last executing test programs: 2.536442045s ago: executing program 1 (id=1193): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 2.184820243s ago: executing program 4 (id=1197): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x950000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f00000000c0)='L', 0x0, 0x2}, 0x48) 2.141465477s ago: executing program 4 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x8db}, {0x0, 0x0, 0x7, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {0x400}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xd01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x401}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x4, 0x4000}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) chroot(&(0x7f0000000700)='.\x00') bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.09232151s ago: executing program 1 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x8db}, {0x0, 0x0, 0x7, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {0x400}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xd01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x401}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x4, 0x4000}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) chroot(&(0x7f0000000700)='.\x00') bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1.391808907s ago: executing program 3 (id=1216): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1.293424745s ago: executing program 4 (id=1217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001200)="9d5fcac63dcf827a4e3e9b4fb9e4c9fb92b326012995a38492fff69c7e0dbee626846b0580019da7a7a3a93c16d913309e2b79555462b4862bcf47ea9f3fcb227e7f1410fca1594995b5a6a13b10ea9d04550b9b7ee124be675dc8dcad5e8471c5450510d5a9c89475d68927f659967414f5d4139aed7e38caecd270b7bba68d2ae80f27cb8795cd3ad30283d573f44cdf407c45e7be7ee6add710187ef0d8aaecdefb4caa1b0e2307adea0b2b121c0430e8703d", 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x537, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0xbbd, 0x4, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4090}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0xff, 0x0, 0x4, 0x3, 0x6, 0xfffffffc, 0x20f, 0x40, 0x15, 0x2000, 0x0, 0x38, 0x4, 0x5, 0x5c7, 0x5}, [{0x5, 0x8000, 0x400000, 0xfff, 0x9, 0x5, 0x3, 0x9}, {0x5, 0x2, 0x9, 0x5, 0xa2, 0x1ff, 0x6}, {0x70000000, 0x9, 0x9, 0x0, 0xaa, 0x4, 0xff, 0x2}, {0x2, 0x401, 0xfffffffffffffffe, 0x7, 0x1, 0x0, 0x0, 0x6}], "954bfe2e032530a72b7213", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x92b) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 1.242148179s ago: executing program 3 (id=1218): unshare(0x6a040000) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "01d787"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001dc0)={{0x0, 0x8, 0xfffffffffffffbff, 0xe1b7, 0x9, 0x10, 0x400, 0x5, 0x7, 0xd, 0x3, 0x1000004, 0x5, 0xa5d, 0x386c}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974792e2e7d287d2d2d0055d436e065287ef6e3c18b6200be68b7d638c2d2e80033857ebd47e6d379704c17c67337d918ca68dca8b38603b91259b048f973c647d373f4c0830a8863023ab740f35cbce9ca59e7541d8f26347b59686dff"], &(0x7f00000004c0)=""/70, 0x46) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x141, 0xbd, 0x32, 0x7e, 0x20, 0xbed, 0x1100, 0x629a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x4c, 0x7, 0x0, 0xfd, 0x22, 0xcd}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0xfffffffffffffcfd) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.223894551s ago: executing program 2 (id=1219): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) 1.202128953s ago: executing program 1 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) flock(r5, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1.10809666s ago: executing program 0 (id=1221): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900070006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.10731739s ago: executing program 1 (id=1222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) shmget(0x2, 0x4000, 0x20, &(0x7f0000000000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.082047002s ago: executing program 2 (id=1223): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000000045000000000000000000e4a4000000230000f794"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0xfffffffffffffd2d}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000004c0)="a685da349312c92dbb4e26ffaab562e44d3ed34a73d19b992ece2fa6d655ef") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07102723500e1b24700200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='mctp_key_acquire\x00', r4, 0x0, 0x1b}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0xc31, &(0x7f0000000300)={0x0, 0x8c40, 0x10100, 0x0, 0x1cf}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x44fd, 0x3, 0x1, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000380)={0x11, 0xf8, r12, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) bind$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0x69562000) 1.013808138s ago: executing program 0 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) 1.013262578s ago: executing program 0 (id=1225): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501afea7df60000000b0000000006001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 958.991572ms ago: executing program 0 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x8db}, {0x0, 0x0, 0x7, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {0x400}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xd01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x401}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x4, 0x4000}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) chroot(&(0x7f0000000700)='.\x00') bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 956.301332ms ago: executing program 1 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f00000001c0)="b7000000014b", 0x6}], 0x2) (fail_nth: 5) 940.512584ms ago: executing program 4 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x9}, {0x2}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r11, 0x2007ffb) sendfile(r11, r11, 0x0, 0x1000000201005) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000000080)='.\x1a\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104fcffff8000000000000000cc3a888e4ced5e102071a33da740d1507a3cf48949298d77e589d1368e", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 612.30881ms ago: executing program 1 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x84a}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cubic\x00', 0x6) shutdown(r1, 0x1) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 584.679552ms ago: executing program 4 (id=1230): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x100002, 0x3, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00'}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) 514.989838ms ago: executing program 4 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000001e00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="561fb6ed55baa2fe70f4c955b4e80075ae5b65d1e186b328df51668750ee104560d8140e674c20d6f3b4139f96f4e72c20703087de4f222bbefb04baf7140d3f9a12f3a5d9060e82cd568c18399337b0376081c4d2fdde93e382f3e533bfa93bf5cbdf332d434b258b2fdbd9e9fb2b092c4d13061e0dc461e2241da98fe82d0ddaa64102952a22df02814f9190e86ed06b0478624eabe51772d36e2abdb0bccab559e76c26792650678ad1d9d51e246759f9a02bc0cc9d19c99ff08e0e1e0b5cdfdb79956037e9df6cabc633b6945ad503a192c5907e4142277ac627751c419b72ff21a92ecdb733df0051d5bc7d1979a073ee12fda9d03deaf342faf446e04114d2da70adf86633883782540cce7b498a051fdb13a1bf88cc60e34cf9cebeb4fe88dfb1dc35c841b3c5cb7bd48765e420db08feb6489253d5e938e5674a14753791db9fec3f5864eafc4011fbf5399f9994300c5cb1ad7a167022d63c5e9397a908d0e8ef9bdbcbf80990bfce5c2ae1a78c11c50eeb76303448f2d09ab80287cb45b7a2f2e5ff1c4bb83eedd13a6235fc335d5beeac59074414643810d252907c864fe295d039a19130a1eb58b0c6840047982ea8acd0a2c40963917447dd06d1b37393406562583430f460c86af13d089def84552c41dd659c007378f0fb8f7473026c282d5849c6dcbdc660c063199daff669af32549cba6595674f88abc8b78f2cd4c844706b76d9e60ed536afefd19f82ab171f6953b85f35ade381e77986420b0f81e1e8b243e0c9c38d4a693a1b2674e25f0007905950d4f59101c65acaaf6f41a131b1ca6c7da625ce3aa22c5e37ee46ed6a3369cdef5d784a209690be508186c6ffb01d6ee0c5d7bf3cd341f30ed9b16ea2c4ba1c5e90e0aedea18bb9bb9a78112ec269e547e788c581e423f8fbcd95f21511be174f733501de7afc48f0d83761fc2e275dd02c9ecb488289f1fd4b22df74631c248516d4aa02ebbb50e07bc572f4d15bd19fe24c8c9f500954e5ba91a104c6457c51d98448f578cce34a9f85ae780b445eb42e915be7c06794edd550180e45cb1d35077b771d8b1873841b1de2d683bc278c3f6b8673ef04c158bbeda1655e3a0a6667f52de0938fca4b34e3e200fed5fe7f92ec423d57eb1b19079c8dc2240f2d0a083ee0cfe5db393dd0a3af1734e790aa259072aa7b66cdb9c26ceb726e9bbeaf789b6caf7cb6ff39a89c3f539dbca04f446a46c56a2195de2b952886877c7d522cbea57ef0d2c9d2c0b5e737e3787fe8da656813c3c166c1ba51c1a48198531d2d4fd2d9f61cb4d39bbad54b7afcbb58616e2b3b7e139179fc35e80e76459880a769fc5ee02b91c1e53abdbb3f5c26b444e530d5e3924761a589b1e82505a4c4707c058e261b4f0b87ad77a12111fdba3eaabeab2b75ff41a58d3108804f58c3ec3f63ae783cede4cf6b2051afd7fcbe20602b3da28b5f0bb3c3c9b37847c68a1db3b2637ac1b834ecfb5204bd926affc6305f1e1d9c2cbacf8a0f24dd6472fff20bdc3dcdcb5e1d8530cae60ceaecebd168ff43e9838b30a67fd604b3ef4c261275181e7233f5fa8e8ab15cdde575a5be4ed11b9e4e5682e4bfbba8a6561bd6fd28eb2e3ff063a1eeac761039cb5c4716ba090fb80cf83eb51fb6eec83cc853dd6b672e6d8e70d5025c82726fee16f943fb8a74065553a219882409b448ec18d1ab8fc2cb3d6312ffc334992ce4255d5866a6d0a0d33a6b7354dd82765cbbb695f2c3d2609c4ee2dab7b774510a4d8b4d35fde9b11e171da17ac28960386170f03f8939a77465d778068a602fde208561b888e53769393906afdf846ed35c1293cb6217f9f26cdad125b79a0f4ae6a8d7aa53036dcea672c68e0019493ae343830f25d8eb01e6cc407d031a693c18a1904df39da462b9346e9d3e0fb2291ff36648868a5b5c07a64e895659c0db7c8c9198e90823348bb1e72ff00f96e84bdc9aeb2f65aa69998b65c7c0ba7ea5d5aec23f6542195a096a3d7c6f9b2067d56585f689efebf249c9e26436ebd558e7eee45016e2943b483242edcef10e2d9e8e94afaa072b068efc3e59dcc2c5559730831770f9e3611c8ea7284abc15aa37521cfee497a269a6fa215a8bc0faf545961cfe068793c75d09339b5c390da4277adb1f0ff40565f2b3d776c53d851b91c2df1c7b084c39ed620d611501a5c85fc8ef5d176810c92b1f74c36a1fe19488a1f7c3a045aa41541263830edca0b30f5725dc39791fbdda2e1f3d2f212b47f421ee42bb514dea428b597186846ac2ff05e0f4fc6bd99246899f8eeeeee7afe7405391862816bb67bb6a173ccea086669a4044fc64cadb6977ad3933aea100e8120cf90a4c01d723691674eb9e1ef0a5c7ba9e7d330e78788f9a07637b850c52a6cd843972727623f049b868eadb227ff964fd6e88158a35d6bcf449acd683d25ddd66cb4855818872bcfa018318e12b95586e46b0ea46030a3a1e38838872f14d0c260d9ca39ba85b1ad84954fdc3492201832c7316049c6066b50dcb28239e6b766594154959080c3cfc7f7a857134626d6fde4745b04bed2641fa42e6ca25b72e952db73b4b349f735146e07b9c4b1e94bb9600e2f9232ec91bf85fe7ee3f5c8c23c6eb9836da7ba9e2c68f5a8cb8e561787b63c5b3c1bb92e4d2b5628b4761be68da33d513cc4c387e135dc144c27a0bb6a97f1a829639e021b24b19872f3e4493476a33714e3005ad537de885446b2232d2f54ee7a363e7198f55db37913615ad3c2195c8ade62cd91715a4a5ffb8ef540f95cf7a1c71799f1129c557af10924d0592bda03b1c06ad03df9522606d480ccb75b2ef0ced397db48029ed90eed4beb1600bf3b14087a9b958ea5ed777439615f88fed648abf51c31face5b22e731865c0af5e36df4d34a71bf9c6b2331a216dc01bd856476518be45d01da2b77ade68c1a9613ef21570fe10ec1d1d42b5132cd021e14556f9ff1240d6c032671c9b4329c7400257ca265405040f691a7c9b18cc518be9b2f16e1f4cabec4e9701dc80c89cb215ce1ca8e5777ec15337bed5d1ebfd00324010a39df4f14ae6ba3eacfc53c16f95f9bceefe53ff28de551b7e0d66270d9f6d6d35cf7ec4dda633aedd8320df9073fdd56d9df917db3d722a111815b4db514c751bc7ffc58ce5534a767c265036358688b66eb2b02cf1ef558eb2d06e2718e9563a5ba5e07d356d675359cd4dd5592262251cd270ceb54b8d51f1bfd983834b47ea253e643c04a5fc7d08886eb2ddad43283c9e412cde162be2a17b4be435f3d397e17d9fcc238f99e56ac342a44a1241679cd727fcb2fa25c18e5307ac6c79114ef38683dd6a2969c2b0d06bc93d5f2e4253100420e334ea480e5a2d64a0680cd7f27c29a37adf8011b161265a9725ae70e9a5bddf4fbb07df24c678e79f3c1017eacb42a47881ccec8c0c36329fa691568419913c697b76d4acde4ce49e5f15b44ee5413e856a78e169a69d0288485034c5290a7dc208ab294048d3a14b06e1a72300845f3cfbdb0445ed29812889cb887889438707f109f3f697a9e67015a83b028839e06a36829cf8e541bc571e96aab7432a25e9579f3949a7b5f039403cf17af70a0204cbf8c9738787866aaf245f00cae364f5f4f90b12d8028b24574d555202f6f13c706430745e1c87013ba0d777779fff396c9b655b1cb34f91848ff6e7c5c5b7ea87b8d6219a46b8ecf323caa6dee45b55aebf7eba3fbdd054fcb1f26200f5b64e564d5009beb96444ee9db4f3eb43dbd69401edd1cd3a7ca1fc3e6db6b9c25f96c99a6fa0cd27b6dab5ac0e28d6e95fe62d95f9bcaeee7b8899a5a3975bd9c4a38516b9fe741e4f3b68856aba53f4aa59010691aeba3186b479b76f8070165914c3e52cf1dcfbe97068aec71fa1c1d896fbd0acef42ee5cc1392d687d69d32a41459d0647b7063ee02c04a78e01b0173585b48f0320f2e12ac55366287c21d15898352359283828ed0faddaeb91d347742fdc11df2862d8d2dfcbec5ec556c9b83f6a7632630f3711ac0dbb07032ee8e091ff1600e28634705875fc7d57f5d46ca0bff432a8f10c72f4a9abc957937b0277d8aa96fa1ec90434dd48090b1be901512cc80629f29b7e9825ed90a42cd3cc7938eecb55a2ee5818857f3192b8666b707a6bb11471848fe363da45ddb6755abc8a28c2a8799330eb03a095abb453884ff045c928782bdbb6dcf9b39c7bbdf98dce25142cd9bfb8484077e7e3f66f8ada13b8f2d514c8ac63eaa1153e4f65151ba309f269c49b258180989361453a5a62e75cb926748e025290b1810fa63da5b71a4ae4949ba49df5e1538dcf403682ae661d36a0227a297afa189033f9e3da04c2766c2dca842fcfb7d1da6ff10f424f3422ff08a98b629d684475a24c5ebac233600ddb4a7f4dbae70f4440e3981e632ef8fb429fdd5307022d40a77ddf2c0cda089ce7992b4caee524a3d35a9846fb414c311d8088792993de13ed7010ddfb5d3fa008b416f2cbed77ef8795694431aaad4ce8dca42af8effcf6d192f2d306d6d687646303091ed94a9f0a94a0fc1393acc30961658754b5aa7e7906090248ceab8487f8cc288da83efaa852c91346ded8e3cd901ead56fc33632abfcd038bc8e4852c51b6c4ead0a15bd89ee62faf8b44d61a209f50d290a86f7cc12c68ef5ca40aa7a2fd27a8f6280c5bd349c3bb7119be03e4d70d22609ba6827a9937883f15d86726d7f4e1ea7a88a68c0ea7bf30b35367163becdd96d7729c48870a12fc2464ee656ac58f06e6ae49cc8ea357c87b1714192aac52617611f458191dd2f33118ed23c9a3a66d2ba96179d577612f3431d410863bfa88d0b6761acfc7230d207494f652684515f1a36ab6285047718fa3af40c6c3ff87f47b1d6f75fb4347ab8fd31c4dfda0f56c54eba6fe9392fb097e7970d5f7b3caa3a233869718d5bd29a6e1d36599659dbfb59962085a2f11d5d5772276644e7a39e2267c1f434c34a92e86bce83633d62ec61b912a3d7ef779f9f7b1e19a28c5157e114df8a3bad74eec4fae518a5372255323d04a7c583425cc82d37db404a2a9c48818cdd791e1854598c39d1f4d9a477f9df105734a4132eaed2fd33adf8200b9d80ba1294ac8231d17033cbc6d762938b7d7a2eaf26fb54ad97c67bd554187f554867245bea1ad10b3b8b7208ea5ef45512bdac884f029d13b684d449dbefd5fa24453da39d79c61fc583f56f2cb6340a7865c1ffb450d281d2059f0d1898b93f0c871ea84a87e6aed2f8d81ab0fcb355eb58ed92a3c42ed2fb16f54ffcd3514d2cbd20b6d9b97f017a4bd83dcd76e76fccbcc935921ee47266a4d8f2c43b0ac25aa4003b76eb2de898d144252c569c17890c050eef981910a2ae6e12530ccff580e643114547edd5cfabaff7473642013b24a0c37669b584eb535a540fdf09e5a2dd2924a04b9adc54ffc0a5d429c5217512c13b56ac453d6b671f31c81fd713e6af5913b2fc65f3ca4f4bd0b80ded858bf3a50b58e9f3d3eb6530e4c15e6a6fae43f9146977a5decd7a410b37e4ee3c99d492eb7d760b0f48ac6da802a4c71c0ea62630899c890f8135d2e2f1847a3ebb0eb120bed2b047837451decca3e00882f916e1b1faafb8d88e5e9f6b737d4607e6cc8b3ffc0928417dbe0e32120c08d78d360cc5b553011f95416c22b76978da842343aa1cd6c019ee0b80cad8ee490cb93efa17995833e79d292a51de71a624efa88744711621e505114c947418730ed8b0498998954ae5827"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r7, 0x0, 0x69) close(r7) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000100)="3f03fe", 0x4c, 0x40000c4, &(0x7f0000000540)={0xc9, 0xd, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) chmod(&(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0x20, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x5e, &(0x7f0000002e80)=""/94, 0x41000, 0x28, '\x00', 0x0, @fallback=0xc, r5, 0x8, &(0x7f0000002f00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002f40)={0x1, 0x8, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000002f80)=[r8, r1, r4, r7, r3, r7, r7], &(0x7f0000002fc0)=[{0x1, 0x2, 0x5, 0x3}, {0x2, 0x3, 0x3}, {0x5, 0x3, 0x0, 0xc}, {0x4, 0x2, 0xf, 0x4}, {0x5, 0x3, 0xe, 0x9}, {0x3, 0x4, 0x10, 0x9}], 0x10, 0x60e3}, 0x94) 235.54075ms ago: executing program 3 (id=1232): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8c4, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x2000002, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0x26f, &(0x7f0000000280)="$eJzs3cFuEkEYB/CvQCntRc7GwyZePBH1DYipiZHEBMNBT5JUL60x2V7QizyGB5/AR/IxeuptDQ4FSqgxadltu79fAnzMP2FmCTB7mGE/PPp8fPTl9FPx+0d0Olm7FTGN84huNKIZyc7srnNRt2PVtHnpaewFAHDbDYfjftVjYLvyvD/e3XhuNvpVyYAAAAAAAAAAAAC4trX1/3Hl+v+IaGxa/1/6iAGA67L+//7L8/74YH7+dpn1/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB1zoviQfGPW0QUyfeqhwoA3JD/mP8BgHvG/A8A9WP+B4D6efvu/ev+YHA4zLJOxNl0MpqM0mPKX74aHD7N/upGRCO1nk0mo+Yif5bybPmqs3w3Dub58415O548Tvkse/FmsJbvxVE5bwEAAAAAAAAAAAAAAAAAAABUrpctdJety/39vd5VeapW/h9gbf9+Kx62SjsMAAAAAAAAAAAAAAAAAAAAuNNOv347Hp+cfMzLKXYiYtHyMyJurovWvGiudqHYdhFRbqf75X9ot1vsz7+Jt2U8F0XFP0wAAAAAAAAAAAAAAAAAAFBDqxu5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCultf/315R9TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9fAnAAD//y5pkJM=") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) close(r2) 230.030221ms ago: executing program 2 (id=1233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff1811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) 211.132412ms ago: executing program 2 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0xfe) 112.41468ms ago: executing program 3 (id=1235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="21010000000000001c001280e82fd27a0b00011bc727f845fa61038deb4c7d543f45933c9ef557000072696467650000302fdbc8ccb6d74efbb848a415883075c5ba5e706438075d7de0c9bc627b63d30bf5204242e4ce17b314bd0677ee1e2361e0c3ba22ec7ed3e3f9dbb0a3158bb9fcd5"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 112.153141ms ago: executing program 3 (id=1236): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501afea7df60000000b0000000006001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 98.224032ms ago: executing program 0 (id=1237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) shmget(0x2, 0x4000, 0x20, &(0x7f0000000000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 78.368263ms ago: executing program 2 (id=1238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1400000010000100e4ffffffffffffff0000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000020a0104000000"], 0x13a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 76.870853ms ago: executing program 3 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0xff, 0x7ffc1ffd}]}) syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x5, &(0x7f0000000040)={0x300, 0x1, 0x42, 0xfffffffffffffffc}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/184, 0xb8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x2b, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce17718", 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) getrusage(0x1, &(0x7f0000001080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+%[@\x00') set_mempolicy(0x1, 0x0, 0x5) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 528.99µs ago: executing program 0 (id=1240): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x3, 0x17b, &(0x7f0000000300)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)=0x100000001) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004904003400650000042190780a010101ac14140c8308a464e654cfb786060000000200000394125f00"/66], 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000180)=0x8001, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d44aa1b3470639b6846dae23d9a3ad509c2f45975549dbd9f5a57960f81c8ca2243030490875068f6d459d11935453e018ee8e1ba41f769f8d33dace1537c7e18d33857b6aba7306e7801e070272427a3640a724fdafae00902f04da214a02ebbbe3fcdcfdd647effec7ce4453ddb2de3f0235b22d8dfcf96529ed8370a64588", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x8, 0x4, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xf) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000f8541549b670c46a", @ANYRES32=r10, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}}, 0x0) sendmmsg$inet(r5, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=r8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYBLOB="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", @ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r11, 0x0) 0s ago: executing program 2 (id=1241): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x100002, 0x3, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00'}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) kernel console output (not intermixed with test programs): sysadm_t pid=4878 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 50.986686][ T29] audit: type=1326 audit(1756586733.482:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 51.010024][ T29] audit: type=1326 audit(1756586733.482:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 51.037517][ T29] audit: type=1326 audit(1756586733.482:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 51.064736][ T4881] loop0: detected capacity change from 0 to 764 [ 51.074417][ T4881] rock: directory entry would overflow storage [ 51.080948][ T4881] rock: sig=0x4f50, size=4, remaining=3 [ 51.086607][ T4881] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.092902][ T4883] FAULT_INJECTION: forcing a failure. [ 51.092902][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 51.107163][ T4883] CPU: 0 UID: 0 PID: 4883 Comm: syz.4.567 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.107188][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.107197][ T4883] Call Trace: [ 51.107204][ T4883] [ 51.107260][ T4883] __dump_stack+0x1d/0x30 [ 51.107283][ T4883] dump_stack_lvl+0xe8/0x140 [ 51.107300][ T4883] dump_stack+0x15/0x1b [ 51.107383][ T4883] should_fail_ex+0x265/0x280 [ 51.107402][ T4883] ? audit_log_d_path+0x8d/0x150 [ 51.107430][ T4883] should_failslab+0x8c/0xb0 [ 51.107454][ T4883] __kmalloc_cache_noprof+0x4c/0x320 [ 51.107519][ T4883] audit_log_d_path+0x8d/0x150 [ 51.107564][ T4883] audit_log_d_path_exe+0x42/0x70 [ 51.107654][ T4883] audit_log_task+0x1e9/0x250 [ 51.107680][ T4883] audit_seccomp+0x61/0x100 [ 51.107703][ T4883] ? __seccomp_filter+0x68c/0x10d0 [ 51.107724][ T4883] __seccomp_filter+0x69d/0x10d0 [ 51.107746][ T4883] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.107792][ T4883] ? vfs_write+0x7e8/0x960 [ 51.107812][ T4883] ? __rcu_read_unlock+0x4f/0x70 [ 51.107886][ T4883] ? __fget_files+0x184/0x1c0 [ 51.107912][ T4883] __secure_computing+0x82/0x150 [ 51.107932][ T4883] syscall_trace_enter+0xcf/0x1e0 [ 51.108008][ T4883] do_syscall_64+0xac/0x200 [ 51.108033][ T4883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.108093][ T4883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.108120][ T4883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.108137][ T4883] RIP: 0033:0x7fed4a4cebe9 [ 51.108149][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.108165][ T4883] RSP: 002b:00007fed48f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bb [ 51.108233][ T4883] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cebe9 [ 51.108246][ T4883] RDX: 000000000000000f RSI: 0000000000000007 RDI: ffffffffffffffff [ 51.108258][ T4883] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 51.108271][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.108283][ T4883] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 51.108302][ T4883] [ 51.124727][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 51.404535][ T4892] loop3: detected capacity change from 0 to 1024 [ 51.414974][ T4896] blktrace: Concurrent blktraces are not allowed on sg0 [ 51.429698][ T4892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.443105][ T4892] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.468413][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.523995][ T4912] loop1: detected capacity change from 0 to 764 [ 51.534087][ T4912] rock: directory entry would overflow storage [ 51.541299][ T4912] rock: sig=0x4f50, size=4, remaining=3 [ 51.547373][ T4912] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.678264][ T4923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 51.818925][ T4939] FAULT_INJECTION: forcing a failure. [ 51.818925][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 51.831935][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: syz.1.589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.831961][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.831974][ T4939] Call Trace: [ 51.832015][ T4939] [ 51.832023][ T4939] __dump_stack+0x1d/0x30 [ 51.832117][ T4939] dump_stack_lvl+0xe8/0x140 [ 51.832136][ T4939] dump_stack+0x15/0x1b [ 51.832153][ T4939] should_fail_ex+0x265/0x280 [ 51.832172][ T4939] ? audit_log_d_path+0x8d/0x150 [ 51.832209][ T4939] should_failslab+0x8c/0xb0 [ 51.832229][ T4939] __kmalloc_cache_noprof+0x4c/0x320 [ 51.832291][ T4939] audit_log_d_path+0x8d/0x150 [ 51.832392][ T4939] audit_log_d_path_exe+0x42/0x70 [ 51.832447][ T4939] audit_log_task+0x1e9/0x250 [ 51.832518][ T4939] audit_seccomp+0x61/0x100 [ 51.832540][ T4939] ? __seccomp_filter+0x68c/0x10d0 [ 51.832558][ T4939] __seccomp_filter+0x69d/0x10d0 [ 51.832575][ T4939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.832623][ T4939] ? vfs_write+0x7e8/0x960 [ 51.832642][ T4939] ? __rcu_read_unlock+0x4f/0x70 [ 51.832663][ T4939] ? __fget_files+0x184/0x1c0 [ 51.832688][ T4939] __secure_computing+0x82/0x150 [ 51.832752][ T4939] syscall_trace_enter+0xcf/0x1e0 [ 51.832773][ T4939] do_syscall_64+0xac/0x200 [ 51.832798][ T4939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.832818][ T4939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.832927][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.832940][ T4939] RIP: 0033:0x7fabfde6ebe9 [ 51.832950][ T4939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.832959][ T4939] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 51.833084][ T4939] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 51.833091][ T4939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.833098][ T4939] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.833104][ T4939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.833111][ T4939] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 51.833121][ T4939] [ 52.084398][ T4943] loop1: detected capacity change from 0 to 764 [ 52.095243][ T4943] rock: directory entry would overflow storage [ 52.101662][ T4943] rock: sig=0x4f50, size=4, remaining=3 [ 52.107777][ T4943] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.185541][ T4947] tmpfs: Bad value for 'mpol' [ 52.286301][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.440458][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 52.453990][ T4978] FAULT_INJECTION: forcing a failure. [ 52.453990][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 52.469067][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.1.606 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.469096][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.469108][ T4978] Call Trace: [ 52.469117][ T4978] [ 52.469126][ T4978] __dump_stack+0x1d/0x30 [ 52.469190][ T4978] dump_stack_lvl+0xe8/0x140 [ 52.469218][ T4978] dump_stack+0x15/0x1b [ 52.469234][ T4978] should_fail_ex+0x265/0x280 [ 52.469256][ T4978] should_failslab+0x8c/0xb0 [ 52.469418][ T4978] __kvmalloc_node_noprof+0x123/0x4e0 [ 52.469446][ T4978] ? seq_read_iter+0x13e/0x940 [ 52.469475][ T4978] seq_read_iter+0x13e/0x940 [ 52.469497][ T4978] ? kstrtouint_from_user+0x9f/0xf0 [ 52.469517][ T4978] ? 0xffffffff81000000 [ 52.469528][ T4978] ? avc_policy_seqno+0x15/0x30 [ 52.469550][ T4978] proc_reg_read_iter+0x10d/0x180 [ 52.469586][ T4978] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 52.469676][ T4978] vfs_read+0x649/0x770 [ 52.469708][ T4978] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 52.469741][ T4978] ksys_read+0xda/0x1a0 [ 52.469769][ T4978] __x64_sys_read+0x40/0x50 [ 52.469816][ T4978] x64_sys_call+0x27bc/0x2ff0 [ 52.469837][ T4978] do_syscall_64+0xd2/0x200 [ 52.469866][ T4978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.469890][ T4978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.469954][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.469976][ T4978] RIP: 0033:0x7fabfde6ebe9 [ 52.469991][ T4978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.470028][ T4978] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.470045][ T4978] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 52.470057][ T4978] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000003 [ 52.470070][ T4978] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.470083][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.470095][ T4978] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 52.470115][ T4978] [ 52.792604][ T4994] loop1: detected capacity change from 0 to 512 [ 52.801754][ T4994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.813124][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.826451][ T4994] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.406919][ T5013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 53.493507][ T10] hid_parser_main: 234 callbacks suppressed [ 53.493520][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.507783][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.515285][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.523446][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.531701][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.539540][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.547654][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.555333][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.563373][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.571106][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 53.580246][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 53.653044][ T5040] loop2: detected capacity change from 0 to 764 [ 53.668322][ T5040] rock: directory entry would overflow storage [ 53.674796][ T5040] rock: sig=0x4f50, size=4, remaining=3 [ 53.680944][ T5040] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 53.704620][ T5043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.630'. [ 53.787773][ T5048] loop4: detected capacity change from 0 to 512 [ 53.795973][ T5048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.822367][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.632'. [ 53.823361][ T5048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.845487][ T5048] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.877587][ T5048] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.631: corrupted xattr block 19: overlapping e_value [ 53.892546][ T5048] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 53.902329][ T5048] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.631: corrupted xattr block 19: overlapping e_value [ 53.919104][ T5048] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 53.929186][ T5048] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.631: corrupted xattr block 19: overlapping e_value [ 54.390143][ T5075] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 54.489894][ T5081] netlink: 'syz.3.646': attribute type 21 has an invalid length. [ 54.498415][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 54.725080][ T5111] pim6reg1: entered promiscuous mode [ 54.731628][ T5111] pim6reg1: entered allmulticast mode [ 54.821737][ T5114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.840573][ T5116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.867214][ T4901] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 54.908386][ T5124] loop2: detected capacity change from 0 to 764 [ 54.918678][ T5124] rock: directory entry would overflow storage [ 54.925064][ T5124] rock: sig=0x4f50, size=4, remaining=3 [ 54.931092][ T5124] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 55.556305][ T5130] blktrace: Concurrent blktraces are not allowed on sg0 [ 55.578238][ T5132] loop3: detected capacity change from 0 to 764 [ 55.589454][ T5132] rock: directory entry would overflow storage [ 55.595725][ T5132] rock: sig=0x4f50, size=4, remaining=3 [ 55.602044][ T5132] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 55.683467][ T5136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.732302][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.525245][ T5142] loop3: detected capacity change from 0 to 512 [ 56.533181][ T5142] EXT4-fs: Ignoring removed oldalloc option [ 56.539181][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 56.539195][ T29] audit: type=1400 audit(1756586739.182:2867): avc: denied { create } for pid=5143 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.566320][ T29] audit: type=1400 audit(1756586739.182:2868): avc: denied { create } for pid=5143 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.576088][ T5142] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.671: Parent and EA inode have the same ino 15 [ 56.617242][ T5142] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.671: Parent and EA inode have the same ino 15 [ 56.637046][ T5142] EXT4-fs (loop3): 1 orphan inode deleted [ 56.649005][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.671073][ T29] audit: type=1400 audit(1756586739.312:2869): avc: denied { read } for pid=5140 comm="syz.3.671" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.696030][ T29] audit: type=1400 audit(1756586739.312:2870): avc: denied { open } for pid=5140 comm="syz.3.671" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.722556][ T29] audit: type=1400 audit(1756586739.312:2871): avc: denied { ioctl } for pid=5140 comm="syz.3.671" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.749575][ T5141] syz.3.671 (5141) used greatest stack depth: 10024 bytes left [ 56.769558][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.782582][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.823365][ T5166] loop4: detected capacity change from 0 to 764 [ 56.835047][ T5166] rock: directory entry would overflow storage [ 56.841449][ T5166] rock: sig=0x4f50, size=4, remaining=3 [ 56.848749][ T5166] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.850929][ T5168] loop3: detected capacity change from 0 to 764 [ 56.873166][ T5168] rock: directory entry would overflow storage [ 56.880760][ T5168] rock: sig=0x4f50, size=4, remaining=3 [ 56.886522][ T5168] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.957945][ T5182] loop0: detected capacity change from 0 to 512 [ 56.965490][ T5182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.983611][ T5182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.998752][ T5182] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.779178][ T5201] FAULT_INJECTION: forcing a failure. [ 57.779178][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.793387][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.4.693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.793415][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.793426][ T5201] Call Trace: [ 57.793468][ T5201] [ 57.793485][ T5201] __dump_stack+0x1d/0x30 [ 57.793507][ T5201] dump_stack_lvl+0xe8/0x140 [ 57.793526][ T5201] dump_stack+0x15/0x1b [ 57.793541][ T5201] should_fail_ex+0x265/0x280 [ 57.793610][ T5201] should_fail+0xb/0x20 [ 57.793627][ T5201] should_fail_usercopy+0x1a/0x20 [ 57.793721][ T5201] _copy_from_iter+0xd2/0xe80 [ 57.793771][ T5201] ? __build_skb_around+0x1a0/0x200 [ 57.793802][ T5201] ? __alloc_skb+0x223/0x320 [ 57.793822][ T5201] netlink_sendmsg+0x471/0x6b0 [ 57.793877][ T5201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.793900][ T5201] __sock_sendmsg+0x145/0x180 [ 57.793952][ T5201] ____sys_sendmsg+0x31e/0x4e0 [ 57.793973][ T5201] ___sys_sendmsg+0x17b/0x1d0 [ 57.794000][ T5201] __x64_sys_sendmsg+0xd4/0x160 [ 57.794071][ T5201] x64_sys_call+0x191e/0x2ff0 [ 57.794092][ T5201] do_syscall_64+0xd2/0x200 [ 57.794119][ T5201] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.794143][ T5201] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.794220][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.794241][ T5201] RIP: 0033:0x7fed4a4cebe9 [ 57.794257][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.794273][ T5201] RSP: 002b:00007fed48f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.794292][ T5201] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cebe9 [ 57.794303][ T5201] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 57.794420][ T5201] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 57.794432][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.794443][ T5201] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 57.794461][ T5201] [ 57.831507][ T29] audit: type=1400 audit(1756586740.442:2872): avc: denied { write } for pid=5197 comm="syz.1.692" name="file0" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.026754][ T29] audit: type=1400 audit(1756586740.442:2873): avc: denied { open } for pid=5197 comm="syz.1.692" path="/163/file0" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.053282][ T5204] loop3: detected capacity change from 0 to 764 [ 58.061603][ T5204] /dev/loop3: Can't open blockdev [ 58.067271][ T29] audit: type=1326 audit(1756586740.482:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 58.091832][ T29] audit: type=1326 audit(1756586740.482:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 58.115499][ T29] audit: type=1326 audit(1756586740.482:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 58.183036][ T5209] option changes via remount are deprecated (pid=5206 comm=syz.2.695) [ 58.244623][ T5199] TCP: TCP_TX_DELAY enabled [ 58.249530][ T5216] loop2: detected capacity change from 0 to 512 [ 58.250200][ T5216] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.272004][ T5216] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 58.282670][ T5216] FAT-fs (loop2): Filesystem has been set read-only [ 58.284420][ T5218] blktrace: Concurrent blktraces are not allowed on sg0 [ 58.572360][ T5239] syz_tun: entered allmulticast mode [ 58.580106][ T5235] syz_tun: left allmulticast mode [ 58.593090][ T5238] syz_tun: entered allmulticast mode [ 58.599028][ T5237] syz_tun: left allmulticast mode [ 58.646069][ T5249] loop4: detected capacity change from 0 to 1024 [ 58.654710][ T5249] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.661283][ T5249] EXT4-fs: Ignoring removed bh option [ 58.669218][ T5251] blktrace: Concurrent blktraces are not allowed on sg0 [ 58.690691][ T5249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.724486][ T5265] FAULT_INJECTION: forcing a failure. [ 58.724486][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 58.737294][ T5265] CPU: 1 UID: 0 PID: 5265 Comm: syz.1.720 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.737364][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.737376][ T5265] Call Trace: [ 58.737383][ T5265] [ 58.737390][ T5265] __dump_stack+0x1d/0x30 [ 58.737407][ T5265] dump_stack_lvl+0xe8/0x140 [ 58.737424][ T5265] dump_stack+0x15/0x1b [ 58.737451][ T5265] should_fail_ex+0x265/0x280 [ 58.737471][ T5265] should_failslab+0x8c/0xb0 [ 58.737490][ T5265] kmem_cache_alloc_node_noprof+0x57/0x320 [ 58.737526][ T5265] ? __alloc_skb+0x101/0x320 [ 58.737552][ T5265] __alloc_skb+0x101/0x320 [ 58.737571][ T5265] alloc_skb_with_frags+0x7d/0x470 [ 58.737617][ T5265] ? should_fail_ex+0xdb/0x280 [ 58.737636][ T5265] sock_alloc_send_pskb+0x43a/0x4f0 [ 58.737663][ T5265] ? __rcu_read_unlock+0x4f/0x70 [ 58.737682][ T5265] ? __rcu_read_unlock+0x4f/0x70 [ 58.737699][ T5265] packet_sendmsg+0x222b/0x31f0 [ 58.737830][ T5265] ? avc_has_perm+0xf7/0x180 [ 58.737865][ T5265] ? selinux_socket_sendmsg+0x175/0x1b0 [ 58.737891][ T5265] ? __pfx_packet_sendmsg+0x10/0x10 [ 58.737918][ T5265] __sock_sendmsg+0x145/0x180 [ 58.737973][ T5265] __sys_sendto+0x268/0x330 [ 58.737999][ T5265] __x64_sys_sendto+0x76/0x90 [ 58.738018][ T5265] x64_sys_call+0x2d05/0x2ff0 [ 58.738080][ T5265] do_syscall_64+0xd2/0x200 [ 58.738114][ T5265] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.738137][ T5265] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.738162][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.738182][ T5265] RIP: 0033:0x7fabfde6ebe9 [ 58.738203][ T5265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.738217][ T5265] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 58.738234][ T5265] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 58.738245][ T5265] RDX: 000000000000fd35 RSI: 00002000000002c0 RDI: 0000000000000003 [ 58.738308][ T5265] RBP: 00007fabfc8d7090 R08: 0000200000000140 R09: 0000000000000014 [ 58.738319][ T5265] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 58.738329][ T5265] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 58.738396][ T5265] [ 58.739104][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.769045][ T5269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.723'. [ 58.946626][ T4901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.061370][ T5284] blktrace: Concurrent blktraces are not allowed on sg0 [ 59.119315][ T5297] FAULT_INJECTION: forcing a failure. [ 59.119315][ T5297] name failslab, interval 1, probability 0, space 0, times 0 [ 59.133527][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.2.734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.133555][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.133567][ T5297] Call Trace: [ 59.133574][ T5297] [ 59.133582][ T5297] __dump_stack+0x1d/0x30 [ 59.133603][ T5297] dump_stack_lvl+0xe8/0x140 [ 59.133624][ T5297] dump_stack+0x15/0x1b [ 59.133681][ T5297] should_fail_ex+0x265/0x280 [ 59.133777][ T5297] should_failslab+0x8c/0xb0 [ 59.133808][ T5297] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.133834][ T5297] ? __alloc_skb+0x101/0x320 [ 59.133917][ T5297] __alloc_skb+0x101/0x320 [ 59.133931][ T5297] ? ip_generic_getfrag+0x135/0x1b0 [ 59.133955][ T5297] __ip_append_data+0x1935/0x2440 [ 59.134010][ T5297] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 59.134228][ T5297] ip_append_data+0xd6/0x130 [ 59.134251][ T5297] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 59.134280][ T5297] udp_sendmsg+0x36e/0x13c0 [ 59.134321][ T5297] ? mntput+0x4b/0x80 [ 59.134349][ T5297] ? __rcu_read_unlock+0x4f/0x70 [ 59.134431][ T5297] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 59.134485][ T5297] ? avc_has_perm+0xf7/0x180 [ 59.134516][ T5297] ? __pfx_udp_sendmsg+0x10/0x10 [ 59.134536][ T5297] inet_sendmsg+0xac/0xd0 [ 59.134554][ T5297] __sock_sendmsg+0x102/0x180 [ 59.134620][ T5297] __sys_sendto+0x268/0x330 [ 59.134706][ T5297] __x64_sys_sendto+0x76/0x90 [ 59.134726][ T5297] x64_sys_call+0x2d05/0x2ff0 [ 59.134748][ T5297] do_syscall_64+0xd2/0x200 [ 59.134775][ T5297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.134879][ T5297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.134902][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.134921][ T5297] RIP: 0033:0x7f7aa83eebe9 [ 59.134936][ T5297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.134996][ T5297] RSP: 002b:00007f7aa6e4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 59.135016][ T5297] RAX: ffffffffffffffda RBX: 00007f7aa8625fa0 RCX: 00007f7aa83eebe9 [ 59.135029][ T5297] RDX: 00000000000005c7 RSI: 0000200000000c80 RDI: 0000000000000005 [ 59.135042][ T5297] RBP: 00007f7aa6e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.135055][ T5297] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.135065][ T5297] R13: 00007f7aa8626038 R14: 00007f7aa8625fa0 R15: 00007ffff75577c8 [ 59.135111][ T5297] [ 59.434037][ T5312] blktrace: Concurrent blktraces are not allowed on sg0 [ 59.474139][ T5319] loop4: detected capacity change from 0 to 512 [ 59.500719][ T5319] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.745: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 59.521446][ T5319] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.745: Bad quota inode: 3, type: 0 [ 59.533454][ T5319] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.549472][ T5319] EXT4-fs (loop4): mount failed [ 59.558037][ T5319] program syz.4.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.695978][ T5336] loop4: detected capacity change from 0 to 512 [ 59.703693][ T5336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.715512][ T5336] EXT4-fs (loop4): 1 truncate cleaned up [ 59.721587][ T5336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.736169][ T5336] openvswitch: netlink: Message has 6 unknown bytes. [ 59.762159][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.781389][ T5343] blktrace: Concurrent blktraces are not allowed on sg0 [ 59.823412][ T1092] hid_parser_main: 19 callbacks suppressed [ 59.823505][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.837761][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.845595][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.853172][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.861040][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.868614][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.876039][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.883679][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.891446][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.899089][ T1092] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 59.908042][ T1092] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 59.920110][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.974919][ T5360] FAULT_INJECTION: forcing a failure. [ 59.974919][ T5360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.988739][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.988763][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.988775][ T5360] Call Trace: [ 59.988800][ T5360] [ 59.988807][ T5360] __dump_stack+0x1d/0x30 [ 59.988869][ T5360] dump_stack_lvl+0xe8/0x140 [ 59.988889][ T5360] dump_stack+0x15/0x1b [ 59.988903][ T5360] should_fail_ex+0x265/0x280 [ 59.988921][ T5360] should_fail+0xb/0x20 [ 59.988935][ T5360] should_fail_usercopy+0x1a/0x20 [ 59.989016][ T5360] _copy_to_user+0x20/0xa0 [ 59.989039][ T5360] simple_read_from_buffer+0xb5/0x130 [ 59.989079][ T5360] proc_fail_nth_read+0x10e/0x150 [ 59.989117][ T5360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.989141][ T5360] vfs_read+0x1a8/0x770 [ 59.989161][ T5360] ? __rcu_read_unlock+0x4f/0x70 [ 59.989182][ T5360] ? __fget_files+0x184/0x1c0 [ 59.989222][ T5360] ? __sys_setsockopt+0x18e/0x200 [ 59.989246][ T5360] ksys_read+0xda/0x1a0 [ 59.989267][ T5360] __x64_sys_read+0x40/0x50 [ 59.989391][ T5360] x64_sys_call+0x27bc/0x2ff0 [ 59.989412][ T5360] do_syscall_64+0xd2/0x200 [ 59.989434][ T5360] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.989454][ T5360] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.989550][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.989567][ T5360] RIP: 0033:0x7fed4a4cd5fc [ 59.989580][ T5360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.989593][ T5360] RSP: 002b:00007fed48f37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.989612][ T5360] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cd5fc [ 59.989625][ T5360] RDX: 000000000000000f RSI: 00007fed48f370a0 RDI: 0000000000000004 [ 59.989689][ T5360] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 59.989707][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.989719][ T5360] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 59.989739][ T5360] [ 60.209082][ T5366] loop2: detected capacity change from 0 to 512 [ 60.225858][ T5366] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.237222][ T5370] blktrace: Concurrent blktraces are not allowed on sg0 [ 60.248811][ T5366] EXT4-fs (loop2): 1 truncate cleaned up [ 60.254960][ T5366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.276247][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 60.281020][ T5374] loop1: detected capacity change from 0 to 764 [ 60.293736][ T5366] openvswitch: netlink: Message has 6 unknown bytes. [ 60.314628][ T5374] rock: directory entry would overflow storage [ 60.321648][ T5374] rock: sig=0x4f50, size=4, remaining=3 [ 60.327341][ T5374] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.328989][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.345157][ T5384] veth3: entered promiscuous mode [ 60.367614][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 60.396150][ T5393] FAULT_INJECTION: forcing a failure. [ 60.396150][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 60.410945][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: syz.0.777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.410972][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.411044][ T5393] Call Trace: [ 60.411051][ T5393] [ 60.411059][ T5393] __dump_stack+0x1d/0x30 [ 60.411081][ T5393] dump_stack_lvl+0xe8/0x140 [ 60.411100][ T5393] dump_stack+0x15/0x1b [ 60.411116][ T5393] should_fail_ex+0x265/0x280 [ 60.411136][ T5393] should_failslab+0x8c/0xb0 [ 60.411214][ T5393] kmem_cache_alloc_noprof+0x50/0x310 [ 60.411235][ T5393] ? security_inode_alloc+0x37/0x100 [ 60.411298][ T5393] security_inode_alloc+0x37/0x100 [ 60.411318][ T5393] inode_init_always_gfp+0x4b7/0x500 [ 60.411337][ T5393] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 60.411355][ T5393] alloc_inode+0x58/0x170 [ 60.411375][ T5393] new_inode+0x1d/0xe0 [ 60.411420][ T5393] shmem_get_inode+0x244/0x750 [ 60.411442][ T5393] __shmem_file_setup+0x113/0x210 [ 60.411559][ T5393] shmem_file_setup+0x3b/0x50 [ 60.411605][ T5393] __se_sys_memfd_create+0x2c3/0x590 [ 60.411626][ T5393] __x64_sys_memfd_create+0x31/0x40 [ 60.411645][ T5393] x64_sys_call+0x2abe/0x2ff0 [ 60.411693][ T5393] do_syscall_64+0xd2/0x200 [ 60.411720][ T5393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.411744][ T5393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.411767][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.411861][ T5393] RIP: 0033:0x7fe863b8ebe9 [ 60.411876][ T5393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.411889][ T5393] RSP: 002b:00007fe8625f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 60.411931][ T5393] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007fe863b8ebe9 [ 60.411985][ T5393] RDX: 00007fe8625f6ef0 RSI: 0000000000000000 RDI: 00007fe863c127e8 [ 60.411997][ T5393] RBP: 0000200000002400 R08: 00007fe8625f6bb7 R09: 00007fe8625f6e40 [ 60.412010][ T5393] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 60.412020][ T5393] R13: 00007fe8625f6ef0 R14: 00007fe8625f6eb0 R15: 0000200000000680 [ 60.412057][ T5393] [ 60.648822][ T5390] loop2: detected capacity change from 0 to 164 [ 60.655698][ T5390] iso9660: Unknown parameter '' [ 60.662016][ T5390] lo speed is unknown, defaulting to 1000 [ 60.668034][ T5390] lo speed is unknown, defaulting to 1000 [ 60.673991][ T5390] lo speed is unknown, defaulting to 1000 [ 60.681198][ T5390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.689331][ T5390] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.700506][ T5390] lo speed is unknown, defaulting to 1000 [ 60.707323][ T5390] lo speed is unknown, defaulting to 1000 [ 60.713754][ T5390] lo speed is unknown, defaulting to 1000 [ 60.719895][ T5390] lo speed is unknown, defaulting to 1000 [ 60.725936][ T5390] lo speed is unknown, defaulting to 1000 [ 60.788470][ T5415] loop4: detected capacity change from 0 to 512 [ 60.795774][ T5415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.808373][ T5415] EXT4-fs (loop4): 1 truncate cleaned up [ 60.814510][ T5415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.829331][ T5415] openvswitch: netlink: Message has 6 unknown bytes. [ 60.835861][ T5420] loop1: detected capacity change from 0 to 764 [ 60.846214][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.857313][ T5420] rock: directory entry would overflow storage [ 60.863656][ T5420] rock: sig=0x4f50, size=4, remaining=3 [ 60.870408][ T5420] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.910068][ T5430] blktrace: Concurrent blktraces are not allowed on sg0 [ 60.944289][ T5436] FAULT_INJECTION: forcing a failure. [ 60.944289][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 60.958238][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.4.794 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.958335][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.958347][ T5436] Call Trace: [ 60.958354][ T5436] [ 60.958363][ T5436] __dump_stack+0x1d/0x30 [ 60.958384][ T5436] dump_stack_lvl+0xe8/0x140 [ 60.958400][ T5436] dump_stack+0x15/0x1b [ 60.958413][ T5436] should_fail_ex+0x265/0x280 [ 60.958496][ T5436] ? alloc_fdtable+0x8c/0x1d0 [ 60.958515][ T5436] should_failslab+0x8c/0xb0 [ 60.958600][ T5436] __kmalloc_cache_noprof+0x4c/0x320 [ 60.958628][ T5436] alloc_fdtable+0x8c/0x1d0 [ 60.958649][ T5436] dup_fd+0x4c7/0x540 [ 60.958669][ T5436] ksys_unshare+0x346/0x6d0 [ 60.958915][ T5436] ? ksys_write+0x192/0x1a0 [ 60.958940][ T5436] __x64_sys_unshare+0x1f/0x30 [ 60.958967][ T5436] x64_sys_call+0x2911/0x2ff0 [ 60.958988][ T5436] do_syscall_64+0xd2/0x200 [ 60.959166][ T5436] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.959189][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.959207][ T5436] RIP: 0033:0x7fed4a4cebe9 [ 60.959318][ T5436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.959333][ T5436] RSP: 002b:00007fed48f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 60.959351][ T5436] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cebe9 [ 60.959362][ T5436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 60.959400][ T5436] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 60.959411][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.959420][ T5436] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 60.959437][ T5436] [ 61.184577][ T36] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz0 [ 61.279313][ T5462] FAULT_INJECTION: forcing a failure. [ 61.279313][ T5462] name failslab, interval 1, probability 0, space 0, times 0 [ 61.291718][ T5463] loop3: detected capacity change from 0 to 2048 [ 61.293371][ T5462] CPU: 1 UID: 0 PID: 5462 Comm: syz.4.805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.293399][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.293430][ T5462] Call Trace: [ 61.293438][ T5462] [ 61.293447][ T5462] __dump_stack+0x1d/0x30 [ 61.293479][ T5462] dump_stack_lvl+0xe8/0x140 [ 61.293569][ T5462] dump_stack+0x15/0x1b [ 61.293585][ T5462] should_fail_ex+0x265/0x280 [ 61.293607][ T5462] should_failslab+0x8c/0xb0 [ 61.293631][ T5462] kmem_cache_alloc_noprof+0x50/0x310 [ 61.293678][ T5462] ? skb_clone+0x151/0x1f0 [ 61.293777][ T5462] skb_clone+0x151/0x1f0 [ 61.293798][ T5462] __netlink_deliver_tap+0x2c9/0x500 [ 61.293888][ T5462] netlink_unicast+0x66b/0x690 [ 61.293908][ T5462] netlink_sendmsg+0x58b/0x6b0 [ 61.294080][ T5462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.294101][ T5462] __sock_sendmsg+0x145/0x180 [ 61.294179][ T5462] ____sys_sendmsg+0x31e/0x4e0 [ 61.294202][ T5462] ___sys_sendmsg+0x17b/0x1d0 [ 61.294235][ T5462] __x64_sys_sendmsg+0xd4/0x160 [ 61.294258][ T5462] x64_sys_call+0x191e/0x2ff0 [ 61.294279][ T5462] do_syscall_64+0xd2/0x200 [ 61.294394][ T5462] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.294417][ T5462] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.294510][ T5462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.294558][ T5462] RIP: 0033:0x7fed4a4cebe9 [ 61.294574][ T5462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.294655][ T5462] RSP: 002b:00007fed48f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.294674][ T5462] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cebe9 [ 61.294757][ T5462] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 61.294831][ T5462] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 61.294843][ T5462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.294855][ T5462] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 61.294872][ T5462] [ 61.393550][ T5469] loop4: detected capacity change from 0 to 512 [ 61.520349][ T5469] EXT4-fs: Ignoring removed orlov option [ 61.526990][ T5469] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 61.527396][ T5463] loop3: p1 < > p4 [ 61.542961][ T5463] loop3: p4 size 8388608 extends beyond EOD, truncated [ 61.551998][ T5469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 61.561253][ T5469] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.808: corrupted in-inode xattr: e_value size too large [ 61.577663][ T5469] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.808: couldn't read orphan inode 15 (err -117) [ 61.602041][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.623988][ T5475] FAULT_INJECTION: forcing a failure. [ 61.623988][ T5475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.637532][ T5475] CPU: 1 UID: 0 PID: 5475 Comm: syz.1.809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.637611][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.637691][ T5475] Call Trace: [ 61.637697][ T5475] [ 61.637706][ T5475] __dump_stack+0x1d/0x30 [ 61.637729][ T5475] dump_stack_lvl+0xe8/0x140 [ 61.637744][ T5475] dump_stack+0x15/0x1b [ 61.637756][ T5475] should_fail_ex+0x265/0x280 [ 61.637794][ T5475] should_fail+0xb/0x20 [ 61.637808][ T5475] should_fail_usercopy+0x1a/0x20 [ 61.637826][ T5475] _copy_to_iter+0x387/0xe70 [ 61.637939][ T5475] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 61.637958][ T5475] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 61.637980][ T5475] __skb_datagram_iter+0xc6/0x690 [ 61.637999][ T5475] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 61.638040][ T5475] skb_copy_datagram_iter+0x3d/0x110 [ 61.638120][ T5475] netlink_recvmsg+0x1a8/0x550 [ 61.638147][ T5475] ? __pfx_netlink_recvmsg+0x10/0x10 [ 61.638166][ T5475] sock_recvmsg+0x136/0x170 [ 61.638225][ T5475] ____sys_recvmsg+0xf5/0x280 [ 61.638252][ T5475] ___sys_recvmsg+0x11f/0x370 [ 61.638284][ T5475] do_recvmmsg+0x1ef/0x540 [ 61.638357][ T5475] ? get_timespec64+0xc9/0x100 [ 61.638376][ T5475] __x64_sys_recvmmsg+0xfb/0x170 [ 61.638400][ T5475] x64_sys_call+0x27a6/0x2ff0 [ 61.638449][ T5475] do_syscall_64+0xd2/0x200 [ 61.638516][ T5475] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.638540][ T5475] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.638567][ T5475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.638587][ T5475] RIP: 0033:0x7fabfde6ebe9 [ 61.638601][ T5475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.638689][ T5475] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 61.638712][ T5475] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 61.638723][ T5475] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 61.638734][ T5475] RBP: 00007fabfc8d7090 R08: 0000200000003700 R09: 0000000000000000 [ 61.638744][ T5475] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 61.638770][ T5475] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 61.638792][ T5475] [ 61.901435][ T5489] FAULT_INJECTION: forcing a failure. [ 61.901435][ T5489] name failslab, interval 1, probability 0, space 0, times 0 [ 61.915003][ T5489] CPU: 1 UID: 0 PID: 5489 Comm: syz.1.813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.915032][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.915080][ T5489] Call Trace: [ 61.915087][ T5489] [ 61.915094][ T5489] __dump_stack+0x1d/0x30 [ 61.915118][ T5489] dump_stack_lvl+0xe8/0x140 [ 61.915138][ T5489] dump_stack+0x15/0x1b [ 61.915189][ T5489] should_fail_ex+0x265/0x280 [ 61.915212][ T5489] ? xfrm_policy_alloc+0x62/0x1b0 [ 61.915234][ T5489] should_failslab+0x8c/0xb0 [ 61.915258][ T5489] __kmalloc_cache_noprof+0x4c/0x320 [ 61.915305][ T5489] xfrm_policy_alloc+0x62/0x1b0 [ 61.915348][ T5489] xfrm_policy_construct+0x2f/0x320 [ 61.915376][ T5489] xfrm_add_policy+0x156/0x450 [ 61.915477][ T5489] xfrm_user_rcv_msg+0x563/0x660 [ 61.915500][ T5489] ? __kfree_skb+0x109/0x150 [ 61.915519][ T5489] ? nlmon_xmit+0x4f/0x60 [ 61.915601][ T5489] ? consume_skb+0x49/0x150 [ 61.915630][ T5489] netlink_rcv_skb+0x123/0x220 [ 61.915724][ T5489] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 61.915747][ T5489] xfrm_netlink_rcv+0x48/0x60 [ 61.915764][ T5489] netlink_unicast+0x5bd/0x690 [ 61.915782][ T5489] netlink_sendmsg+0x58b/0x6b0 [ 61.915802][ T5489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.915852][ T5489] __sock_sendmsg+0x145/0x180 [ 61.915879][ T5489] ____sys_sendmsg+0x31e/0x4e0 [ 61.915956][ T5489] ___sys_sendmsg+0x17b/0x1d0 [ 61.915988][ T5489] __x64_sys_sendmsg+0xd4/0x160 [ 61.916032][ T5489] x64_sys_call+0x191e/0x2ff0 [ 61.916054][ T5489] do_syscall_64+0xd2/0x200 [ 61.916143][ T5489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.916226][ T5489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.916249][ T5489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.916269][ T5489] RIP: 0033:0x7fabfde6ebe9 [ 61.916282][ T5489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.916296][ T5489] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.916464][ T5489] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 61.916477][ T5489] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 61.916489][ T5489] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.916499][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.916511][ T5489] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 61.916585][ T5489] [ 62.183709][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 62.183723][ T29] audit: type=1400 audit(1756586744.822:3100): avc: denied { read } for pid=5495 comm="syz.0.817" dev="sockfs" ino=11689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.192366][ T5496] 9pnet_fd: Insufficient options for proto=fd [ 62.235976][ T29] audit: type=1400 audit(1756586744.872:3101): avc: denied { relabelfrom } for pid=5499 comm="syz.1.818" name="NETLINK" dev="sockfs" ino=12499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 62.236034][ T5501] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 62.281895][ T5505] loop0: detected capacity change from 0 to 1024 [ 62.290665][ T5505] ext4: Unknown parameter 'uid<00000000000000000384' [ 62.297700][ T29] audit: type=1400 audit(1756586744.872:3102): avc: denied { mac_admin } for pid=5499 comm="syz.1.818" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.320291][ T29] audit: type=1400 audit(1756586744.912:3103): avc: denied { relabelto } for pid=5499 comm="syz.1.818" name="NETLINK" dev="sockfs" ino=12499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 62.349881][ T29] audit: type=1326 audit(1756586744.912:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.375057][ T29] audit: type=1326 audit(1756586744.912:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.399872][ T29] audit: type=1326 audit(1756586744.912:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.423721][ T29] audit: type=1326 audit(1756586744.912:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.448454][ T29] audit: type=1326 audit(1756586744.912:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.472976][ T29] audit: type=1326 audit(1756586744.912:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 62.499343][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.529236][ T5516] loop0: detected capacity change from 0 to 512 [ 62.538371][ T5516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.551360][ T5516] EXT4-fs (loop0): 1 truncate cleaned up [ 62.557834][ T5514] blktrace: Concurrent blktraces are not allowed on sg0 [ 62.558292][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.592223][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.606767][ T5523] loop1: detected capacity change from 0 to 764 [ 62.622837][ T5523] rock: directory entry would overflow storage [ 62.629267][ T5523] rock: sig=0x4f50, size=4, remaining=3 [ 62.635021][ T5523] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.651579][ T3390] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz0] on syz0 [ 62.731993][ T5558] loop1: detected capacity change from 0 to 512 [ 62.770743][ T5558] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 63.299539][ T5608] FAULT_INJECTION: forcing a failure. [ 63.299539][ T5608] name failslab, interval 1, probability 0, space 0, times 0 [ 63.313848][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.313942][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.313953][ T5608] Call Trace: [ 63.313961][ T5608] [ 63.313969][ T5608] __dump_stack+0x1d/0x30 [ 63.313989][ T5608] dump_stack_lvl+0xe8/0x140 [ 63.314075][ T5608] dump_stack+0x15/0x1b [ 63.314091][ T5608] should_fail_ex+0x265/0x280 [ 63.314114][ T5608] should_failslab+0x8c/0xb0 [ 63.314218][ T5608] kmem_cache_alloc_noprof+0x50/0x310 [ 63.314245][ T5608] ? skb_clone+0x151/0x1f0 [ 63.314270][ T5608] skb_clone+0x151/0x1f0 [ 63.314294][ T5608] __netlink_deliver_tap+0x2c9/0x500 [ 63.314316][ T5608] netlink_unicast+0x66b/0x690 [ 63.314399][ T5608] netlink_sendmsg+0x58b/0x6b0 [ 63.314425][ T5608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.314445][ T5608] __sock_sendmsg+0x145/0x180 [ 63.314512][ T5608] ____sys_sendmsg+0x31e/0x4e0 [ 63.314534][ T5608] ___sys_sendmsg+0x17b/0x1d0 [ 63.314566][ T5608] __x64_sys_sendmsg+0xd4/0x160 [ 63.314591][ T5608] x64_sys_call+0x191e/0x2ff0 [ 63.314638][ T5608] do_syscall_64+0xd2/0x200 [ 63.314664][ T5608] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.314684][ T5608] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.314704][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.314734][ T5608] RIP: 0033:0x7fadd1c0ebe9 [ 63.314750][ T5608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.314766][ T5608] RSP: 002b:00007fadd066f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.314787][ T5608] RAX: ffffffffffffffda RBX: 00007fadd1e45fa0 RCX: 00007fadd1c0ebe9 [ 63.314800][ T5608] RDX: 0000000004004010 RSI: 0000200000000100 RDI: 0000000000000003 [ 63.314851][ T5608] RBP: 00007fadd066f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.314862][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.314873][ T5608] R13: 00007fadd1e46038 R14: 00007fadd1e45fa0 R15: 00007ffddb7a4b88 [ 63.314889][ T5608] [ 63.543848][ T5611] loop3: detected capacity change from 0 to 512 [ 63.571390][ T5611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.587677][ T5611] EXT4-fs (loop3): 1 truncate cleaned up [ 63.594001][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.641465][ T5615] loop4: detected capacity change from 0 to 2048 [ 63.650758][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.671549][ T5621] blktrace: Concurrent blktraces are not allowed on sg0 [ 63.671706][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.709017][ T5625] loop0: detected capacity change from 0 to 764 [ 63.722040][ T3390] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz0] on syz0 [ 63.738291][ T5625] rock: directory entry would overflow storage [ 63.745013][ T5625] rock: sig=0x4f50, size=4, remaining=3 [ 63.750950][ T5625] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.812357][ T5631] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 63.851888][ T5631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.878231][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 63.888273][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 63.898420][ T5645] FAULT_INJECTION: forcing a failure. [ 63.898420][ T5645] name failslab, interval 1, probability 0, space 0, times 0 [ 63.912227][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: syz.0.850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.912351][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.912362][ T5645] Call Trace: [ 63.912419][ T5645] [ 63.912427][ T5645] __dump_stack+0x1d/0x30 [ 63.912450][ T5645] dump_stack_lvl+0xe8/0x140 [ 63.912501][ T5645] dump_stack+0x15/0x1b [ 63.912510][ T5645] should_fail_ex+0x265/0x280 [ 63.912584][ T5645] should_failslab+0x8c/0xb0 [ 63.912599][ T5645] __kmalloc_noprof+0xa5/0x3e0 [ 63.912617][ T5645] ? process_preds+0x323/0x2bb0 [ 63.912670][ T5645] process_preds+0x323/0x2bb0 [ 63.912679][ T5645] ? terminate_walk+0x27f/0x2a0 [ 63.912694][ T5645] ? path_openat+0x1bf8/0x2170 [ 63.912705][ T5645] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.912736][ T5645] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 63.912754][ T5645] ? __kmalloc_cache_noprof+0x299/0x320 [ 63.912770][ T5645] ftrace_profile_set_filter+0xff/0x1b0 [ 63.912841][ T5645] perf_ioctl+0x7b3/0x12e0 [ 63.912868][ T5645] ? ioctl_has_perm+0x289/0x2a0 [ 63.912881][ T5645] ? do_vfs_ioctl+0x866/0xe10 [ 63.912891][ T5645] ? selinux_file_ioctl+0x308/0x3a0 [ 63.912902][ T5645] ? __fget_files+0x184/0x1c0 [ 63.912977][ T5645] ? __pfx_perf_ioctl+0x10/0x10 [ 63.912991][ T5645] __se_sys_ioctl+0xce/0x140 [ 63.913001][ T5645] __x64_sys_ioctl+0x43/0x50 [ 63.913073][ T5645] x64_sys_call+0x1816/0x2ff0 [ 63.913085][ T5645] do_syscall_64+0xd2/0x200 [ 63.913148][ T5645] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.913162][ T5645] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.913176][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.913189][ T5645] RIP: 0033:0x7fe863b8ebe9 [ 63.913269][ T5645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.913279][ T5645] RSP: 002b:00007fe8625f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.913349][ T5645] RAX: ffffffffffffffda RBX: 00007fe863dc5fa0 RCX: 00007fe863b8ebe9 [ 63.913356][ T5645] RDX: 0000200000000900 RSI: 0000000040082406 RDI: 0000000000000003 [ 63.913363][ T5645] RBP: 00007fe8625f7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.913371][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.913377][ T5645] R13: 00007fe863dc6038 R14: 00007fe863dc5fa0 R15: 00007fffc154f8c8 [ 63.913388][ T5645] [ 63.915584][ T5631] bond1 (unregistering): Released all slaves [ 64.185419][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.240053][ T5659] blktrace: Concurrent blktraces are not allowed on sg0 [ 64.276949][ T5653] loop4: detected capacity change from 0 to 512 [ 64.284059][ T5653] EXT4-fs: Ignoring removed oldalloc option [ 64.297706][ T3390] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz0] on syz0 [ 64.315124][ T5653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.852: Parent and EA inode have the same ino 15 [ 64.333186][ T5653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.852: Parent and EA inode have the same ino 15 [ 64.348842][ T5653] EXT4-fs (loop4): 1 orphan inode deleted [ 64.355557][ T5653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.370413][ T5653] syz.4.852 (5653) used greatest stack depth: 10008 bytes left [ 64.385659][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.501358][ T5690] loop2: detected capacity change from 0 to 512 [ 64.508715][ T5685] loop4: detected capacity change from 0 to 512 [ 64.521602][ T5685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.522249][ T5693] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 64.545719][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 64.565279][ T5690] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 64.579073][ T5685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.867: invalid indirect mapped block 4294967295 (level 0) [ 64.594542][ T5685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.867: invalid indirect mapped block 4294967295 (level 1) [ 64.610434][ T5685] EXT4-fs (loop4): 1 orphan inode deleted [ 64.610646][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 64.616193][ T5685] EXT4-fs (loop4): 1 truncate cleaned up [ 64.616664][ T5685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.668536][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.734446][ T5708] loop3: detected capacity change from 0 to 512 [ 64.743281][ T5708] EXT4-fs: Ignoring removed oldalloc option [ 64.755804][ T5708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.875: Parent and EA inode have the same ino 15 [ 64.777097][ T5708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.875: Parent and EA inode have the same ino 15 [ 64.790241][ T5708] EXT4-fs (loop3): 1 orphan inode deleted [ 64.798881][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.822393][ T5721] blktrace: Concurrent blktraces are not allowed on sg0 [ 64.831458][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.933846][ T5743] loop4: detected capacity change from 0 to 764 [ 65.018948][ T5750] blktrace: Concurrent blktraces are not allowed on sg0 [ 65.036790][ T5748] rock: directory entry would overflow storage [ 65.043157][ T5748] rock: sig=0x4f50, size=4, remaining=3 [ 65.048801][ T5748] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 65.174306][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 65.260560][ T5777] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 65.269963][ T5777] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 65.279948][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 65.304680][ T5781] blktrace: Concurrent blktraces are not allowed on sg0 [ 65.334896][ T5783] loop4: detected capacity change from 0 to 764 [ 65.342305][ T5783] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.479639][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 65.489065][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 65.499083][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 65.509658][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 65.518680][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 65.528994][ T5802] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 65.543543][ T5802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.596176][ T5810] lo speed is unknown, defaulting to 1000 [ 65.783106][ T5824] blktrace: Concurrent blktraces are not allowed on sg0 [ 65.805290][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.820400][ T5826] tipc: Started in network mode [ 65.822588][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.825367][ T5826] tipc: Node identity , cluster identity 4711 [ 65.841102][ T5826] tipc: Failed to obtain node identity [ 65.846628][ T5826] tipc: Enabling of bearer rejected, failed to enable media [ 65.866151][ T5826] syzkaller0: entered promiscuous mode [ 65.872974][ T5826] syzkaller0: entered allmulticast mode [ 65.926789][ T5837] loop3: detected capacity change from 0 to 764 [ 65.934646][ T5837] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.969490][ T5842] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.982628][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 65.999789][ T5842] bridge0: port 3(batadv1) entered blocking state [ 66.006480][ T5842] bridge0: port 3(batadv1) entered disabled state [ 66.023967][ T5848] loop1: detected capacity change from 0 to 1024 [ 66.031061][ T5848] EXT4-fs: Ignoring removed bh option [ 66.037512][ T5848] EXT4-fs: inline encryption not supported [ 66.043912][ T5848] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.055792][ T5842] batadv1: entered allmulticast mode [ 66.062091][ T5842] batadv1: entered promiscuous mode [ 66.063874][ T5850] loop2: detected capacity change from 0 to 512 [ 66.081069][ T5848] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.922: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.096341][ T5848] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.922: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.114806][ T5850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.119076][ T5857] loop3: detected capacity change from 0 to 512 [ 66.126731][ T5850] EXT4-fs (loop2): 1 truncate cleaned up [ 66.137580][ T5857] EXT4-fs: Ignoring removed oldalloc option [ 66.138603][ T5848] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.922: Failed to acquire dquot type 0 [ 66.145329][ T5850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.177441][ T5848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 66.187319][ T5848] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.922: mark_inode_dirty error [ 66.198933][ T5857] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.926: Parent and EA inode have the same ino 15 [ 66.203077][ T5857] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.926: Parent and EA inode have the same ino 15 [ 66.212651][ T5848] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 66.212697][ T5848] EXT4-fs (loop1): 1 orphan inode deleted [ 66.213197][ T5848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.229024][ T5857] EXT4-fs (loop3): 1 orphan inode deleted [ 66.237271][ T5588] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.243532][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.254794][ T5588] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:54: Failed to release dquot type 0 [ 66.302332][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.302627][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.311695][ T5848] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.922: Invalid inode table block 1 in block_group 0 [ 66.311792][ T5848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 66.311858][ T5848] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.922: mark_inode_dirty error [ 66.317976][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.372967][ T5863] loop1: detected capacity change from 0 to 1024 [ 66.390026][ T5863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.408536][ T5863] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.509152][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.519213][ T5562] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 66.529514][ T5562] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 66.563124][ T5879] loop3: detected capacity change from 0 to 764 [ 66.571267][ T5879] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 66.606930][ T10] hid_parser_main: 149 callbacks suppressed [ 66.606959][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.621119][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.629244][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.638900][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.647157][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.654622][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.662920][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.668747][ T5894] loop0: detected capacity change from 0 to 764 [ 66.670672][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.684846][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.692358][ T5889] loop1: detected capacity change from 0 to 1024 [ 66.692386][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 66.714031][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz0] on syz0 [ 66.729440][ T5894] rock: directory entry would overflow storage [ 66.735669][ T5894] rock: sig=0x4f50, size=4, remaining=3 [ 66.742074][ T5894] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 66.750057][ T5896] loop2: detected capacity change from 0 to 512 [ 66.757315][ T5896] EXT4-fs: Ignoring removed oldalloc option [ 66.757925][ T5889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.763357][ T5896] EXT4-fs: inline encryption not supported [ 66.763389][ T5896] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.806176][ T5896] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.825787][ T5889] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.836190][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 66.836844][ T5896] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.938: bg 0: block 64: padding at end of block bitmap is not set [ 66.845687][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 66.861971][ T5896] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.938: Failed to acquire dquot type 0 [ 66.883972][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 66.890931][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.928184][ T5919] loop4: detected capacity change from 0 to 512 [ 66.939114][ T5919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.956079][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.967459][ T5919] EXT4-fs (loop4): 1 truncate cleaned up [ 66.973559][ T5919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.010392][ T5927] loop3: detected capacity change from 0 to 764 [ 67.043026][ T5927] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.052103][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.076053][ T5935] loop0: detected capacity change from 0 to 764 [ 67.098299][ T5935] rock: directory entry would overflow storage [ 67.104622][ T5935] rock: sig=0x4f50, size=4, remaining=3 [ 67.110415][ T5935] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.218085][ T5959] FAULT_INJECTION: forcing a failure. [ 67.218085][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 67.231724][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.4.963 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.231850][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.231863][ T5959] Call Trace: [ 67.231870][ T5959] [ 67.231878][ T5959] __dump_stack+0x1d/0x30 [ 67.231932][ T5959] dump_stack_lvl+0xe8/0x140 [ 67.231951][ T5959] dump_stack+0x15/0x1b [ 67.231968][ T5959] should_fail_ex+0x265/0x280 [ 67.231987][ T5959] should_failslab+0x8c/0xb0 [ 67.232085][ T5959] kmem_cache_alloc_noprof+0x50/0x310 [ 67.232108][ T5959] ? create_new_namespaces+0x3c/0x3d0 [ 67.232209][ T5959] create_new_namespaces+0x3c/0x3d0 [ 67.232234][ T5959] unshare_nsproxy_namespaces+0xe8/0x120 [ 67.232259][ T5959] ksys_unshare+0x3d0/0x6d0 [ 67.232283][ T5959] ? ksys_write+0x192/0x1a0 [ 67.232362][ T5959] __x64_sys_unshare+0x1f/0x30 [ 67.232388][ T5959] x64_sys_call+0x2911/0x2ff0 [ 67.232433][ T5959] do_syscall_64+0xd2/0x200 [ 67.232508][ T5959] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.232528][ T5959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.232553][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.232642][ T5959] RIP: 0033:0x7fed4a4cebe9 [ 67.232658][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.232674][ T5959] RSP: 002b:00007fed48f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 67.232690][ T5959] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cebe9 [ 67.232702][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 67.232715][ T5959] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 67.232728][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.232773][ T5959] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 67.232851][ T5959] [ 67.234780][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.248502][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 67.248520][ T29] audit: type=1326 audit(1756586749.892:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.314445][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.331371][ T29] audit: type=1326 audit(1756586749.892:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.505562][ T29] audit: type=1326 audit(1756586749.892:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.530384][ T29] audit: type=1326 audit(1756586749.892:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.554490][ T29] audit: type=1326 audit(1756586749.892:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.579423][ T29] audit: type=1326 audit(1756586749.892:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.603119][ T29] audit: type=1326 audit(1756586749.892:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.627503][ T29] audit: type=1326 audit(1756586749.892:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.651288][ T29] audit: type=1326 audit(1756586749.892:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.675823][ T29] audit: type=1326 audit(1756586749.892:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe863b8ebe9 code=0x7ffc0000 [ 67.748272][ T5973] syzkaller0: entered promiscuous mode [ 67.754077][ T5973] syzkaller0: entered allmulticast mode [ 67.776185][ T5896] syz.2.938 (5896) used greatest stack depth: 9264 bytes left [ 67.786257][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.909732][ T5987] loop3: detected capacity change from 0 to 764 [ 67.986936][ T5992] loop2: detected capacity change from 0 to 512 [ 67.994023][ T5992] ext3: Unknown parameter 'euid<18446744073709551615' [ 68.002380][ T5990] rock: directory entry would overflow storage [ 68.008605][ T5990] rock: sig=0x4f50, size=4, remaining=3 [ 68.014297][ T5990] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 68.121372][ T6001] loop2: detected capacity change from 0 to 512 [ 68.131313][ T6001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.190225][ T6001] EXT4-fs (loop2): 1 truncate cleaned up [ 68.196257][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.229104][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.299049][ T6016] loop2: detected capacity change from 0 to 128 [ 68.329362][ T6016] FAT-fs (loop2): Directory bread(block 32) failed [ 68.336062][ T6016] FAT-fs (loop2): Directory bread(block 33) failed [ 68.343264][ T6022] loop1: detected capacity change from 0 to 1024 [ 68.349208][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.350319][ T6016] FAT-fs (loop2): Directory bread(block 34) failed [ 68.369309][ T6016] FAT-fs (loop2): Directory bread(block 35) failed [ 68.375952][ T6016] FAT-fs (loop2): Directory bread(block 36) failed [ 68.382696][ T6016] FAT-fs (loop2): Directory bread(block 37) failed [ 68.384332][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.389675][ T6016] FAT-fs (loop2): Directory bread(block 38) failed [ 68.389698][ T6016] FAT-fs (loop2): Directory bread(block 39) failed [ 68.389723][ T6016] FAT-fs (loop2): Directory bread(block 40) failed [ 68.389740][ T6016] FAT-fs (loop2): Directory bread(block 41) failed [ 68.437307][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 68.650481][ T6069] blktrace: Concurrent blktraces are not allowed on sg0 [ 68.709399][ T6079] mmap: syz.2.1015 (6079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.755634][ T6090] FAULT_INJECTION: forcing a failure. [ 68.755634][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.769297][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.1.1017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.769325][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.769335][ T6090] Call Trace: [ 68.769410][ T6090] [ 68.769419][ T6090] __dump_stack+0x1d/0x30 [ 68.769440][ T6090] dump_stack_lvl+0xe8/0x140 [ 68.769515][ T6090] dump_stack+0x15/0x1b [ 68.769532][ T6090] should_fail_ex+0x265/0x280 [ 68.769552][ T6090] should_fail+0xb/0x20 [ 68.769566][ T6090] should_fail_usercopy+0x1a/0x20 [ 68.769586][ T6090] _copy_to_user+0x20/0xa0 [ 68.769631][ T6090] simple_read_from_buffer+0xb5/0x130 [ 68.769651][ T6090] proc_fail_nth_read+0x10e/0x150 [ 68.769674][ T6090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.769717][ T6090] vfs_read+0x1a8/0x770 [ 68.769735][ T6090] ? __rcu_read_unlock+0x4f/0x70 [ 68.769824][ T6090] ? __fget_files+0x184/0x1c0 [ 68.769914][ T6090] ksys_read+0xda/0x1a0 [ 68.769940][ T6090] __x64_sys_read+0x40/0x50 [ 68.770038][ T6090] x64_sys_call+0x27bc/0x2ff0 [ 68.770093][ T6090] do_syscall_64+0xd2/0x200 [ 68.770121][ T6090] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.770143][ T6090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.770217][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.770236][ T6090] RIP: 0033:0x7fabfde6d5fc [ 68.770249][ T6090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.770265][ T6090] RSP: 002b:00007fabfc8d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.770284][ T6090] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6d5fc [ 68.770326][ T6090] RDX: 000000000000000f RSI: 00007fabfc8d70a0 RDI: 0000000000000006 [ 68.770408][ T6090] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.770495][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.770508][ T6090] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 68.770527][ T6090] [ 69.002194][ T6093] netlink: 'syz.2.1021': attribute type 4 has an invalid length. [ 69.040683][ T6102] loop2: detected capacity change from 0 to 764 [ 69.148279][ T6110] rock: directory entry would overflow storage [ 69.154560][ T6110] rock: sig=0x4f50, size=4, remaining=3 [ 69.160250][ T6110] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 69.187735][ T6116] loop4: detected capacity change from 0 to 512 [ 69.202704][ T6116] EXT4-fs: Mount option(s) incompatible with ext2 [ 69.219733][ C0] hrtimer: interrupt took 60870 ns [ 69.358757][ T6143] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 69.425365][ T6153] loop3: detected capacity change from 0 to 764 [ 69.444435][ T6153] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.495459][ T6158] loop3: detected capacity change from 0 to 512 [ 69.527115][ T6158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.547184][ T6158] EXT4-fs (loop3): 1 truncate cleaned up [ 69.553472][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.579518][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.600743][ T6165] loop3: detected capacity change from 0 to 764 [ 69.613601][ T6165] rock: directory entry would overflow storage [ 69.620054][ T6165] rock: sig=0x4f50, size=4, remaining=3 [ 69.626022][ T6165] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 69.660119][ T6168] blktrace: Concurrent blktraces are not allowed on sg0 [ 69.695042][ T6170] loop3: detected capacity change from 0 to 764 [ 69.710898][ T6170] rock: directory entry would overflow storage [ 69.718544][ T6170] rock: sig=0x4f50, size=4, remaining=3 [ 69.724209][ T6170] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 69.985277][ T6193] loop3: detected capacity change from 0 to 512 [ 69.992494][ T6193] EXT4-fs: Ignoring removed oldalloc option [ 70.015985][ T6193] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1053: Parent and EA inode have the same ino 15 [ 70.036108][ T6193] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1053: Parent and EA inode have the same ino 15 [ 70.050644][ T6193] EXT4-fs (loop3): 1 orphan inode deleted [ 70.058466][ T6193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.100792][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.115589][ T6200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.127296][ T6203] loop3: detected capacity change from 0 to 764 [ 70.141918][ T6203] rock: directory entry would overflow storage [ 70.148929][ T6203] rock: sig=0x4f50, size=4, remaining=3 [ 70.154778][ T6203] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.338086][ T6217] loop0: detected capacity change from 0 to 128 [ 70.399349][ T6219] lo speed is unknown, defaulting to 1000 [ 70.495699][ T6226] loop1: detected capacity change from 0 to 764 [ 70.527062][ T6226] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.583429][ T6232] bond_slave_1: entered promiscuous mode [ 70.595069][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.604133][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.614164][ T6232] __nla_validate_parse: 2 callbacks suppressed [ 70.614181][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 70.653409][ T6232] bond0: (slave bond_slave_1): Releasing backup interface [ 70.675240][ T6232] bond_slave_1 (unregistering): left promiscuous mode [ 70.720055][ T6242] loop4: detected capacity change from 0 to 764 [ 70.735186][ T6242] rock: directory entry would overflow storage [ 70.741581][ T6242] rock: sig=0x4f50, size=4, remaining=3 [ 70.747955][ T6242] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.972050][ T6257] syzkaller0: entered promiscuous mode [ 70.978442][ T6257] syzkaller0: entered allmulticast mode [ 71.039645][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 71.051006][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1078'. [ 71.061590][ T6259] sit0: entered allmulticast mode [ 71.101470][ T6263] syzkaller0: entered promiscuous mode [ 71.107930][ T6263] syzkaller0: entered allmulticast mode [ 71.180724][ T6265] lo speed is unknown, defaulting to 1000 [ 71.229482][ T6270] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 71.277800][ T6274] loop0: detected capacity change from 0 to 764 [ 71.288826][ T6277] FAULT_INJECTION: forcing a failure. [ 71.288826][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 71.302245][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.302275][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.302288][ T6277] Call Trace: [ 71.302295][ T6277] [ 71.302304][ T6277] __dump_stack+0x1d/0x30 [ 71.302410][ T6277] dump_stack_lvl+0xe8/0x140 [ 71.302426][ T6277] dump_stack+0x15/0x1b [ 71.302440][ T6277] should_fail_ex+0x265/0x280 [ 71.302458][ T6277] should_failslab+0x8c/0xb0 [ 71.302483][ T6277] kmem_cache_alloc_node_noprof+0x57/0x320 [ 71.302549][ T6277] ? __alloc_skb+0x101/0x320 [ 71.302569][ T6277] __alloc_skb+0x101/0x320 [ 71.302629][ T6277] inet_netconf_notify_devconf+0x173/0x230 [ 71.302660][ T6277] inetdev_event+0x743/0xc10 [ 71.302678][ T6277] ? __pfx_ib_netdevice_event+0x10/0x10 [ 71.302703][ T6277] ? ib_netdevice_event+0x186/0x5f0 [ 71.302757][ T6277] ? __pfx_arp_netdev_event+0x10/0x10 [ 71.302781][ T6277] ? __pfx_inetdev_event+0x10/0x10 [ 71.302870][ T6277] raw_notifier_call_chain+0x6c/0x1b0 [ 71.302889][ T6277] ? call_netdevice_notifiers_info+0x9c/0x100 [ 71.302912][ T6277] call_netdevice_notifiers_info+0xae/0x100 [ 71.302964][ T6277] unregister_netdevice_many_notify+0xda9/0x15d0 [ 71.302994][ T6277] unregister_netdevice_queue+0x1f5/0x220 [ 71.303018][ T6277] unregister_netdev+0xb3/0xe0 [ 71.303087][ T6277] slip_close+0xe4/0x100 [ 71.303110][ T6277] ? __pfx_slip_close+0x10/0x10 [ 71.303158][ T6277] tty_ldisc_close+0x71/0xa0 [ 71.303186][ T6277] tty_set_ldisc+0x1b9/0x380 [ 71.303215][ T6277] tiocsetd+0x51/0x60 [ 71.303288][ T6277] tty_ioctl+0xa7f/0xb80 [ 71.303322][ T6277] ? __pfx_tty_ioctl+0x10/0x10 [ 71.303353][ T6277] __se_sys_ioctl+0xce/0x140 [ 71.303430][ T6277] __x64_sys_ioctl+0x43/0x50 [ 71.303462][ T6277] x64_sys_call+0x1816/0x2ff0 [ 71.303562][ T6277] do_syscall_64+0xd2/0x200 [ 71.303627][ T6277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.303742][ T6277] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.303770][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.303792][ T6277] RIP: 0033:0x7fabfde6ebe9 [ 71.303881][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.303898][ T6277] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.303979][ T6277] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 71.303993][ T6277] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 71.304006][ T6277] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.304019][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.304084][ T6277] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 71.304104][ T6277] [ 71.594380][ T6280] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.605338][ T6274] rock: directory entry would overflow storage [ 71.611252][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.612332][ T6274] rock: sig=0x4f50, size=4, remaining=3 [ 71.621245][ T6280] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.626339][ T6274] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.635483][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.653507][ T6280] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.663398][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.719477][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.728840][ T6280] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1086'. [ 71.788104][ T6292] loop4: detected capacity change from 0 to 512 [ 71.802417][ T6292] EXT4-fs (loop4): too many log groups per flexible block group [ 71.810735][ T6292] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 71.820489][ T6292] EXT4-fs (loop4): mount failed [ 71.827132][ T6298] loop2: detected capacity change from 0 to 764 [ 71.848862][ T6298] rock: directory entry would overflow storage [ 71.855143][ T6298] rock: sig=0x4f50, size=4, remaining=3 [ 71.860805][ T6298] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.941414][ T6317] FAULT_INJECTION: forcing a failure. [ 71.941414][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 71.955136][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.955241][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.955254][ T6317] Call Trace: [ 71.955262][ T6317] [ 71.955270][ T6317] __dump_stack+0x1d/0x30 [ 71.955292][ T6317] dump_stack_lvl+0xe8/0x140 [ 71.955346][ T6317] dump_stack+0x15/0x1b [ 71.955359][ T6317] should_fail_ex+0x265/0x280 [ 71.955377][ T6317] should_failslab+0x8c/0xb0 [ 71.955443][ T6317] kmem_cache_alloc_noprof+0x50/0x310 [ 71.955500][ T6317] ? alloc_empty_file+0x76/0x200 [ 71.955534][ T6317] alloc_empty_file+0x76/0x200 [ 71.955629][ T6317] alloc_file_pseudo+0xc6/0x160 [ 71.955689][ T6317] __shmem_file_setup+0x1de/0x210 [ 71.955759][ T6317] shmem_file_setup+0x3b/0x50 [ 71.955785][ T6317] __se_sys_memfd_create+0x2c3/0x590 [ 71.955808][ T6317] __x64_sys_memfd_create+0x31/0x40 [ 71.955829][ T6317] x64_sys_call+0x2abe/0x2ff0 [ 71.955928][ T6317] do_syscall_64+0xd2/0x200 [ 71.955950][ T6317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.955974][ T6317] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.956020][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.956098][ T6317] RIP: 0033:0x7f7aa83eebe9 [ 71.956118][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.956135][ T6317] RSP: 002b:00007f7aa6e4ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.956156][ T6317] RAX: ffffffffffffffda RBX: 00000000000004ff RCX: 00007f7aa83eebe9 [ 71.956170][ T6317] RDX: 00007f7aa6e4eef0 RSI: 0000000000000000 RDI: 00007f7aa84727e8 [ 71.956189][ T6317] RBP: 0000200000001140 R08: 00007f7aa6e4ebb7 R09: 00007f7aa6e4ee40 [ 71.956205][ T6317] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 71.956245][ T6317] R13: 00007f7aa6e4eef0 R14: 00007f7aa6e4eeb0 R15: 0000200000000100 [ 71.956263][ T6317] [ 72.168912][ T6319] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 72.273014][ T6320] loop3: detected capacity change from 0 to 4096 [ 72.280515][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.287258][ T6320] EXT4-fs: test_dummy_encryption option not supported [ 72.329874][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 72.329886][ T29] audit: type=1326 audit(1756586754.972:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 72.401423][ T6323] loop1: detected capacity change from 0 to 512 [ 72.438524][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.448982][ T29] audit: type=1326 audit(1756586755.002:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 72.472939][ T29] audit: type=1326 audit(1756586755.012:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fabfde6ebe9 code=0x7ffc0000 [ 72.498762][ T29] audit: type=1326 audit(1756586755.012:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fabfde6ec23 code=0x7ffc0000 [ 72.522473][ T29] audit: type=1326 audit(1756586755.032:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fabfde6d69f code=0x7ffc0000 [ 72.547527][ T29] audit: type=1326 audit(1756586755.032:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fabfde6ec77 code=0x7ffc0000 [ 72.571025][ T29] audit: type=1326 audit(1756586755.032:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabfde6d550 code=0x7ffc0000 [ 72.595934][ T29] audit: type=1326 audit(1756586755.032:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabfde6e7eb code=0x7ffc0000 [ 72.620685][ T29] audit: type=1326 audit(1756586755.072:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabfde6d84a code=0x7ffc0000 [ 72.644455][ T29] audit: type=1326 audit(1756586755.072:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabfde6d84a code=0x7ffc0000 [ 72.716664][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.732095][ T6327] loop2: detected capacity change from 0 to 1024 [ 72.785588][ T6327] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 72.810253][ T6335] loop0: detected capacity change from 0 to 512 [ 72.819957][ T6327] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.837343][ T6335] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.850835][ T6337] loop4: detected capacity change from 0 to 1024 [ 72.861543][ T6327] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #32: comm syz.2.1102: iget: special inode unallocated [ 72.876095][ T6327] EXT4-fs (loop2): Remounting filesystem read-only [ 72.882847][ T6327] EXT4-fs (loop2): no journal found [ 72.890257][ T6327] EXT4-fs (loop2): can't get journal size [ 72.897233][ T6337] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.908414][ T6337] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.922972][ T6337] JBD2: no valid journal superblock found [ 72.928864][ T6337] EXT4-fs (loop4): Could not load journal inode [ 72.937805][ T6327] EXT4-fs (loop2): filesystem is read-only [ 72.944144][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.958461][ T6323] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.973888][ T6335] EXT4-fs (loop0): 1 truncate cleaned up [ 72.981229][ T6335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.999885][ T6323] EXT4-fs (loop1): mount failed [ 73.007388][ T6335] FAULT_INJECTION: forcing a failure. [ 73.007388][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.022286][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.022316][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.022327][ T6335] Call Trace: [ 73.022333][ T6335] [ 73.022349][ T6335] __dump_stack+0x1d/0x30 [ 73.022375][ T6335] dump_stack_lvl+0xe8/0x140 [ 73.022398][ T6335] dump_stack+0x15/0x1b [ 73.022414][ T6335] should_fail_ex+0x265/0x280 [ 73.022437][ T6335] should_fail+0xb/0x20 [ 73.022452][ T6335] should_fail_usercopy+0x1a/0x20 [ 73.022495][ T6335] strncpy_from_user+0x25/0x230 [ 73.022522][ T6335] ? kmem_cache_alloc_noprof+0x186/0x310 [ 73.022549][ T6335] ? getname_flags+0x80/0x3b0 [ 73.022624][ T6335] getname_flags+0xae/0x3b0 [ 73.022650][ T6335] __x64_sys_renameat2+0x6c/0x90 [ 73.022691][ T6335] x64_sys_call+0x3f9/0x2ff0 [ 73.022711][ T6335] do_syscall_64+0xd2/0x200 [ 73.022798][ T6335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.022822][ T6335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.022874][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.022892][ T6335] RIP: 0033:0x7fe863b8ebe9 [ 73.022905][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.022920][ T6335] RSP: 002b:00007fe8625f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 73.022936][ T6335] RAX: ffffffffffffffda RBX: 00007fe863dc5fa0 RCX: 00007fe863b8ebe9 [ 73.022949][ T6335] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 73.023004][ T6335] RBP: 00007fe8625f7090 R08: 0000000000000002 R09: 0000000000000000 [ 73.023017][ T6335] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 73.023031][ T6335] R13: 00007fe863dc6038 R14: 00007fe863dc5fa0 R15: 00007fffc154f8c8 [ 73.023048][ T6335] [ 73.232298][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.756897][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.797786][ T6345] netlink: 'syz.3.1109': attribute type 4 has an invalid length. [ 73.813986][ T6350] loop1: detected capacity change from 0 to 764 [ 73.838590][ T6350] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.847203][ T6352] loop2: detected capacity change from 0 to 764 [ 73.855427][ T6352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.863747][ T6358] loop4: detected capacity change from 0 to 512 [ 73.871299][ T6358] EXT4-fs: Ignoring removed oldalloc option [ 73.886678][ T6358] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1113: Parent and EA inode have the same ino 15 [ 73.903599][ T6358] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1113: Parent and EA inode have the same ino 15 [ 73.931017][ T6358] EXT4-fs (loop4): 1 orphan inode deleted [ 73.937378][ T6358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.981045][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.989720][ T6371] loop2: detected capacity change from 0 to 512 [ 74.054436][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.078842][ T6386] loop3: detected capacity change from 0 to 764 [ 74.082744][ T6390] loop1: detected capacity change from 0 to 764 [ 74.091932][ T6386] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 74.138629][ T6390] rock: directory entry would overflow storage [ 74.144811][ T6390] rock: sig=0x4f50, size=4, remaining=3 [ 74.150534][ T6390] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 74.195566][ T6402] loop4: detected capacity change from 0 to 764 [ 74.204526][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.207383][ T6398] loop3: detected capacity change from 0 to 4096 [ 74.224194][ T6398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.264039][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.302504][ T6411] lo speed is unknown, defaulting to 1000 [ 74.361883][ T6421] lo speed is unknown, defaulting to 1000 [ 74.368288][ T6421] lo speed is unknown, defaulting to 1000 [ 74.374418][ T6421] lo speed is unknown, defaulting to 1000 [ 74.391575][ T6421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.415793][ T6421] lo speed is unknown, defaulting to 1000 [ 74.426965][ T6421] lo speed is unknown, defaulting to 1000 [ 74.433464][ T6431] loop1: detected capacity change from 0 to 128 [ 74.435023][ T6421] lo speed is unknown, defaulting to 1000 [ 74.446745][ T6430] FAULT_INJECTION: forcing a failure. [ 74.446745][ T6430] name failslab, interval 1, probability 0, space 0, times 0 [ 74.456299][ T6421] lo speed is unknown, defaulting to 1000 [ 74.459453][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.4.1146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.459476][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.459513][ T6430] Call Trace: [ 74.459520][ T6430] [ 74.459529][ T6430] __dump_stack+0x1d/0x30 [ 74.459551][ T6430] dump_stack_lvl+0xe8/0x140 [ 74.459570][ T6430] dump_stack+0x15/0x1b [ 74.459649][ T6430] should_fail_ex+0x265/0x280 [ 74.459669][ T6430] should_failslab+0x8c/0xb0 [ 74.459697][ T6430] kmem_cache_alloc_noprof+0x50/0x310 [ 74.459726][ T6430] ? audit_log_start+0x365/0x6c0 [ 74.459755][ T6430] audit_log_start+0x365/0x6c0 [ 74.459784][ T6430] audit_seccomp+0x48/0x100 [ 74.459867][ T6430] ? __seccomp_filter+0x68c/0x10d0 [ 74.459886][ T6430] __seccomp_filter+0x69d/0x10d0 [ 74.459980][ T6430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.460017][ T6430] ? vfs_write+0x7e8/0x960 [ 74.460037][ T6430] ? __rcu_read_unlock+0x4f/0x70 [ 74.460058][ T6430] ? __fget_files+0x184/0x1c0 [ 74.460114][ T6430] __secure_computing+0x82/0x150 [ 74.460134][ T6430] syscall_trace_enter+0xcf/0x1e0 [ 74.460156][ T6430] do_syscall_64+0xac/0x200 [ 74.460216][ T6430] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.460238][ T6430] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.460351][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.460370][ T6430] RIP: 0033:0x7fed4a4cd5fc [ 74.460386][ T6430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.460402][ T6430] RSP: 002b:00007fed48f37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.460421][ T6430] RAX: ffffffffffffffda RBX: 00007fed4a705fa0 RCX: 00007fed4a4cd5fc [ 74.460504][ T6430] RDX: 000000000000000f RSI: 00007fed48f370a0 RDI: 0000000000000006 [ 74.460516][ T6430] RBP: 00007fed48f37090 R08: 0000000000000000 R09: 0000000000000000 [ 74.460528][ T6430] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 74.460540][ T6430] R13: 00007fed4a706038 R14: 00007fed4a705fa0 R15: 00007ffe00af6d18 [ 74.460558][ T6430] [ 74.591241][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.661521][ T6421] lo speed is unknown, defaulting to 1000 [ 74.708179][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.717765][ T6442] loop3: detected capacity change from 0 to 512 [ 74.724318][ T6440] netlink: 'syz.0.1148': attribute type 4 has an invalid length. [ 74.729021][ T6421] lo speed is unknown, defaulting to 1000 [ 74.747634][ T6442] EXT4-fs (loop3): too many log groups per flexible block group [ 74.755721][ T6442] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 74.763553][ T6442] EXT4-fs (loop3): mount failed [ 74.831573][ T6459] lo speed is unknown, defaulting to 1000 [ 74.837891][ T6459] lo speed is unknown, defaulting to 1000 [ 74.872171][ T6461] syzkaller0: entered promiscuous mode [ 74.877757][ T6461] syzkaller0: entered allmulticast mode [ 74.960828][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.981319][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.064601][ T6476] FAULT_INJECTION: forcing a failure. [ 75.064601][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 75.077379][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.1.1163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.077422][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.077433][ T6476] Call Trace: [ 75.077437][ T6476] [ 75.077444][ T6476] __dump_stack+0x1d/0x30 [ 75.077463][ T6476] dump_stack_lvl+0xe8/0x140 [ 75.077513][ T6476] dump_stack+0x15/0x1b [ 75.077528][ T6476] should_fail_ex+0x265/0x280 [ 75.077594][ T6476] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 75.077617][ T6476] should_failslab+0x8c/0xb0 [ 75.077631][ T6476] __kmalloc_cache_noprof+0x4c/0x320 [ 75.077707][ T6476] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 75.077778][ T6476] nsim_fib_event_nb+0x1a0/0xcb0 [ 75.077804][ T6476] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 75.077888][ T6476] atomic_notifier_call_chain+0x76/0x1c0 [ 75.077915][ T6476] call_fib_notifiers+0x65/0xa0 [ 75.078037][ T6476] call_fib6_notifiers+0x30/0x40 [ 75.078049][ T6476] fib6_del+0x749/0x8b0 [ 75.078131][ T6476] ? fib6_del+0x311/0x8b0 [ 75.078261][ T6476] __ip6_del_rt+0x5e/0x120 [ 75.078271][ T6476] ip6_del_rt+0x69/0x90 [ 75.078286][ T6476] __ipv6_dev_ac_dec+0x271/0x310 [ 75.078298][ T6476] ipv6_dev_ac_dec+0x7d/0x110 [ 75.078384][ T6476] __ipv6_sock_ac_close+0x161/0x220 [ 75.078395][ T6476] ipv6_sock_ac_close+0x7a/0x90 [ 75.078447][ T6476] inet6_release+0x36/0x60 [ 75.078462][ T6476] sock_close+0x68/0x150 [ 75.078476][ T6476] ? __pfx_sock_close+0x10/0x10 [ 75.078513][ T6476] __fput+0x298/0x650 [ 75.078530][ T6476] fput_close_sync+0x6e/0x120 [ 75.078600][ T6476] __x64_sys_close+0x56/0xf0 [ 75.078616][ T6476] x64_sys_call+0x2738/0x2ff0 [ 75.078635][ T6476] do_syscall_64+0xd2/0x200 [ 75.078653][ T6476] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.078737][ T6476] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.078831][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.078873][ T6476] RIP: 0033:0x7fabfde6ebe9 [ 75.078882][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.078892][ T6476] RSP: 002b:00007fabfc8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.078904][ T6476] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6ebe9 [ 75.078916][ T6476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 75.078923][ T6476] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.078990][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.078996][ T6476] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 75.079007][ T6476] [ 75.382217][ T6482] random: crng reseeded on system resumption [ 75.399549][ T6482] 9pnet: Could not find request transport: fd.rfdno= )Ú¨#Kl|ÔC¥NÃö²•$<´ [ 75.583937][ T3410] hid_parser_main: 19 callbacks suppressed [ 75.584009][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.598575][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.606230][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.618074][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.625722][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.633828][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.641301][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.648824][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.656313][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.664728][ T3410] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 75.681970][ T3410] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 75.701438][ T6524] lo speed is unknown, defaulting to 1000 [ 75.707653][ T6524] lo speed is unknown, defaulting to 1000 [ 75.833309][ T3367] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.00 Device [syz0] on syz0 [ 75.840364][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.852319][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.867608][ T6536] __nla_validate_parse: 12 callbacks suppressed [ 75.867621][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 75.899222][ T6542] FAULT_INJECTION: forcing a failure. [ 75.899222][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 75.912054][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.0.1191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.912121][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.912131][ T6542] Call Trace: [ 75.912138][ T6542] [ 75.912165][ T6542] __dump_stack+0x1d/0x30 [ 75.912198][ T6542] dump_stack_lvl+0xe8/0x140 [ 75.912252][ T6542] dump_stack+0x15/0x1b [ 75.912268][ T6542] should_fail_ex+0x265/0x280 [ 75.912289][ T6542] ? __inet_diag_dump_start+0x53/0x790 [ 75.912310][ T6542] should_failslab+0x8c/0xb0 [ 75.912331][ T6542] __kmalloc_cache_noprof+0x4c/0x320 [ 75.912437][ T6542] __inet_diag_dump_start+0x53/0x790 [ 75.912456][ T6542] ? __netlink_lookup+0x266/0x2a0 [ 75.912561][ T6542] inet_diag_dump_start+0x1a/0x30 [ 75.912586][ T6542] __netlink_dump_start+0x334/0x520 [ 75.912606][ T6542] inet_diag_handler_cmd+0xf3/0x140 [ 75.912698][ T6542] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 75.912714][ T6542] ? __pfx_inet_diag_dump+0x10/0x10 [ 75.912730][ T6542] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 75.912821][ T6542] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 75.912838][ T6542] sock_diag_rcv_msg+0x285/0x2c0 [ 75.912860][ T6542] netlink_rcv_skb+0x123/0x220 [ 75.912915][ T6542] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 75.912966][ T6542] sock_diag_rcv+0x1c/0x30 [ 75.912986][ T6542] netlink_unicast+0x5bd/0x690 [ 75.913007][ T6542] netlink_sendmsg+0x58b/0x6b0 [ 75.913035][ T6542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.913058][ T6542] __sock_sendmsg+0x145/0x180 [ 75.913137][ T6542] sock_write_iter+0x165/0x1b0 [ 75.913168][ T6542] do_iter_readv_writev+0x499/0x540 [ 75.913194][ T6542] vfs_writev+0x2df/0x8b0 [ 75.913224][ T6542] do_writev+0xe7/0x210 [ 75.913267][ T6542] __x64_sys_writev+0x45/0x50 [ 75.913291][ T6542] x64_sys_call+0x1e9a/0x2ff0 [ 75.913308][ T6542] do_syscall_64+0xd2/0x200 [ 75.913330][ T6542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.913369][ T6542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.913395][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.913501][ T6542] RIP: 0033:0x7fe863b8ebe9 [ 75.913518][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.913533][ T6542] RSP: 002b:00007fe8625f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 75.913549][ T6542] RAX: ffffffffffffffda RBX: 00007fe863dc5fa0 RCX: 00007fe863b8ebe9 [ 75.913559][ T6542] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 75.913569][ T6542] RBP: 00007fe8625f7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.913582][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.913649][ T6542] R13: 00007fe863dc6038 R14: 00007fe863dc5fa0 R15: 00007fffc154f8c8 [ 75.913665][ T6542] [ 76.201584][ T6546] loop1: detected capacity change from 0 to 512 [ 76.246110][ T6546] EXT4-fs: Ignoring removed oldalloc option [ 76.272215][ T6546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1193: Parent and EA inode have the same ino 15 [ 76.274113][ T6548] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 76.309285][ T6546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1193: Parent and EA inode have the same ino 15 [ 76.325836][ T6546] EXT4-fs (loop1): 1 orphan inode deleted [ 76.336340][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.361863][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.765746][ T6576] loop2: detected capacity change from 0 to 512 [ 76.773027][ T6576] EXT4-fs: Ignoring removed oldalloc option [ 76.789280][ T6576] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1206: Parent and EA inode have the same ino 15 [ 76.811432][ T6576] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1206: Parent and EA inode have the same ino 15 [ 76.828234][ T6576] EXT4-fs (loop2): 1 orphan inode deleted [ 76.834673][ T6576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.864889][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.895224][ T6583] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.908422][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1210'. [ 76.963059][ T6591] loop3: detected capacity change from 0 to 512 [ 76.971043][ T6591] EXT4-fs: Ignoring removed oldalloc option [ 76.990998][ T6596] loop2: detected capacity change from 0 to 764 [ 76.991855][ T6591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1213: Parent and EA inode have the same ino 15 [ 77.014227][ T6591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1213: Parent and EA inode have the same ino 15 [ 77.028963][ T6591] EXT4-fs (loop3): 1 orphan inode deleted [ 77.035396][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.064184][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.094204][ T3410] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.00 Device [syz0] on syz0 [ 77.106745][ T6599] rock: directory entry would overflow storage [ 77.113183][ T6599] rock: sig=0x4f50, size=4, remaining=3 [ 77.119475][ T6599] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 77.168250][ T6601] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 77.178884][ T6601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 77.202165][ T6601] loop4: detected capacity change from 0 to 512 [ 77.221148][ T6601] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.235164][ T6603] lo speed is unknown, defaulting to 1000 [ 77.241452][ T6603] lo speed is unknown, defaulting to 1000 [ 77.247444][ T6601] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.253009][ T6601] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1217: corrupted inode contents [ 77.278275][ T6601] EXT4-fs (loop4): Remounting filesystem read-only [ 77.289209][ T6601] EXT4-fs (loop4): 1 truncate cleaned up [ 77.296062][ T5542] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.308413][ T5542] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.379753][ T6613] loop1: detected capacity change from 0 to 764 [ 77.394550][ T5542] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.405973][ T5542] __quota_error: 242 callbacks suppressed [ 77.405990][ T5542] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 77.421483][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.430286][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.437959][ T5542] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 77.450467][ T6613] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.460373][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.515219][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.517247][ T6625] FAULT_INJECTION: forcing a failure. [ 77.517247][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.538517][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.1.1227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.538611][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.538633][ T6625] Call Trace: [ 77.538640][ T6625] [ 77.538647][ T6625] __dump_stack+0x1d/0x30 [ 77.538670][ T6625] dump_stack_lvl+0xe8/0x140 [ 77.538686][ T6625] dump_stack+0x15/0x1b [ 77.538699][ T6625] should_fail_ex+0x265/0x280 [ 77.538724][ T6625] should_fail+0xb/0x20 [ 77.538738][ T6625] should_fail_usercopy+0x1a/0x20 [ 77.538837][ T6625] _copy_to_user+0x20/0xa0 [ 77.538862][ T6625] simple_read_from_buffer+0xb5/0x130 [ 77.538943][ T6625] proc_fail_nth_read+0x10e/0x150 [ 77.538970][ T6625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.538996][ T6625] vfs_read+0x1a8/0x770 [ 77.539013][ T6625] ? __rcu_read_unlock+0x4f/0x70 [ 77.539094][ T6625] ? __fget_files+0x184/0x1c0 [ 77.539115][ T6625] ksys_read+0xda/0x1a0 [ 77.539134][ T6625] __x64_sys_read+0x40/0x50 [ 77.539156][ T6625] x64_sys_call+0x27bc/0x2ff0 [ 77.539209][ T6625] do_syscall_64+0xd2/0x200 [ 77.539232][ T6625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.539256][ T6625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.539281][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.539324][ T6625] RIP: 0033:0x7fabfde6d5fc [ 77.539338][ T6625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.539352][ T6625] RSP: 002b:00007fabfc8d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.539371][ T6625] RAX: ffffffffffffffda RBX: 00007fabfe0a5fa0 RCX: 00007fabfde6d5fc [ 77.539384][ T6625] RDX: 000000000000000f RSI: 00007fabfc8d70a0 RDI: 0000000000000005 [ 77.539425][ T6625] RBP: 00007fabfc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.539435][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.539446][ T6625] R13: 00007fabfe0a6038 R14: 00007fabfe0a5fa0 R15: 00007ffc2fcb9088 [ 77.539462][ T6625] [ 77.749189][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 77.822729][ T6628] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 77.878889][ T6633] loop4: detected capacity change from 0 to 764 [ 77.894204][ T6633] rock: directory entry would overflow storage [ 77.900519][ T6633] rock: sig=0x4f50, size=4, remaining=3 [ 77.906270][ T6633] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 78.002628][ T6637] loop4: detected capacity change from 0 to 512 [ 78.010049][ T6637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.028949][ T6637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.041763][ T6637] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.053474][ T6637] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1231: corrupted xattr block 19: overlapping e_value [ 78.068558][ T6637] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 78.078823][ T6637] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1231: corrupted xattr block 19: overlapping e_value [ 78.092937][ T6637] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 78.103481][ T6637] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1231: corrupted xattr block 19: overlapping e_value [ 78.193578][ T6644] loop3: detected capacity change from 0 to 512 [ 78.201277][ T6644] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.213267][ T6644] FAT-fs (loop3): FAT read failed (blocknr 1568) [ 78.248297][ T6648] loop2: detected capacity change from 0 to 128 [ 78.259861][ T6648] FAT-fs (loop2): Directory bread(block 32) failed [ 78.266838][ T6648] FAT-fs (loop2): Directory bread(block 33) failed [ 78.273692][ T6648] FAT-fs (loop2): Directory bread(block 34) failed [ 78.282066][ T6648] FAT-fs (loop2): Directory bread(block 35) failed [ 78.289044][ T6648] FAT-fs (loop2): Directory bread(block 36) failed [ 78.295625][ T6648] FAT-fs (loop2): Directory bread(block 37) failed [ 78.303396][ T6648] FAT-fs (loop2): Directory bread(block 38) failed [ 78.311380][ T6648] FAT-fs (loop2): Directory bread(block 39) failed [ 78.311412][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'. [ 78.318239][ T6648] FAT-fs (loop2): Directory bread(block 40) failed [ 78.333856][ T6648] FAT-fs (loop2): Directory bread(block 41) failed [ 78.370081][ T6654] loop0: detected capacity change from 0 to 764 [ 78.381575][ T6654] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.394198][ T6658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 78.408745][ T29] audit: type=1326 audit(1756586761.052:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.442201][ T6660] loop0: detected capacity change from 0 to 128 [ 78.459238][ T29] audit: type=1326 audit(1756586761.052:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.483876][ T29] audit: type=1326 audit(1756586761.052:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.484817][ T6656] loop3: detected capacity change from 0 to 512 [ 78.509228][ T29] audit: type=1326 audit(1756586761.052:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.540615][ T29] audit: type=1326 audit(1756586761.052:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.564774][ T29] audit: type=1326 audit(1756586761.052:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.590474][ T29] audit: type=1326 audit(1756586761.052:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.614328][ T29] audit: type=1326 audit(1756586761.052:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1c0ebe9 code=0x7ffc0000 [ 78.645165][ T6663] loop2: detected capacity change from 0 to 764 [ 78.656728][ T15] ================================================================== [ 78.664983][ T15] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 78.672695][ T15] [ 78.675114][ T15] write to 0xffffc90001deb65c of 4 bytes by task 6663 on cpu 0: [ 78.682894][ T15] __bpf_get_stackid+0x77a/0x800 [ 78.687859][ T15] bpf_get_stackid+0xee/0x120 [ 78.692711][ T15] bpf_get_stackid_raw_tp+0xf6/0x120 [ 78.697987][ T15] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 78.703432][ T15] bpf_trace_run4+0x117/0x1d0 [ 78.708186][ T15] __traceiter_sched_switch+0x3c/0x60 [ 78.713587][ T15] __schedule+0xa17/0xb30 [ 78.718088][ T15] schedule+0x5f/0xd0 [ 78.722155][ T15] io_schedule+0x3f/0x60 [ 78.726391][ T15] bit_wait_io+0xc/0x60 [ 78.730652][ T15] __wait_on_bit+0x45/0xe0 [ 78.735057][ T15] out_of_line_wait_on_bit+0x8d/0xb0 [ 78.740317][ T15] __bread_gfp+0x1c6/0x250 [ 78.744822][ T15] isofs_fill_super+0x3dc/0x1270 [ 78.749849][ T15] get_tree_bdev_flags+0x291/0x300 [ 78.755410][ T15] get_tree_bdev+0x1f/0x30 [ 78.759910][ T15] isofs_get_tree+0x1c/0x30 [ 78.764746][ T15] vfs_get_tree+0x54/0x1d0 [ 78.769517][ T15] do_new_mount+0x207/0x5e0 [ 78.774268][ T15] path_mount+0x4a4/0xb20 [ 78.778870][ T15] __se_sys_mount+0x28f/0x2e0 [ 78.783908][ T15] __x64_sys_mount+0x67/0x80 [ 78.788694][ T15] x64_sys_call+0x2b4d/0x2ff0 [ 78.793456][ T15] do_syscall_64+0xd2/0x200 [ 78.798072][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.804253][ T15] [ 78.806564][ T15] read to 0xffffc90001deb65c of 4 bytes by task 15 on cpu 1: [ 78.814254][ T15] __bpf_get_stackid+0x33a/0x800 [ 78.819468][ T15] bpf_get_stackid+0xee/0x120 [ 78.824297][ T15] bpf_get_stackid_raw_tp+0xf6/0x120 [ 78.829684][ T15] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 78.835128][ T15] bpf_trace_run4+0x117/0x1d0 [ 78.840320][ T15] __traceiter_sched_switch+0x3c/0x60 [ 78.845978][ T15] __schedule+0xa17/0xb30 [ 78.850372][ T15] schedule+0x5f/0xd0 [ 78.854339][ T15] schedule_timeout+0xb7/0x170 [ 78.859106][ T15] rcu_gp_fqs_loop+0x2a5/0xbc0 [ 78.863849][ T15] rcu_gp_kthread+0x28/0x250 [ 78.868420][ T15] kthread+0x486/0x510 [ 78.872496][ T15] ret_from_fork+0xda/0x150 [ 78.876973][ T15] ret_from_fork_asm+0x1a/0x30 [ 78.881722][ T15] [ 78.884045][ T15] value changed: 0x0000000c -> 0x00000017 [ 78.890273][ T15] [ 78.892690][ T15] Reported by Kernel Concurrency Sanitizer on: [ 78.898920][ T15] CPU: 1 UID: 0 PID: 15 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.908531][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.918658][ T15] ================================================================== [ 78.932992][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.945806][ T6656] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.993701][ T6662] rock: directory entry would overflow storage [ 79.000103][ T6662] rock: sig=0x4f50, size=4, remaining=3 [ 79.006058][ T6662] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 79.034543][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.958513][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.