last executing test programs: 52.910311473s ago: executing program 0 (id=40): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x419}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_DF={0x5, 0xd, 0x8d}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048841}, 0x0) 52.437996232s ago: executing program 0 (id=44): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274f, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 52.414831972s ago: executing program 0 (id=45): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274f, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) (fail_nth: 1) 52.311793264s ago: executing program 0 (id=46): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@i_version}, {@dax}, {@acl}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@quota}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7f}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_shrink_slab_start\x00', r0}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64], 0x4a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x391, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x7fff, 0x0, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x7fffffff, 0x3035, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0xfff8, 0x0, 0x40}, 0x0, 0x0, 0x86e4}}]}}]}, 0x45c}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x200000) mmap(&(0x7f00006c1000/0x3000)=nil, 0x3000, 0x1, 0x1010, r5, 0xc0200000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x71f}, 0x18) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffa8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000800000000000000b7080000000000007b8af8ff00000000b7080000020000000000000000000000bfa100000000000007010000f8ffffffbfa400800000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005) lseek(r11, 0x5, 0x4) 52.085622328s ago: executing program 0 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffe4, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 51.917398921s ago: executing program 0 (id=53): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x240080b0) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = syz_io_uring_setup(0x543, &(0x7f0000000440)={0x0, 0x60ab, 0x400, 0x2, 0x100}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) r11 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$bt_hci(r11, &(0x7f00000001c0)=ANY=[], 0x6) 51.901572341s ago: executing program 32 (id=53): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x240080b0) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = syz_io_uring_setup(0x543, &(0x7f0000000440)={0x0, 0x60ab, 0x400, 0x2, 0x100}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) r11 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$bt_hci(r11, &(0x7f00000001c0)=ANY=[], 0x6) 3.355132818s ago: executing program 3 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r5, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) 3.27566995s ago: executing program 3 (id=803): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0xfffffffffffffd32, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x18, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000}, 0x2064090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 3.199775161s ago: executing program 3 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x2, 0xb9, &(0x7f0000000300)=""/185, 0x41100, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x2, 0x9, 0xe}, {0x1, 0x3, 0x9, 0x9}, {0x4, 0x5, 0x2, 0x8}, {0x4, 0x2, 0x8, 0x7}, {0x0, 0x2, 0xa, 0xa}, {0x0, 0x2, 0x10}, {0x4, 0x3, 0x2, 0x3}, {0x4, 0x2, 0x1, 0x510da5c41ae5b088}], 0x10, 0x7}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 3.199027351s ago: executing program 3 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d000100756470"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf2, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x7dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x1, 0x61}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0x8, 0x7d}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0xa2, &(0x7f0000000580)={0x5, 0xf, 0xa2, 0x2, [@wireless={0xb, 0x10, 0x1, 0x6, 0x6, 0x4, 0xa6, 0xb830, 0x8}, @generic={0x92, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f48fab0bedda599ff"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x3b, &(0x7f0000000680)=@string={0x3b, 0x3, "741194273e84940047b732120da539d0075fc2beb509d137d61faa8e80f6e6d2304bba133a87239e03ff9fe227b97b7cd9ee6e9b56a88d0fd2"}}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2876908d425bb2df}}, {0x2e, &(0x7f00000007c0)=@string={0x2e, 0x3, "e5466a79a7ee1a2f1a5e33a67bef49882a3c4e001b3ee96c3d84ee1bb1dd193a02281117b7700bfc2ae05272"}}]}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000008}}}}]}, 0x78}}, 0x0) 1.731525479s ago: executing program 2 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x100}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1200000}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x1e, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r11, r10, 0x0) 1.419875554s ago: executing program 5 (id=844): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) pipe(&(0x7f0000000e00)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000386dd6100272400383afffc000000000000000000000000000004ff020000000000000000000000000001"], 0x0) 1.419234064s ago: executing program 5 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/222, 0xde, 0x1, &(0x7f0000000180)=""/62, 0x3e}, &(0x7f0000000200)=0x40) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000000)=0x80, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e6574"], 0x60}}, 0x0) bind$bt_hci(r9, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r8, 0xffffffffffffffff, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.331440736s ago: executing program 5 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_getoverrun(0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000180)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.331053786s ago: executing program 4 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.303129066s ago: executing program 4 (id=849): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x2, 0xb9, &(0x7f0000000300)=""/185, 0x41100, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x2, 0x9, 0xe}, {0x1, 0x3, 0x9, 0x9}, {0x4, 0x5, 0x2, 0x8}, {0x4, 0x2, 0x8, 0x7}, {0x0, 0x2, 0xa, 0xa}, {0x0, 0x2, 0x10}, {0x4, 0x3, 0x2, 0x3}, {0x4, 0x2, 0x1, 0x510da5c41ae5b088}], 0x10, 0x7}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.302624446s ago: executing program 4 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.287168167s ago: executing program 4 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_getoverrun(0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.250357577s ago: executing program 5 (id=852): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000008c3cea589fb5c912dd36334e52c2d73fd248c8ecfaf187df0bd8276d32b8000000000000c4b38f85825bad9d4ae52ba66f4e5c10f39deb48af335ee99b5023684c4652396753d8dc2efdc1d547b8b8b08c9cb898c1128ff8e4a5ba058c05bc00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff08002000"/17], 0x50) ustat(0x2, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x31, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) chroot(0x0) 1.193733968s ago: executing program 4 (id=854): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe8090fff00fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 977.051992ms ago: executing program 4 (id=857): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x41, 0x0) gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup(r4) r6 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000004c0)={0x7, &(0x7f0000000300)=[{0x67, 0xf7, 0x6, 0xfffffffa}, {0x8, 0x9, 0x40, 0x5}, {0x8, 0x81, 0x6e}, {0x2, 0x80, 0x3, 0x43}, {0x9, 0x2, 0xc, 0xdfc}, {0x4, 0x51, 0x4, 0x6}, {0xff21, 0x3, 0x0, 0xe}]}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x0, 0xf9cc, 0x10, 0x46, 0x8, 0x9}, &(0x7f0000000000)=0x9c) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd_index=0xd, 0x0, 0x0, 0x0, {0x430}, 0x1}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 976.353182ms ago: executing program 2 (id=859): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 957.550163ms ago: executing program 5 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 956.737652ms ago: executing program 2 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 909.863243ms ago: executing program 2 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_getoverrun(0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 898.350273ms ago: executing program 1 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_getoverrun(0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000180)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 845.872334ms ago: executing program 2 (id=865): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x7) 844.922724ms ago: executing program 5 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d000100756470"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf2, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x7dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x1, 0x61}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0x8, 0x7d}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0x97, &(0x7f0000000580)={0x5, 0xf, 0x97, 0x1, [@generic={0x92, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f48fab0bedda599ff"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4e, &(0x7f0000000680)=@string={0x4e, 0x3, "741194273e84940047b732120da539d0075fc2beb509d137d61faa8e80f6e6d2304bba133a87239e03ff9fe227b97b7cd9ee6e9b56a88d0fd22877c429a49d5458f111e6bac030f3359320bd"}}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2876908d425bb2df}}, {0x2e, &(0x7f00000007c0)=@string={0x2e, 0x3, "e5466a79a7ee1a2f1a5e33a67bef49882a3c4e001b3ee96c3d84ee1bb1dd193a02281117b7700bfc2ae05272"}}]}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000008}}}}]}, 0x78}}, 0x0) 770.132416ms ago: executing program 1 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x8000000, 0x10100, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6840abb1c9b4ef6d}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x40880) 499.692901ms ago: executing program 1 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$phonet(0x23, 0x2, 0x1) shutdown(r5, 0x0) r6 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 412.114182ms ago: executing program 1 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000002000010000000000000001410000001c0017"], 0x38}}, 0x0) 306.772425ms ago: executing program 1 (id=869): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2d, 0x9}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x218, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, [0x28014b612fc8b9fb, 0xff, 0xffffff00, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'geneve0\x00', 'macsec0\x00', {}, {0xff}, 0xbb, 0x10, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x1, [0x9, 0x400, 0xfde6, 0x5, 0xb, 0x5e8, 0x2, 0x101, 0x3, 0x985, 0x3ff, 0x9, 0x6, 0x7ff, 0xff, 0x5], 0x3}}, @common=@frag={{0x30}, {[0x5, 0x94ba], 0xfff00000, 0x4, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff, 0xc3bb406de94acdf2, 0xffffff00, 0xff], [0x0, 0xffffffff, 0xffffff00], 'pim6reg\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x2, 0xff, 0x0, 0x62}, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x88, 0x9, 0x42, 0x6, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xff], [0xffffffff, 0xffffff], 0x1, 0x1100}}, @common=@hl={{0x28}, {0x0, 0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x6, 0x16, 0xe6, 0x3, 0x8, 0x3ff, 0x80]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 291.423954ms ago: executing program 3 (id=870): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000006}, 0x100, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlink(0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (fail_nth: 5) 63.540709ms ago: executing program 1 (id=871): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x94, 0x0, 0x8, 0x2, 0x7fff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, 0x0, 0x0, 0x3791353b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x7}}, &(0x7f0000000000)='GPL\x00'}, 0x94) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f00000004c0)={0x77359400}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) 1.70607ms ago: executing program 2 (id=872): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 0s ago: executing program 3 (id=873): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@empty, @multicast1, 0x0}, &(0x7f0000000240)=0xc) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000280)={0x1, 0x8, 0x2, 0x9, @vifc_lcl_ifindex=r9, @loopback}, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): [ T3681] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.096598][ T3681] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:46: Failed to release dquot type 0 [ 52.113032][ T4272] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 52.121803][ T4272] EXT4-fs (loop2): 1 orphan inode deleted [ 52.128204][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.176282][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.234829][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 52.248206][ T4286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4286 comm=syz.4.180 [ 52.345297][ T4296] bond0: (slave team0): Releasing backup interface [ 52.356553][ T4296] dummy0: left allmulticast mode [ 52.361516][ T4296] dummy0: left promiscuous mode [ 52.366694][ T4296] bridge0: port 3(dummy0) entered disabled state [ 52.380919][ T4296] bridge_slave_0: left allmulticast mode [ 52.386741][ T4296] bridge_slave_0: left promiscuous mode [ 52.392440][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.401317][ T4296] bridge_slave_1: left allmulticast mode [ 52.407065][ T4296] bridge_slave_1: left promiscuous mode [ 52.412712][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.422522][ T4296] bond0: (slave bond_slave_0): Releasing backup interface [ 52.432503][ T4296] bond0: (slave bond_slave_1): Releasing backup interface [ 52.445013][ T4296] team0: Port device team_slave_0 removed [ 52.454639][ T4296] team0: Port device team_slave_1 removed [ 52.460982][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.464933][ T4304] 9pnet_fd: Insufficient options for proto=fd [ 52.468507][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.484129][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.491512][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.591063][ T4319] loop3: detected capacity change from 0 to 2048 [ 52.633459][ T4319] loop3: p1 < > p4 [ 52.637846][ T4319] loop3: p4 size 8388608 extends beyond EOD, truncated [ 52.663951][ T4312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 52.670500][ T4312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.678243][ T4312] vhci_hcd vhci_hcd.0: Device attached [ 52.692878][ T4329] vhci_hcd: connection closed [ 52.694157][ T3652] vhci_hcd: stop threads [ 52.703149][ T3652] vhci_hcd: release socket [ 52.707565][ T3652] vhci_hcd: disconnect device [ 52.745751][ T4335] netlink: 'syz.5.201': attribute type 10 has an invalid length. [ 52.753654][ T4335] dummy0: entered promiscuous mode [ 52.759423][ T4335] bridge0: port 3(dummy0) entered blocking state [ 52.765904][ T4335] bridge0: port 3(dummy0) entered disabled state [ 52.772424][ T4335] dummy0: entered allmulticast mode [ 52.778411][ T4335] bridge0: port 3(dummy0) entered blocking state [ 52.784775][ T4335] bridge0: port 3(dummy0) entered forwarding state [ 52.881890][ T4339] syzkaller0: entered promiscuous mode [ 52.887516][ T4339] syzkaller0: entered allmulticast mode [ 53.124716][ T4351] loop5: detected capacity change from 0 to 1024 [ 53.131476][ T4351] EXT4-fs: Ignoring removed i_version option [ 53.137650][ T4351] EXT4-fs: Ignoring removed orlov option [ 53.144348][ T4351] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 53.164427][ T4351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.210021][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 53.210086][ T29] audit: type=1326 audit(1757428097.169:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.212785][ T4355] FAULT_INJECTION: forcing a failure. [ 53.212785][ T4355] name failslab, interval 1, probability 0, space 0, times 0 [ 53.217432][ T29] audit: type=1326 audit(1757428097.169:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.239704][ T4355] CPU: 0 UID: 0 PID: 4355 Comm: syz.2.209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.239754][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.239824][ T4355] Call Trace: [ 53.239832][ T4355] [ 53.239842][ T4355] __dump_stack+0x1d/0x30 [ 53.239869][ T4355] dump_stack_lvl+0xe8/0x140 [ 53.239895][ T4355] dump_stack+0x15/0x1b [ 53.239924][ T4355] should_fail_ex+0x265/0x280 [ 53.240008][ T4355] ? audit_log_d_path+0x8d/0x150 [ 53.240048][ T4355] should_failslab+0x8c/0xb0 [ 53.240080][ T4355] __kmalloc_cache_noprof+0x4c/0x320 [ 53.240123][ T4355] audit_log_d_path+0x8d/0x150 [ 53.240196][ T4355] audit_log_d_path_exe+0x42/0x70 [ 53.240238][ T4355] audit_log_task+0x1e9/0x250 [ 53.240278][ T4355] audit_seccomp+0x61/0x100 [ 53.240333][ T4355] ? __seccomp_filter+0x68c/0x10d0 [ 53.240362][ T4355] __seccomp_filter+0x69d/0x10d0 [ 53.240393][ T4355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.240442][ T4355] ? vfs_write+0x7e8/0x960 [ 53.240470][ T4355] ? __rcu_read_unlock+0x4f/0x70 [ 53.240532][ T4355] ? __fget_files+0x184/0x1c0 [ 53.240610][ T4355] __secure_computing+0x82/0x150 [ 53.240653][ T4355] syscall_trace_enter+0xcf/0x1e0 [ 53.240686][ T4355] do_syscall_64+0xac/0x200 [ 53.240727][ T4355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.240812][ T4355] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.240850][ T4355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.240877][ T4355] RIP: 0033:0x7f007a20ebe9 [ 53.240942][ T4355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.241031][ T4355] RSP: 002b:00007f0078c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.241054][ T4355] RAX: ffffffffffffffda RBX: 00007f007a445fa0 RCX: 00007f007a20ebe9 [ 53.241070][ T4355] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 53.241086][ T4355] RBP: 00007f0078c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.241102][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.241156][ T4355] R13: 00007f007a446038 R14: 00007f007a445fa0 R15: 00007ffe10f6a078 [ 53.241183][ T4355] [ 53.278000][ T4343] FAULT_INJECTION: forcing a failure. [ 53.278000][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.285510][ T29] audit: type=1326 audit(1757428097.169:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.295441][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.295470][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.295484][ T4343] Call Trace: [ 53.295491][ T4343] [ 53.295555][ T4343] __dump_stack+0x1d/0x30 [ 53.295575][ T4343] dump_stack_lvl+0xe8/0x140 [ 53.295594][ T4343] dump_stack+0x15/0x1b [ 53.295612][ T4343] should_fail_ex+0x265/0x280 [ 53.295643][ T4343] should_fail+0xb/0x20 [ 53.295670][ T4343] should_fail_usercopy+0x1a/0x20 [ 53.295707][ T4343] _copy_from_user+0x1c/0xb0 [ 53.295817][ T4343] restore_altstack+0x4b/0x2d0 [ 53.295851][ T4343] ? __set_task_blocked+0x23a/0x2a0 [ 53.295882][ T4343] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 53.295918][ T4343] ? _raw_spin_unlock_irq+0x26/0x50 [ 53.295949][ T4343] ? signal_setup_done+0x266/0x290 [ 53.295991][ T4343] ? xfd_validate_state+0x45/0xf0 [ 53.296031][ T4343] ? fpu__clear_user_states+0x63/0x1e0 [ 53.296102][ T4343] ? fpregs_mark_activate+0x66/0x140 [ 53.296138][ T4343] ? fpu__clear_user_states+0x63/0x1e0 [ 53.296178][ T4343] ? arch_do_signal_or_restart+0x2f3/0x480 [ 53.296209][ T4343] ? __rcu_read_unlock+0x4f/0x70 [ 53.296240][ T4343] x64_sys_call+0x2d3c/0x2ff0 [ 53.296315][ T4343] do_syscall_64+0xd2/0x200 [ 53.296384][ T4343] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.296416][ T4343] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.296512][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.296540][ T4343] RIP: 0033:0x7f1693cfadb9 [ 53.296560][ T4343] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 53.296583][ T4343] RSP: 002b:00007f16927c6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 53.296663][ T4343] RAX: ffffffffffffffda RBX: 00007f1693f95fa0 RCX: 00007f1693cfadb9 [ 53.296680][ T4343] RDX: 00007f16927c6a80 RSI: 00007f16927c6bb0 RDI: 0000000000000021 [ 53.296697][ T4343] RBP: 00007f16927c7090 R08: 0000200000048000 R09: 0000000000000300 [ 53.296713][ T4343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.296729][ T4343] R13: 00007f1693f96038 R14: 00007f1693f95fa0 R15: 00007ffc66575ca8 [ 53.296754][ T4343] [ 53.745477][ T29] audit: type=1326 audit(1757428097.169:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.768791][ T29] audit: type=1326 audit(1757428097.169:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.792223][ T29] audit: type=1326 audit(1757428097.169:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.815509][ T29] audit: type=1326 audit(1757428097.169:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.838877][ T29] audit: type=1326 audit(1757428097.169:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.862133][ T29] audit: type=1326 audit(1757428097.169:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.885483][ T29] audit: type=1326 audit(1757428097.169:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 53.924765][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.080239][ T4393] FAULT_INJECTION: forcing a failure. [ 54.080239][ T4393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.093813][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.093871][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.093884][ T4393] Call Trace: [ 54.093891][ T4393] [ 54.093899][ T4393] __dump_stack+0x1d/0x30 [ 54.093923][ T4393] dump_stack_lvl+0xe8/0x140 [ 54.093943][ T4393] dump_stack+0x15/0x1b [ 54.093960][ T4393] should_fail_ex+0x265/0x280 [ 54.093999][ T4393] should_fail+0xb/0x20 [ 54.094020][ T4393] should_fail_usercopy+0x1a/0x20 [ 54.094051][ T4393] _copy_from_user+0x1c/0xb0 [ 54.094095][ T4393] kstrtouint_from_user+0x69/0xf0 [ 54.094170][ T4393] ? 0xffffffff81000000 [ 54.094187][ T4393] ? selinux_file_permission+0x1e4/0x320 [ 54.094216][ T4393] proc_fail_nth_write+0x50/0x160 [ 54.094250][ T4393] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.094281][ T4393] vfs_write+0x266/0x960 [ 54.094360][ T4393] ? vfs_read+0x4e6/0x770 [ 54.094387][ T4393] ? __rcu_read_unlock+0x4f/0x70 [ 54.094411][ T4393] ? __fget_files+0x184/0x1c0 [ 54.094437][ T4393] ksys_write+0xda/0x1a0 [ 54.094513][ T4393] __x64_sys_write+0x40/0x50 [ 54.094535][ T4393] x64_sys_call+0x27fe/0x2ff0 [ 54.094559][ T4393] do_syscall_64+0xd2/0x200 [ 54.094598][ T4393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.094663][ T4393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.094715][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.094756][ T4393] RIP: 0033:0x7ff49e8cd69f [ 54.094774][ T4393] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 54.094797][ T4393] RSP: 002b:00007ff49d32f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.094820][ T4393] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff49e8cd69f [ 54.094835][ T4393] RDX: 0000000000000001 RSI: 00007ff49d32f0a0 RDI: 0000000000000009 [ 54.094849][ T4393] RBP: 00007ff49d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.094952][ T4393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 54.094965][ T4393] R13: 00007ff49eb06038 R14: 00007ff49eb05fa0 R15: 00007ffe3acfacf8 [ 54.094988][ T4393] [ 54.101484][ T4395] mmap: syz.4.225 (4395) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.227892][ T4401] SELinux: failed to load policy [ 54.234079][ T4400] loop4: detected capacity change from 0 to 2048 [ 54.298054][ T4407] netlink: 'syz.5.226': attribute type 13 has an invalid length. [ 54.366228][ T4400] loop4: p2 p3 p7 [ 54.504412][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.513097][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.526000][ T4416] loop2: detected capacity change from 0 to 1024 [ 54.617636][ T4416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.636197][ T4407] bridge0: port 3(dummy0) entered disabled state [ 54.642631][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.649806][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.719093][ T4416] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.230: Allocating blocks 449-513 which overlap fs metadata [ 54.774973][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.785121][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.909648][ T3663] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.943368][ T3663] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.961771][ T4414] EXT4-fs (loop2): pa ffff888106e74070: logic 48, phys. 177, len 21 [ 54.969818][ T4414] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 54.988457][ T3663] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.019527][ T4445] loop5: detected capacity change from 0 to 1024 [ 55.022250][ T3663] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.033272][ T4445] EXT4-fs: Ignoring removed orlov option [ 55.043279][ T4445] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 55.061010][ T4445] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.083816][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.108468][ T4445] EXT4-fs (loop5): invalid journal inode [ 55.116167][ T4445] EXT4-fs (loop5): can't get journal size [ 55.123545][ T4445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.241999][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.252156][ T4463] FAULT_INJECTION: forcing a failure. [ 55.252156][ T4463] name failslab, interval 1, probability 0, space 0, times 0 [ 55.264966][ T4463] CPU: 1 UID: 0 PID: 4463 Comm: syz.4.243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.264993][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.265005][ T4463] Call Trace: [ 55.265011][ T4463] [ 55.265019][ T4463] __dump_stack+0x1d/0x30 [ 55.265041][ T4463] dump_stack_lvl+0xe8/0x140 [ 55.265086][ T4463] dump_stack+0x15/0x1b [ 55.265105][ T4463] should_fail_ex+0x265/0x280 [ 55.265161][ T4463] ? v9fs_mount+0x51/0x5c0 [ 55.265260][ T4463] should_failslab+0x8c/0xb0 [ 55.265300][ T4463] __kmalloc_cache_noprof+0x4c/0x320 [ 55.265335][ T4463] v9fs_mount+0x51/0x5c0 [ 55.265401][ T4463] ? selinux_capable+0x31/0x40 [ 55.265423][ T4463] ? __pfx_v9fs_mount+0x10/0x10 [ 55.265499][ T4463] legacy_get_tree+0x78/0xd0 [ 55.265532][ T4463] vfs_get_tree+0x57/0x1d0 [ 55.265558][ T4463] do_new_mount+0x207/0x5e0 [ 55.265579][ T4463] ? security_capable+0x83/0x90 [ 55.265600][ T4463] path_mount+0x4a4/0xb20 [ 55.265699][ T4463] ? user_path_at+0x109/0x130 [ 55.265736][ T4463] __se_sys_mount+0x28f/0x2e0 [ 55.265760][ T4463] ? fput+0x8f/0xc0 [ 55.265841][ T4463] __x64_sys_mount+0x67/0x80 [ 55.265862][ T4463] x64_sys_call+0x2b4d/0x2ff0 [ 55.265887][ T4463] do_syscall_64+0xd2/0x200 [ 55.265923][ T4463] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.265991][ T4463] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.266020][ T4463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.266052][ T4463] RIP: 0033:0x7f1693d5ebe9 [ 55.266067][ T4463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.266153][ T4463] RSP: 002b:00007f16927c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.266169][ T4463] RAX: ffffffffffffffda RBX: 00007f1693f95fa0 RCX: 00007f1693d5ebe9 [ 55.266180][ T4463] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 55.266190][ T4463] RBP: 00007f16927c7090 R08: 0000200000000280 R09: 0000000000000000 [ 55.266202][ T4463] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 55.266215][ T4463] R13: 00007f1693f96038 R14: 00007f1693f95fa0 R15: 00007ffc66575ca8 [ 55.266231][ T4463] [ 55.537412][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.545912][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.656246][ T4476] sg_write: data in/out 63013/10 bytes for SCSI command 0x37-- guessing data in; [ 55.656246][ T4476] program syz.4.246 not setting count and/or reply_len properly [ 55.827400][ T4487] FAULT_INJECTION: forcing a failure. [ 55.827400][ T4487] name failslab, interval 1, probability 0, space 0, times 0 [ 55.840236][ T4487] CPU: 0 UID: 0 PID: 4487 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.840264][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.840313][ T4487] Call Trace: [ 55.840319][ T4487] [ 55.840324][ T4487] __dump_stack+0x1d/0x30 [ 55.840344][ T4487] dump_stack_lvl+0xe8/0x140 [ 55.840365][ T4487] dump_stack+0x15/0x1b [ 55.840427][ T4487] should_fail_ex+0x265/0x280 [ 55.840472][ T4487] should_failslab+0x8c/0xb0 [ 55.840493][ T4487] __kvmalloc_node_noprof+0x123/0x4e0 [ 55.840545][ T4487] ? alloc_netdev_mqs+0x553/0xa30 [ 55.840572][ T4487] alloc_netdev_mqs+0x553/0xa30 [ 55.840599][ T4487] slip_open+0x2d1/0x920 [ 55.840620][ T4487] ? __cond_resched+0x4e/0x90 [ 55.840716][ T4487] tty_ldisc_open+0x5a/0xb0 [ 55.840752][ T4487] tty_set_ldisc+0x1db/0x380 [ 55.840799][ T4487] tiocsetd+0x51/0x60 [ 55.840852][ T4487] tty_ioctl+0xa7f/0xb80 [ 55.840867][ T4487] ? __pfx_tty_ioctl+0x10/0x10 [ 55.840881][ T4487] __se_sys_ioctl+0xcb/0x140 [ 55.840908][ T4487] __x64_sys_ioctl+0x43/0x50 [ 55.840927][ T4487] x64_sys_call+0x1816/0x2ff0 [ 55.840949][ T4487] do_syscall_64+0xd2/0x200 [ 55.841131][ T4487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.841157][ T4487] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.841253][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.841276][ T4487] RIP: 0033:0x7ff49e8cebe9 [ 55.841290][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.841304][ T4487] RSP: 002b:00007ff49d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.841324][ T4487] RAX: ffffffffffffffda RBX: 00007ff49eb05fa0 RCX: 00007ff49e8cebe9 [ 55.841346][ T4487] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 55.841356][ T4487] RBP: 00007ff49d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.841366][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.841375][ T4487] R13: 00007ff49eb06038 R14: 00007ff49eb05fa0 R15: 00007ffe3acfacf8 [ 55.841390][ T4487] [ 56.057233][ T4489] FAULT_INJECTION: forcing a failure. [ 56.057233][ T4489] name failslab, interval 1, probability 0, space 0, times 0 [ 56.069908][ T4489] CPU: 0 UID: 0 PID: 4489 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.069937][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.069951][ T4489] Call Trace: [ 56.069958][ T4489] [ 56.069966][ T4489] __dump_stack+0x1d/0x30 [ 56.069990][ T4489] dump_stack_lvl+0xe8/0x140 [ 56.070013][ T4489] dump_stack+0x15/0x1b [ 56.070033][ T4489] should_fail_ex+0x265/0x280 [ 56.070059][ T4489] should_failslab+0x8c/0xb0 [ 56.070086][ T4489] kmem_cache_alloc_noprof+0x50/0x310 [ 56.070111][ T4489] ? anon_vma_fork+0x126/0x2b0 [ 56.070134][ T4489] anon_vma_fork+0x126/0x2b0 [ 56.070156][ T4489] dup_mmap+0x579/0xf20 [ 56.070189][ T4489] copy_mm+0x11a/0x370 [ 56.070220][ T4489] copy_process+0xd08/0x2000 [ 56.070256][ T4489] kernel_clone+0x16c/0x5c0 [ 56.070286][ T4489] ? vfs_write+0x7e8/0x960 [ 56.070314][ T4489] __x64_sys_clone+0xe6/0x120 [ 56.070349][ T4489] x64_sys_call+0x119c/0x2ff0 [ 56.070369][ T4489] do_syscall_64+0xd2/0x200 [ 56.070403][ T4489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.070431][ T4489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.070465][ T4489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.070487][ T4489] RIP: 0033:0x7fb793ceebe9 [ 56.070504][ T4489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.070524][ T4489] RSP: 002b:00007fb792756fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 56.070545][ T4489] RAX: ffffffffffffffda RBX: 00007fb793f25fa0 RCX: 00007fb793ceebe9 [ 56.070559][ T4489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 56.070573][ T4489] RBP: 00007fb792757090 R08: 0000000000000000 R09: 0000000000000000 [ 56.070586][ T4489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 56.070600][ T4489] R13: 00007fb793f26038 R14: 00007fb793f25fa0 R15: 00007ffc4f6e05d8 [ 56.070638][ T4489] [ 56.326461][ T4496] loop1: detected capacity change from 0 to 512 [ 56.367291][ T4504] __nla_validate_parse: 27 callbacks suppressed [ 56.367313][ T4504] netlink: 256 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.394991][ T4496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.408125][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.408423][ T4496] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.415507][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.521110][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.531348][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.748924][ T3650] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.767332][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.784875][ T3650] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.806572][ T4512] syz.3.255 uses obsolete (PF_INET,SOCK_PACKET) [ 56.816489][ T3650] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.831599][ T4512] FAULT_INJECTION: forcing a failure. [ 56.831599][ T4512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.844752][ T4512] CPU: 1 UID: 0 PID: 4512 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.844779][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.844790][ T4512] Call Trace: [ 56.844796][ T4512] [ 56.844802][ T4512] __dump_stack+0x1d/0x30 [ 56.844824][ T4512] dump_stack_lvl+0xe8/0x140 [ 56.844877][ T4512] dump_stack+0x15/0x1b [ 56.844902][ T4512] should_fail_ex+0x265/0x280 [ 56.844934][ T4512] should_fail+0xb/0x20 [ 56.844952][ T4512] should_fail_usercopy+0x1a/0x20 [ 56.844975][ T4512] _copy_from_iter+0xd2/0xe80 [ 56.845002][ T4512] ? mntput_no_expire+0x6f/0x460 [ 56.845052][ T4512] ? mntput+0x4b/0x80 [ 56.845087][ T4512] tun_get_user+0x14d/0x2680 [ 56.845110][ T4512] ? __bpf_get_stackid+0x721/0x800 [ 56.845145][ T4512] ? _parse_integer_limit+0x170/0x190 [ 56.845228][ T4512] ? ref_tracker_alloc+0x1f2/0x2f0 [ 56.845253][ T4512] ? selinux_file_permission+0x1e4/0x320 [ 56.845407][ T4512] tun_chr_write_iter+0x15e/0x210 [ 56.845442][ T4512] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.845482][ T4512] vfs_write+0x527/0x960 [ 56.845517][ T4512] ksys_write+0xda/0x1a0 [ 56.845546][ T4512] __x64_sys_write+0x40/0x50 [ 56.845696][ T4512] x64_sys_call+0x27fe/0x2ff0 [ 56.845778][ T4512] do_syscall_64+0xd2/0x200 [ 56.845810][ T4512] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.845856][ T4512] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.845903][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.845930][ T4512] RIP: 0033:0x7ff49e8cebe9 [ 56.845987][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.846067][ T4512] RSP: 002b:00007ff49d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.846089][ T4512] RAX: ffffffffffffffda RBX: 00007ff49eb05fa0 RCX: 00007ff49e8cebe9 [ 56.846104][ T4512] RDX: 0000000000000ffe RSI: 0000200000000040 RDI: 0000000000000006 [ 56.846119][ T4512] RBP: 00007ff49d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.846198][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.846209][ T4512] R13: 00007ff49eb06038 R14: 00007ff49eb05fa0 R15: 00007ffe3acfacf8 [ 56.846227][ T4512] [ 57.072966][ T3650] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.134776][ T4517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.259'. [ 57.177963][ T4521] capability: warning: `syz.5.260' uses deprecated v2 capabilities in a way that may be insecure [ 57.280353][ T4524] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.446938][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.455586][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.534576][ T4535] macvtap0: refused to change device tx_queue_len [ 57.648949][ T4541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.264'. [ 57.758153][ T4546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.266'. [ 57.940094][ T4551] bridge_slave_0: left allmulticast mode [ 57.945926][ T4551] bridge_slave_0: left promiscuous mode [ 57.951673][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.961027][ T4551] bridge_slave_1: left allmulticast mode [ 57.966723][ T4551] bridge_slave_1: left promiscuous mode [ 57.972391][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.982797][ T4551] bond0: (slave bond_slave_0): Releasing backup interface [ 57.996306][ T4551] bond0: (slave bond_slave_1): Releasing backup interface [ 58.019150][ T4551] team0: Port device team_slave_0 removed [ 58.048168][ T4551] team0: Port device team_slave_1 removed [ 58.065419][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.072841][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.081491][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.089068][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.237010][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.249691][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.265462][ T4564] SELinux: failed to load policy [ 58.389590][ T4575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.276'. [ 58.486091][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 58.495335][ T4582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'. [ 58.511680][ T4583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.520205][ T4583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.593904][ T4588] loop2: detected capacity change from 0 to 512 [ 58.673810][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 58.673825][ T29] audit: type=1400 audit(1757428102.639:4749): avc: denied { create } for pid=4589 comm="syz.5.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.797475][ T4598] ref_ctr_offset mismatch. inode: 0x149 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 58.950983][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.959604][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.339167][ T29] audit: type=1400 audit(1757428103.299:4750): avc: denied { append } for pid=4610 comm="syz.5.287" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.362318][ T29] audit: type=1400 audit(1757428103.299:4751): avc: denied { ioctl } for pid=4610 comm="syz.5.287" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.386697][ T4611] random: crng reseeded on system resumption [ 59.401315][ T4612] vhci_hcd: invalid port number 23 [ 59.460931][ T4615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.288'. [ 59.546310][ T4622] netlink: 204 bytes leftover after parsing attributes in process `syz.5.291'. [ 59.563184][ T29] audit: type=1400 audit(1757428103.519:4752): avc: denied { ioctl } for pid=4621 comm="syz.5.291" path="socket:[7705]" dev="sockfs" ino=7705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.563947][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.291'. [ 59.628906][ T4624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4624 comm=syz.5.291 [ 59.773786][ T4626] loop5: detected capacity change from 0 to 128 [ 59.788042][ T4626] vfat: Unknown parameter '' [ 59.815854][ T4626] loop5: detected capacity change from 0 to 512 [ 59.835678][ T4626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.848838][ T4626] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.861982][ T4626] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.292: corrupted inode contents [ 59.874634][ T4626] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.292: mark_inode_dirty error [ 59.886059][ T4626] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.292: corrupted inode contents [ 59.899638][ T4626] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.292: mark_inode_dirty error [ 59.912307][ T29] audit: type=1400 audit(1757428103.879:4753): avc: denied { write } for pid=4625 comm="syz.5.292" path="/69/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.934931][ T4626] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 59.945226][ T4626] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 21: comm syz.5.292: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=19, rec_len=1, size=2048 fake=0 [ 59.965956][ T29] audit: type=1400 audit(1757428103.909:4754): avc: denied { relabelto } for pid=4625 comm="syz.5.292" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 59.992093][ T29] audit: type=1400 audit(1757428103.909:4755): avc: denied { remove_name } for pid=4625 comm="syz.5.292" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.014579][ T29] audit: type=1400 audit(1757428103.909:4756): avc: denied { rename } for pid=4625 comm="syz.5.292" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 60.043770][ T4626] EXT4-fs error (device loop5) in ext4_resetent:3678: Corrupt filesystem [ 60.052606][ T4626] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #19: comm syz.5.292: corrupted xattr block 21: invalid header [ 60.067487][ T4626] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 60.091070][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.115256][ T29] audit: type=1400 audit(1757428104.079:4757): avc: denied { read } for pid=4629 comm="syz.4.294" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.139388][ T29] audit: type=1400 audit(1757428104.079:4758): avc: denied { open } for pid=4629 comm="syz.4.294" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.380586][ T4657] loop3: detected capacity change from 0 to 1024 [ 60.406334][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.422810][ T4657] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm GPL: Allocating blocks 385-513 which overlap fs metadata [ 60.439077][ T4657] EXT4-fs (loop3): pa ffff888106e740e0: logic 16, phys. 129, len 24 [ 60.447205][ T4657] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 60.471016][ T4657] GPL (4657) used greatest stack depth: 9128 bytes left [ 60.481980][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.562364][ T4666] loop3: detected capacity change from 0 to 1024 [ 60.583491][ T4666] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 60.599713][ T4666] EXT4-fs (loop3): mount failed [ 60.632082][ T4673] can0: slcan on ptm1. [ 60.686826][ T4669] loop5: detected capacity change from 0 to 1024 [ 60.693501][ T4672] can0 (unregistered): slcan off ptm1. [ 60.704181][ T4669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.716627][ T4669] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.746284][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.910180][ T4698] loop5: detected capacity change from 0 to 1024 [ 60.918569][ T4698] EXT4-fs: Ignoring removed orlov option [ 60.941373][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.949907][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.964602][ T4698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.412724][ T4706] __nla_validate_parse: 5 callbacks suppressed [ 61.412735][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 61.475735][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 61.528623][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.567181][ T4711] loop1: detected capacity change from 0 to 1024 [ 61.584265][ T4711] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.320: Failed to acquire dquot type 0 [ 61.597155][ T4711] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 61.615469][ T4711] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.320: corrupted inode contents [ 61.627685][ T4711] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.320: mark_inode_dirty error [ 61.639689][ T4711] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.320: corrupted inode contents [ 61.654111][ T4711] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.320: mark_inode_dirty error [ 61.665678][ T4711] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.320: corrupted inode contents [ 61.685059][ T4711] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 61.713184][ T4711] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.320: corrupted inode contents [ 61.726142][ T4711] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.320: mark_inode_dirty error [ 61.797617][ T4711] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 61.807975][ T4711] EXT4-fs (loop1): 1 truncate cleaned up [ 61.814195][ T4711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.849910][ T4709] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.868103][ T4709] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 61.887409][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.892028][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 62.009885][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 62.057273][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 62.066665][ T4735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.329'. [ 62.222405][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 62.268404][ T4753] FAULT_INJECTION: forcing a failure. [ 62.268404][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 62.281198][ T4753] CPU: 0 UID: 0 PID: 4753 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.281230][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.281245][ T4753] Call Trace: [ 62.281253][ T4753] [ 62.281262][ T4753] __dump_stack+0x1d/0x30 [ 62.281363][ T4753] dump_stack_lvl+0xe8/0x140 [ 62.281410][ T4753] dump_stack+0x15/0x1b [ 62.281431][ T4753] should_fail_ex+0x265/0x280 [ 62.281489][ T4753] should_failslab+0x8c/0xb0 [ 62.281520][ T4753] kmem_cache_alloc_noprof+0x50/0x310 [ 62.281552][ T4753] ? security_file_alloc+0x32/0x100 [ 62.281658][ T4753] security_file_alloc+0x32/0x100 [ 62.281695][ T4753] init_file+0x5c/0x1d0 [ 62.281768][ T4753] alloc_empty_file+0x8b/0x200 [ 62.281804][ T4753] path_openat+0x68/0x2170 [ 62.281828][ T4753] ? path_openat+0x1bf8/0x2170 [ 62.281849][ T4753] ? _parse_integer_limit+0x170/0x190 [ 62.281949][ T4753] do_filp_open+0x1f1/0x230 [ 62.281984][ T4753] do_sys_openat2+0xa6/0x110 [ 62.282109][ T4753] __se_sys_openat2+0x194/0x1f0 [ 62.282146][ T4753] __x64_sys_openat2+0x55/0x70 [ 62.282180][ T4753] x64_sys_call+0x1121/0x2ff0 [ 62.282239][ T4753] do_syscall_64+0xd2/0x200 [ 62.282311][ T4753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.282331][ T4753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.282384][ T4753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.282401][ T4753] RIP: 0033:0x7fb793ceebe9 [ 62.282419][ T4753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.282437][ T4753] RSP: 002b:00007fb792757038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 62.282457][ T4753] RAX: ffffffffffffffda RBX: 00007fb793f25fa0 RCX: 00007fb793ceebe9 [ 62.282470][ T4753] RDX: 0000200000000380 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 62.282548][ T4753] RBP: 00007fb792757090 R08: 0000000000000000 R09: 0000000000000000 [ 62.282560][ T4753] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 62.282580][ T4753] R13: 00007fb793f26038 R14: 00007fb793f25fa0 R15: 00007ffc4f6e05d8 [ 62.282596][ T4753] [ 62.505530][ T4747] loop3: detected capacity change from 0 to 8192 [ 62.524684][ T4746] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.333'. [ 62.690738][ T4761] loop3: detected capacity change from 0 to 1024 [ 62.699093][ T4761] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.714656][ T4761] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.338: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.728766][ T4761] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.338: Failed to acquire dquot type 0 [ 62.741497][ T4761] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.338: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.757785][ T4765] netlink: '+}[@': attribute type 13 has an invalid length. [ 62.799102][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.807688][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.839780][ T4761] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.338: Invalid inode bitmap blk 0 in block_group 0 [ 62.939860][ T4761] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 63.025051][ T4761] EXT4-fs (loop3): 1 orphan inode deleted [ 63.034829][ T3537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.048352][ T3537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.102214][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.134566][ T3537] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.182465][ T3537] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.309089][ T3681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.323858][ T3681] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:46: Failed to release dquot type 0 [ 63.337700][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.351308][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 63.371833][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 63.380913][ T4780] loop1: detected capacity change from 0 to 1024 [ 63.396286][ T4794] FAULT_INJECTION: forcing a failure. [ 63.396286][ T4794] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.409775][ T4794] CPU: 0 UID: 0 PID: 4794 Comm: syz.5.345 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.409841][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.409851][ T4794] Call Trace: [ 63.409856][ T4794] [ 63.409862][ T4794] __dump_stack+0x1d/0x30 [ 63.409883][ T4794] dump_stack_lvl+0xe8/0x140 [ 63.409904][ T4794] dump_stack+0x15/0x1b [ 63.409927][ T4794] should_fail_ex+0x265/0x280 [ 63.410020][ T4794] should_fail_alloc_page+0xf2/0x100 [ 63.410049][ T4794] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.410086][ T4794] alloc_pages_mpol+0xb3/0x250 [ 63.410153][ T4794] folio_alloc_mpol_noprof+0x39/0x80 [ 63.410188][ T4794] shmem_get_folio_gfp+0x3cf/0xd60 [ 63.410232][ T4794] shmem_write_begin+0xa8/0x190 [ 63.410255][ T4794] generic_perform_write+0x181/0x490 [ 63.410282][ T4794] shmem_file_write_iter+0xc5/0xf0 [ 63.410355][ T4794] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 63.410374][ T4794] vfs_write+0x527/0x960 [ 63.410398][ T4794] ksys_write+0xda/0x1a0 [ 63.410479][ T4794] __x64_sys_write+0x40/0x50 [ 63.410499][ T4794] x64_sys_call+0x27fe/0x2ff0 [ 63.410522][ T4794] do_syscall_64+0xd2/0x200 [ 63.410555][ T4794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.410651][ T4794] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.410682][ T4794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.410702][ T4794] RIP: 0033:0x7f462612d69f [ 63.410762][ T4794] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 63.410776][ T4794] RSP: 002b:00007f4624b8edf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 63.410791][ T4794] RAX: ffffffffffffffda RBX: 00000000000dc800 RCX: 00007f462612d69f [ 63.410804][ T4794] RDX: 00000000000dc800 RSI: 00007f461c76f000 RDI: 0000000000000004 [ 63.410816][ T4794] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000009fc [ 63.410827][ T4794] R10: 0000200000003642 R11: 0000000000000293 R12: 0000000000000004 [ 63.410837][ T4794] R13: 00007f4624b8eef0 R14: 00007f4624b8eeb0 R15: 00007f461c76f000 [ 63.410853][ T4794] [ 63.621404][ T4780] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.344: Failed to acquire dquot type 0 [ 63.633288][ T4780] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.650540][ T4780] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.344: corrupted inode contents [ 63.663614][ T4780] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.344: mark_inode_dirty error [ 63.673869][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 63.673900][ T29] audit: type=1326 audit(1757428875.646:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.676556][ T4780] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.344: corrupted inode contents [ 63.684366][ T29] audit: type=1326 audit(1757428875.646:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.704989][ T4780] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.344: mark_inode_dirty error [ 63.754151][ T4780] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.344: corrupted inode contents [ 63.766288][ T4780] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 63.776173][ T4780] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.344: corrupted inode contents [ 63.803179][ T4807] loop5: detected capacity change from 0 to 512 [ 63.806518][ T29] audit: type=1326 audit(1757428875.698:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.832982][ T29] audit: type=1326 audit(1757428875.698:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.833236][ T4780] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.344: mark_inode_dirty error [ 63.856525][ T29] audit: type=1326 audit(1757428875.698:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.870733][ T4807] EXT4-fs: Ignoring removed nobh option [ 63.890762][ T29] audit: type=1400 audit(1757428875.698:5011): avc: denied { open } for pid=4806 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.897836][ T4780] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 63.915460][ T29] audit: type=1400 audit(1757428875.698:5012): avc: denied { kernel } for pid=4806 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.915486][ T29] audit: type=1400 audit(1757428875.698:5013): avc: denied { tracepoint } for pid=4806 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.915519][ T29] audit: type=1326 audit(1757428875.772:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.929378][ T4807] EXT4-fs (loop5): failed to initialize system zone (-117) [ 63.943720][ T29] audit: type=1326 audit(1757428875.782:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f462612ebe9 code=0x7ffc0000 [ 63.965447][ T4780] EXT4-fs (loop1): 1 truncate cleaned up [ 63.991871][ T4807] EXT4-fs (loop5): mount failed [ 63.994493][ T4780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.019515][ T4812] tipc: New replicast peer: 255.255.255.83 [ 64.046247][ T4812] tipc: Enabled bearer , priority 10 [ 64.060493][ T4780] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.101412][ T4816] IPv4: Oversized IP packet from 127.202.26.0 [ 64.108481][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.205064][ T4831] pim6reg: entered allmulticast mode [ 64.241883][ T4833] SELinux: failed to load policy [ 64.249002][ T4831] pim6reg: left allmulticast mode [ 64.382069][ T4840] loop3: detected capacity change from 0 to 512 [ 64.389540][ T4840] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.416196][ T4840] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.363: Failed to acquire dquot type 1 [ 64.428266][ T4840] EXT4-fs (loop3): 1 truncate cleaned up [ 64.434474][ T4840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.458487][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.525074][ T4849] loop3: detected capacity change from 0 to 2048 [ 64.544444][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.603777][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.615562][ T4865] loop4: detected capacity change from 0 to 512 [ 64.645719][ T4865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.658980][ T4865] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.664028][ T4871] loop3: detected capacity change from 0 to 1764 [ 64.695204][ T4865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.742134][ T4865] SELinux: failed to load policy [ 64.762876][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.800679][ T4891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.809205][ T4891] bond0: (slave bond1): Enslaving as an active interface with an up link [ 64.817935][ T4884] loop3: detected capacity change from 0 to 1024 [ 64.826954][ T4894] loop4: detected capacity change from 0 to 128 [ 64.841502][ T4894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 64.856692][ T4894] System zones: 1-3, 19-19, 35-36 [ 64.863397][ T4894] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 64.878255][ T4894] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.889641][ T4899] loop3: detected capacity change from 0 to 2048 [ 64.928842][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.939876][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.940224][ T4901] netlink: 'syz.5.384': attribute type 5 has an invalid length. [ 65.090327][ T4919] loop5: detected capacity change from 0 to 164 [ 65.101346][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.120819][ T4921] loop1: detected capacity change from 0 to 128 [ 65.186848][ T4931] bridge0: port 1(vlan1) entered blocking state [ 65.193421][ T4931] bridge0: port 1(vlan1) entered disabled state [ 65.199998][ T4931] vlan1: entered allmulticast mode [ 65.205170][ T4931] bridge0: entered allmulticast mode [ 65.211645][ T4931] vlan1: left allmulticast mode [ 65.216545][ T4931] bridge0: left allmulticast mode [ 65.237473][ T4936] loop4: detected capacity change from 0 to 256 [ 65.251527][ T4936] FAT-fs (loop4): bogus logical sector size 133 [ 65.255853][ T4938] vlan1: entered allmulticast mode [ 65.257892][ T4936] FAT-fs (loop4): Can't find a valid FAT filesystem [ 65.263016][ T4938] bridge_slave_0: entered allmulticast mode [ 65.390290][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.403960][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.471301][ T4952] loop1: detected capacity change from 0 to 1024 [ 65.489230][ T4952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.504985][ T4952] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.533471][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.609856][ T4967] loop2: detected capacity change from 0 to 1024 [ 65.632743][ T4973] loop1: detected capacity change from 0 to 256 [ 65.644401][ T4967] FAULT_INJECTION: forcing a failure. [ 65.644401][ T4967] name failslab, interval 1, probability 0, space 0, times 0 [ 65.646885][ T4973] FAT-fs (loop1): Directory bread(block 64) failed [ 65.657062][ T4967] CPU: 0 UID: 0 PID: 4967 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.657106][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.657121][ T4967] Call Trace: [ 65.657128][ T4967] [ 65.657136][ T4967] __dump_stack+0x1d/0x30 [ 65.657162][ T4967] dump_stack_lvl+0xe8/0x140 [ 65.657185][ T4967] dump_stack+0x15/0x1b [ 65.657205][ T4967] should_fail_ex+0x265/0x280 [ 65.657234][ T4967] should_failslab+0x8c/0xb0 [ 65.657288][ T4967] __kmalloc_noprof+0xa5/0x3e0 [ 65.657377][ T4967] ? ext4_find_extent+0x16b/0x7a0 [ 65.657405][ T4967] ext4_find_extent+0x16b/0x7a0 [ 65.657435][ T4967] ext4_ext_map_blocks+0x11f/0x38a0 [ 65.657475][ T4967] ? ext4_es_lookup_extent+0x352/0x4f0 [ 65.657538][ T4967] ext4_map_blocks+0x5ee/0xd00 [ 65.657581][ T4967] _ext4_get_block+0x10a/0x350 [ 65.657623][ T4967] ext4_get_block_unwritten+0x2a/0xb0 [ 65.657659][ T4967] ext4_block_write_begin+0x5e8/0xc00 [ 65.657699][ T4967] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 65.657805][ T4967] ? folio_mapping+0xb9/0x120 [ 65.657845][ T4967] ext4_write_begin+0x647/0xeb0 [ 65.657954][ T4967] ext4_da_write_begin+0x1fb/0x6e0 [ 65.657987][ T4967] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 65.658074][ T4967] generic_perform_write+0x181/0x490 [ 65.658114][ T4967] ext4_buffered_write_iter+0x1ee/0x3c0 [ 65.658189][ T4967] ext4_file_write_iter+0xdbf/0xf00 [ 65.658242][ T4967] do_iter_readv_writev+0x49c/0x540 [ 65.658283][ T4967] vfs_writev+0x2df/0x8b0 [ 65.658410][ T4967] __se_sys_pwritev2+0xfc/0x1c0 [ 65.658448][ T4967] __x64_sys_pwritev2+0x67/0x80 [ 65.658554][ T4967] x64_sys_call+0x2c55/0x2ff0 [ 65.658585][ T4967] do_syscall_64+0xd2/0x200 [ 65.658628][ T4967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.658699][ T4967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.658739][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.658830][ T4967] RIP: 0033:0x7f007a20ebe9 [ 65.658912][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.658942][ T4967] RSP: 002b:00007f0078c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 65.658967][ T4967] RAX: ffffffffffffffda RBX: 00007f007a445fa0 RCX: 00007f007a20ebe9 [ 65.658983][ T4967] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 65.658998][ T4967] RBP: 00007f0078c6f090 R08: 0000000000000000 R09: 0000000000000003 [ 65.659014][ T4967] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000002 [ 65.659047][ T4967] R13: 00007f007a446038 R14: 00007f007a445fa0 R15: 00007ffe10f6a078 [ 65.659071][ T4967] [ 65.922785][ T4973] FAT-fs (loop1): Directory bread(block 65) failed [ 65.929411][ T4973] FAT-fs (loop1): Directory bread(block 66) failed [ 65.935955][ T4973] FAT-fs (loop1): Directory bread(block 67) failed [ 65.942569][ T4973] FAT-fs (loop1): Directory bread(block 68) failed [ 65.949171][ T4973] FAT-fs (loop1): Directory bread(block 69) failed [ 65.956176][ T4973] FAT-fs (loop1): Directory bread(block 70) failed [ 65.962864][ T4973] FAT-fs (loop1): Directory bread(block 71) failed [ 65.969459][ T4973] FAT-fs (loop1): Directory bread(block 72) failed [ 65.993980][ T4973] FAT-fs (loop1): Directory bread(block 73) failed [ 66.028952][ T4984] loop3: detected capacity change from 0 to 1024 [ 66.046700][ T4979] loop5: detected capacity change from 0 to 512 [ 66.058281][ T4987] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 66.066059][ T3687] bio_check_eod: 17732 callbacks suppressed [ 66.066069][ T3687] kworker/u8:51: attempt to access beyond end of device [ 66.066069][ T3687] loop1: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 66.108910][ T4979] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.124107][ T4979] EXT4-fs (loop5): mount failed [ 66.256789][ T5020] loop3: detected capacity change from 0 to 1024 [ 66.263789][ T5020] EXT4-fs: Ignoring removed bh option [ 66.381880][ T5020] syz.3.426: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 66.396517][ T5020] CPU: 1 UID: 0 PID: 5020 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.396550][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.396565][ T5020] Call Trace: [ 66.396573][ T5020] [ 66.396616][ T5020] __dump_stack+0x1d/0x30 [ 66.396635][ T5020] dump_stack_lvl+0xe8/0x140 [ 66.396653][ T5020] dump_stack+0x15/0x1b [ 66.396668][ T5020] warn_alloc+0x12b/0x1a0 [ 66.396771][ T5020] ? audit_log_end+0x1d7/0x1f0 [ 66.396803][ T5020] ? audit_log_end+0x1d7/0x1f0 [ 66.396899][ T5020] __vmalloc_node_range_noprof+0x9c/0xe00 [ 66.396933][ T5020] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.396956][ T5020] ? __rcu_read_unlock+0x4f/0x70 [ 66.396976][ T5020] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 66.397056][ T5020] ? perf_cgroup_switch+0x10c/0x480 [ 66.397105][ T5020] ? should_fail_ex+0x30/0x280 [ 66.397179][ T5020] ? xskq_create+0x36/0xe0 [ 66.397198][ T5020] vmalloc_user_noprof+0x7d/0xb0 [ 66.397290][ T5020] ? xskq_create+0x80/0xe0 [ 66.397337][ T5020] xskq_create+0x80/0xe0 [ 66.397359][ T5020] xsk_init_queue+0x95/0xf0 [ 66.397383][ T5020] xsk_setsockopt+0x477/0x640 [ 66.397427][ T5020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 66.397466][ T5020] __sys_setsockopt+0x181/0x200 [ 66.397493][ T5020] __x64_sys_setsockopt+0x64/0x80 [ 66.397580][ T5020] x64_sys_call+0x20ec/0x2ff0 [ 66.397602][ T5020] do_syscall_64+0xd2/0x200 [ 66.397631][ T5020] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.397756][ T5020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.397836][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.397862][ T5020] RIP: 0033:0x7ff49e8cebe9 [ 66.397878][ T5020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.397948][ T5020] RSP: 002b:00007ff49d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.397969][ T5020] RAX: ffffffffffffffda RBX: 00007ff49eb05fa0 RCX: 00007ff49e8cebe9 [ 66.397985][ T5020] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 66.398001][ T5020] RBP: 00007ff49e951e19 R08: 0000000000000004 R09: 0000000000000000 [ 66.398016][ T5020] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 66.398030][ T5020] R13: 00007ff49eb06038 R14: 00007ff49eb05fa0 R15: 00007ffe3acfacf8 [ 66.398072][ T5020] [ 66.398130][ T5020] Mem-Info: [ 66.631526][ T5020] active_anon:6951 inactive_anon:2 isolated_anon:0 [ 66.631526][ T5020] active_file:18571 inactive_file:2242 isolated_file:0 [ 66.631526][ T5020] unevictable:0 dirty:335 writeback:0 [ 66.631526][ T5020] slab_reclaimable:3256 slab_unreclaimable:71316 [ 66.631526][ T5020] mapped:32937 shmem:3157 pagetables:1025 [ 66.631526][ T5020] sec_pagetables:0 bounce:0 [ 66.631526][ T5020] kernel_misc_reclaimable:0 [ 66.631526][ T5020] free:1819923 free_pcp:19013 free_cma:0 [ 66.676533][ T5020] Node 0 active_anon:27804kB inactive_anon:8kB active_file:74284kB inactive_file:8968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131748kB dirty:1340kB writeback:0kB shmem:12628kB kernel_stack:4544kB pagetables:4100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 66.703926][ T5020] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.732866][ T5020] lowmem_reserve[]: 0 2883 7862 7862 [ 66.738233][ T5020] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 66.768694][ T5020] lowmem_reserve[]: 0 0 4978 4978 [ 66.773798][ T5020] Node 0 Normal free:4314972kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27804kB inactive_anon:8kB active_file:74284kB inactive_file:8968kB unevictable:0kB writepending:1340kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:72008kB local_pcp:31408kB free_cma:0kB [ 66.805885][ T5020] lowmem_reserve[]: 0 0 0 0 [ 66.810620][ T5020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.824060][ T5020] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 66.840826][ T5020] Node 0 Normal: 623*4kB (UME) 358*8kB (UME) 177*16kB (UM) 217*32kB (UM) 118*64kB (UM) 81*128kB (UM) 60*256kB (UME) 22*512kB (UME) 19*1024kB (UME) 6*2048kB (UM) 1031*4096kB (M) = 4314396kB [ 66.844909][ T5034] FAULT_INJECTION: forcing a failure. [ 66.844909][ T5034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.859817][ T5020] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 66.859841][ T5020] 23996 total pagecache pages [ 66.873065][ T5034] CPU: 0 UID: 0 PID: 5034 Comm: syz.5.430 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.873110][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.873122][ T5034] Call Trace: [ 66.873130][ T5034] [ 66.873138][ T5034] __dump_stack+0x1d/0x30 [ 66.873222][ T5034] dump_stack_lvl+0xe8/0x140 [ 66.873247][ T5034] dump_stack+0x15/0x1b [ 66.873268][ T5034] should_fail_ex+0x265/0x280 [ 66.873346][ T5034] should_fail_alloc_page+0xf2/0x100 [ 66.873379][ T5034] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.873427][ T5034] alloc_pages_bulk_noprof+0x4b8/0x540 [ 66.873468][ T5034] ? __kmalloc_noprof+0x1dd/0x3e0 [ 66.873521][ T5034] ? copy_splice_read+0xc2/0x660 [ 66.873603][ T5034] copy_splice_read+0xf3/0x660 [ 66.873634][ T5034] ? __pfx_copy_splice_read+0x10/0x10 [ 66.873671][ T5034] splice_direct_to_actor+0x26c/0x680 [ 66.873698][ T5034] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.873733][ T5034] do_splice_direct+0xda/0x150 [ 66.873800][ T5034] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.873839][ T5034] do_sendfile+0x380/0x650 [ 66.873879][ T5034] __x64_sys_sendfile64+0x105/0x150 [ 66.873918][ T5034] x64_sys_call+0x2bb0/0x2ff0 [ 66.873944][ T5034] do_syscall_64+0xd2/0x200 [ 66.873990][ T5034] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.874019][ T5034] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.874056][ T5034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.874098][ T5034] RIP: 0033:0x7f462612ebe9 [ 66.874116][ T5034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.874138][ T5034] RSP: 002b:00007f4624b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.874161][ T5034] RAX: ffffffffffffffda RBX: 00007f4626365fa0 RCX: 00007f462612ebe9 [ 66.874176][ T5034] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 66.874191][ T5034] RBP: 00007f4624b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.874262][ T5034] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 66.874277][ T5034] R13: 00007f4626366038 R14: 00007f4626365fa0 R15: 00007ffc92b36888 [ 66.874301][ T5034] [ 67.102873][ T5020] 2 pages in swap cache [ 67.107092][ T5020] Free swap = 124988kB [ 67.111383][ T5020] Total swap = 124996kB [ 67.115565][ T5020] 2097051 pages RAM [ 67.119439][ T5020] 0 pages HighMem/MovableOnly [ 67.124165][ T5020] 80446 pages reserved [ 67.150061][ T5048] loop1: detected capacity change from 0 to 128 [ 67.160381][ T5048] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.184531][ T5048] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 67.255340][ T5067] loop1: detected capacity change from 0 to 1024 [ 67.262518][ T5067] EXT4-fs: inline encryption not supported [ 67.268363][ T5067] EXT4-fs: Ignoring removed i_version option [ 67.274841][ T5067] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.289367][ T5067] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.439: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.305852][ T5068] __nla_validate_parse: 22 callbacks suppressed [ 67.305863][ T5068] netlink: 124 bytes leftover after parsing attributes in process `syz.3.438'. [ 67.324407][ T5067] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.439: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.340726][ T5067] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.439: Failed to acquire dquot type 0 [ 67.354847][ T5067] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 67.364451][ T5067] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.439: mark_inode_dirty error [ 67.376071][ T5067] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 67.386396][ T5067] EXT4-fs (loop1): 1 orphan inode deleted [ 67.393240][ T3681] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.407840][ T3681] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:46: Failed to release dquot type 0 [ 67.420686][ T5067] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.439: Invalid inode table block 1 in block_group 0 [ 67.434144][ T5067] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 67.443759][ T5067] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.439: mark_inode_dirty error [ 67.510635][ T5074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'. [ 67.520500][ T5073] loop1: detected capacity change from 0 to 512 [ 67.527628][ T5073] ext4: Unknown parameter '' [ 67.533081][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'. [ 67.748015][ T5098] dummy0: left allmulticast mode [ 67.753598][ T5098] bridge0: port 3(dummy0) entered disabled state [ 67.763537][ T5098] bridge_slave_1: left allmulticast mode [ 67.769422][ T5098] bridge_slave_1: left promiscuous mode [ 67.775235][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.783503][ T5098] bridge_slave_0: left allmulticast mode [ 67.789188][ T5098] bridge_slave_0: left promiscuous mode [ 67.795115][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.046296][ T5110] loop3: detected capacity change from 0 to 512 [ 68.085141][ T5118] FAULT_INJECTION: forcing a failure. [ 68.085141][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.098389][ T5118] CPU: 0 UID: 0 PID: 5118 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.098416][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.098433][ T5118] Call Trace: [ 68.098439][ T5118] [ 68.098446][ T5118] __dump_stack+0x1d/0x30 [ 68.098471][ T5118] dump_stack_lvl+0xe8/0x140 [ 68.098513][ T5118] dump_stack+0x15/0x1b [ 68.098576][ T5118] should_fail_ex+0x265/0x280 [ 68.098601][ T5118] should_fail+0xb/0x20 [ 68.098625][ T5118] should_fail_usercopy+0x1a/0x20 [ 68.098656][ T5118] _copy_to_user+0x20/0xa0 [ 68.098760][ T5118] semctl_info+0x1ac/0x210 [ 68.098846][ T5118] __se_sys_semctl+0x218/0x2d0 [ 68.098874][ T5118] __x64_sys_semctl+0x55/0x70 [ 68.098896][ T5118] x64_sys_call+0x1e1a/0x2ff0 [ 68.099067][ T5118] do_syscall_64+0xd2/0x200 [ 68.099108][ T5118] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.099136][ T5118] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.099165][ T5118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.099265][ T5118] RIP: 0033:0x7f007a20ebe9 [ 68.099363][ T5118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.099384][ T5118] RSP: 002b:00007f0078c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 68.099407][ T5118] RAX: ffffffffffffffda RBX: 00007f007a445fa0 RCX: 00007f007a20ebe9 [ 68.099421][ T5118] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000000 [ 68.099438][ T5118] RBP: 00007f0078c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.099449][ T5118] R10: 0000200000001340 R11: 0000000000000246 R12: 0000000000000001 [ 68.099461][ T5118] R13: 00007f007a446038 R14: 00007f007a445fa0 R15: 00007ffe10f6a078 [ 68.099533][ T5118] [ 68.101794][ T5117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5117 comm=syz.3.458 [ 68.366159][ T5127] FAULT_INJECTION: forcing a failure. [ 68.366159][ T5127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.379498][ T5127] CPU: 1 UID: 0 PID: 5127 Comm: syz.5.460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.379557][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.379569][ T5127] Call Trace: [ 68.379575][ T5127] [ 68.379581][ T5127] __dump_stack+0x1d/0x30 [ 68.379633][ T5127] dump_stack_lvl+0xe8/0x140 [ 68.379661][ T5127] dump_stack+0x15/0x1b [ 68.379680][ T5127] should_fail_ex+0x265/0x280 [ 68.379707][ T5127] should_fail+0xb/0x20 [ 68.379725][ T5127] should_fail_usercopy+0x1a/0x20 [ 68.379753][ T5127] _copy_to_iter+0xd2/0xe70 [ 68.379794][ T5127] ? free_frozen_page_commit+0x6f/0x2a0 [ 68.379829][ T5127] ? _raw_spin_unlock+0x26/0x50 [ 68.379848][ T5127] ? __free_frozen_pages+0x25a/0x4e0 [ 68.379938][ T5127] copy_page_to_iter+0x18f/0x2d0 [ 68.380024][ T5127] pipe_to_user+0x5b/0x90 [ 68.380093][ T5127] __splice_from_pipe+0x1f6/0x480 [ 68.380112][ T5127] ? __pfx_pipe_to_user+0x10/0x10 [ 68.380134][ T5127] __se_sys_vmsplice+0x236/0xee0 [ 68.380192][ T5127] ? kstrtouint+0x76/0xc0 [ 68.380213][ T5127] ? kstrtouint_from_user+0x9f/0xf0 [ 68.380254][ T5127] ? get_pid_task+0x96/0xd0 [ 68.380302][ T5127] ? fput+0x8f/0xc0 [ 68.380362][ T5127] __x64_sys_vmsplice+0x55/0x70 [ 68.380382][ T5127] x64_sys_call+0x1dde/0x2ff0 [ 68.380403][ T5127] do_syscall_64+0xd2/0x200 [ 68.380510][ T5127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.380536][ T5127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.380563][ T5127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.380632][ T5127] RIP: 0033:0x7f462612ebe9 [ 68.380658][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.380686][ T5127] RSP: 002b:00007f4624b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 68.380708][ T5127] RAX: ffffffffffffffda RBX: 00007f4626366090 RCX: 00007f462612ebe9 [ 68.380799][ T5127] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 68.380810][ T5127] RBP: 00007f4624b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 68.380821][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.380834][ T5127] R13: 00007f4626366128 R14: 00007f4626366090 R15: 00007ffc92b36888 [ 68.380875][ T5127] [ 68.421927][ T5133] loop2: detected capacity change from 0 to 1024 [ 68.440102][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 68.440119][ T29] audit: type=1400 audit(1757428880.676:5422): avc: denied { name_bind } for pid=5130 comm="syz.3.463" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 68.530616][ T5133] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 68.660991][ T5133] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.671972][ T5133] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52321!=20869) [ 68.683556][ T5133] JBD2: no valid journal superblock found [ 68.689327][ T5133] EXT4-fs (loop2): Could not load journal inode [ 68.732855][ T5140] loop1: detected capacity change from 0 to 512 [ 68.740549][ T5140] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 68.760824][ T29] audit: type=1400 audit(1757428881.004:5423): avc: denied { name_bind } for pid=5139 comm="syz.1.467" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 68.791126][ T5143] loop2: detected capacity change from 0 to 764 [ 68.818087][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.465'. [ 68.828049][ T29] audit: type=1400 audit(1757428881.099:5424): avc: denied { bind } for pid=5134 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.865971][ T5147] loop2: detected capacity change from 0 to 512 [ 68.880582][ T29] audit: type=1400 audit(1757428881.152:5425): avc: denied { create } for pid=5134 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 68.955104][ T5147] EXT4-fs mount: 10 callbacks suppressed [ 68.955121][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.973996][ T5147] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.037712][ T29] audit: type=1400 audit(1757428881.300:5426): avc: denied { bind } for pid=5158 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.058007][ T29] audit: type=1400 audit(1757428881.300:5427): avc: denied { setopt } for pid=5158 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.078651][ T29] audit: type=1400 audit(1757428881.311:5428): avc: denied { ioctl } for pid=5146 comm="syz.2.469" path="/67/file2/memory.numa_stat" dev="loop2" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.105841][ T5161] loop5: detected capacity change from 0 to 128 [ 69.115697][ T29] audit: type=1400 audit(1757428881.395:5429): avc: denied { mount } for pid=5160 comm="syz.5.475" name="/" dev="ramfs" ino=9794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.125375][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.160031][ T5167] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.189836][ T29] audit: type=1326 audit(1757428881.469:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 69.213443][ T29] audit: type=1326 audit(1757428881.469:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 69.312759][ T5176] loop2: detected capacity change from 0 to 256 [ 69.440080][ T5186] netlink: 36 bytes leftover after parsing attributes in process `syz.5.485'. [ 69.558827][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.567364][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.792693][ T5208] loop5: detected capacity change from 0 to 128 [ 69.927276][ T5211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5211 comm=syz.3.493 [ 69.940258][ T5211] netlink: 'syz.3.493': attribute type 1 has an invalid length. [ 70.085691][ T5227] loop3: detected capacity change from 0 to 2048 [ 70.108783][ T5217] FAULT_INJECTION: forcing a failure. [ 70.108783][ T5217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.122148][ T5217] CPU: 1 UID: 0 PID: 5217 Comm: syz.5.490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.122177][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.122190][ T5217] Call Trace: [ 70.122197][ T5217] [ 70.122204][ T5217] __dump_stack+0x1d/0x30 [ 70.122301][ T5217] dump_stack_lvl+0xe8/0x140 [ 70.122345][ T5217] dump_stack+0x15/0x1b [ 70.122364][ T5217] should_fail_ex+0x265/0x280 [ 70.122451][ T5217] should_fail+0xb/0x20 [ 70.122472][ T5217] should_fail_usercopy+0x1a/0x20 [ 70.122505][ T5217] _copy_to_user+0x20/0xa0 [ 70.122591][ T5217] simple_read_from_buffer+0xb5/0x130 [ 70.122612][ T5217] proc_fail_nth_read+0x10e/0x150 [ 70.122637][ T5217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.122703][ T5217] vfs_read+0x1a5/0x770 [ 70.122727][ T5217] ? __rcu_read_unlock+0x4f/0x70 [ 70.122782][ T5217] ? __fget_files+0x184/0x1c0 [ 70.122813][ T5217] ksys_read+0xda/0x1a0 [ 70.122840][ T5217] __x64_sys_read+0x40/0x50 [ 70.122865][ T5217] x64_sys_call+0x27bc/0x2ff0 [ 70.122889][ T5217] do_syscall_64+0xd2/0x200 [ 70.122923][ T5217] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.122951][ T5217] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.123025][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.123043][ T5217] RIP: 0033:0x7f462612d5fc [ 70.123056][ T5217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.123071][ T5217] RSP: 002b:00007f4624b4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.123155][ T5217] RAX: ffffffffffffffda RBX: 00007f4626366180 RCX: 00007f462612d5fc [ 70.123168][ T5217] RDX: 000000000000000f RSI: 00007f4624b4d0a0 RDI: 000000000000000a [ 70.123182][ T5217] RBP: 00007f4624b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 70.123195][ T5217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.123208][ T5217] R13: 00007f4626366218 R14: 00007f4626366180 R15: 00007ffc92b36888 [ 70.123229][ T5217] [ 70.339748][ T5227] loop3: p2 p3 p7 [ 70.374781][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 70.386414][ T5236] hsr_slave_1 (unregistering): left promiscuous mode [ 70.398492][ T5238] syz_tun: entered allmulticast mode [ 70.406457][ T5237] syz_tun: left allmulticast mode [ 70.421673][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 70.513028][ T5255] loop3: detected capacity change from 0 to 128 [ 70.588694][ T5251] ip6erspan0: entered promiscuous mode [ 70.739127][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 70.748058][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 70.760950][ T5266] loop3: detected capacity change from 0 to 512 [ 70.767480][ T5266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.775230][ T5266] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.783210][ T5266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 70.791374][ T5266] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 70.792227][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 70.800914][ T5266] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 70.801349][ T5266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.832062][ T5266] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.513: dx entry: limit 65535 != root limit 120 [ 70.844282][ T5266] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.513: Corrupt directory, running e2fsck is recommended [ 70.865546][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.884966][ T5270] loop3: detected capacity change from 0 to 1024 [ 70.895254][ T5270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.917322][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.396362][ T5307] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 71.563135][ T5316] loop5: detected capacity change from 0 to 1024 [ 71.571462][ T5316] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.581716][ T5318] capability: warning: `syz.1.532' uses 32-bit capabilities (legacy support in use) [ 71.596829][ T5316] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.531: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.612221][ T5316] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.531: Failed to acquire dquot type 0 [ 71.616163][ T5322] loop1: detected capacity change from 0 to 512 [ 71.623789][ T5316] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.531: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.643056][ T5316] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.531: Invalid inode bitmap blk 0 in block_group 0 [ 71.653300][ T5322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.662089][ T5316] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 71.669458][ T3537] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.676756][ T5316] EXT4-fs (loop5): 1 orphan inode deleted [ 71.696518][ T3537] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 71.696661][ T5322] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.710343][ T5316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.741461][ T5316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.771228][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.845963][ T5330] FAULT_INJECTION: forcing a failure. [ 71.845963][ T5330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.859111][ T5330] CPU: 1 UID: 0 PID: 5330 Comm: syz.5.536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.859219][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.859232][ T5330] Call Trace: [ 71.859240][ T5330] [ 71.859247][ T5330] __dump_stack+0x1d/0x30 [ 71.859270][ T5330] dump_stack_lvl+0xe8/0x140 [ 71.859286][ T5330] dump_stack+0x15/0x1b [ 71.859300][ T5330] should_fail_ex+0x265/0x280 [ 71.859335][ T5330] should_fail+0xb/0x20 [ 71.859429][ T5330] should_fail_usercopy+0x1a/0x20 [ 71.859449][ T5330] _copy_from_user+0x1c/0xb0 [ 71.859569][ T5330] __ia32_sys_rt_sigreturn+0x128/0x350 [ 71.859658][ T5330] x64_sys_call+0x2d3c/0x2ff0 [ 71.859679][ T5330] do_syscall_64+0xd2/0x200 [ 71.859710][ T5330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.859754][ T5330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.859784][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.859826][ T5330] RIP: 0033:0x7f46260cadb9 [ 71.859837][ T5330] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 71.859852][ T5330] RSP: 002b:00007f4624b8ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 71.859868][ T5330] RAX: ffffffffffffffda RBX: 00007f4626365fa0 RCX: 00007f46260cadb9 [ 71.859944][ T5330] RDX: 00007f4624b8ea80 RSI: 00007f4624b8ebb0 RDI: 0000000000000021 [ 71.859954][ T5330] RBP: 00007f4624b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.859985][ T5330] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 71.859996][ T5330] R13: 00007f4626366038 R14: 00007f4626365fa0 R15: 00007ffc92b36888 [ 71.860014][ T5330] [ 72.138336][ T5344] __nla_validate_parse: 7 callbacks suppressed [ 72.138424][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 72.180290][ T5344] team0: Port device team_slave_0 removed [ 72.232322][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 72.257725][ T5355] macvtap0: refused to change device tx_queue_len [ 72.278391][ T5357] macvtap0: refused to change device tx_queue_len [ 72.388801][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.550'. [ 72.397801][ T5366] tipc: Started in network mode [ 72.402682][ T5366] tipc: Node identity 7, cluster identity 4711 [ 72.408896][ T5366] tipc: Node number set to 7 [ 72.410415][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.427293][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.454484][ T5376] IPv4: Oversized IP packet from 127.202.26.0 [ 72.480758][ T5379] netlink: 68 bytes leftover after parsing attributes in process `syz.3.555'. [ 72.730721][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.739166][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.101966][ T5396] loop2: detected capacity change from 0 to 1024 [ 73.149868][ T5396] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.160890][ T5396] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.187844][ T5396] JBD2: no valid journal superblock found [ 73.193688][ T5396] EXT4-fs (loop2): Could not load journal inode [ 73.216391][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 73.216406][ T29] audit: type=1400 audit(1757428885.728:5605): avc: denied { watch watch_reads } for pid=5395 comm="gtp" path="/74" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.217035][ T5396] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 73.312104][ T29] audit: type=1400 audit(1757428885.834:5606): avc: denied { bind } for pid=5408 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.334273][ T29] audit: type=1400 audit(1757428885.834:5607): avc: denied { write } for pid=5408 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.358205][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 73.367170][ T5413] tipc: Started in network mode [ 73.372115][ T5413] tipc: Node identity 7, cluster identity 4711 [ 73.378307][ T5413] tipc: Node number set to 7 [ 73.401632][ T5415] 9pnet_fd: Insufficient options for proto=fd [ 73.431619][ T29] audit: type=1400 audit(1757428885.960:5608): avc: denied { ioctl } for pid=5419 comm="syz.1.570" path="socket:[11090]" dev="sockfs" ino=11090 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.483197][ T4501] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.506615][ T4501] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.556606][ T29] audit: type=1326 audit(1757428886.087:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.580137][ T29] audit: type=1326 audit(1757428886.087:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.662896][ T29] audit: type=1326 audit(1757428886.119:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.686389][ T29] audit: type=1326 audit(1757428886.119:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.709758][ T29] audit: type=1326 audit(1757428886.119:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.733155][ T29] audit: type=1326 audit(1757428886.119:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 73.777025][ T5434] : renamed from vlan1 [ 73.974233][ T5436] loop2: detected capacity change from 0 to 512 [ 73.989674][ T5436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.575: bg 0: block 248: padding at end of block bitmap is not set [ 74.004357][ T5436] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.575: Failed to acquire dquot type 1 [ 74.016414][ T5436] EXT4-fs (loop2): 1 truncate cleaned up [ 74.022409][ T5436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.035248][ T5436] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.051550][ T5436] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.575: deleted inode referenced: 12 [ 74.077047][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.086722][ T3654] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 1 [ 74.312904][ T5452] vlan2: entered allmulticast mode [ 74.318236][ T5452] bridge_slave_0: entered allmulticast mode [ 74.351420][ T5453] loop2: detected capacity change from 0 to 512 [ 74.365086][ T5453] EXT4-fs: Ignoring removed nobh option [ 74.378449][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.579: corrupted inode contents [ 74.390807][ T5453] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.579: mark_inode_dirty error [ 74.403012][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.579: corrupted inode contents [ 74.416213][ T5453] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.579: mark_inode_dirty error [ 74.428439][ T5453] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.579: Failed to acquire dquot type 0 [ 74.440327][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.579: corrupted inode contents [ 74.452976][ T5453] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.579: mark_inode_dirty error [ 74.464690][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.579: corrupted inode contents [ 74.477769][ T5453] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.579: mark_inode_dirty error [ 74.489464][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.579: corrupted inode contents [ 74.501621][ T5453] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 74.510344][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.579: corrupted inode contents [ 74.522414][ T5453] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.579: mark_inode_dirty error [ 74.535268][ T5453] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 74.545988][ T5453] EXT4-fs (loop2): 1 truncate cleaned up [ 74.564689][ T5453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.578570][ T5453] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.589843][ T5453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.725001][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.734131][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.764005][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 74.773150][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 74.969156][ T5477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.588'. [ 75.336342][ T5502] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 75.350762][ T5502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.360299][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 75.386353][ T5502] bond1 (unregistering): Released all slaves [ 75.434212][ T5508] loop5: detected capacity change from 0 to 2048 [ 75.460146][ T5508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.479526][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.599'. [ 75.532515][ T5521] vlan1: entered allmulticast mode [ 76.308280][ T5573] vlan2: entered allmulticast mode [ 76.387707][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.480025][ T5579] futex_wake_op: syz.2.619 tries to shift op by -1; fix this program [ 76.490547][ T5579] loop9: detected capacity change from 0 to 7 [ 76.497241][ T5579] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.505606][ T5579] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.513689][ T5579] loop9: unable to read partition table [ 76.519967][ T5579] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 76.519967][ T5579] ) failed (rc=-5) [ 77.164170][ T5599] __nla_validate_parse: 1 callbacks suppressed [ 77.164189][ T5599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.625'. [ 77.216268][ T5601] loop1: detected capacity change from 0 to 512 [ 77.223207][ T5601] EXT4-fs: Ignoring removed oldalloc option [ 77.255913][ T5601] EXT4-fs (loop1): 1 truncate cleaned up [ 77.262573][ T5601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.316121][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.412709][ T5608] loop3: detected capacity change from 0 to 2048 [ 77.427571][ T5608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.442033][ T5608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 77.558393][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'. [ 77.568225][ T5636] loop1: detected capacity change from 0 to 512 [ 77.574947][ T5636] EXT4-fs: Ignoring removed oldalloc option [ 77.583054][ T5636] EXT4-fs (loop1): 1 truncate cleaned up [ 77.590665][ T5636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.625437][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.732547][ T5647] vhci_hcd: invalid port number 255 [ 77.738052][ T5647] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 77.802063][ T5648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.810803][ T5648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.168693][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 78.168761][ T29] audit: type=1400 audit(1757428890.957:5643): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.209606][ T5655] 9pnet_fd: Insufficient options for proto=fd [ 78.219849][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 78.243902][ T5655] veth3: entered promiscuous mode [ 78.289200][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.446446][ T29] audit: type=1326 audit(1757428891.252:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.472092][ T5666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 78.475456][ T5668] loop5: detected capacity change from 0 to 512 [ 78.488039][ T5668] EXT4-fs: Ignoring removed oldalloc option [ 78.494242][ T29] audit: type=1326 audit(1757428891.252:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.517643][ T29] audit: type=1326 audit(1757428891.284:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.541015][ T29] audit: type=1326 audit(1757428891.284:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.564344][ T29] audit: type=1326 audit(1757428891.284:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.574739][ T5668] EXT4-fs (loop5): 1 truncate cleaned up [ 78.587873][ T29] audit: type=1326 audit(1757428891.284:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.596377][ T5668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.616918][ T29] audit: type=1326 audit(1757428891.284:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.616954][ T29] audit: type=1326 audit(1757428891.284:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.676144][ T29] audit: type=1326 audit(1757428891.284:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 78.835101][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.895537][ T5694] loop1: detected capacity change from 0 to 2048 [ 78.913677][ T5694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.930106][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.938595][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.979850][ T5694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 79.668504][ T5714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.664'. [ 79.696047][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.811058][ T5727] loop1: detected capacity change from 0 to 1024 [ 79.818072][ T5727] EXT4-fs: inline encryption not supported [ 79.825657][ T5727] EXT4-fs: Ignoring removed bh option [ 79.842039][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.909033][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.917584][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.492853][ T5746] tipc: Started in network mode [ 80.497789][ T5746] tipc: Node identity ac14140f, cluster identity 4711 [ 80.504720][ T5746] tipc: New replicast peer: 255.255.255.83 [ 80.510657][ T5746] tipc: Enabled bearer , priority 10 [ 80.546254][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.141682][ T5765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 81.355067][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.363622][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.449411][ T23] tipc: Node number set to 2886997007 [ 81.801550][ T5793] vlan1: entered allmulticast mode [ 81.923690][ T5795] vhci_hcd: invalid port number 252 [ 81.929035][ T5795] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 82.217085][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.227508][ T5806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.617622][ T5810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.639872][ T5816] loop1: detected capacity change from 0 to 512 [ 82.647014][ T5816] EXT4-fs: Ignoring removed oldalloc option [ 82.659495][ T5816] EXT4-fs (loop1): 1 truncate cleaned up [ 82.665612][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.693130][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.707884][ T5810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.768946][ T5810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.791668][ T5824] loop1: detected capacity change from 0 to 512 [ 82.800779][ T5824] EXT4-fs: Ignoring removed oldalloc option [ 82.852012][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.860695][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.038584][ T5836] vlan1: entered allmulticast mode [ 83.412558][ T5824] EXT4-fs (loop1): 1 truncate cleaned up [ 83.419737][ T5824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.445803][ T5810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.462159][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.474349][ T5844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.711'. [ 83.525058][ T3537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.543296][ T3537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.590975][ T5855] loop3: detected capacity change from 0 to 512 [ 83.592884][ T3687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.605961][ T3681] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.610822][ T5855] EXT4-fs: Ignoring removed oldalloc option [ 83.621619][ T5855] EXT4-fs (loop3): 1 truncate cleaned up [ 83.627775][ T5855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.646110][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 83.646126][ T29] audit: type=1326 audit(1757428896.742:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 83.832570][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.158171][ T29] audit: type=1326 audit(1757428896.742:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.181701][ T29] audit: type=1326 audit(1757428896.753:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.205115][ T29] audit: type=1326 audit(1757428896.774:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.228488][ T29] audit: type=1326 audit(1757428896.774:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.251896][ T29] audit: type=1326 audit(1757428896.774:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.275341][ T29] audit: type=1326 audit(1757428896.774:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.298762][ T29] audit: type=1326 audit(1757428896.774:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.322141][ T29] audit: type=1326 audit(1757428896.784:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.345441][ T29] audit: type=1326 audit(1757428896.784:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.3.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49e8cebe9 code=0x7ffc0000 [ 84.425652][ T5865] Option ' ' to dns_resolver key: bad/missing value [ 84.467815][ T5878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.722'. [ 85.200802][ T5885] loop3: detected capacity change from 0 to 512 [ 85.207570][ T5885] EXT4-fs: Ignoring removed oldalloc option [ 85.208997][ T5886] vlan2: entered allmulticast mode [ 85.215405][ T5885] EXT4-fs (loop3): 1 truncate cleaned up [ 85.224919][ T5885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.256437][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.354885][ T5889] vhci_hcd: invalid port number 252 [ 85.360152][ T5889] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 85.385255][ T5896] loop3: detected capacity change from 0 to 512 [ 85.392072][ T5896] EXT4-fs: Ignoring removed oldalloc option [ 85.399651][ T5896] EXT4-fs (loop3): 1 truncate cleaned up [ 85.406042][ T5896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.521661][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.261820][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.270481][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.862082][ T5931] loop1: detected capacity change from 0 to 512 [ 86.889594][ T5931] EXT4-fs: Ignoring removed oldalloc option [ 86.913485][ T5931] EXT4-fs (loop1): 1 truncate cleaned up [ 86.931345][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.988004][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.099763][ T5934] vlan2: entered allmulticast mode [ 87.275495][ T5937] vhci_hcd: invalid port number 252 [ 87.280819][ T5937] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 87.467408][ T5947] netlink: 32 bytes leftover after parsing attributes in process `syz.5.742'. [ 87.574534][ T5959] netlink: 52 bytes leftover after parsing attributes in process `syz.5.748'. [ 87.631609][ T5956] macvtap0: refused to change device tx_queue_len [ 87.770367][ T5968] loop5: detected capacity change from 0 to 512 [ 87.789448][ T5968] EXT4-fs: Ignoring removed oldalloc option [ 87.829857][ T5968] EXT4-fs (loop5): 1 truncate cleaned up [ 87.853846][ T5968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.039187][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.385259][ T29] kauditd_printk_skb: 12245 callbacks suppressed [ 88.385275][ T29] audit: type=1326 audit(1757428901.733:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f007a1aadb9 code=0x7ffc0000 [ 88.415078][ T29] audit: type=1326 audit(1757428901.733:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 88.438651][ T29] audit: type=1326 audit(1757428901.744:17915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f007a205ba7 code=0x7ffc0000 [ 88.462084][ T29] audit: type=1326 audit(1757428901.744:17916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f007a1aadb9 code=0x7ffc0000 [ 88.485407][ T29] audit: type=1326 audit(1757428901.744:17917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 88.508833][ T29] audit: type=1326 audit(1757428901.744:17918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f007a205ba7 code=0x7ffc0000 [ 88.532244][ T29] audit: type=1326 audit(1757428901.744:17919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f007a1aadb9 code=0x7ffc0000 [ 88.555675][ T29] audit: type=1326 audit(1757428901.744:17920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f007a20ebe9 code=0x7ffc0000 [ 88.579243][ T29] audit: type=1326 audit(1757428901.744:17921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f007a205ba7 code=0x7ffc0000 [ 88.602553][ T29] audit: type=1326 audit(1757428901.744:17922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f007a1aadb9 code=0x7ffc0000 [ 88.854762][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.863485][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.435134][ T6006] loop3: detected capacity change from 0 to 512 [ 89.468666][ T6006] EXT4-fs: Ignoring removed oldalloc option [ 89.478068][ T6006] EXT4-fs (loop3): 1 truncate cleaned up [ 89.484403][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.500083][ T6011] loop1: detected capacity change from 0 to 512 [ 89.507178][ T6011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.524728][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.537440][ T6011] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.548918][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.586880][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.659986][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 89.669277][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'. [ 90.601310][ T6060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.782'. [ 90.610899][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 90.656544][ T6062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 91.328764][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.797'. [ 91.374945][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.809'. [ 91.547461][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 91.564883][ T6069] Process accounting resumed [ 91.573370][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.802'. [ 91.624117][ T6110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6110 comm=syz.3.803 [ 91.818845][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.813'. [ 92.229806][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.238457][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.523798][ T6154] loop1: detected capacity change from 0 to 1024 [ 92.825014][ T6184] loop5: detected capacity change from 0 to 512 [ 92.826994][ T6186] loop2: detected capacity change from 0 to 512 [ 92.854470][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.867978][ T6184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.893485][ T6186] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.893730][ T6184] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.965453][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.134807][ T29] kauditd_printk_skb: 14936 callbacks suppressed [ 93.134826][ T29] audit: type=1326 audit(1757428906.744:32860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1693d55ba7 code=0x7ffc0000 [ 93.165149][ T29] audit: type=1326 audit(1757428906.755:32861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1693cfadb9 code=0x7ffc0000 [ 93.188606][ T29] audit: type=1326 audit(1757428906.755:32862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 93.212229][ T29] audit: type=1326 audit(1757428906.755:32863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1693d55ba7 code=0x7ffc0000 [ 93.235609][ T29] audit: type=1326 audit(1757428906.755:32864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1693cfadb9 code=0x7ffc0000 [ 93.259071][ T29] audit: type=1326 audit(1757428906.755:32865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 93.282639][ T29] audit: type=1326 audit(1757428906.755:32866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1693d55ba7 code=0x7ffc0000 [ 93.305946][ T29] audit: type=1326 audit(1757428906.755:32867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1693cfadb9 code=0x7ffc0000 [ 93.329478][ T29] audit: type=1326 audit(1757428906.755:32868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1693d5ebe9 code=0x7ffc0000 [ 93.352967][ T29] audit: type=1326 audit(1757428906.755:32869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1693d55ba7 code=0x7ffc0000 [ 93.376794][ T6207] sd 0:0:1:0: device reset [ 93.382853][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.479090][ T6215] geneve2: entered promiscuous mode [ 93.485268][ T2183] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.495521][ T2183] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507033][ T2183] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.516417][ T3535] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.714095][ T6234] tipc: New replicast peer: 255.255.255.83 [ 93.720122][ T6234] tipc: Enabled bearer , priority 10 [ 93.774890][ T6237] loop1: detected capacity change from 0 to 1024 [ 93.798869][ T6237] ext4: Unknown parameter 'hash' [ 94.254626][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.263477][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.617567][ T6279] FAULT_INJECTION: forcing a failure. [ 94.617567][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.630712][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.3.870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.630742][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.630755][ T6279] Call Trace: [ 94.630761][ T6279] [ 94.630784][ T6279] __dump_stack+0x1d/0x30 [ 94.630807][ T6279] dump_stack_lvl+0xe8/0x140 [ 94.630831][ T6279] dump_stack+0x15/0x1b [ 94.630850][ T6279] should_fail_ex+0x265/0x280 [ 94.630947][ T6279] should_fail+0xb/0x20 [ 94.630971][ T6279] should_fail_usercopy+0x1a/0x20 [ 94.631009][ T6279] _copy_to_user+0x20/0xa0 [ 94.631073][ T6279] simple_read_from_buffer+0xb5/0x130 [ 94.631099][ T6279] proc_fail_nth_read+0x10e/0x150 [ 94.631130][ T6279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.631167][ T6279] vfs_read+0x1a5/0x770 [ 94.631189][ T6279] ? __rcu_read_unlock+0x4f/0x70 [ 94.631259][ T6279] ? __fget_files+0x184/0x1c0 [ 94.631286][ T6279] ? finish_task_switch+0xad/0x2b0 [ 94.631309][ T6279] ksys_read+0xda/0x1a0 [ 94.631330][ T6279] __x64_sys_read+0x40/0x50 [ 94.631349][ T6279] x64_sys_call+0x27bc/0x2ff0 [ 94.631375][ T6279] do_syscall_64+0xd2/0x200 [ 94.631436][ T6279] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.631464][ T6279] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.631497][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.631535][ T6279] RIP: 0033:0x7ff49e8cd5fc [ 94.631549][ T6279] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.631570][ T6279] RSP: 002b:00007ff49d32f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.631591][ T6279] RAX: ffffffffffffffda RBX: 00007ff49eb05fa0 RCX: 00007ff49e8cd5fc [ 94.631605][ T6279] RDX: 000000000000000f RSI: 00007ff49d32f0a0 RDI: 0000000000000007 [ 94.631640][ T6279] RBP: 00007ff49d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.631698][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.631710][ T6279] R13: 00007ff49eb06038 R14: 00007ff49eb05fa0 R15: 00007ffe3acfacf8 [ 94.631733][ T6279] [ 94.901384][ T6242] ================================================================== [ 94.909605][ T6242] BUG: KCSAN: data-race in memcpy_and_pad / zap_other_threads [ 94.917091][ T6242] [ 94.919412][ T6242] read-write to 0xffff8881034b57b8 of 8 bytes by task 6241 on cpu 1: [ 94.927469][ T6242] zap_other_threads+0x114/0x290 [ 94.932414][ T6242] do_group_exit+0xe4/0x140 [ 94.937098][ T6242] __x64_sys_exit_group+0x1f/0x20 [ 94.942133][ T6242] x64_sys_call+0x2fe2/0x2ff0 [ 94.946815][ T6242] do_syscall_64+0xd2/0x200 [ 94.951328][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.957221][ T6242] [ 94.959543][ T6242] read to 0xffff8881034b5280 of 3264 bytes by task 6242 on cpu 0: [ 94.967339][ T6242] memcpy_and_pad+0x48/0x80 [ 94.971839][ T6242] arch_dup_task_struct+0x2c/0x40 [ 94.976862][ T6242] dup_task_struct+0x83/0x6a0 [ 94.981561][ T6242] copy_process+0x399/0x2000 [ 94.986152][ T6242] create_io_thread+0x93/0xc0 [ 94.990832][ T6242] io_sq_offload_create+0x652/0x850 [ 94.996051][ T6242] io_uring_create+0x42e/0x610 [ 95.000828][ T6242] __se_sys_io_uring_setup+0x1f7/0x210 [ 95.006290][ T6242] __x64_sys_io_uring_setup+0x31/0x40 [ 95.011667][ T6242] x64_sys_call+0x2b21/0x2ff0 [ 95.016343][ T6242] do_syscall_64+0xd2/0x200 [ 95.020852][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.026751][ T6242] [ 95.029070][ T6242] Reported by Kernel Concurrency Sanitizer on: [ 95.035216][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.4.857 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.044848][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.054899][ T6242] ==================================================================