ 55.753270][ T5050] team0: Port device team_slave_0 removed [ 55.762162][ T5077] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.777132][ T5077] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 55.795070][ T5077] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.804052][ T5077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.806006][ T5050] team0: Port device team_slave_1 removed [ 55.811434][ T5077] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.657: Invalid block bitmap block 0 in block_group 0 [ 55.830491][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.831889][ T5077] EXT4-fs (loop1): Remounting filesystem read-only [ 55.838075][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.845035][ T5077] EXT4-fs (loop1): 1 orphan inode deleted [ 55.860479][ T5077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.874958][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.882499][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.990697][ T5084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.663'. [ 56.003125][ T5086] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.012044][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.120500][ T5098] loop4: detected capacity change from 0 to 256 [ 56.169276][ T5101] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 56.176940][ T5101] netlink: 224 bytes leftover after parsing attributes in process `syz.2.672'. [ 56.193066][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.221129][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 56.229986][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 56.321267][ T5117] FAULT_INJECTION: forcing a failure. [ 56.321267][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 56.333982][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.3.679 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 56.334075][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.334088][ T5117] Call Trace: [ 56.334094][ T5117] [ 56.334101][ T5117] __dump_stack+0x1d/0x30 [ 56.334139][ T5117] dump_stack_lvl+0xe8/0x140 [ 56.334155][ T5117] dump_stack+0x15/0x1b [ 56.334170][ T5117] should_fail_ex+0x265/0x280 [ 56.334202][ T5117] should_failslab+0x8c/0xb0 [ 56.334226][ T5117] kmem_cache_alloc_noprof+0x50/0x310 [ 56.334298][ T5117] ? getname_kernel+0x3c/0x1f0 [ 56.334317][ T5117] getname_kernel+0x3c/0x1f0 [ 56.334337][ T5117] kern_path+0x23/0x130 [ 56.334401][ T5117] do_move_mount_old+0x62/0xe0 [ 56.334427][ T5117] path_mount+0x54c/0xb20 [ 56.334452][ T5117] ? user_path_at+0x109/0x130 [ 56.334476][ T5117] __se_sys_mount+0x28f/0x2e0 [ 56.334545][ T5117] ? fput+0x8f/0xc0 [ 56.334569][ T5117] __x64_sys_mount+0x67/0x80 [ 56.334669][ T5117] x64_sys_call+0xd36/0x2fb0 [ 56.334686][ T5117] do_syscall_64+0xd2/0x200 [ 56.334726][ T5117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.334751][ T5117] ? clear_bhb_loop+0x40/0x90 [ 56.334790][ T5117] ? clear_bhb_loop+0x40/0x90 [ 56.334814][ T5117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.334832][ T5117] RIP: 0033:0x7f1b2aace929 [ 56.334845][ T5117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.334862][ T5117] RSP: 002b:00007f1b29137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.334963][ T5117] RAX: ffffffffffffffda RBX: 00007f1b2acf5fa0 RCX: 00007f1b2aace929 [ 56.334976][ T5117] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 56.334986][ T5117] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000000 [ 56.334997][ T5117] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 56.335007][ T5117] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 56.335023][ T5117] [ 56.546126][ T5119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.680'. [ 56.599350][ T5128] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.620290][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 56.660538][ T5134] loop3: detected capacity change from 0 to 1024 [ 56.692013][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.712714][ T5134] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.732004][ T5134] FAULT_INJECTION: forcing a failure. [ 56.732004][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 56.744685][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.3.685 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 56.744768][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.744787][ T5134] Call Trace: [ 56.744794][ T5134] [ 56.744801][ T5134] __dump_stack+0x1d/0x30 [ 56.744823][ T5134] dump_stack_lvl+0xe8/0x140 [ 56.744844][ T5134] dump_stack+0x15/0x1b [ 56.744921][ T5134] should_fail_ex+0x265/0x280 [ 56.744952][ T5134] should_failslab+0x8c/0xb0 [ 56.744975][ T5134] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 56.745001][ T5134] ? __d_alloc+0x3d/0x350 [ 56.745056][ T5134] __d_alloc+0x3d/0x350 [ 56.745075][ T5134] d_alloc+0x2e/0x100 [ 56.745093][ T5134] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 56.745142][ T5134] do_renameat2+0x38e/0xab0 [ 56.745159][ T5134] ? get_pid_task+0x96/0xd0 [ 56.745177][ T5134] ? proc_fail_nth_write+0x12d/0x160 [ 56.745291][ T5134] __x64_sys_renameat2+0x7e/0x90 [ 56.745308][ T5134] x64_sys_call+0x2bf6/0x2fb0 [ 56.745394][ T5134] do_syscall_64+0xd2/0x200 [ 56.745425][ T5134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.745448][ T5134] ? clear_bhb_loop+0x40/0x90 [ 56.745465][ T5134] ? clear_bhb_loop+0x40/0x90 [ 56.745483][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.745540][ T5134] RIP: 0033:0x7f1b2aace929 [ 56.745552][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.745567][ T5134] RSP: 002b:00007f1b29137038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 56.745582][ T5134] RAX: ffffffffffffffda RBX: 00007f1b2acf5fa0 RCX: 00007f1b2aace929 [ 56.745592][ T5134] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 56.745603][ T5134] RBP: 00007f1b29137090 R08: 0000000000000004 R09: 0000000000000000 [ 56.745613][ T5134] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 56.745676][ T5134] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 56.745691][ T5134] [ 56.989632][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.070072][ T5157] siw: device registration error -23 [ 57.395563][ T5190] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 57.436439][ T5194] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 57.467127][ T5198] loop9: detected capacity change from 0 to 7 [ 57.473462][ T5198] Buffer I/O error on dev loop9, logical block 0, async page read [ 57.481405][ T5198] Buffer I/O error on dev loop9, logical block 0, async page read [ 57.489245][ T5198] loop9: unable to read partition table [ 57.494952][ T5198] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 57.494952][ T5198] ) failed (rc=-5) [ 57.496487][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 57.547291][ T5202] loop9: detected capacity change from 0 to 7 [ 57.554760][ T5202] loop9: unable to read partition table [ 57.561461][ T5202] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 57.561461][ T5202] ) failed (rc=-5) [ 57.670764][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 57.670777][ T29] audit: type=1400 audit(1752080842.119:974): avc: denied { ioctl } for pid=5213 comm="syz.1.721" path="socket:[9864]" dev="sockfs" ino=9864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.807733][ T5222] loop9: detected capacity change from 0 to 7 [ 57.814063][ T5222] loop9: unable to read partition table [ 57.819782][ T5222] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 57.819782][ T5222] ) failed (rc=-5) [ 57.912623][ T5230] serio: Serial port ptm0 [ 57.953244][ T5231] loop4: detected capacity change from 0 to 512 [ 57.976494][ T5231] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.001184][ T5231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 58.010312][ T5231] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.016997][ T5231] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.728: attempt to clear invalid blocks 1024 len 1 [ 58.031369][ T5231] EXT4-fs (loop4): Remounting filesystem read-only [ 58.038263][ T5231] EXT4-fs (loop4): 1 truncate cleaned up [ 58.044411][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.079346][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 58.126758][ T29] audit: type=1326 audit(1752080842.569:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.150049][ T29] audit: type=1326 audit(1752080842.569:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.177309][ T29] audit: type=1326 audit(1752080842.569:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.200554][ T29] audit: type=1326 audit(1752080842.569:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.223865][ T29] audit: type=1326 audit(1752080842.569:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.247198][ T29] audit: type=1326 audit(1752080842.569:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.270588][ T29] audit: type=1326 audit(1752080842.569:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.278842][ T5251] siw: device registration error -23 [ 58.293793][ T29] audit: type=1326 audit(1752080842.569:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.322309][ T29] audit: type=1326 audit(1752080842.569:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2aace929 code=0x7ffc0000 [ 58.366163][ T5260] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 58.463566][ T5272] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.491737][ T5274] loop9: detected capacity change from 0 to 7 [ 58.498024][ T5274] loop9: unable to read partition table [ 58.503663][ T5274] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 58.503663][ T5274] ) failed (rc=-5) [ 59.042163][ T5306] loop9: detected capacity change from 0 to 7 [ 59.048558][ T5306] loop9: unable to read partition table [ 59.054225][ T5306] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 59.054225][ T5306] ) failed (rc=-5) [ 59.482335][ T5327] siw: device registration error -23 [ 59.557631][ T5329] loop2: detected capacity change from 0 to 128 [ 59.570036][ T5329] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.582446][ T5329] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.600765][ T5329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.651784][ T5329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.663106][ T5332] geneve0: entered allmulticast mode [ 59.690796][ T5329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.741179][ T5329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.806585][ T5329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.818313][ T5329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.831915][ T5329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.847629][ T5329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.948893][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.982299][ T3481] kernel write not supported for file /ppp (pid: 3481 comm: kworker/0:5) [ 60.007115][ T5343] __nla_validate_parse: 18 callbacks suppressed [ 60.007128][ T5343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 60.327129][ T5365] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.336897][ T5365] SELinux: failed to load policy [ 60.366806][ T5367] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.375307][ T5365] loop3: detected capacity change from 0 to 8192 [ 60.383971][ T5365] vfat: Unknown parameter 'ÿÿÿÿ' [ 60.396929][ T5369] FAULT_INJECTION: forcing a failure. [ 60.396929][ T5369] name failslab, interval 1, probability 0, space 0, times 0 [ 60.409621][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: syz.4.789 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 60.409758][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.409770][ T5369] Call Trace: [ 60.409775][ T5369] [ 60.409782][ T5369] __dump_stack+0x1d/0x30 [ 60.409866][ T5369] dump_stack_lvl+0xe8/0x140 [ 60.409883][ T5369] dump_stack+0x15/0x1b [ 60.409897][ T5369] should_fail_ex+0x265/0x280 [ 60.409927][ T5369] ? audit_log_d_path+0x8d/0x150 [ 60.410009][ T5369] should_failslab+0x8c/0xb0 [ 60.410028][ T5369] __kmalloc_cache_noprof+0x4c/0x320 [ 60.410052][ T5369] audit_log_d_path+0x8d/0x150 [ 60.410125][ T5369] audit_log_d_path_exe+0x42/0x70 [ 60.410155][ T5369] audit_log_task+0x1e9/0x250 [ 60.410183][ T5369] audit_seccomp+0x61/0x100 [ 60.410259][ T5369] ? __seccomp_filter+0x68c/0x10d0 [ 60.410412][ T5369] __seccomp_filter+0x69d/0x10d0 [ 60.410433][ T5369] ? mas_find+0x4ea/0x610 [ 60.410461][ T5369] ? __cond_resched+0x4e/0x90 [ 60.410489][ T5369] __secure_computing+0x82/0x150 [ 60.410530][ T5369] syscall_trace_enter+0xcf/0x1e0 [ 60.410551][ T5369] do_syscall_64+0xac/0x200 [ 60.410579][ T5369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.410747][ T5369] ? clear_bhb_loop+0x40/0x90 [ 60.410765][ T5369] ? clear_bhb_loop+0x40/0x90 [ 60.410782][ T5369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.410802][ T5369] RIP: 0033:0x7f2c45cfd33c [ 60.410817][ T5369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.410836][ T5369] RSP: 002b:00007f2c44367030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.410928][ T5369] RAX: ffffffffffffffda RBX: 00007f2c45f25fa0 RCX: 00007f2c45cfd33c [ 60.410938][ T5369] RDX: 000000000000000f RSI: 00007f2c443670a0 RDI: 0000000000000009 [ 60.410950][ T5369] RBP: 00007f2c44367090 R08: 0000000000000000 R09: 0000000000000000 [ 60.410963][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.410976][ T5369] R13: 0000000000000000 R14: 00007f2c45f25fa0 R15: 00007ffd450de8a8 [ 60.410994][ T5369] [ 60.648687][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 60.661619][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 61.023830][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 61.037202][ T5387] can0: slcan on ttyS3. [ 61.098166][ T5387] can0 (unregistered): slcan off ttyS3. [ 61.183526][ T5417] serio: Serial port ptm0 [ 61.249689][ T5424] serio: Serial port ptm0 [ 61.314978][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 61.323821][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 61.371495][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 61.380315][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 61.394077][ T5429] loop1: detected capacity change from 0 to 512 [ 61.401243][ T5429] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.411213][ T5429] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 61.421681][ T5429] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.430095][ T5429] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.437017][ T5429] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.802: Invalid block bitmap block 0 in block_group 0 [ 61.450661][ T5429] EXT4-fs (loop1): Remounting filesystem read-only [ 61.457559][ T5429] EXT4-fs (loop1): 1 orphan inode deleted [ 61.463939][ T5429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.504660][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.569757][ T5447] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 61.726418][ T5460] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 61.734197][ T5460] netlink: 224 bytes leftover after parsing attributes in process `syz.4.812'. [ 61.774364][ T5464] loop9: detected capacity change from 0 to 7 [ 61.780706][ T5464] buffer_io_error: 32 callbacks suppressed [ 61.780718][ T5464] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.803572][ T5464] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.811450][ T5464] loop9: unable to read partition table [ 61.841832][ T5464] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 61.841832][ T5464] ) failed (rc=-5) [ 61.842727][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.889756][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.901958][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.909966][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.918176][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.071578][ T5487] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 62.079286][ T5487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.823'. [ 62.173304][ T5502] loop9: detected capacity change from 0 to 7 [ 62.179541][ T5502] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.187450][ T5502] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.195331][ T5502] loop9: unable to read partition table [ 62.201249][ T5502] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 62.201249][ T5502] ) failed (rc=-5) [ 62.202173][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.238862][ T5504] serio: Serial port ptm0 [ 62.753546][ T5527] loop9: detected capacity change from 0 to 7 [ 62.760214][ T5527] loop9: unable to read partition table [ 62.765932][ T5527] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 62.765932][ T5527] ) failed (rc=-5) [ 62.802205][ T5529] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 62.845114][ T5535] serio: Serial port ptm0 [ 62.909745][ T5540] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.994680][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 62.994693][ T29] audit: type=1400 audit(1752080847.439:1155): avc: denied { cpu } for pid=5543 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.181330][ T5550] loop2: detected capacity change from 0 to 512 [ 63.197752][ T5550] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.215061][ T5550] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.228342][ T5550] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.238100][ T5550] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.250225][ T5550] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.849: Invalid block bitmap block 0 in block_group 0 [ 63.265086][ T5550] EXT4-fs (loop2): Remounting filesystem read-only [ 63.271959][ T5550] Quota error (device loop2): write_blk: dquota write failed [ 63.279836][ T5550] Quota error (device loop2): write_blk: dquota write failed [ 63.287479][ T5550] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 63.299352][ T5550] EXT4-fs (loop2): 1 orphan inode deleted [ 63.306840][ T5550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.340394][ T5568] loop9: detected capacity change from 0 to 7 [ 63.346655][ T5568] loop9: unable to read partition table [ 63.352725][ T5568] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 63.352725][ T5568] ) failed (rc=-5) [ 63.389233][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.401902][ T5571] serio: Serial port ptm0 [ 63.489863][ T29] audit: type=1400 audit(1752080847.939:1156): avc: denied { ioctl } for pid=5577 comm="syz.1.861" path="socket:[12294]" dev="sockfs" ino=12294 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.516025][ T29] audit: type=1326 audit(1752080847.959:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.2.862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f346d4ee929 code=0x0 [ 63.630712][ T29] audit: type=1400 audit(1752080848.079:1158): avc: denied { read } for pid=5590 comm="syz.1.866" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.652130][ T5591] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 63.756722][ T5596] loop9: detected capacity change from 0 to 7 [ 63.765494][ T5596] loop9: unable to read partition table [ 63.772031][ T5596] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 63.772031][ T5596] ) failed (rc=-5) [ 63.834956][ T5602] loop1: detected capacity change from 0 to 512 [ 63.853821][ T5602] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.866321][ T5602] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.888261][ T29] audit: type=1400 audit(1752080848.339:1159): avc: denied { create } for pid=5605 comm="syz.3.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.894718][ T5607] FAULT_INJECTION: forcing a failure. [ 63.894718][ T5607] name failslab, interval 1, probability 0, space 0, times 0 [ 63.908500][ T5602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.921004][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz.3.873 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 63.921031][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.921042][ T5607] Call Trace: [ 63.921047][ T5607] [ 63.921053][ T5607] __dump_stack+0x1d/0x30 [ 63.921071][ T5607] dump_stack_lvl+0xe8/0x140 [ 63.921301][ T5607] dump_stack+0x15/0x1b [ 63.921383][ T5607] should_fail_ex+0x265/0x280 [ 63.921461][ T5607] should_failslab+0x8c/0xb0 [ 63.921482][ T5607] kmem_cache_alloc_noprof+0x50/0x310 [ 63.921507][ T5607] ? skb_clone+0x151/0x1f0 [ 63.921570][ T5607] skb_clone+0x151/0x1f0 [ 63.921600][ T5607] __netlink_deliver_tap+0x2c9/0x500 [ 63.921635][ T5607] netlink_unicast+0x64c/0x670 [ 63.921693][ T5607] netlink_sendmsg+0x58b/0x6b0 [ 63.921726][ T5607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.921840][ T5607] __sock_sendmsg+0x142/0x180 [ 63.921863][ T5607] ____sys_sendmsg+0x31e/0x4e0 [ 63.921896][ T5607] ___sys_sendmsg+0x17b/0x1d0 [ 63.921993][ T5607] __x64_sys_sendmsg+0xd4/0x160 [ 63.922027][ T5607] x64_sys_call+0x2999/0x2fb0 [ 63.922052][ T5607] do_syscall_64+0xd2/0x200 [ 63.922132][ T5607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.922252][ T5607] ? clear_bhb_loop+0x40/0x90 [ 63.922273][ T5607] ? clear_bhb_loop+0x40/0x90 [ 63.922294][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.922314][ T5607] RIP: 0033:0x7f1b2aace929 [ 63.922341][ T5607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.922358][ T5607] RSP: 002b:00007f1b29137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.922376][ T5607] RAX: ffffffffffffffda RBX: 00007f1b2acf5fa0 RCX: 00007f1b2aace929 [ 63.922431][ T5607] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 63.922443][ T5607] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000000 [ 63.922454][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.922466][ T5607] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 63.922492][ T5607] [ 63.928975][ T29] audit: type=1400 audit(1752080848.339:1160): avc: denied { write } for pid=5605 comm="syz.3.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.964722][ T5602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.168124][ T5602] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.870: Invalid block bitmap block 0 in block_group 0 [ 64.197228][ T5602] EXT4-fs (loop1): Remounting filesystem read-only [ 64.205653][ T5602] Quota error (device loop1): write_blk: dquota write failed [ 64.214242][ T5602] EXT4-fs (loop1): 1 orphan inode deleted [ 64.249700][ T5602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.249956][ T5617] serio: Serial port ptm0 [ 64.272584][ T5615] FAULT_INJECTION: forcing a failure. [ 64.272584][ T5615] name failslab, interval 1, probability 0, space 0, times 0 [ 64.285301][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz.3.876 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 64.285328][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.285339][ T5615] Call Trace: [ 64.285345][ T5615] [ 64.285352][ T5615] __dump_stack+0x1d/0x30 [ 64.285399][ T5615] dump_stack_lvl+0xe8/0x140 [ 64.285416][ T5615] dump_stack+0x15/0x1b [ 64.285430][ T5615] should_fail_ex+0x265/0x280 [ 64.285457][ T5615] ? audit_log_d_path+0x8d/0x150 [ 64.285547][ T5615] should_failslab+0x8c/0xb0 [ 64.285580][ T5615] __kmalloc_cache_noprof+0x4c/0x320 [ 64.285608][ T5615] audit_log_d_path+0x8d/0x150 [ 64.285634][ T5615] audit_log_d_path_exe+0x42/0x70 [ 64.285663][ T5615] audit_log_task+0x1e9/0x250 [ 64.285705][ T5615] audit_seccomp+0x61/0x100 [ 64.285786][ T5615] ? __seccomp_filter+0x68c/0x10d0 [ 64.285809][ T5615] __seccomp_filter+0x69d/0x10d0 [ 64.285832][ T5615] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.285890][ T5615] ? vfs_write+0x75e/0x8e0 [ 64.285919][ T5615] ? __rcu_read_unlock+0x4f/0x70 [ 64.285941][ T5615] ? __fget_files+0x184/0x1c0 [ 64.286034][ T5615] __secure_computing+0x82/0x150 [ 64.286055][ T5615] syscall_trace_enter+0xcf/0x1e0 [ 64.286078][ T5615] do_syscall_64+0xac/0x200 [ 64.286104][ T5615] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.286167][ T5615] ? clear_bhb_loop+0x40/0x90 [ 64.286204][ T5615] ? clear_bhb_loop+0x40/0x90 [ 64.286241][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.286262][ T5615] RIP: 0033:0x7f1b2aace929 [ 64.286277][ T5615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.286308][ T5615] RSP: 002b:00007f1b29137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 64.286356][ T5615] RAX: ffffffffffffffda RBX: 00007f1b2acf5fa0 RCX: 00007f1b2aace929 [ 64.286369][ T5615] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000000000000006 [ 64.286382][ T5615] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000000 [ 64.286469][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.286482][ T5615] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 64.286499][ T5615] [ 64.589267][ T5628] loop4: detected capacity change from 0 to 2048 [ 64.640626][ T5628] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.647853][ T5628] EXT4-fs (loop4): mount failed [ 64.656626][ T5634] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 64.745444][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.262284][ T5671] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.307404][ T5671] capability: warning: `syz.4.897' uses deprecated v2 capabilities in a way that may be insecure [ 65.624722][ T5673] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 65.821551][ T5679] FAULT_INJECTION: forcing a failure. [ 65.821551][ T5679] name failslab, interval 1, probability 0, space 0, times 0 [ 65.834223][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: syz.2.901 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 65.834259][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.834332][ T5679] Call Trace: [ 65.834338][ T5679] [ 65.834344][ T5679] __dump_stack+0x1d/0x30 [ 65.834361][ T5679] dump_stack_lvl+0xe8/0x140 [ 65.834430][ T5679] dump_stack+0x15/0x1b [ 65.834503][ T5679] should_fail_ex+0x265/0x280 [ 65.834566][ T5679] should_failslab+0x8c/0xb0 [ 65.834610][ T5679] __kvmalloc_node_noprof+0x123/0x4e0 [ 65.834678][ T5679] ? alloc_netdev_mqs+0xa1/0xab0 [ 65.834813][ T5679] ? vsnprintf+0x829/0x890 [ 65.834833][ T5679] alloc_netdev_mqs+0xa1/0xab0 [ 65.834899][ T5679] ? __pfx_vlan_setup+0x10/0x10 [ 65.834923][ T5679] rtnl_create_link+0x239/0x710 [ 65.834969][ T5679] rtnl_newlink_create+0x14c/0x620 [ 65.834990][ T5679] ? security_capable+0x83/0x90 [ 65.835012][ T5679] ? netlink_ns_capable+0x86/0xa0 [ 65.835183][ T5679] rtnl_newlink+0xf29/0x12d0 [ 65.835207][ T5679] ? bpf_trace_run3+0x12c/0x1d0 [ 65.835227][ T5679] ? __kfree_skb+0x109/0x150 [ 65.835254][ T5679] ? __kfree_skb+0x109/0x150 [ 65.835335][ T5679] ? __rcu_read_unlock+0x4f/0x70 [ 65.835358][ T5679] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.835386][ T5679] ? selinux_capable+0x1f9/0x270 [ 65.835413][ T5679] ? security_capable+0x83/0x90 [ 65.835482][ T5679] ? ns_capable+0x7d/0xb0 [ 65.835500][ T5679] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.835518][ T5679] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 65.835606][ T5679] netlink_rcv_skb+0x120/0x220 [ 65.835631][ T5679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.835654][ T5679] rtnetlink_rcv+0x1c/0x30 [ 65.835730][ T5679] netlink_unicast+0x59e/0x670 [ 65.835760][ T5679] netlink_sendmsg+0x58b/0x6b0 [ 65.835789][ T5679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.835816][ T5679] __sock_sendmsg+0x142/0x180 [ 65.835855][ T5679] ____sys_sendmsg+0x31e/0x4e0 [ 65.835892][ T5679] ___sys_sendmsg+0x17b/0x1d0 [ 65.835931][ T5679] __x64_sys_sendmsg+0xd4/0x160 [ 65.835963][ T5679] x64_sys_call+0x2999/0x2fb0 [ 65.836041][ T5679] do_syscall_64+0xd2/0x200 [ 65.836084][ T5679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.836109][ T5679] ? clear_bhb_loop+0x40/0x90 [ 65.836130][ T5679] ? clear_bhb_loop+0x40/0x90 [ 65.836150][ T5679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.836168][ T5679] RIP: 0033:0x7f346d4ee929 [ 65.836220][ T5679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.836236][ T5679] RSP: 002b:00007f346bb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.836301][ T5679] RAX: ffffffffffffffda RBX: 00007f346d715fa0 RCX: 00007f346d4ee929 [ 65.836313][ T5679] RDX: 0000000000008004 RSI: 0000200000000300 RDI: 0000000000000004 [ 65.836325][ T5679] RBP: 00007f346bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 65.836338][ T5679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.836417][ T5679] R13: 0000000000000000 R14: 00007f346d715fa0 R15: 00007ffcf1a2a2b8 [ 65.836435][ T5679] [ 66.149797][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.164223][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.223480][ T5686] loop2: detected capacity change from 0 to 512 [ 66.271544][ T5688] SELinux: failed to load policy [ 66.294329][ T5686] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.903: iget: bad i_size value: 38620345925642 [ 66.308031][ T5688] openvswitch: netlink: Message has 6 unknown bytes. [ 66.317478][ T5686] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.903: couldn't read orphan inode 15 (err -117) [ 66.334772][ T5686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.402150][ T5702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.428902][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.513230][ T5707] syzkaller0: entered promiscuous mode [ 66.518781][ T5707] syzkaller0: entered allmulticast mode [ 66.632494][ T5709] TCP: TCP_TX_DELAY enabled [ 66.638591][ T5709] syz.2.912 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.808868][ T5732] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 66.816551][ T5732] __nla_validate_parse: 5 callbacks suppressed [ 66.816561][ T5732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.916'. [ 66.994431][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 67.053208][ T5743] serio: Serial port ptm1 [ 67.091837][ T5744] loop3: detected capacity change from 0 to 128 [ 67.586973][ T5762] wireguard0: entered promiscuous mode [ 68.119158][ T5780] loop1: detected capacity change from 0 to 512 [ 68.149592][ T5780] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.162695][ T5780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.187621][ T5783] loop2: detected capacity change from 0 to 128 [ 68.203476][ T5780] EXT4-fs (loop1): 1 truncate cleaned up [ 68.220665][ T5780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.289674][ T5789] bond1: entered promiscuous mode [ 68.294733][ T5789] bond1: entered allmulticast mode [ 68.315148][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.348713][ T5789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.359449][ T5789] bond1 (unregistering): Released all slaves [ 68.551548][ T5796] batman_adv: batadv0: Adding interface: gretap1 [ 68.557938][ T5796] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.588639][ T5796] batman_adv: batadv0: Interface activated: gretap1 [ 68.644164][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 68.644176][ T29] audit: type=1400 audit(1752080853.089:1220): avc: denied { connect } for pid=5803 comm="syz.2.944" lport=257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.679255][ T29] audit: type=1326 audit(1752080853.119:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.702128][ T29] audit: type=1326 audit(1752080853.119:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.724958][ T29] audit: type=1326 audit(1752080853.119:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.747887][ T29] audit: type=1326 audit(1752080853.119:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.770870][ T29] audit: type=1326 audit(1752080853.119:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.793724][ T29] audit: type=1326 audit(1752080853.119:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.816726][ T29] audit: type=1326 audit(1752080853.119:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.839655][ T29] audit: type=1326 audit(1752080853.119:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.862568][ T29] audit: type=1326 audit(1752080853.119:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346d4ee929 code=0x7ffc0000 [ 68.873689][ T5813] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 68.947355][ T5813] FAULT_INJECTION: forcing a failure. [ 68.947355][ T5813] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.960518][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz.2.949 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 68.960543][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.960554][ T5813] Call Trace: [ 68.960560][ T5813] [ 68.960567][ T5813] __dump_stack+0x1d/0x30 [ 68.960588][ T5813] dump_stack_lvl+0xe8/0x140 [ 68.960605][ T5813] dump_stack+0x15/0x1b [ 68.960707][ T5813] should_fail_ex+0x265/0x280 [ 68.960736][ T5813] should_fail+0xb/0x20 [ 68.960759][ T5813] should_fail_usercopy+0x1a/0x20 [ 68.960832][ T5813] _copy_from_iter+0xcf/0xe40 [ 68.960931][ T5813] ? _copy_from_iter+0x16d/0xe40 [ 68.960962][ T5813] copy_page_from_iter+0x178/0x2a0 [ 68.961063][ T5813] skb_copy_datagram_from_iter+0x232/0x490 [ 68.961145][ T5813] tun_get_user+0xa0e/0x2500 [ 68.961173][ T5813] ? ref_tracker_alloc+0x1f2/0x2f0 [ 68.961200][ T5813] ? selinux_file_permission+0x1e4/0x320 [ 68.961248][ T5813] tun_chr_write_iter+0x15e/0x210 [ 68.961271][ T5813] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.961356][ T5813] vfs_write+0x4a0/0x8e0 [ 68.961390][ T5813] ksys_write+0xda/0x1a0 [ 68.961424][ T5813] __x64_sys_write+0x40/0x50 [ 68.961472][ T5813] x64_sys_call+0x2cdd/0x2fb0 [ 68.961492][ T5813] do_syscall_64+0xd2/0x200 [ 68.961518][ T5813] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.961540][ T5813] ? clear_bhb_loop+0x40/0x90 [ 68.961588][ T5813] ? clear_bhb_loop+0x40/0x90 [ 68.961609][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.961630][ T5813] RIP: 0033:0x7f346d4ee929 [ 68.961643][ T5813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.961725][ T5813] RSP: 002b:00007f346bb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.961744][ T5813] RAX: ffffffffffffffda RBX: 00007f346d715fa0 RCX: 00007f346d4ee929 [ 68.961755][ T5813] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000007 [ 68.961765][ T5813] RBP: 00007f346bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 68.961776][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.961788][ T5813] R13: 0000000000000000 R14: 00007f346d715fa0 R15: 00007ffcf1a2a2b8 [ 68.961876][ T5813] [ 69.234831][ T5831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'. [ 69.296834][ T5840] loop2: detected capacity change from 0 to 512 [ 69.306032][ T5840] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.319203][ T5840] EXT4-fs (loop2): 1 truncate cleaned up [ 69.331602][ T5840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.389019][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.448865][ T5861] serio: Serial port ptm0 [ 69.475740][ T5865] bridge0: port 3(syz_tun) entered blocking state [ 69.482196][ T5865] bridge0: port 3(syz_tun) entered disabled state [ 69.488939][ T5865] syz_tun: entered allmulticast mode [ 69.494596][ T5865] syz_tun: entered promiscuous mode [ 69.500135][ T5865] bridge0: port 3(syz_tun) entered blocking state [ 69.506599][ T5865] bridge0: port 3(syz_tun) entered forwarding state [ 69.526583][ T5868] process 'syz.4.968' launched '/dev/fd/5' with NULL argv: empty string added [ 69.624475][ T5875] loop2: detected capacity change from 0 to 128 [ 69.901476][ T5875] bio_check_eod: 46 callbacks suppressed [ 69.901491][ T5875] syz.2.971: attempt to access beyond end of device [ 69.901491][ T5875] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 69.920869][ T5875] syz.2.971: attempt to access beyond end of device [ 69.920869][ T5875] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 69.934248][ T5875] syz.2.971: attempt to access beyond end of device [ 69.934248][ T5875] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 69.947730][ T5875] syz.2.971: attempt to access beyond end of device [ 69.947730][ T5875] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 69.964990][ T5875] syz.2.971: attempt to access beyond end of device [ 69.964990][ T5875] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.020264][ T5895] serio: Serial port ptm0 [ 70.106219][ T5899] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 70.213953][ T5911] loop3: detected capacity change from 0 to 164 [ 70.222041][ T5911] iso9660: Unknown parameter 'ÿ000000000000000000000xffffffffffffffff' [ 70.310843][ T5925] serio: Serial port ptm0 [ 70.420265][ T5932] FAULT_INJECTION: forcing a failure. [ 70.420265][ T5932] name failslab, interval 1, probability 0, space 0, times 0 [ 70.432968][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.4.993 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 70.432992][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.433048][ T5932] Call Trace: [ 70.433053][ T5932] [ 70.433059][ T5932] __dump_stack+0x1d/0x30 [ 70.433077][ T5932] dump_stack_lvl+0xe8/0x140 [ 70.433094][ T5932] dump_stack+0x15/0x1b [ 70.433107][ T5932] should_fail_ex+0x265/0x280 [ 70.433134][ T5932] ? alloc_netdev_mqs+0x829/0xab0 [ 70.433262][ T5932] should_failslab+0x8c/0xb0 [ 70.433284][ T5932] __kmalloc_cache_noprof+0x4c/0x320 [ 70.433312][ T5932] alloc_netdev_mqs+0x829/0xab0 [ 70.433363][ T5932] rtnl_create_link+0x239/0x710 [ 70.433380][ T5932] rtnl_newlink_create+0x14c/0x620 [ 70.433394][ T5932] ? security_capable+0x83/0x90 [ 70.433474][ T5932] ? netlink_ns_capable+0x86/0xa0 [ 70.433513][ T5932] rtnl_newlink+0xf29/0x12d0 [ 70.433529][ T5932] ? xas_load+0x413/0x430 [ 70.433545][ T5932] ? __rcu_read_unlock+0x4f/0x70 [ 70.433622][ T5932] ? xa_load+0xb1/0xe0 [ 70.433631][ T5932] ? __kfree_skb+0x109/0x150 [ 70.433646][ T5932] ? __rcu_read_unlock+0x4f/0x70 [ 70.433658][ T5932] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.433673][ T5932] ? selinux_capable+0x1f9/0x270 [ 70.433699][ T5932] ? security_capable+0x83/0x90 [ 70.433712][ T5932] ? ns_capable+0x7d/0xb0 [ 70.433723][ T5932] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.433797][ T5932] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 70.433811][ T5932] netlink_rcv_skb+0x120/0x220 [ 70.433827][ T5932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.433842][ T5932] rtnetlink_rcv+0x1c/0x30 [ 70.433853][ T5932] netlink_unicast+0x59e/0x670 [ 70.433907][ T5932] netlink_sendmsg+0x58b/0x6b0 [ 70.433925][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.434002][ T5932] __sock_sendmsg+0x142/0x180 [ 70.434015][ T5932] ____sys_sendmsg+0x31e/0x4e0 [ 70.434034][ T5932] ___sys_sendmsg+0x17b/0x1d0 [ 70.434060][ T5932] __x64_sys_sendmsg+0xd4/0x160 [ 70.434082][ T5932] x64_sys_call+0x2999/0x2fb0 [ 70.434094][ T5932] do_syscall_64+0xd2/0x200 [ 70.434166][ T5932] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.434180][ T5932] ? clear_bhb_loop+0x40/0x90 [ 70.434272][ T5932] ? clear_bhb_loop+0x40/0x90 [ 70.434293][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.434305][ T5932] RIP: 0033:0x7f2c45cfe929 [ 70.434314][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.434364][ T5932] RSP: 002b:00007f2c44367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.434382][ T5932] RAX: ffffffffffffffda RBX: 00007f2c45f25fa0 RCX: 00007f2c45cfe929 [ 70.434391][ T5932] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 70.434398][ T5932] RBP: 00007f2c44367090 R08: 0000000000000000 R09: 0000000000000000 [ 70.434405][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.434412][ T5932] R13: 0000000000000000 R14: 00007f2c45f25fa0 R15: 00007ffd450de8a8 [ 70.434422][ T5932] [ 71.056630][ T5944] wireguard0: entered promiscuous mode [ 71.062154][ T5944] wireguard0: entered allmulticast mode [ 71.151421][ T5948] loop4: detected capacity change from 0 to 512 [ 71.184574][ T5948] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.199966][ T5948] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.207727][ T5948] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.997: corrupted inode contents [ 71.221642][ T5948] EXT4-fs (loop4): Remounting filesystem read-only [ 71.228234][ T5948] EXT4-fs (loop4): 1 truncate cleaned up [ 71.233966][ T2291] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.244600][ T2291] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.284092][ T2291] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.294939][ T5948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.318799][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.362987][ T5971] serio: Serial port ptm0 [ 71.386227][ T5976] bridge0: entered promiscuous mode [ 71.392813][ T5976] bridge0: port 3(macsec1) entered blocking state [ 71.399319][ T5976] bridge0: port 3(macsec1) entered disabled state [ 71.405899][ T5976] macsec1: entered allmulticast mode [ 71.411259][ T5976] bridge0: entered allmulticast mode [ 71.417042][ T5976] macsec1: left allmulticast mode [ 71.422306][ T5976] bridge0: left allmulticast mode [ 71.427999][ T5976] bridge0: left promiscuous mode [ 71.474695][ T5983] FAULT_INJECTION: forcing a failure. [ 71.474695][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 71.487318][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: syz.4.1008 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 71.487346][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.487359][ T5983] Call Trace: [ 71.487365][ T5983] [ 71.487373][ T5983] __dump_stack+0x1d/0x30 [ 71.487402][ T5983] dump_stack_lvl+0xe8/0x140 [ 71.487461][ T5983] dump_stack+0x15/0x1b [ 71.487475][ T5983] should_fail_ex+0x265/0x280 [ 71.487500][ T5983] ? __hw_addr_add_ex+0x162/0x440 [ 71.487523][ T5983] should_failslab+0x8c/0xb0 [ 71.487542][ T5983] __kmalloc_cache_noprof+0x4c/0x320 [ 71.487637][ T5983] __hw_addr_add_ex+0x162/0x440 [ 71.487718][ T5983] dev_addr_init+0xb1/0x120 [ 71.487760][ T5983] alloc_netdev_mqs+0x212/0xab0 [ 71.487788][ T5983] ? __pfx_wg_setup+0x10/0x10 [ 71.487891][ T5983] rtnl_create_link+0x239/0x710 [ 71.487966][ T5983] rtnl_newlink_create+0x14c/0x620 [ 71.488022][ T5983] ? __list_del_entry_valid_or_report+0x65/0x130 [ 71.488121][ T5983] rtnl_newlink+0xf29/0x12d0 [ 71.488145][ T5983] ? xas_load+0x413/0x430 [ 71.488174][ T5983] ? __memcg_slab_free_hook+0x135/0x230 [ 71.488261][ T5983] ? __kfree_skb+0x109/0x150 [ 71.488284][ T5983] ? __rcu_read_unlock+0x4f/0x70 [ 71.488377][ T5983] ? avc_has_perm_noaudit+0x1b1/0x200 [ 71.488416][ T5983] ? selinux_capable+0x1f9/0x270 [ 71.488446][ T5983] ? security_capable+0x83/0x90 [ 71.488472][ T5983] ? ns_capable+0x7d/0xb0 [ 71.488534][ T5983] ? __pfx_rtnl_newlink+0x10/0x10 [ 71.488552][ T5983] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 71.488576][ T5983] netlink_rcv_skb+0x120/0x220 [ 71.488619][ T5983] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.488642][ T5983] rtnetlink_rcv+0x1c/0x30 [ 71.488662][ T5983] netlink_unicast+0x59e/0x670 [ 71.488694][ T5983] netlink_sendmsg+0x58b/0x6b0 [ 71.488803][ T5983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.488868][ T5983] __sock_sendmsg+0x142/0x180 [ 71.488926][ T5983] ____sys_sendmsg+0x31e/0x4e0 [ 71.488956][ T5983] ___sys_sendmsg+0x17b/0x1d0 [ 71.489146][ T5983] __x64_sys_sendmsg+0xd4/0x160 [ 71.489183][ T5983] x64_sys_call+0x2999/0x2fb0 [ 71.489234][ T5983] do_syscall_64+0xd2/0x200 [ 71.489263][ T5983] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.489285][ T5983] ? clear_bhb_loop+0x40/0x90 [ 71.489380][ T5983] ? clear_bhb_loop+0x40/0x90 [ 71.489397][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.489493][ T5983] RIP: 0033:0x7f2c45cfe929 [ 71.489508][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.489526][ T5983] RSP: 002b:00007f2c44367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.489600][ T5983] RAX: ffffffffffffffda RBX: 00007f2c45f25fa0 RCX: 00007f2c45cfe929 [ 71.489611][ T5983] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 71.489624][ T5983] RBP: 00007f2c44367090 R08: 0000000000000000 R09: 0000000000000000 [ 71.489637][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.489650][ T5983] R13: 0000000000000000 R14: 00007f2c45f25fa0 R15: 00007ffd450de8a8 [ 71.489668][ T5983] [ 71.562256][ T5978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5978 comm=syz.1.1005 [ 71.874011][ T5994] loop3: detected capacity change from 0 to 1024 [ 71.882389][ T5994] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.893347][ T5994] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.914190][ T5994] JBD2: no valid journal superblock found [ 71.920005][ T5994] EXT4-fs (loop3): Could not load journal inode [ 71.936966][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 71.945879][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 71.956079][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 71.973671][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 71.982577][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 71.992904][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 72.017228][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 72.026175][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 72.064172][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 72.103402][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.110884][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.120054][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.127523][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.178620][ T6007] serio: Serial port ptm0 [ 72.459448][ T6030] loop1: detected capacity change from 0 to 1024 [ 72.499757][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.541052][ T6030] IPv4: Oversized IP packet from 127.202.26.0 [ 72.586729][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.634725][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 72.674155][ T6032] loop4: detected capacity change from 0 to 128 [ 72.687484][ T6044] FAULT_INJECTION: forcing a failure. [ 72.687484][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 72.700214][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.3.1028 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 72.700241][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.700305][ T6044] Call Trace: [ 72.700309][ T6044] [ 72.700360][ T6044] __dump_stack+0x1d/0x30 [ 72.700379][ T6044] dump_stack_lvl+0xe8/0x140 [ 72.700395][ T6044] dump_stack+0x15/0x1b [ 72.700409][ T6044] should_fail_ex+0x265/0x280 [ 72.700502][ T6044] should_failslab+0x8c/0xb0 [ 72.700522][ T6044] __kmalloc_cache_node_noprof+0x54/0x320 [ 72.700586][ T6044] ? __get_vm_area_node+0x106/0x1d0 [ 72.700611][ T6044] __get_vm_area_node+0x106/0x1d0 [ 72.700638][ T6044] __vmalloc_node_range_noprof+0x273/0xe00 [ 72.700726][ T6044] ? copy_process+0x399/0x1f90 [ 72.700751][ T6044] ? __rcu_read_unlock+0x4f/0x70 [ 72.700775][ T6044] __vmalloc_node_noprof+0x89/0xc0 [ 72.700855][ T6044] ? copy_process+0x399/0x1f90 [ 72.700878][ T6044] ? copy_process+0x399/0x1f90 [ 72.700990][ T6044] dup_task_struct+0x449/0x6a0 [ 72.701011][ T6044] ? audit_log_vformat+0x252/0x4b0 [ 72.701064][ T6044] copy_process+0x399/0x1f90 [ 72.701103][ T6044] ? copy_clone_args_from_user+0x3ce/0x490 [ 72.701134][ T6044] kernel_clone+0x16c/0x5b0 [ 72.701160][ T6044] __se_sys_clone3+0x1c2/0x200 [ 72.701261][ T6044] __x64_sys_clone3+0x31/0x40 [ 72.701287][ T6044] x64_sys_call+0x10c9/0x2fb0 [ 72.701314][ T6044] do_syscall_64+0xd2/0x200 [ 72.701346][ T6044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.701416][ T6044] ? clear_bhb_loop+0x40/0x90 [ 72.701436][ T6044] ? clear_bhb_loop+0x40/0x90 [ 72.701456][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.701495][ T6044] RIP: 0033:0x7f1b2aace929 [ 72.701510][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.701526][ T6044] RSP: 002b:00007f1b29136f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 72.701546][ T6044] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1b2aace929 [ 72.701632][ T6044] RDX: 00007f1b29136f20 RSI: 0000000000000058 RDI: 00007f1b29136f20 [ 72.701644][ T6044] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000058 [ 72.701656][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.701666][ T6044] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 72.701684][ T6044] [ 72.701812][ T6044] syz.3.1028: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 72.707318][ T6032] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.714330][ T6044] ,cpuset=/,mems_allowed=0 [ 72.714354][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.3.1028 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 72.714380][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.714391][ T6044] Call Trace: [ 72.714396][ T6044] [ 72.714466][ T6044] __dump_stack+0x1d/0x30 [ 72.714538][ T6044] dump_stack_lvl+0xe8/0x140 [ 72.714558][ T6044] dump_stack+0x15/0x1b [ 72.714574][ T6044] warn_alloc+0x12b/0x1a0 [ 72.714617][ T6044] __vmalloc_node_range_noprof+0x297/0xe00 [ 72.714651][ T6044] ? __rcu_read_unlock+0x4f/0x70 [ 72.714675][ T6044] __vmalloc_node_noprof+0x89/0xc0 [ 72.714703][ T6044] ? copy_process+0x399/0x1f90 [ 72.714759][ T6044] ? copy_process+0x399/0x1f90 [ 72.714781][ T6044] dup_task_struct+0x449/0x6a0 [ 72.714873][ T6044] ? audit_log_vformat+0x252/0x4b0 [ 72.714904][ T6044] copy_process+0x399/0x1f90 [ 72.714930][ T6044] ? copy_clone_args_from_user+0x3ce/0x490 [ 72.714972][ T6044] kernel_clone+0x16c/0x5b0 [ 72.714999][ T6044] __se_sys_clone3+0x1c2/0x200 [ 72.715035][ T6044] __x64_sys_clone3+0x31/0x40 [ 72.715061][ T6044] x64_sys_call+0x10c9/0x2fb0 [ 72.715139][ T6044] do_syscall_64+0xd2/0x200 [ 72.715169][ T6044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.715194][ T6044] ? clear_bhb_loop+0x40/0x90 [ 72.715261][ T6044] ? clear_bhb_loop+0x40/0x90 [ 72.715282][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.715303][ T6044] RIP: 0033:0x7f1b2aace929 [ 72.715317][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.715387][ T6044] RSP: 002b:00007f1b29136f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 72.715404][ T6044] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1b2aace929 [ 72.715416][ T6044] RDX: 00007f1b29136f20 RSI: 0000000000000058 RDI: 00007f1b29136f20 [ 72.715471][ T6044] RBP: 00007f1b29137090 R08: 0000000000000000 R09: 0000000000000058 [ 72.715483][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.715495][ T6044] R13: 0000000000000000 R14: 00007f1b2acf5fa0 R15: 00007ffec9528c48 [ 72.715512][ T6044] [ 72.715527][ T6044] Mem-Info: [ 72.764292][ T6032] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.769274][ T6044] active_anon:31292 inactive_anon:0 isolated_anon:0 [ 72.769274][ T6044] active_file:18615 inactive_file:2196 isolated_file:0 [ 72.769274][ T6044] unevictable:0 dirty:330 writeback:0 [ 72.769274][ T6044] slab_reclaimable:3141 slab_unreclaimable:17476 [ 72.769274][ T6044] mapped:50835 shmem:24226 pagetables:1272 [ 72.769274][ T6044] sec_pagetables:0 bounce:0 [ 72.769274][ T6044] kernel_misc_reclaimable:0 [ 72.769274][ T6044] free:1851512 free_pcp:3937 free_cma:0 [ 72.847237][ T6032] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1025'. [ 72.849023][ T6044] Node 0 active_anon:128764kB inactive_anon:0kB active_file:74460kB inactive_file:8784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178864kB dirty:1320kB writeback:0kB shmem:100500kB writeback_tmp:0kB kernel_stack:3824kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 72.863952][ T6047] serio: Serial port ptm1 [ 72.864314][ T6044] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.308722][ T6044] lowmem_reserve[]: 0 2882 7860 7860 [ 73.314137][ T6044] Node 0 DMA32 free:2947840kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951368kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 73.344197][ T6044] lowmem_reserve[]: 0 0 4978 4978 [ 73.349285][ T6044] Node 0 Normal free:4490580kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40488kB inactive_anon:0kB active_file:74460kB inactive_file:8784kB unevictable:0kB writepending:1320kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44832kB local_pcp:11068kB free_cma:0kB [ 73.381216][ T6044] lowmem_reserve[]: 0 0 0 0 [ 73.385861][ T6044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.398436][ T6044] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947840kB [ 73.414571][ T6044] Node 0 Normal: 543*4kB (M) 305*8kB (UM) 452*16kB (ME) 102*32kB (ME) 323*64kB (ME) 47*128kB (UM) 26*256kB (M) 18*512kB (ME) 7*1024kB (U) 11*2048kB (UE) 1075*4096kB (UM) = 4490564kB [ 73.432693][ T6044] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 73.442086][ T6044] 23862 total pagecache pages [ 73.446736][ T6044] 0 pages in swap cache [ 73.450884][ T6044] Free swap = 124996kB [ 73.455097][ T6044] Total swap = 124996kB [ 73.459264][ T6044] 2097051 pages RAM [ 73.463066][ T6044] 0 pages HighMem/MovableOnly [ 73.467728][ T6044] 80809 pages reserved [ 73.546862][ T5439] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.564244][ T6058] loop1: detected capacity change from 0 to 128 [ 73.573358][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.580446][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.602357][ T6018] bridge_slave_0: entered allmulticast mode [ 73.622890][ T6018] bridge_slave_0: entered promiscuous mode [ 73.649040][ T6059] bridge1: entered promiscuous mode [ 73.656118][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 73.656130][ T29] audit: type=1326 audit(1752080858.099:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.3.1035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b2aace929 code=0x0 [ 73.658417][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.692422][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.704172][ T6018] bridge_slave_1: entered allmulticast mode [ 73.713731][ T6018] bridge_slave_1: entered promiscuous mode [ 73.737892][ T6079] serio: Serial port ptm0 [ 73.754698][ T6081] loop4: detected capacity change from 0 to 512 [ 73.774844][ T6081] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.781383][ T6081] ext2: Unknown parameter 'noacl' [ 73.802458][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.813564][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.829923][ T6085] loop1: detected capacity change from 0 to 128 [ 73.836588][ T6085] EXT4-fs: Ignoring removed nobh option [ 73.847046][ T6018] team0: Port device team_slave_0 added [ 73.858451][ T6018] team0: Port device team_slave_1 added [ 73.862181][ T6086] loop4: detected capacity change from 0 to 512 [ 73.870307][ T29] audit: type=1326 audit(1752080858.299:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.881944][ T6086] ext2: Unknown parameter 'fowner>00000000004294967295' [ 73.893174][ T29] audit: type=1326 audit(1752080858.299:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.923068][ T29] audit: type=1326 audit(1752080858.299:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.935092][ T6085] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.945885][ T29] audit: type=1326 audit(1752080858.299:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.946014][ T29] audit: type=1326 audit(1752080858.299:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.962877][ T6085] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.980688][ T29] audit: type=1326 audit(1752080858.309:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.980717][ T29] audit: type=1326 audit(1752080858.309:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.980744][ T29] audit: type=1326 audit(1752080858.309:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 73.980785][ T29] audit: type=1326 audit(1752080858.309:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45cfe929 code=0x7ffc0000 [ 74.155504][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.162480][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.175570][ T6093] loop4: detected capacity change from 0 to 512 [ 74.188493][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.197134][ T6093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.215401][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.222447][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.227725][ T6093] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.248445][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.262693][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 74.289357][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.314989][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.333963][ T6018] hsr_slave_0: entered promiscuous mode [ 74.354701][ T6018] hsr_slave_1: entered promiscuous mode [ 74.376044][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.393551][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.412150][ T6018] Cannot create hsr debugfs directory [ 74.417617][ T6107] loop1: detected capacity change from 0 to 512 [ 74.424978][ T6109] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 74.434145][ T6107] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.448657][ T6107] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 74.481067][ T6107] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.498383][ T6107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.505091][ T6107] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1050: Invalid block bitmap block 0 in block_group 0 [ 74.514350][ T6107] EXT4-fs (loop1): Remounting filesystem read-only [ 74.514717][ T6107] EXT4-fs (loop1): 1 orphan inode deleted [ 74.515768][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.525113][ T6116] loop3: detected capacity change from 0 to 512 [ 74.564648][ T6116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.580827][ T6116] EXT4-fs (loop3): 1 truncate cleaned up [ 74.596301][ T6116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.624091][ T6119] loop4: detected capacity change from 0 to 2048 [ 74.631556][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.648108][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.655450][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.666493][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.676013][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.714384][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.749952][ T3297] loop4: p2 p3 p7 [ 74.771602][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.785614][ T6136] loop2: detected capacity change from 0 to 128 [ 74.793644][ T6136] FAULT_INJECTION: forcing a failure. [ 74.793644][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.806723][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.2.1060 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 74.806747][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.806829][ T6136] Call Trace: [ 74.806835][ T6136] [ 74.806840][ T6136] __dump_stack+0x1d/0x30 [ 74.806865][ T6136] dump_stack_lvl+0xe8/0x140 [ 74.806940][ T6136] dump_stack+0x15/0x1b [ 74.806954][ T6136] should_fail_ex+0x265/0x280 [ 74.806984][ T6136] should_fail+0xb/0x20 [ 74.807073][ T6136] should_fail_usercopy+0x1a/0x20 [ 74.807099][ T6136] _copy_from_user+0x1c/0xb0 [ 74.807188][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.807190][ T6136] kstrtouint_from_user+0x69/0xf0 [ 74.807217][ T6136] ? 0xffffffff81000000 [ 74.807230][ T6136] ? selinux_file_permission+0x1e4/0x320 [ 74.807255][ T6136] proc_fail_nth_write+0x50/0x160 [ 74.807288][ T6136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.807400][ T6136] vfs_write+0x269/0x8e0 [ 74.807427][ T6136] ? vfs_read+0x47f/0x6f0 [ 74.807455][ T6136] ? __rcu_read_unlock+0x4f/0x70 [ 74.807516][ T6136] ? __fget_files+0x184/0x1c0 [ 74.807533][ T6136] ksys_write+0xda/0x1a0 [ 74.807562][ T6136] __x64_sys_write+0x40/0x50 [ 74.807607][ T6136] x64_sys_call+0x2cdd/0x2fb0 [ 74.807628][ T6136] do_syscall_64+0xd2/0x200 [ 74.807728][ T6136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.807753][ T6136] ? clear_bhb_loop+0x40/0x90 [ 74.807773][ T6136] ? clear_bhb_loop+0x40/0x90 [ 74.807869][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.807955][ T6136] RIP: 0033:0x7f346d4ed3df [ 74.807969][ T6136] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.808041][ T6136] RSP: 002b:00007f346bb57030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.808059][ T6136] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f346d4ed3df [ 74.808071][ T6136] RDX: 0000000000000001 RSI: 00007f346bb570a0 RDI: 0000000000000006 [ 74.808082][ T6136] RBP: 00007f346bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 74.808094][ T6136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.808105][ T6136] R13: 0000000000000000 R14: 00007f346d715fa0 R15: 00007ffcf1a2a2b8 [ 74.808168][ T6136] [ 74.836948][ T6139] netlink: 'syz.1.1061': attribute type 5 has an invalid length. [ 74.853129][ T6119] loop4: p2 p3 p7 [ 75.070106][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.077258][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.093972][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.101067][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.112133][ T6151] serio: Serial port ptm0 [ 75.155099][ T6153] loop2: detected capacity change from 0 to 512 [ 75.188422][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.188487][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 75.206008][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.236141][ T6153] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.271534][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.279499][ T6153] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 75.331269][ T6153] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 75.349905][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 75.359540][ T6153] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.361410][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.377245][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.393256][ T6180] bridge0: port 3(syz_tun) entered blocking state [ 75.399984][ T6180] bridge0: port 3(syz_tun) entered disabled state [ 75.422306][ T6153] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1066: Invalid block bitmap block 0 in block_group 0 [ 75.428661][ T6180] syz_tun: entered allmulticast mode [ 75.446257][ T6180] syz_tun: entered promiscuous mode [ 75.451949][ T6180] bridge0: port 3(syz_tun) entered blocking state [ 75.458401][ T6180] bridge0: port 3(syz_tun) entered forwarding state [ 75.466314][ T6153] EXT4-fs (loop2): Remounting filesystem read-only [ 75.480484][ T6153] EXT4-fs (loop2): 1 orphan inode deleted [ 75.506296][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.580313][ T6200] serio: Serial port ptm0 [ 75.580907][ T6018] veth0_vlan: entered promiscuous mode [ 75.592135][ T6018] veth1_vlan: entered promiscuous mode [ 75.604518][ T6018] veth0_macvtap: entered promiscuous mode [ 75.613492][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.616098][ T6018] veth1_macvtap: entered promiscuous mode [ 75.634730][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.646698][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.663405][ T6018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.672177][ T6018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.680927][ T6018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689659][ T6018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699869][ T2291] tipc: Subscription rejected, illegal request [ 75.872166][ T6221] loop2: detected capacity change from 0 to 8192 [ 75.927392][ T3297] loop2: p1 p2 < > p3 p4 < p5 > [ 75.932378][ T3297] loop2: partition table partially beyond EOD, truncated [ 75.940534][ T3297] loop2: p1 size 100663296 extends beyond EOD, truncated [ 75.949430][ T3297] loop2: p2 start 591104 is beyond EOD, truncated [ 75.954116][ T6234] FAULT_INJECTION: forcing a failure. [ 75.954116][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 75.955951][ T3297] loop2: p3 start 33572980 is beyond EOD, truncated [ 75.968640][ T6234] CPU: 1 UID: 0 PID: 6234 Comm: syz.4.1093 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 75.968679][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.968736][ T6234] Call Trace: [ 75.968742][ T6234] [ 75.968749][ T6234] __dump_stack+0x1d/0x30 [ 75.968829][ T6234] dump_stack_lvl+0xe8/0x140 [ 75.968889][ T6234] dump_stack+0x15/0x1b [ 75.968905][ T6234] should_fail_ex+0x265/0x280 [ 75.968935][ T6234] should_failslab+0x8c/0xb0 [ 75.968957][ T6234] kmem_cache_alloc_noprof+0x50/0x310 [ 75.969051][ T6234] ? audit_log_start+0x365/0x6c0 [ 75.969102][ T6234] audit_log_start+0x365/0x6c0 [ 75.969133][ T6234] audit_seccomp+0x48/0x100 [ 75.969159][ T6234] ? __seccomp_filter+0x68c/0x10d0 [ 75.969180][ T6234] __seccomp_filter+0x69d/0x10d0 [ 75.969203][ T6234] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.969316][ T6234] ? vfs_write+0x75e/0x8e0 [ 75.969351][ T6234] __secure_computing+0x82/0x150 [ 75.969372][ T6234] syscall_trace_enter+0xcf/0x1e0 [ 75.969396][ T6234] do_syscall_64+0xac/0x200 [ 75.969559][ T6234] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.969583][ T6234] ? clear_bhb_loop+0x40/0x90 [ 75.969603][ T6234] ? clear_bhb_loop+0x40/0x90 [ 75.969625][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.969686][ T6234] RIP: 0033:0x7f2c45cfe929 [ 75.969700][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.969793][ T6234] RSP: 002b:00007f2c44367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.969811][ T6234] RAX: ffffffffffffffda RBX: 00007f2c45f25fa0 RCX: 00007f2c45cfe929 [ 75.969823][ T6234] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 75.969835][ T6234] RBP: 00007f2c44367090 R08: 0000000000000000 R09: 0000000000000000 [ 75.969847][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.969911][ T6234] R13: 0000000000000000 R14: 00007f2c45f25fa0 R15: 00007ffd450de8a8 [ 75.969929][ T6234] [ 76.003655][ T6236] loop4: detected capacity change from 0 to 1024 [ 76.004752][ T3297] loop2: p5 size 100663296 extends beyond EOD, truncated [ 76.199841][ T6221] loop2: p1 p2 < > p3 p4 < p5 > [ 76.204800][ T6221] loop2: partition table partially beyond EOD, truncated [ 76.213616][ T6221] loop2: p1 size 100663296 extends beyond EOD, truncated [ 76.223047][ T6221] loop2: p2 start 591104 is beyond EOD, truncated [ 76.229635][ T6221] loop2: p3 start 33572980 is beyond EOD, truncated [ 76.237029][ T6221] loop2: p5 size 100663296 extends beyond EOD, truncated [ 76.344455][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.349619][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 76.356158][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.374547][ T6240] loop4: detected capacity change from 0 to 8192 [ 76.392653][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.571541][ T6266] loop4: detected capacity change from 0 to 512 [ 76.599075][ T6266] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.623610][ T6266] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.636622][ T6270] loop5: detected capacity change from 0 to 512 [ 76.644311][ T6270] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.678413][ T6266] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.686851][ T6266] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.719267][ T6266] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1107: Invalid block bitmap block 0 in block_group 0 [ 76.719976][ T6277] serio: Serial port ptm0 [ 76.735910][ T6270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.748591][ T6266] EXT4-fs (loop4): Remounting filesystem read-only [ 76.756123][ T6266] EXT4-fs (loop4): 1 orphan inode deleted [ 76.763570][ T6266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.778366][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.795714][ T6270] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.822831][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.887250][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.999365][ T6307] FAULT_INJECTION: forcing a failure. [ 76.999365][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 77.012035][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.4.1123 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 77.012199][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.012209][ T6307] Call Trace: [ 77.012214][ T6307] [ 77.012219][ T6307] __dump_stack+0x1d/0x30 [ 77.012238][ T6307] dump_stack_lvl+0xe8/0x140 [ 77.012253][ T6307] dump_stack+0x15/0x1b [ 77.012267][ T6307] should_fail_ex+0x265/0x280 [ 77.012310][ T6307] should_failslab+0x8c/0xb0 [ 77.012328][ T6307] __kvmalloc_node_noprof+0x123/0x4e0 [ 77.012350][ T6307] ? alloc_netdev_mqs+0x5ac/0xab0 [ 77.012442][ T6307] alloc_netdev_mqs+0x5ac/0xab0 [ 77.012548][ T6307] rtnl_create_link+0x239/0x710 [ 77.012574][ T6307] rtnl_newlink_create+0x14c/0x620 [ 77.012594][ T6307] ? security_capable+0x83/0x90 [ 77.012616][ T6307] ? netlink_ns_capable+0x86/0xa0 [ 77.012684][ T6307] rtnl_newlink+0xf29/0x12d0 [ 77.012706][ T6307] ? rep_movs_alternative+0xf/0x90 [ 77.012726][ T6307] ? search_extable+0x53/0x80 [ 77.012742][ T6307] ? rep_movs_alternative+0xf/0x90 [ 77.012802][ T6307] ? rep_movs_alternative+0xf/0x90 [ 77.012821][ T6307] ? fixup_exception+0x72e/0xd00 [ 77.012837][ T6307] ? __kfree_skb+0x109/0x150 [ 77.012862][ T6307] ? __rcu_read_unlock+0x4f/0x70 [ 77.012888][ T6307] ? avc_has_perm_noaudit+0x1b1/0x200 [ 77.012933][ T6307] ? selinux_capable+0x1f9/0x270 [ 77.012958][ T6307] ? security_capable+0x83/0x90 [ 77.013014][ T6307] ? ns_capable+0x7d/0xb0 [ 77.013104][ T6307] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.013121][ T6307] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 77.013142][ T6307] netlink_rcv_skb+0x120/0x220 [ 77.013198][ T6307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.013220][ T6307] rtnetlink_rcv+0x1c/0x30 [ 77.013314][ T6307] netlink_unicast+0x59e/0x670 [ 77.013338][ T6307] netlink_sendmsg+0x58b/0x6b0 [ 77.013366][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.013453][ T6307] __sock_sendmsg+0x142/0x180 [ 77.013473][ T6307] ____sys_sendmsg+0x31e/0x4e0 [ 77.013543][ T6307] ___sys_sendmsg+0x17b/0x1d0 [ 77.013578][ T6307] __x64_sys_sendmsg+0xd4/0x160 [ 77.013679][ T6307] x64_sys_call+0x2999/0x2fb0 [ 77.013697][ T6307] do_syscall_64+0xd2/0x200 [ 77.013728][ T6307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.013750][ T6307] ? clear_bhb_loop+0x40/0x90 [ 77.013767][ T6307] ? clear_bhb_loop+0x40/0x90 [ 77.013785][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.013838][ T6307] RIP: 0033:0x7f2c45cfe929 [ 77.013885][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.013900][ T6307] RSP: 002b:00007f2c44367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.013916][ T6307] RAX: ffffffffffffffda RBX: 00007f2c45f25fa0 RCX: 00007f2c45cfe929 [ 77.013926][ T6307] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 77.013936][ T6307] RBP: 00007f2c44367090 R08: 0000000000000000 R09: 0000000000000000 [ 77.013946][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.013956][ T6307] R13: 0000000000000000 R14: 00007f2c45f25fa0 R15: 00007ffd450de8a8 [ 77.014035][ T6307] [ 77.014455][ T2997] ================================================================== [ 77.329700][ T2997] BUG: KCSAN: data-race in d_delete / step_into [ 77.335934][ T2997] [ 77.338242][ T2997] read-write to 0xffff888100621600 of 4 bytes by task 3510 on cpu 0: [ 77.346290][ T2997] d_delete+0x15a/0x180 [ 77.350436][ T2997] d_delete_notify+0x32/0x100 [ 77.355107][ T2997] vfs_unlink+0x30b/0x420 [ 77.359428][ T2997] do_unlinkat+0x28e/0x4c0 [ 77.363842][ T2997] __x64_sys_unlink+0x2e/0x40 [ 77.368511][ T2997] x64_sys_call+0x22a6/0x2fb0 [ 77.373176][ T2997] do_syscall_64+0xd2/0x200 [ 77.377674][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.383555][ T2997] [ 77.385863][ T2997] read to 0xffff888100621600 of 4 bytes by task 2997 on cpu 1: [ 77.393388][ T2997] step_into+0x12f/0x820 [ 77.397618][ T2997] walk_component+0x162/0x220 [ 77.402282][ T2997] path_lookupat+0xfe/0x2a0 [ 77.406772][ T2997] filename_lookup+0x147/0x340 [ 77.411525][ T2997] do_readlinkat+0x7d/0x320 [ 77.416017][ T2997] __x64_sys_readlink+0x47/0x60 [ 77.420857][ T2997] x64_sys_call+0x2cf3/0x2fb0 [ 77.425519][ T2997] do_syscall_64+0xd2/0x200 [ 77.430019][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.435899][ T2997] [ 77.438205][ T2997] value changed: 0x00300108 -> 0x00004008 [ 77.443905][ T2997] [ 77.446210][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 77.452341][ T2997] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 77.464302][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.474343][ T2997] ================================================================== [ 77.486882][ T6308] serio: Serial port ptm0