last executing test programs: 9.129157966s ago: executing program 0 (id=2935): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x14, 0x4, 0xef, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @private=0xa010100}]}, 0x2c}}, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010"], 0x30}}], 0x1, 0x4008804) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300)=@v1={0x1000000, [{0x4, 0x6}]}, 0xc, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x3c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000100)=0x8) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="1d02000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40044) 8.636017413s ago: executing program 0 (id=2941): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010"], 0x30}}], 0x1, 0x4008804) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300)=@v1={0x1000000, [{0x4, 0x6}]}, 0xc, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000100)=0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (fail_nth: 1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40044) 7.919924444s ago: executing program 0 (id=2945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) socketpair(0x29, 0x2, 0x81, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x948}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.637120509s ago: executing program 0 (id=2947): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000bf996a3bd7b60000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0), 0x4040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000b001b7a7bc7f130fac870000000000f7ffffffffff170100002020702500000000002020207b1af8ff00000000bf0100000000000000010000f8ffffffb702000000000000a503000000000000850000007000000095731082aad7fe0eb5778e70f943beb9761bb158"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='rxrpc_call_reset\x00', r3}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x13, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000008bfa100000000000007010000b8ffffffb702000000000000b703000000000000", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f00000000c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000040), &(0x7f0000000180)='%-010d \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$hiddev(0xffffffffffffffff, &(0x7f0000001240)=""/166, 0xa6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 7.56774662s ago: executing program 0 (id=2949): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/udp6\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0xff, 0x9, 0x1c, 0x0, 0x3ffffffc, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_address={0x3, 0x5, 0x2b, 0xc0, 0x0, @in={0x2, 0x4e22, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_ident={0x2, 0x0, 0x5, 0x0, 0x6}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd29, 0x3505}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb3, 0x8000, {0x6, 0x33, 0x7, 0x9, 0x0, 0x3892, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_key={0x4, 0x8, 0x98, 0x0, "a833e912b398a9fef8abf2c3be349a047f21a0"}, @sadb_ident={0x2, 0xb, 0x3, 0x0, 0x9}]}, 0xe0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a262d00883afefe60d15c764e26bb71000000000000aaff020000000000000000000000e21b0102009078000004fe620813313f6bff00ff010000040000000000000000000001000000000200000000000000000000013208000000000000000100071800000001040203000200000000000000a5dc000000000000050203ff010400000000c910fc010000000000000000000000000000c20f0ad7d2a1da00"/190], 0x0) 7.525903901s ago: executing program 0 (id=2950): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 2.112695926s ago: executing program 3 (id=3023): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) 1.996470628s ago: executing program 3 (id=3026): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.841984421s ago: executing program 3 (id=3032): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.740278433s ago: executing program 3 (id=3033): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = socket$tipc(0x1e, 0x5, 0x0) shutdown(r1, 0x0) syz_clone3(&(0x7f0000000640)={0x423b4500, &(0x7f0000000380), &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x38}, &(0x7f0000000480)=""/55, 0x37, &(0x7f0000000580)=""/157, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r3}}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r5, 0x0, r5, 0x0, 0x863, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x3, 0x5, 0x3, 0x0, 0xb, 0x1180, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xdd61, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x100000, 0x7, 0x4, 0x0, 0x10001, 0xd, 0xd80, 0x0, 0x7, 0x0, 0x8}, r4, 0xc, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r5, 0x0, 0xe, &(0x7f0000000500)=0x6132, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f00000017c0)="$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") 1.739772213s ago: executing program 2 (id=3034): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.686486514s ago: executing program 2 (id=3035): syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaa2aaaaaaaaa0700000000000000000000180000fe80000000000000000000000000002cf68000000000000000000000000000bb2f0100000000000004017f05020453c2040000000c000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x3d8}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYRESHEX=r4], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffeffd}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) futex(0x0, 0x8d, 0x1, &(0x7f0000000440), 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x8, r9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r10}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8}, 0x18) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600048036"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) 1.446436827s ago: executing program 1 (id=3038): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0xfffffffc, 0x81, &(0x7f0000000140)="1700130002000000", 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = syz_io_uring_setup(0x2812, &(0x7f00000002c0)={0x0, 0xfc91, 0x80, 0x3, 0x14}, &(0x7f0000000240), &(0x7f0000000340)) r3 = syz_io_uring_setup(0x7d72, &(0x7f0000000680)={0x0, 0x405e5, 0x400, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180), 0x1) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x1f3) close(r6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e7300fb5708e90000000000046f3db8bb02d86ab44ce65b4c27de6ba76b2d9e620ff9ee537516866d6000c17cf1a767147c079ce1a8a236285a9068c463d6cedffb8277c1940a2ad8fb4ba890339f1660c3d267a6579757a3a51912640addc1ebf69f3b2faf3736a4c6", @ANYRESHEX=r6, @ANYBLOB="2cebb9ed759002829b3c357766f61a730906e7106625d22e69a98cda16bad10fa9ecca4b6f3894990e4326d7535d83700ebde61ec041891ea13ead4bd73d842c04f458f7f0cafa0badc65111", @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x0) getuid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000500110006000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 1.369438058s ago: executing program 2 (id=3039): ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000140)="d0158e3a29f50f09dd7b3f6b86e2b1265ff22d33a2b62efa1aaa73c732ab0aa44e15df2367842d9b4d4dc47ba5f5a2167a5d8a805237ec8d5b9291eba1051e6d5e02b905380fda4c371a779e47b0fe52953311d0c4708a35158316655ef2b594abf23c2679032695830682a79160dc3b77abf258a248a76a496e31dc27f583a3703d5f438bffc35dbe45beff1c269c2c10891f5571c7f30a1d1361ae414350a36a94b4ea9c63b9aece566d681da7a6803b861af373d824bf") r0 = getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001e00)={0xffffffffffffffff}, 0x84800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4092}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000900)="358bfb21217ec91d10395fca4b8504d4955393b938c2b8d29e78ec659a376decd98dc23ed434692a95b64128bec1fd950fce1adc82dd67b162ee32b56777e9d553a946cb715e8d281c2cc9299516c75ad01d8e9299ce3f995b040bf09980fb1c4da564b9fb7d248929747b8545afffd12e1fb4ab779febcfb5", 0x79}, {&(0x7f0000000bc0)="16208412ab98a03bfae0ee449d7f0aa7febb41290b11bef8c873010d76bc1aef57a1dfb88f69165d9aa005f95ecedf9ba7b5e00d532d9777988cc2bd9a789532eafa71ff911b53bb2cde29295528bff920d9304eb49c0aeec741236a44db3547a66887e092d9934dba56706afc406bda52e5700cf46009186a20b24a0da814272b5b4f9077499e0f6430e4ba2dac04da95aba4655407e99ba04cfc3aee5f012cc0139b15bd565efbecee17a12cf40ff0eb3d662bd20b2707f0128ee63608db06cadee661a6a627cc78f7ddc7315f6660de41e587b26396c6c22274d48ccd4a9ed8557f174d287492164f395beeef40c8b87499078fc051684b9b9bec2b724f19e455062f6322142337dd5dbebdc458f950a458ca37fcfa2dddd33a286a1509526a211a24bc7bae9a18383afb9e10a83c3e470f982fcedb1d4c71d1e2b657e07c1918dfc4d338d1e6f74ea8664e077257bc7db608a29441725b57f79a0aa3623c1cdd0b43bca0d4eaafcc5edb46be44a0d5d616f4b27b93b21f4bd13d2b8d55e088d0af118765f17c5f68a1d2c2ef47d729ac59ad9e41da48d833c26104e8dca5aad8822179d94da0e3c45e1d074eddd065b7ad6635604579fb9abd8f3ce4197ed33ec389dd8545a3df981d83cb4d5d0752ae314e7842a0b75794ea4eec19dd9060fcba1b12ad85b7448b40850eec979623dd2a146be0e2ad55ce22d7d4da55db002561739451fe259db5c630a36d9a0ddbe2eb15fe7efe96019e8fc0adf079c0703a7aac747ec86b8c6bfc5755343e9e69317ceb414a0d476858d19600aa0042bc3a635d3d9488d79a71fafa5631dd262c19e90de388e44886e21d5d8001be8978409061a042cf3c53499c941a144b61f75d0617547a989d5db0dad59761ad9b41b48fa55dc9d92e5224442f0c0b29fd9569dd023f1edc8a0822253b4b572232d19aaceac9f2fd0626015c1789c4e1fc7edb2637be84c715e1072ea3f83d958439ed973f3fc9adffd06b05b9cfa8bf6c64444ab8eae79eb0c392e22b2bdf748863a23ea897175105e83c4e18fbf0f3723c04620f23fc49250441c52ee50f1858a9bef3e76acadccf9b6c704ecce3cb41196651337fbc58ef372c9bfc397e7365ecc14391bc264b778ede65c0201351580156c12d100a458a8d013f8824a0d217f4e949c914b5dd2496a1b4c0864173b9b75641f21d8efdd372355e266ca54bc17c32494d2ff8ab1b25e3a1db22d9fa0f2ed00bc85e9a70ad0f8d7206a92367b5831281c3920215b1d598ac79e5409dece3514dbf7439e6259f2306fb86ec884315742db13b1004d4d8b0897442beafdfb087a24e7e0a64585d1e9c66baec00fdd98a1ee2d7936e76e140e275613ddd6a5b4fe14abbd37bcc4aa1a931462588473c1356d21ddb63fd186564a41a72b69e34bc4fddea725f2a38aa9d5200d8969e4bbf26dbe9709c2cea635ecd7dc2df7e1056242947b044d86a58fbad32e5629e7fddf02fb9c45f388755af674a9686c6141d10bbd35cdda20c782c51d9fda4b154bc71d4db95c28a15ce864d75bc36f5f51ffeb4aaf66232f2b979889adc1c73df18c9d6441cb49b893966019407b326a3674848cb2e8facb9b4a44ecc9b996b49a97d80472606fc180ce4c83ae8c2d0e6fffdc20e9f4a7e0aa72ead23e682592747ae8a53fc1080979a1d5d2c6413b45cff8211391f598ab6f60e09750147282040e943914e46b7a2f9b2b77b064ef85be0a1725d7030cb27bb1579d60fd91f1feaf53f139402cdf18fd0b53c70221eb01a1595f0fa666c203ea0b0fc3da48838e0a618d0e778862b94c12717e1d4157971f6e55fb1857e341906570a1247196ba79664f2f5af14436f11cb55f151c6e3ca95da16577423ca6980da47be1fe96853c6a8d22561c5de5a902842cd70e1b6b6cc95d124bbc7cbdbfc6b5c8d15dfb4e806687e86c5fe9f6307456c661d35d9304c49929c0bebc72535a080086d9fe7e7f9046e17a51d8a1e75c4621df39bc20bd68e8b8cb193fd579509690dffb7b92fc91278ebc3e120be67b4ee969f39af683acc1951d083b6f5c18a0277258fe7a64cb109e53a7e6e58d230e2701076f82b0947de01fb564515005cdae2bbd10adca3337472220664d434faba73fcbd706ca96978f9baa1f1f88a57a2c5b33893decc50a6f5cf3e1da9b2e36eac1c540fdb2f25223440d6a4c8fa7c1417dfae9f9754cd78ce2767be168e6794e87ca2684df251386dc2fab5eda158f0de398ed9399cb3b67a558d882f0e9b4dfe5d54a6b730b11a324f99707cad9100d86bbba0dd92b5056d51a52a2aa8792e3c0b2536d9114e18c25e2f579b103a2ace049d12ca60050df2d59341768c7f3707ce81bdf8a2cd604bb9b196b7704ec107cf475734e0b2234e17c66184a40ac69f02f5d6b7e47308db1eb69a994702900a097e52793f7ee8cdec59bc1df75591b69ec9f72fee18df9892f33312a79ecc7cdc5a1f76ac506ee4fd13632add3b449db3a2d1089fb1d3bef02cad928158e03dcd23041ef7fd66897a523c0e55b7bbb579103815ef0670ff8085342cb228e4b6d43c95f81fc07369ece2d0567f7682620f3a8e410ab13ea89a4f22d49065776e079c8c5d8c05e63b3bb38986a2dec812fdeaa9efce8cae1ce775cb29df0ad9f18695344dd0019893b87b2e32a4c473d5eee42c96c2f2668bec85bf3081b38c765577cdcc3e0343c8d7a29f6866662c7c95e867a8a5775d82169ffdc151d33e56f137d483a075f2c211980c26e0b31b31e886fe23c9b1d7de15e3a25ef00198db7fb7dddd2063f9cedabd1aa1deb468ae3fe3af9ec3d21bf4b9b37ef2bd775dfe5586b0f0335d2f85b61d12a8d609bcbf179e66f60437dd1f78fb6af833464844546cd29a1a189d979f10eb154770ee7f777d8c3eeb114e370c3147fd99582fe14560b684c7f9ebaa7eefde075d9599f52ccd689e40fdc16ec031f8d1b35a583e341a1732757f2460affe2357ce4bd9732b770936c705ffa1dd2cac14dd45a37c4b90c8754075827d5b051e7e0d4eb7f64695716372f335d9695d4429afb8db52838d7c81643ac08ef2ab9c4e98169b0918bdc4bf1e777106c28d8f40c15644650b6f21035b5bf1b20f9fcf0b5d9ed19baa97ee0535baa7425c8215bab7e18c87ec886390d9ce1f2884400d4ad81f3da401b590ef2b392658fe31582adc09836d4b52ae0fa3d1c4f088fa2a0b71f57e2c80127e53bd93a8e9374cd583f798108b076fd247a82885f4e6d9800f02fae64b392b24b60d23f4bb4e3aa93317d87af8fec9f7cbbcd3df3a91c94f3f532b0ecdab3c90a59da7927e9eb20185a5291276504c4414efaee1bf82235bd50cf7f80be00623b7e4483e148d5d91a5afaf88a6962f9600332e8e7af3193b01cc99fb1d8c83a5b77cb07402038f31d1a7f1048b32dc8e9024e65c21bb3ab4c49f321beb8d12cf8632a2e35bde147f2db30f85a3a5a51b50c504b2acba4c13321e8a684150b55ef0900a78d928dbc8ae1636905731dfe4bf06cd4e60bd8ab4b97e2ab67a6c191e258240590cae43708ffe6495921bce82cff36f02fdfb9d9abe9008851955b3fa53860053da8f85bc7bdfaf4b706354961fc8b056ba824473b53613c9f91206939cf97f079bd7883871109bd565031608451a07f1ce7968db88e87f86badcad67ba9dd7c898ee10bb0db7b12a63535b2cc302cd2c489bb15ad88e62e92a15b642484cccce59bbed1b8f1c553b4d78b3a13ed082e0de257972d8159e2eff24226e811281669bac3b17d45afb7a417e42086db1675bf3f1e1978e6740e731599b7bcf8ee5551c52b30b671ef8704f05a544440556039259026c4e788c83b01bafdbe355c5a58fd86661f178c106b4d1182a9f651287d3de4759d5fdcd2cd6eda24357b23ba7b7bd01b463725a7d3a08e89b826043ce4cb84b9109a6996dad50df8da0466475c48a8ade5b14d56e918877b656af78b363795e901a19b04bf6075259ccda70f2b23c98fe2b97c29ab68175966c6a19a88bdbe5d311904d3fd61b9306347f4060f0ffd193b8916bedd20d8abd0b8b62c75093181b2c0236ddaa76d2afea57abb76495703452709feef199e8feeb70d1c1b4333bfc1e8903a175789d6aaf61c43d2e18cfad89b090962dc81bee2a55f1bcf764fb7a6bff68c8257d0ee7a61443e5f9a5f3663cb77ab6387d9db06a7d70a5d73fad89185e16045156285c298d436b90efeaa71bfd003319e0b1af0e12e43f99a913682d8a73df933777d0a74fda158b630f1900c701595fb37c33673d0f5d63f271c554968d450a4cd76fcd25449eac61387845192b3d13526c2f52a5f9112f119ebdfde67d16be46e76747602851db3e420da751a9087cd5ec11609928d0b03df1517c554d3c06d09f9b19adc42556cf4b75d17525e05aa49d63f9a3813e5b8d999023c01784428507de440cdf3c57d65094fadc4ea641ff0df1779aad6539a808266b653a9800f72d84f76a786c993c6cac0cb95e68a48b81e384b65392b696f4579509364b72db30d68b021e89aa071f09311c29cc1c81aad1ea73418b81ab00ccf59fa1a4cceec0e5fc374bca60c55b3ca66d9a647c05f7662cab6d21900a61c3bdb92cff573c4e33c2907880ecd4c1e8c22804b55dd53fe5810eaacd076cfa9e8041af33b2fb2e4bc24d932bb017fdd8e44c06dd4ab0911b752428d6f8aecd86f0d19cdc58c22e5085174b89e996728f35bfed31e8d77186cc5ae8fb2f2298180a747d80f61f1943c39c41e08db2f155c4d7d38844ef6c22fc5d7c11dda161551c6be3d33139323daa5d1846c9e66cf5a4f92fa80db93c5e8dbcbf42b6b6676aadab2744ad9359d9cbe88c60a2d2a733bd2d00f11a768e9aef101303487f0f7d3d5af835843892b562c51743918829ace800f60958fd983b62edc96e1dc3224c0b67fad342ee309429952aa520f2df523d958d923eb4ecab56cef900fd9bc179c6a90e0fdc1a6fa6c8f0e99c3960b7eb734e505ac8732a7988b34c6fe4e74e2ce72af12a326bbde6f9c5f4a473fad33755faf8e7b04fab99c932f26b6b5ea01536fb505833730cbba9b890b9c6e256e884f105b6bd09723c626a57e433fdfea01aa99e806960a818d6a76f745f3f3c98e00ccedd3373528181d2f9a4d2ff7845eb511cded41c5e394740fb2872161aa76e48a8f7269e6985e2a36e485867a469dc220feeeef42183bfb60d9b81f8c30ebb57b4a31a9aa5b973f4b83c9d942324890b6a06c2ba11a747b33569d393f5e1f3633b53da219b8b58e40373d12b184d6dff85388e60dbdc48412a21456d571d29590d3bd250e0a82ed7fb644e29184bb7772d8e896b38e416ce3b933c6a48ce332412b39b5dfdf45d1b83a0322db74cf4aa99c335f84ab67ba63df77604f07f4911f70eacdc3da8593a51764f73c7c8d6f79fc4d67135a8d115fc5230c69b4783d15fcd5d2ad9396616da20c328a514a2b1f15cf30b3d34ccdaea43b8f4e6c1c91f5efb56a9452a27807476e159ddbcda8f3f80d962be15ce15fea9bbcfd75c91f22e678e6638d45e7016f3d73f9c0b780b2400b954eeef9c2e2c58decbf7d928ca53f8c6607beddda8b13dbe1911ce8339d8abc233de6955b4d446ee8feae8fb5c93aff62edc0e04c3c5130b35e9114cd7366c8d0c5f45e8712bcd5a3d20bd469ca793f2cbbf69990884e1d7acd805c8509dbbcf2b2aab90bb379d36f55cd579b7694804170527f429d283124ce885282b5a96eb2d1260b9745f15285cda9f4debb3f2c1cd34", 0x1000}], 0x2, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r4, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}], 0xa8, 0x90}, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=0x30, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/233, 0xe9}], 0x2, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}, {&(0x7f0000000980)="4aa847723404c10ea3ca6c379dffb5c50e1b4fbb311224734d910a11ef973be59fff61922bb2ab6b3c2d9b3de209ff7e203d2388f468427d96b092e109ceb8df5e24526a2b620b8519248614926c8261e8589b820ffba4a2516f52e4abd78f499af9e63acff73a8bca030ce4ce8a86879dcdcd3c5594cbd8060f4f63b914e5b9910d8a3acf3b07d7589a543c6e9e65a4afe0fd901fce07bdee19984e44d98fffb46e8933a7b954e687c8f4", 0xab}, {&(0x7f0000000a40)="e0741195598bc3622fe6b0c7010dd3c09ec3c1e81874439db105ef76e1bf84a3853829d19a33ec1828edf841dce0f176be14adeca273037eef373c08d644e6f978c510ae4a292407d35ba206705af54316cc183a7e", 0x55}, {&(0x7f0000000ac0)="db4a2d2eb9d6fa63bdfce64f5ba56b767a7d46590baaeeb20276879957bcfe0e4ffee83f98547d3f2e086a72513b1efbd4fd34b2fcf5227fb2eba6454264eaebfe974cecbd30abdbc0b726a6ed4e453d16fa8a53c95d4c48239d0ef80968e34a954e197cb34e2ef3250cbf6bac91751004ce29f47a9c845c0a2e", 0x7a}], 0x6) 1.321292099s ago: executing program 3 (id=3040): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x122261, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}, {@data_err_ignore}], [], 0x3d}, 0x1, 0x534, &(0x7f0000000200)="$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") bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0xc, 0x6, 0x9, 0x6, 0x0, 0x3, 0xb800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x4, 0xff}, 0x14001, 0xff, 0x8f61, 0x1, 0x5, 0x4, 0x2964, 0x0, 0x200}, 0xffffffffffffffff, 0xd, r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) unshare(0x280) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x38, 0x8, 0x0, 0x0, 0x0, 0xb1f, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f09000000800000121f", 0x2e}], 0x1}, 0x20040050) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.24838402s ago: executing program 1 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x40000) 1.211339101s ago: executing program 1 (id=3043): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x762e, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0xf5}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r4, 0x351c, 0xaddf, 0xa, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x2018, 0x2a, 0x200, 0x70bd25, 0x0, {0xa}, [@generic="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", @typed={0x1004, 0xc2, 0x0, 0x0, @binary="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"}]}, 0x2018}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000002000000000000000fcffffff180100002020752500000000080000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000000f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8, 0x0, 0x40000000000000}, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r10 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@cruft}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@dmode={'dmode', 0x3d, 0x10}}, {@check_strict}]}, 0x1, 0x510, &(0x7f0000000580)="$eJzs3WFv09YawPHHpdXtzb1CV3cTQlWBQ2FSkUpwHAiKeOU5J+kBx45sB7WvUEVbVJHCRJm09s3EG7ZJ24fg7T7EvhHaR9hkO4GUtnFpS8LQ/xfBObEf+zxOIz9yEtsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE8hq2XbHEN0F3RR3Na0Rhe8T8wfpu7GtGjCtipf9kdlYu5pMufv1+9oX0vwWZz5/Ny2zazMrefy78795X01OD5UckNBY7u3tP13q9jReTTmRCWjowcWjabksrE4eqXqvZt5absWoaX8ercaLbyou0m4SRWvRuqEq9XlW6vBp2g1bD9fVg4t2bjm3X1P1yR7tRHAa37pdjb9n4vglaWUw6O425m74RH5hEJdptK7W51duoFiWZBlWOE+QUBTm241QqjlOp3anfuWvb0wcm2B+QAxGTf9Niss54Dw6c3FS//osvRgLpyoqoQx+eNCSSUNpHzO8b1P9vbumR4w7X/0GVv/h+9pxk9f9y/uzyUfX/iFzG99iRXdmTp7ImPenJhryYeEbjfbRESyBGYgnFSFvcbIrqT1FSl5rUxJZHsixNiUVJU4z4oiWWVYklEZ29ozyJRIsriYQSiZJF8eSGKKlIXepSFSVayrIqoXQlkJY0xM3Wsilb2eteHZHju6DKcYKcEUHUf5ze2e/EgRP6a1D/C82MIRsAAAAAAPApWNmn71Z2fH8p6zWNr+1JpwUAAAAAAM5Q9s3/fNpk3+9fEovjfwAAAAAAvjRWdo6dJSIluZL3BmdCHedDgOkxpAgAAAAAAE4p+/7/ctqU0t4VsT7q+B8AAAAAAPwD/Fx4jf248y/rjz8limasV52V69a2m8a52+fy5c59uMakOWed768ka2rT/Weenrf+mwe9uwjm236zWZSHdQYJyK9yNY+5up6364M5+SilpvF12Qv9exVx3fNTiV5Jvn+29YNkm/9L0D5vyeZWb6P8+HlvPcvlVbqWV9v9CygeuI7iiFxeZtdbyM65OHSLZ7ITMfrjlvJx7eHtn8oXn/qIMV/LQh6zUMrb0v7tn03HrJSP2vp+FpVTbvlruZbHXFu8ljeHZOEUZeEMZ3Gi1+IYWVSLsqieMgsAmJTNgipkHSz8J9jLjae6v5bFPGZxLtuxTs8dske3i/bo9imr2+8H7oF0VI1Nx/3tg6r6Jl3gzZHjxr5jpS/huZfb38mFnd29m1vba082nmw8c5xqzb5t23ccmck2o99QewAAhyi+x05hhHW74Kj6//lPCn4UKctjeS49WZel7GyD7BcHh661NPQzhKWCo9bS0B1elgqO6kpDN3o5fmx1DH8JAADGZ6GgDh+n/i8VHHfvr+Wjj46HazkAAPg0dPTWKiU/WVFkOo8q9XrFTZa1ikLvgYpMo6WVCRIdectu0NKqE4VJ6IV+2nloGjpWcbfTCaNENcNIdcLYrGR3flf9W7/Huu0GifHijq/dWCsvDBLXS1TDxJ7qdL/1Tbyso2zhuKM90zSem5gwUHHYjTxdVirWeijQNHSQmKZJu4HqRKbtRqvqYeh321o1dOxFppOE+QoHY5mgGUbtbLXlSb/YAAB8JnZ2956u9XobL4Y7/z4w5VSdSW8jAADYjyoNAAAAAAAAAAAAAAAAAAAAAMDn78xO8htX5+b1zyINOnS+7M6k90wAPrW/AwAA///sJFTd") newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x800) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000002080)={0xc, {"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", 0x4a}}, 0x1006) statx(r10, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x20, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x404, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_L}, {@directio}, {@version_u}, {@version_L}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@measure}, {@euid_gt={'euid>', r13}}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r7}, 0x18) r14 = socket$nl_generic(0x10, 0x3, 0x10) read(r8, &(0x7f00000000c0)=""/46, 0x2e) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r15, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.021543604s ago: executing program 2 (id=3045): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x87d, 0x87d, 0x0) 930.685495ms ago: executing program 1 (id=3046): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x810, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) (fail_nth: 13) 925.166646ms ago: executing program 3 (id=3047): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x3, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), 0x0, 0x4, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xf3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x5, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x3, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x6, 0x4, 0xb}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x7, "a081"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf3, 0xfa, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x81, 0x1a, 0x2, "970c95ef"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x7, 0x8, "da5a75"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x35c, 0x7ff, 0x2, "97c2fb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe, 0x3, 0x9, 0x8, "65db89", "e1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x1df, 0x1c, 0xa, 0xc, {0x7, 0x25, 0x1, 0x82, 0x79, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8001, 0x886, 0x7f, "0e0ee55de5fe2e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9, "352edc8d5a317a3c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe4, 0x4, 0xcf, 0x74, "d178", "a4fb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0x84, 0x6, 0x100}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x10, 0x2, 0x80, 0x8, 0x1}, 0x122, &(0x7f0000001240)=ANY=[@ANYBLOB="050f2201050b10010442000710c50620f6100a68c9437c5a4b4e553eedc8f4a9a6dd65215c67eaa9d102f2828d19b0f9a7f028dd671e6aadac26b6aa8dab48cba1c507462e04890515009d4535c5023b7513ea1631de771c59561e524aba120d6aabcaa8effbef61d94dda26146c6edb7dd0e23265b31055cd680a5f9daf38cf9d60464e1379e2be7680370ca8ed5c80b05e0000000000000081b3c740e16c90f5ab7e91082bf2e6a84acaeb5c836acff145a86b2aa7dd611835a25b5c9b57ebd4f24bf373b93cdc6763e9093b9eed50ea12d7f2016216a45ed642be28238c5d583058e53cdd5122eeb19c1a69cfca1784fad72c0f6865c4ec990b10010c000008010500040a100302040008010010071002659259dc09d6461aa2d837a7a348e353a3c3175f95812f8e26fcb723450534267622716c32c5912dfb0f0b7d7471fd56946e7d308555f4dc744c1606a4d8ee8c2877cc61e69f58ffa51b66359a2358213df0b23b0112d1563871504ab7b69ef1cf8a383099ac95601c879e1c23cc5ada9a4b5400003f7467a8bec5b1f905"], 0x1, [{0x96, &(0x7f0000000480)=@string={0x96, 0x3, "132a010886f15bc1e0c402225cae7615363e6f9cb2d23fa7c48fde664acc29a1d312bb7143e35485681791418c7e4b86a1e5084ce94213814def34a40c7e3fc2615287eda4d365363be64cd4b30d0701b1f0fc131aa68003dfed1e2fff6484c60551d59895de79a679b7b5e50c17fcd9451662172f7d30bbe2633d54da5d1205cea9120ac92b45722030471ece7e29a86a42b760"}}]}) syz_usb_control_io(r1, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)={0x20, 0x62312affb84fffa5, 0xed, {0xed, 0x30, "79854af083fd63263600676f9e89c9a7650197627cf5ac7a96050867edf6feb8ddde237a6389d0f69a5a3dd21dda92d5c319a525e68d705df8cf60d77ae9752f2133c078d9b46dfbcaf88561c8f3f22ff5fe7f3d7da56d2137a1508eb5a0bc7d5a795a9ee9c70b63c5de9c8ca877de46e512448e2d374545a639df2f2c8af619cdcb2f3f76d07f393418d92e8c26885a991f5a3c77f277c9c3706a54efc0a8039ac24f55c56dc6eb589ced42199bfb3d22c2e79d2338df290c566a38f9cbbef1fa89daca0c73c1f5b2afe56f608d13e89332b5ef4a618d566b2f7f39dcce6b1a32dbb421ac267eae68898a"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa1, 0x0, 0xb1, 0x3, "7e2b51a8", "cbf25bae"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x8, 0xa, 0x5, 0x4d1, 0x6}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x0, 0xc, 0x4f, "c180e681fdf2e4b83f473d7711a7573d7095e6f6e5b3891f545d7af8576a8c0dd2e6243b81cea908c035844291953e00c91b4e20151f653ef92b3151e3dfecbfe73d1954a1c3007778d4e742d23121"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x160, 0x10}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "a429"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @local}, &(0x7f0000001040)={0x40, 0x19, 0x2, "bf3f"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0xd9}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0xec}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000b081000418e01400004fcff", 0x58}], 0x1) 612.38237ms ago: executing program 1 (id=3049): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socket$phonet_pipe(0x23, 0x5, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x37, 0xe701, 0x100000000}}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x9, 0xff, 0x8, 0xff75, 0x10, 0x6, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x18000000, 0x6, 0x8, 0x7}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0x7}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 564.008991ms ago: executing program 1 (id=3050): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x11380, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xe, 0xaea}, 0x14115, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='!pu<-0\t\t\t') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_clone3(&(0x7f00000007c0)={0x44000000, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)=0x0, {0x17}, &(0x7f0000000400)=""/242, 0xf2, &(0x7f0000000700)=""/172, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) r7 = getpid() syz_pidfd_open(r7, 0x0) r8 = getpgid(0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000001700)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) r11 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r12 = gettid() tkill(r12, 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000840)=0x0) r14 = getpid() r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000900)={0x4c000000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000001c0), {0x7}, &(0x7f0000000200)=""/62, 0x3e, &(0x7f0000000240)=""/100, &(0x7f0000000880)=[r6, r7, r8, r9, r10, r11, r12, r13, r14], 0x9, {r15}}, 0x58) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 549.420631ms ago: executing program 2 (id=3051): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 384.354334ms ago: executing program 4 (id=3052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'gre0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1}}}}) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000200)=0x6e, 0x80000) recvmsg$unix(r6, &(0x7f0000000640)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000740)=""/7, 0x1}, {&(0x7f0000000400)=""/250, 0xfa}], 0x2, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x12102) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'gretap0\x00', r5, 0x40, 0x1, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @empty}}}}) 303.033666ms ago: executing program 4 (id=3053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 237.432486ms ago: executing program 4 (id=3054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6793, 0x13}, 0x0, 0x5, 0x800, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 205.063907ms ago: executing program 4 (id=3055): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) 124.115248ms ago: executing program 4 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000079a8c398282ed39a314e4d0e1dee81a27a07cc269afc3f8b5eb280e56224b6c664c84f727b3a803f7899b0601c1a1d8b406e2886c345218bc17da5cb0ed3ad17988be71a5ff8cb3e994cc2f63754fd934215c0464067b3b03857cc9b7f8e9de13fe7376"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r5, 0x7, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3, 0x2}}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0xffc9) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x161a02, 0x0) pwrite64(r9, &(0x7f0000000180)="f900f9e1", 0x4, 0x0) close(r0) 492.65µs ago: executing program 4 (id=3057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 0s ago: executing program 2 (id=3058): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) kernel console output (not intermixed with test programs): g bearer [ 165.633519][T11381] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.650596][T11392] loop3: detected capacity change from 0 to 512 [ 165.662978][T11381] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2561: corrupted inode contents [ 165.666987][T11392] ext4: Unknown parameter '.IPC' [ 165.686524][T11381] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2561: mark_inode_dirty error [ 165.706447][T11391] tipc: Resetting bearer [ 165.717309][T11381] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2561: corrupted inode contents [ 165.729970][T11391] tipc: Disabling bearer [ 165.851485][T11429] FAULT_INJECTION: forcing a failure. [ 165.851485][T11429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.865554][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.1.2574 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 165.865592][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.865664][T11429] Call Trace: [ 165.865672][T11429] [ 165.865683][T11429] __dump_stack+0x1d/0x30 [ 165.865710][T11429] dump_stack_lvl+0xe8/0x140 [ 165.865735][T11429] dump_stack+0x15/0x1b [ 165.865756][T11429] should_fail_ex+0x265/0x280 [ 165.865796][T11429] should_fail_alloc_page+0xf2/0x100 [ 165.865841][T11429] __alloc_frozen_pages_noprof+0xff/0x360 [ 165.865997][T11429] alloc_pages_mpol+0xb3/0x250 [ 165.866038][T11429] vma_alloc_folio_noprof+0x1aa/0x300 [ 165.866110][T11429] do_wp_page+0x673/0x2400 [ 165.866132][T11429] ? __rcu_read_lock+0x37/0x50 [ 165.866155][T11429] handle_mm_fault+0x77d/0x2be0 [ 165.866209][T11429] ? mas_walk+0xf2/0x120 [ 165.866302][T11429] do_user_addr_fault+0x636/0x1090 [ 165.866420][T11429] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 165.866488][T11429] exc_page_fault+0x62/0xa0 [ 165.866545][T11429] asm_exc_page_fault+0x26/0x30 [ 165.866571][T11429] RIP: 0033:0x7f03b81f0d50 [ 165.866613][T11429] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 165.866630][T11429] RSP: 002b:00007f03b698e4a0 EFLAGS: 00010282 [ 165.866645][T11429] RAX: 0000000000004200 RBX: 00007f03b698e540 RCX: 0000000000000101 [ 165.866660][T11429] RDX: 0000000000000fff RSI: 0000000000004000 RDI: 00007f03b698e5e0 [ 165.866675][T11429] RBP: 0000000000000102 R08: 00007f03ae56f000 R09: 00000000000000f8 [ 165.866689][T11429] R10: 0000200000002442 R11: 00000000000011b4 R12: 0000000000003001 [ 165.866704][T11429] R13: 00007f03b83cc860 R14: 000000000000001b R15: 00007f03b698e5e0 [ 165.866808][T11429] [ 165.866820][T11429] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 165.973144][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.068139][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.348593][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.506891][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 166.651843][T11459] syzkaller0: entered promiscuous mode [ 166.657977][T11459] syzkaller0: entered allmulticast mode [ 166.758232][T11467] hub 9-0:1.0: USB hub found [ 166.766331][T11467] hub 9-0:1.0: 8 ports detected [ 166.800101][T11475] loop3: detected capacity change from 0 to 512 [ 166.816300][T11475] ext4: Bad value for 'barrier' [ 166.826748][T11477] tipc: Enabled bearer , priority 0 [ 166.827825][T11467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 166.843220][T11477] syzkaller0: entered promiscuous mode [ 166.848799][T11477] syzkaller0: entered allmulticast mode [ 166.862093][T11477] tipc: Resetting bearer [ 166.871194][T11477] loop2: detected capacity change from 0 to 512 [ 166.878556][T11477] ext4: Unknown parameter '.IPC' [ 166.885985][T11477] netlink: 28 bytes leftover after parsing attributes in process `'. [ 166.896704][T11476] tipc: Resetting bearer [ 166.904100][T11482] siw: device registration error -23 [ 166.910838][T11476] tipc: Disabling bearer [ 166.917056][T11482] FAULT_INJECTION: forcing a failure. [ 166.917056][T11482] name failslab, interval 1, probability 0, space 0, times 0 [ 166.929878][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.3.2588 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 166.929909][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.929923][T11482] Call Trace: [ 166.929942][T11482] [ 166.929951][T11482] __dump_stack+0x1d/0x30 [ 166.929976][T11482] dump_stack_lvl+0xe8/0x140 [ 166.930074][T11482] dump_stack+0x15/0x1b [ 166.930094][T11482] should_fail_ex+0x265/0x280 [ 166.930133][T11482] should_failslab+0x8c/0xb0 [ 166.930231][T11482] kmem_cache_alloc_node_noprof+0x57/0x320 [ 166.930260][T11482] ? __alloc_skb+0x101/0x320 [ 166.930296][T11482] __alloc_skb+0x101/0x320 [ 166.930339][T11482] netlink_ack+0xfd/0x500 [ 166.930372][T11482] ? __pfx_nldev_newlink+0x10/0x10 [ 166.930447][T11482] rdma_nl_rcv+0x284/0x5a0 [ 166.930485][T11482] ? selinux_nlmsg_lookup+0x99/0x890 [ 166.930583][T11482] netlink_unicast+0x5a8/0x680 [ 166.930613][T11482] netlink_sendmsg+0x58b/0x6b0 [ 166.930633][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.930655][T11482] __sock_sendmsg+0x145/0x180 [ 166.930841][T11482] ____sys_sendmsg+0x31e/0x4e0 [ 166.930989][T11482] ___sys_sendmsg+0x17b/0x1d0 [ 166.931084][T11482] __x64_sys_sendmsg+0xd4/0x160 [ 166.931132][T11482] x64_sys_call+0x2999/0x2fb0 [ 166.931160][T11482] do_syscall_64+0xd2/0x200 [ 166.931238][T11482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.931271][T11482] ? clear_bhb_loop+0x40/0x90 [ 166.931305][T11482] ? clear_bhb_loop+0x40/0x90 [ 166.931336][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.931357][T11482] RIP: 0033:0x7f3a168ce9a9 [ 166.931372][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.931389][T11482] RSP: 002b:00007f3a14f0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.931459][T11482] RAX: ffffffffffffffda RBX: 00007f3a16af6080 RCX: 00007f3a168ce9a9 [ 166.931471][T11482] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 166.931484][T11482] RBP: 00007f3a14f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.931500][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.931563][T11482] R13: 0000000000000000 R14: 00007f3a16af6080 R15: 00007ffd27a12e98 [ 166.931588][T11482] [ 167.168978][T11485] random: crng reseeded on system resumption [ 167.191767][T11488] serio: Serial port ttyS3 [ 167.225560][T11481] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.241229][T11490] loop2: detected capacity change from 0 to 512 [ 167.248630][T11490] EXT4-fs: inline encryption not supported [ 167.254575][T11490] EXT4-fs: dax option not supported [ 167.306893][T11497] tipc: Enabled bearer , priority 0 [ 167.313938][T11497] syzkaller0: entered promiscuous mode [ 167.320205][T11497] syzkaller0: entered allmulticast mode [ 167.338844][T11497] tipc: Resetting bearer [ 167.351319][T11496] tipc: Resetting bearer [ 167.367890][T11496] tipc: Disabling bearer [ 167.371714][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2599'. [ 167.398150][T11501] tipc: Enabling of bearer rejected, already enabled [ 167.408727][T11503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.422062][T11503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.432817][T11503] bridge0: port 3(batadv0) entered disabled state [ 167.432908][T11505] netlink: 'syz.3.2599': attribute type 21 has an invalid length. [ 167.492136][T11509] loop3: detected capacity change from 0 to 512 [ 167.517754][T11511] loop2: detected capacity change from 0 to 1024 [ 167.526801][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2602'. [ 167.541101][T11509] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 167.551958][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.552180][T11511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.560116][T11509] System zones: 0-2, 18-18, 34-35 [ 167.582842][T11513] bridge_slave_0 (unregistering): left allmulticast mode [ 167.590167][T11513] bridge_slave_0 (unregistering): left promiscuous mode [ 167.597255][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.597416][T11511] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.631343][T11509] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #4: comm syz.3.2599: iget: bad i_size value: 5910974510929920 [ 167.646019][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.657694][T11509] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.2599: Bad quota inode: 4, type: 1 [ 167.673804][T11519] usb usb1: check_ctrlrecip: process 11519 (syz.1.2603) requesting ep 01 but needs 81 [ 167.683807][T11519] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 167.691606][T11509] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.715609][T11509] EXT4-fs (loop3): mount failed [ 167.751049][T11503] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2599'. [ 167.771245][T11523] loop2: detected capacity change from 0 to 2048 [ 167.794893][T11527] loop4: detected capacity change from 0 to 512 [ 167.805648][T11527] EXT4-fs: inline encryption not supported [ 167.811648][T11527] EXT4-fs: dax option not supported [ 167.813432][T11523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.877474][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.928972][T11546] ref_ctr_offset mismatch. inode: 0xbf3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 167.947482][T11547] netlink: 'syz.3.2608': attribute type 9 has an invalid length. [ 168.367019][T11581] netlink: 2 bytes leftover after parsing attributes in process `,&#^%'. [ 168.381271][T11581] loop2: detected capacity change from 0 to 512 [ 168.416001][T11581] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 168.434595][T11581] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.449342][T11581] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.479851][T11581] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 168.488971][T11581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ,&#^%: bg 0: block 40: padding at end of block bitmap is not set [ 168.504175][T11581] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 168.514894][T11581] EXT4-fs (loop2): 1 truncate cleaned up [ 168.521601][T11581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.766897][T11599] loop3: detected capacity change from 0 to 512 [ 168.775822][T11599] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 168.786084][T11599] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2627: iget: bogus i_mode (5) [ 168.798004][T11599] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2627: couldn't read orphan inode 15 (err -117) [ 168.811212][T11599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.823841][T11599] ext2 filesystem being mounted at /501/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.958242][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 168.969104][T11605] batman_adv: batadv0: Removing interface: macsec0 [ 169.055006][T11608] 9pnet_fd: Insufficient options for proto=fd [ 169.141747][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.182757][T11619] loop2: detected capacity change from 0 to 512 [ 169.197805][T11619] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.212942][T11619] EXT4-fs (loop2): mount failed [ 169.240145][T11627] netlink: 'syz.4.2638': attribute type 9 has an invalid length. [ 169.248815][T11627] netlink: 'syz.4.2638': attribute type 9 has an invalid length. [ 169.284041][T11633] FAULT_INJECTION: forcing a failure. [ 169.284041][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 169.285961][T11631] usb usb1: check_ctrlrecip: process 11631 (syz.4.2639) requesting ep 01 but needs 81 [ 169.296826][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.2.2640 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 169.296861][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.296877][T11633] Call Trace: [ 169.296887][T11633] [ 169.296923][T11633] __dump_stack+0x1d/0x30 [ 169.296954][T11633] dump_stack_lvl+0xe8/0x140 [ 169.296981][T11633] dump_stack+0x15/0x1b [ 169.297015][T11633] should_fail_ex+0x265/0x280 [ 169.297057][T11633] should_failslab+0x8c/0xb0 [ 169.297089][T11633] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 169.297127][T11633] ? security_context_to_sid_core+0xbf/0x3b0 [ 169.297176][T11633] kstrdup+0x3e/0xd0 [ 169.297205][T11633] security_context_to_sid_core+0xbf/0x3b0 [ 169.297245][T11633] security_context_to_sid_force+0x30/0x40 [ 169.297299][T11633] selinux_inode_setxattr+0x4e8/0x6e0 [ 169.297338][T11633] security_inode_setxattr+0x13a/0x1b0 [ 169.297384][T11633] __vfs_setxattr_locked+0x83/0x1d0 [ 169.297509][T11633] vfs_setxattr+0x132/0x270 [ 169.297554][T11633] filename_setxattr+0x1ad/0x400 [ 169.297683][T11633] path_setxattrat+0x2c9/0x310 [ 169.297735][T11633] __x64_sys_lsetxattr+0x71/0x90 [ 169.297763][T11633] x64_sys_call+0x1e36/0x2fb0 [ 169.297792][T11633] do_syscall_64+0xd2/0x200 [ 169.297819][T11633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.297923][T11633] ? clear_bhb_loop+0x40/0x90 [ 169.297954][T11633] ? clear_bhb_loop+0x40/0x90 [ 169.297984][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.298100][T11633] RIP: 0033:0x7f952c34e9a9 [ 169.298121][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.298158][T11633] RSP: 002b:00007f952a9b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 169.298185][T11633] RAX: ffffffffffffffda RBX: 00007f952c575fa0 RCX: 00007f952c34e9a9 [ 169.298269][T11633] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 00002000000001c0 [ 169.298287][T11633] RBP: 00007f952a9b7090 R08: 0000000000000001 R09: 0000000000000000 [ 169.298305][T11633] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 169.298323][T11633] R13: 0000000000000000 R14: 00007f952c575fa0 R15: 00007fff153fbf18 [ 169.298354][T11633] [ 169.359873][T11638] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.363221][T11631] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 169.545705][T11636] loop4: detected capacity change from 0 to 256 [ 169.548995][T11637] 9pnet_fd: Insufficient options for proto=fd [ 169.572157][T11636] vfat: Unknown parameter '7‘&©ª@n1"•îb [ 169.572157][T11636] šFW{’I·8þwP¾È;öí[g!?§ÖÀ‚?ÑTí)íáÿ7—BÃð´lª5}pîC' [ 169.598656][T11641] FAULT_INJECTION: forcing a failure. [ 169.598656][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 169.611481][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.1.2643 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 169.611508][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.611520][T11641] Call Trace: [ 169.611527][T11641] [ 169.611535][T11641] __dump_stack+0x1d/0x30 [ 169.611580][T11641] dump_stack_lvl+0xe8/0x140 [ 169.611653][T11641] dump_stack+0x15/0x1b [ 169.611695][T11641] should_fail_ex+0x265/0x280 [ 169.611726][T11641] should_failslab+0x8c/0xb0 [ 169.611794][T11641] kmem_cache_alloc_noprof+0x50/0x310 [ 169.611825][T11641] ? audit_log_start+0x365/0x6c0 [ 169.611859][T11641] audit_log_start+0x365/0x6c0 [ 169.611908][T11641] audit_seccomp+0x48/0x100 [ 169.611935][T11641] ? __seccomp_filter+0x68c/0x10d0 [ 169.611984][T11641] __seccomp_filter+0x69d/0x10d0 [ 169.612025][T11641] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.612066][T11641] ? vfs_write+0x75e/0x8e0 [ 169.612166][T11641] ? __rcu_read_unlock+0x4f/0x70 [ 169.612195][T11641] ? __fget_files+0x184/0x1c0 [ 169.612223][T11641] __secure_computing+0x82/0x150 [ 169.612257][T11641] syscall_trace_enter+0xcf/0x1e0 [ 169.612281][T11641] do_syscall_64+0xac/0x200 [ 169.612301][T11641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.612374][T11641] ? clear_bhb_loop+0x40/0x90 [ 169.612394][T11641] ? clear_bhb_loop+0x40/0x90 [ 169.612420][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.612447][T11641] RIP: 0033:0x7f03b832d3bc [ 169.612519][T11641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.612619][T11641] RSP: 002b:00007f03b698f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.612642][T11641] RAX: ffffffffffffffda RBX: 00007f03b8555fa0 RCX: 00007f03b832d3bc [ 169.612659][T11641] RDX: 000000000000000f RSI: 00007f03b698f0a0 RDI: 0000000000000005 [ 169.612720][T11641] RBP: 00007f03b698f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.612740][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.612755][T11641] R13: 0000000000000000 R14: 00007f03b8555fa0 R15: 00007ffd1f563fe8 [ 169.612780][T11641] [ 169.827718][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 169.827736][ T29] audit: type=1326 audit(1753239950.679:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.1.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03b832d45f code=0x7ffc0000 [ 169.858161][ T29] audit: type=1326 audit(1753239950.679:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.1.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f03b832d60a code=0x7ffc0000 [ 169.882257][ T29] audit: type=1326 audit(1753239950.679:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.1.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b832e9a9 code=0x7ffc0000 [ 169.906395][ T29] audit: type=1326 audit(1753239950.679:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.1.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b832e9a9 code=0x7ffc0000 [ 169.931396][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.944059][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 169.954911][T11638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 169.963935][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 169.998583][T11649] loop3: detected capacity change from 0 to 2048 [ 170.037810][T11649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.077681][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.086416][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.099485][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.153960][T11670] loop3: detected capacity change from 0 to 164 [ 170.167864][T11670] SELinux: syz.3.2653 (11670) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 170.244342][T11679] loop3: detected capacity change from 0 to 512 [ 170.256983][T11679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.269882][T11679] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.281434][T11679] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2655: corrupted inode contents [ 170.293832][T11679] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2655: mark_inode_dirty error [ 170.305738][T11679] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2655: corrupted inode contents [ 170.360299][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 170.368931][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.498313][T11694] loop2: detected capacity change from 0 to 512 [ 170.504845][ T29] audit: type=1400 audit(1753239951.349:4949): avc: denied { mounton } for pid=11693 comm="syz.2.2658" path="/581/file0" dev="tmpfs" ino=3125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.504926][T11694] EXT4-fs: Ignoring removed bh option [ 170.506683][T11694] EXT4-fs error (device loop2): __ext4_iget:5379: inode #15: block 1803188595: comm syz.2.2658: invalid block [ 170.547048][T11694] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2658: couldn't read orphan inode 15 (err -117) [ 170.559671][T11694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.572357][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.588423][T11694] 9pnet_fd: Insufficient options for proto=fd [ 170.620744][T11699] loop4: detected capacity change from 0 to 2048 [ 170.633226][ T29] audit: type=1326 audit(1753239951.479:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952c34e9a9 code=0x7ffc0000 [ 170.657053][ T29] audit: type=1326 audit(1753239951.479:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952c34e9a9 code=0x7ffc0000 [ 170.680617][ T29] audit: type=1326 audit(1753239951.479:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f952c34e9a9 code=0x7ffc0000 [ 170.704692][ T29] audit: type=1326 audit(1753239951.479:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952c34e9a9 code=0x7ffc0000 [ 170.728228][ T29] audit: type=1326 audit(1753239951.479:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952c34e9a9 code=0x7ffc0000 [ 170.753768][T11699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.797048][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.819689][T11712] FAULT_INJECTION: forcing a failure. [ 170.819689][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.832860][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.4.2663 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 170.832888][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.832943][T11712] Call Trace: [ 170.833014][T11712] [ 170.833092][T11712] __dump_stack+0x1d/0x30 [ 170.833116][T11712] dump_stack_lvl+0xe8/0x140 [ 170.833135][T11712] dump_stack+0x15/0x1b [ 170.833150][T11712] should_fail_ex+0x265/0x280 [ 170.833179][T11712] should_fail+0xb/0x20 [ 170.833217][T11712] should_fail_usercopy+0x1a/0x20 [ 170.833256][T11712] strncpy_from_user+0x25/0x230 [ 170.833305][T11712] path_setxattrat+0xeb/0x310 [ 170.833347][T11712] __x64_sys_lsetxattr+0x71/0x90 [ 170.833371][T11712] x64_sys_call+0x1e36/0x2fb0 [ 170.833469][T11712] do_syscall_64+0xd2/0x200 [ 170.833539][T11712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.833568][T11712] ? clear_bhb_loop+0x40/0x90 [ 170.833589][T11712] ? clear_bhb_loop+0x40/0x90 [ 170.833609][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.833630][T11712] RIP: 0033:0x7f8d7911e9a9 [ 170.833654][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.833675][T11712] RSP: 002b:00007f8d7777f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 170.833694][T11712] RAX: ffffffffffffffda RBX: 00007f8d79345fa0 RCX: 00007f8d7911e9a9 [ 170.833739][T11712] RDX: 00002000000006c0 RSI: 00002000000000c0 RDI: 0000200000000080 [ 170.833754][T11712] RBP: 00007f8d7777f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.833769][T11712] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 170.833789][T11712] R13: 0000000000000000 R14: 00007f8d79345fa0 R15: 00007ffd61f0ddf8 [ 170.833807][T11712] [ 171.046685][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.108586][T11720] loop3: detected capacity change from 0 to 1024 [ 171.153405][T11720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.244912][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.254170][T11737] loop4: detected capacity change from 0 to 512 [ 171.261470][T11737] EXT4-fs: inline encryption not supported [ 171.267552][T11737] EXT4-fs: dax option not supported [ 171.302816][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.310343][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.317885][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.325438][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.332842][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.340323][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.347873][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.355333][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.362786][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.370198][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.377609][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.384998][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.392439][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.399882][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.407323][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.415119][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.422557][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.430019][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.437474][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.444922][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.452371][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.460093][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.467617][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.475090][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.482706][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.490181][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.497676][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.505288][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 171.517176][ T1035] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 171.530638][T11746] syz.2.2673 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.563180][T11748] loop3: detected capacity change from 0 to 512 [ 171.571120][T11748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.583565][T11748] EXT4-fs (loop3): 1 truncate cleaned up [ 171.590667][T11748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.619333][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.640074][T11755] loop3: detected capacity change from 0 to 512 [ 171.648797][T11755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.661046][T11755] EXT4-fs (loop3): 1 truncate cleaned up [ 171.662829][T11757] rdma_rxe: rxe_newlink: failed to add syz_tun [ 171.667379][T11755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.670904][T11755] FAULT_INJECTION: forcing a failure. [ 171.670904][T11755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.699534][T11755] CPU: 1 UID: 0 PID: 11755 Comm: syz.3.2677 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 171.699618][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.699630][T11755] Call Trace: [ 171.699685][T11755] [ 171.699693][T11755] __dump_stack+0x1d/0x30 [ 171.699718][T11755] dump_stack_lvl+0xe8/0x140 [ 171.699737][T11755] dump_stack+0x15/0x1b [ 171.699752][T11755] should_fail_ex+0x265/0x280 [ 171.699876][T11755] should_fail+0xb/0x20 [ 171.699907][T11755] should_fail_usercopy+0x1a/0x20 [ 171.699955][T11755] _copy_from_user+0x1c/0xb0 [ 171.699979][T11755] ext4_ioctl+0x718/0x2080 [ 171.700030][T11755] ? __pfx_ext4_ioctl+0x10/0x10 [ 171.700136][T11755] __se_sys_ioctl+0xcb/0x140 [ 171.700165][T11755] __x64_sys_ioctl+0x43/0x50 [ 171.700190][T11755] x64_sys_call+0x19a8/0x2fb0 [ 171.700210][T11755] do_syscall_64+0xd2/0x200 [ 171.700282][T11755] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.700307][T11755] ? clear_bhb_loop+0x40/0x90 [ 171.700331][T11755] ? clear_bhb_loop+0x40/0x90 [ 171.700355][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.700379][T11755] RIP: 0033:0x7f3a168ce9a9 [ 171.700398][T11755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.700419][T11755] RSP: 002b:00007f3a14f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.700538][T11755] RAX: ffffffffffffffda RBX: 00007f3a16af5fa0 RCX: 00007f3a168ce9a9 [ 171.700550][T11755] RDX: 0000200000000440 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 171.700561][T11755] RBP: 00007f3a14f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.700573][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.700586][T11755] R13: 0000000000000000 R14: 00007f3a16af5fa0 R15: 00007ffd27a12e98 [ 171.700610][T11755] [ 171.906366][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.977181][T11767] FAULT_INJECTION: forcing a failure. [ 171.977181][T11767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.990303][T11767] CPU: 0 UID: 0 PID: 11767 Comm: syz.3.2683 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 171.990338][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.990354][T11767] Call Trace: [ 171.990362][T11767] [ 171.990432][T11767] __dump_stack+0x1d/0x30 [ 171.990465][T11767] dump_stack_lvl+0xe8/0x140 [ 171.990488][T11767] dump_stack+0x15/0x1b [ 171.990507][T11767] should_fail_ex+0x265/0x280 [ 171.990611][T11767] should_fail+0xb/0x20 [ 171.990643][T11767] should_fail_usercopy+0x1a/0x20 [ 171.990748][T11767] _copy_from_user+0x1c/0xb0 [ 171.990770][T11767] ___sys_sendmsg+0xc1/0x1d0 [ 171.990838][T11767] __x64_sys_sendmsg+0xd4/0x160 [ 171.990904][T11767] x64_sys_call+0x2999/0x2fb0 [ 171.990968][T11767] do_syscall_64+0xd2/0x200 [ 171.990990][T11767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.991021][T11767] ? clear_bhb_loop+0x40/0x90 [ 171.991041][T11767] ? clear_bhb_loop+0x40/0x90 [ 171.991147][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.991174][T11767] RIP: 0033:0x7f3a168ce9a9 [ 171.991192][T11767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.991262][T11767] RSP: 002b:00007f3a14f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.991330][T11767] RAX: ffffffffffffffda RBX: 00007f3a16af5fa0 RCX: 00007f3a168ce9a9 [ 171.991409][T11767] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 171.991421][T11767] RBP: 00007f3a14f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.991434][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.991445][T11767] R13: 0000000000000000 R14: 00007f3a16af5fa0 R15: 00007ffd27a12e98 [ 171.991465][T11767] [ 172.176159][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 172.263553][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 172.277914][T11788] loop4: detected capacity change from 0 to 512 [ 172.284826][T11788] EXT4-fs: inline encryption not supported [ 172.299852][T11788] EXT4-fs: dax option not supported [ 172.318804][T11790] FAULT_INJECTION: forcing a failure. [ 172.318804][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 172.332207][T11790] CPU: 0 UID: 0 PID: 11790 Comm: syz.0.2692 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 172.332242][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.332259][T11790] Call Trace: [ 172.332267][T11790] [ 172.332277][T11790] __dump_stack+0x1d/0x30 [ 172.332370][T11790] dump_stack_lvl+0xe8/0x140 [ 172.332389][T11790] dump_stack+0x15/0x1b [ 172.332447][T11790] should_fail_ex+0x265/0x280 [ 172.332485][T11790] should_failslab+0x8c/0xb0 [ 172.332513][T11790] kmem_cache_alloc_noprof+0x50/0x310 [ 172.332545][T11790] ? radix_tree_node_alloc+0x8a/0x1f0 [ 172.332589][T11790] radix_tree_node_alloc+0x8a/0x1f0 [ 172.332622][T11790] idr_get_free+0x1fa/0x550 [ 172.332686][T11790] idr_alloc_u32+0xca/0x180 [ 172.332759][T11790] idr_alloc+0x6e/0xd0 [ 172.332782][T11790] ppp_dev_configure+0x4dd/0x6e0 [ 172.332821][T11790] ppp_ioctl+0x523/0x11c0 [ 172.332870][T11790] ? __fget_files+0x184/0x1c0 [ 172.332982][T11790] ? __pfx_ppp_ioctl+0x10/0x10 [ 172.333006][T11790] __se_sys_ioctl+0xcb/0x140 [ 172.333037][T11790] __x64_sys_ioctl+0x43/0x50 [ 172.333145][T11790] x64_sys_call+0x19a8/0x2fb0 [ 172.333171][T11790] do_syscall_64+0xd2/0x200 [ 172.333193][T11790] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.333275][T11790] ? clear_bhb_loop+0x40/0x90 [ 172.333300][T11790] ? clear_bhb_loop+0x40/0x90 [ 172.333326][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.333350][T11790] RIP: 0033:0x7f6a805ce9a9 [ 172.333369][T11790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.333465][T11790] RSP: 002b:00007f6a7ec37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.333535][T11790] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805ce9a9 [ 172.333550][T11790] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 172.333566][T11790] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 172.333581][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.333595][T11790] R13: 0000000000000000 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 172.333619][T11790] [ 172.687557][T11818] loop3: detected capacity change from 0 to 512 [ 172.734046][T11818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.746762][T11818] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.760038][T11818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2701: corrupted inode contents [ 172.775371][T11818] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2701: mark_inode_dirty error [ 172.795718][T11818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2701: corrupted inode contents [ 172.809797][T11827] SELinux: policydb magic number 0xf97cf38c does not match expected magic number 0xf97cff8c [ 172.809955][T11827] SELinux: failed to load policy [ 172.843567][T11835] netlink: 'syz.2.2704': attribute type 10 has an invalid length. [ 173.336062][T11878] netlink: 'syz.0.2721': attribute type 3 has an invalid length. [ 173.364360][T11872] netlink: 'syz.2.2719': attribute type 7 has an invalid length. [ 173.372192][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 173.383144][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.855980][T11914] loop3: detected capacity change from 0 to 8192 [ 173.862789][T11914] vfat: Unknown parameter 'þ€' [ 173.941047][T11922] loop3: detected capacity change from 0 to 2048 [ 173.959519][T11922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.024655][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.162944][T11936] tap0: tun_chr_ioctl cmd 1074025672 [ 174.169203][T11936] tap0: ignored: set checksum disabled [ 174.327258][T11950] veth12: entered allmulticast mode [ 174.337928][T11951] FAULT_INJECTION: forcing a failure. [ 174.337928][T11951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.351076][T11951] CPU: 1 UID: 0 PID: 11951 Comm: syz.0.2743 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 174.351110][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.351129][T11951] Call Trace: [ 174.351136][T11951] [ 174.351145][T11951] __dump_stack+0x1d/0x30 [ 174.351166][T11951] dump_stack_lvl+0xe8/0x140 [ 174.351187][T11951] dump_stack+0x15/0x1b [ 174.351268][T11951] should_fail_ex+0x265/0x280 [ 174.351303][T11951] should_fail+0xb/0x20 [ 174.351336][T11951] should_fail_usercopy+0x1a/0x20 [ 174.351423][T11951] copy_folio_from_iter_atomic+0x278/0x1170 [ 174.351455][T11951] ? shmem_write_begin+0xa8/0x190 [ 174.351491][T11951] ? shmem_write_begin+0xe1/0x190 [ 174.351550][T11951] generic_perform_write+0x2c2/0x490 [ 174.351588][T11951] shmem_file_write_iter+0xc5/0xf0 [ 174.351610][T11951] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 174.351676][T11951] vfs_write+0x49d/0x8e0 [ 174.351714][T11951] ksys_write+0xda/0x1a0 [ 174.351750][T11951] __x64_sys_write+0x40/0x50 [ 174.351780][T11951] x64_sys_call+0x2cdd/0x2fb0 [ 174.351861][T11951] do_syscall_64+0xd2/0x200 [ 174.351879][T11951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.351904][T11951] ? clear_bhb_loop+0x40/0x90 [ 174.351931][T11951] ? clear_bhb_loop+0x40/0x90 [ 174.351953][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.351973][T11951] RIP: 0033:0x7f6a805ce9a9 [ 174.352022][T11951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.352045][T11951] RSP: 002b:00007f6a7ec37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.352069][T11951] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805ce9a9 [ 174.352163][T11951] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004 [ 174.352177][T11951] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 174.352192][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.352220][T11951] R13: 0000000000000000 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 174.352253][T11951] [ 174.585968][T11887] delete_channel: no stack [ 174.709112][T11977] loop4: detected capacity change from 0 to 512 [ 174.725102][T11977] EXT4-fs: inline encryption not supported [ 174.731235][T11972] random: crng reseeded on system resumption [ 174.737811][T11977] EXT4-fs: dax option not supported [ 174.740079][T11979] loop2: detected capacity change from 0 to 512 [ 174.754446][T11972] macvlan1: entered promiscuous mode [ 174.762383][T11979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.775530][T11972] ipvlan0: entered promiscuous mode [ 174.781565][T11972] ipvlan0: left promiscuous mode [ 174.786854][T11979] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.797649][T11972] macvlan1: left promiscuous mode [ 174.939385][T11985] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 174.964429][T11985] SELinux: failed to load policy [ 175.254839][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.466650][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 175.475613][T11999] netlink: 'syz.2.2757': attribute type 30 has an invalid length. [ 175.507289][T12003] netlink: 'syz.1.2759': attribute type 10 has an invalid length. [ 175.525676][T12003] team0: Device ipvlan0 failed to register rx_handler [ 175.563628][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 175.572612][T11999] netlink: 'syz.2.2757': attribute type 30 has an invalid length. [ 175.656277][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 175.656292][ T29] audit: type=1326 audit(1753239956.509:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.686101][ T29] audit: type=1326 audit(1753239956.509:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.710009][ T29] audit: type=1326 audit(1753239956.569:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.733741][ T29] audit: type=1326 audit(1753239956.569:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.757258][ T29] audit: type=1326 audit(1753239956.569:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.825045][ T29] audit: type=1326 audit(1753239956.639:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.848698][ T29] audit: type=1326 audit(1753239956.639:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.872219][ T29] audit: type=1326 audit(1753239956.639:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.895899][ T29] audit: type=1326 audit(1753239956.639:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 175.919715][ T29] audit: type=1326 audit(1753239956.639:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a168ce9a9 code=0x7ffc0000 [ 176.212185][T12044] loop4: detected capacity change from 0 to 512 [ 176.232590][T12044] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 176.246948][T12044] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.267316][T12044] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2769: Failed to acquire dquot type 1 [ 176.306576][T12044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2769: bg 0: block 40: padding at end of block bitmap is not set [ 176.348609][T12053] loop3: detected capacity change from 0 to 512 [ 176.349868][T12044] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 176.370148][T12044] EXT4-fs (loop4): 1 truncate cleaned up [ 176.377582][T12044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.392451][T12053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.397712][T12044] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.2769: corrupted xattr block 31: invalid header [ 176.414418][T12053] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.419389][T12044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 176.431131][T12053] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2774: corrupted inode contents [ 176.439313][T12044] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.2769: corrupted xattr block 31: invalid header [ 176.463909][T12065] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.2769: corrupted xattr block 31: invalid header [ 176.478748][T12044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 176.482872][T12053] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2774: mark_inode_dirty error [ 176.488817][T12065] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 176.508176][T12064] random: crng reseeded on system resumption [ 176.508428][T12044] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.2769: bad symlink. [ 176.519173][T12022] chnl_net:caif_netlink_parms(): no params data found [ 176.525128][T12065] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.2769: bad symlink. [ 176.543047][T12053] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2774: corrupted inode contents [ 176.576520][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.604910][T12076] netlink: 'syz.0.2779': attribute type 13 has an invalid length. [ 176.610576][T12074] loop4: detected capacity change from 0 to 512 [ 176.623464][T12076] FAULT_INJECTION: forcing a failure. [ 176.623464][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 176.623661][T12074] EXT4-fs: inline encryption not supported [ 176.637190][T12076] CPU: 0 UID: 0 PID: 12076 Comm: syz.0.2779 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 176.637230][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.637257][T12076] Call Trace: [ 176.637265][T12076] [ 176.637276][T12076] __dump_stack+0x1d/0x30 [ 176.637306][T12076] dump_stack_lvl+0xe8/0x140 [ 176.637333][T12076] dump_stack+0x15/0x1b [ 176.637354][T12076] should_fail_ex+0x265/0x280 [ 176.637396][T12076] should_failslab+0x8c/0xb0 [ 176.637476][T12076] kmem_cache_alloc_node_noprof+0x57/0x320 [ 176.637513][T12076] ? __alloc_skb+0x101/0x320 [ 176.637624][T12076] __alloc_skb+0x101/0x320 [ 176.637751][T12076] inet_ifmcaddr_notify+0x64/0x120 [ 176.637786][T12076] __ip_mc_dec_group+0x1ac/0x3d0 [ 176.637884][T12076] ip_mc_down+0x13d/0x1c0 [ 176.637915][T12076] inetdev_event+0x1b3/0xc10 [ 176.637952][T12076] ? __rcu_read_unlock+0x4f/0x70 [ 176.637982][T12076] ? ib_netdevice_event+0x281/0x5f0 [ 176.638076][T12076] ? __pfx_arp_netdev_event+0x10/0x10 [ 176.638135][T12076] ? __pfx_inetdev_event+0x10/0x10 [ 176.638243][T12076] raw_notifier_call_chain+0x6c/0x1b0 [ 176.638270][T12076] ? call_netdevice_notifiers_info+0x9c/0x100 [ 176.638306][T12076] call_netdevice_notifiers_info+0xae/0x100 [ 176.638397][T12076] __dev_notify_flags+0xff/0x1a0 [ 176.638445][T12076] netif_change_flags+0xac/0xd0 [ 176.638484][T12076] do_setlink+0x9d2/0x2810 [ 176.638526][T12076] ? save_fpregs_to_fpstate+0x100/0x160 [ 176.638618][T12076] ? _raw_spin_unlock+0x26/0x50 [ 176.638649][T12076] ? mutex_spin_on_owner+0x87/0x170 [ 176.638773][T12076] rtnl_newlink+0xd8b/0x12d0 [ 176.638809][T12076] ? try_charge_memcg+0x200/0x9e0 [ 176.638857][T12076] ? css_rstat_updated+0xcd/0x5b0 [ 176.638959][T12076] ? __memcg_slab_free_hook+0x135/0x230 [ 176.638997][T12076] ? __kfree_skb+0x109/0x150 [ 176.639026][T12076] ? __rcu_read_unlock+0x4f/0x70 [ 176.639046][T12076] ? avc_has_perm_noaudit+0x1b1/0x200 [ 176.639156][T12076] ? selinux_capable+0x1f9/0x270 [ 176.639204][T12076] ? security_capable+0x83/0x90 [ 176.639237][T12076] ? ns_capable+0x7d/0xb0 [ 176.639261][T12076] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.639303][T12076] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 176.639353][T12076] netlink_rcv_skb+0x120/0x220 [ 176.639395][T12076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.639440][T12076] rtnetlink_rcv+0x1c/0x30 [ 176.639522][T12076] netlink_unicast+0x5a8/0x680 [ 176.639592][T12076] netlink_sendmsg+0x58b/0x6b0 [ 176.639695][T12076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.639723][T12076] __sock_sendmsg+0x145/0x180 [ 176.639790][T12076] ____sys_sendmsg+0x31e/0x4e0 [ 176.639839][T12076] ___sys_sendmsg+0x17b/0x1d0 [ 176.639928][T12076] __x64_sys_sendmsg+0xd4/0x160 [ 176.639991][T12076] x64_sys_call+0x2999/0x2fb0 [ 176.640020][T12076] do_syscall_64+0xd2/0x200 [ 176.640046][T12076] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.640091][T12076] ? clear_bhb_loop+0x40/0x90 [ 176.640120][T12076] ? clear_bhb_loop+0x40/0x90 [ 176.640149][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.640180][T12076] RIP: 0033:0x7f6a805ce9a9 [ 176.640200][T12076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.640263][T12076] RSP: 002b:00007f6a7ec37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.640290][T12076] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805ce9a9 [ 176.640308][T12076] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000008 [ 176.640325][T12076] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 176.640341][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.640359][T12076] R13: 0000000000000000 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 176.640439][T12076] [ 177.011202][T12074] EXT4-fs: dax option not supported [ 177.026857][T12076] bridge0: port 3(syz_tun) entered disabled state [ 177.049345][T12076] batman_adv: batadv0: Interface deactivated: macvlan0 [ 177.093451][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.100707][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.123302][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.132922][T12022] bridge_slave_0: entered allmulticast mode [ 177.140512][T12022] bridge_slave_0: entered promiscuous mode [ 177.150039][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.157793][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.171704][T12022] bridge_slave_1: entered allmulticast mode [ 177.196621][T12022] bridge_slave_1: entered promiscuous mode [ 177.233416][T12097] FAULT_INJECTION: forcing a failure. [ 177.233416][T12097] name failslab, interval 1, probability 0, space 0, times 0 [ 177.246863][T12097] CPU: 0 UID: 0 PID: 12097 Comm: syz.1.2783 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 177.246896][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.246912][T12097] Call Trace: [ 177.246919][T12097] [ 177.246928][T12097] __dump_stack+0x1d/0x30 [ 177.246954][T12097] dump_stack_lvl+0xe8/0x140 [ 177.247050][T12097] dump_stack+0x15/0x1b [ 177.247066][T12097] should_fail_ex+0x265/0x280 [ 177.247095][T12097] should_failslab+0x8c/0xb0 [ 177.247131][T12097] __kvmalloc_node_noprof+0x123/0x4e0 [ 177.247165][T12097] ? xt_alloc_table_info+0x3b/0x80 [ 177.247222][T12097] ? should_fail_ex+0xdb/0x280 [ 177.247256][T12097] xt_alloc_table_info+0x3b/0x80 [ 177.247315][T12097] do_ip6t_set_ctl+0x5a5/0x840 [ 177.247356][T12097] nf_setsockopt+0x196/0x1b0 [ 177.247381][T12097] ipv6_setsockopt+0x11a/0x130 [ 177.247442][T12097] udpv6_setsockopt+0x99/0xb0 [ 177.247465][T12097] sock_common_setsockopt+0x69/0x80 [ 177.247495][T12097] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.247533][T12097] __sys_setsockopt+0x184/0x200 [ 177.247578][T12097] __x64_sys_setsockopt+0x64/0x80 [ 177.247608][T12097] x64_sys_call+0x2bd5/0x2fb0 [ 177.247667][T12097] do_syscall_64+0xd2/0x200 [ 177.247691][T12097] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.247748][T12097] ? clear_bhb_loop+0x40/0x90 [ 177.247774][T12097] ? clear_bhb_loop+0x40/0x90 [ 177.247802][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.247842][T12097] RIP: 0033:0x7f03b832e9a9 [ 177.247863][T12097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.247885][T12097] RSP: 002b:00007f03b696e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.247908][T12097] RAX: ffffffffffffffda RBX: 00007f03b8556080 RCX: 00007f03b832e9a9 [ 177.247935][T12097] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 177.247947][T12097] RBP: 00007f03b696e090 R08: 0000000000000590 R09: 0000000000000000 [ 177.247978][T12097] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.247990][T12097] R13: 0000000000000000 R14: 00007f03b8556080 R15: 00007ffd1f563fe8 [ 177.248019][T12097] [ 177.258938][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.497172][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.611087][T12022] team0: Port device team_slave_0 added [ 177.630713][T12106] loop4: detected capacity change from 0 to 8192 [ 177.640069][T12022] team0: Port device team_slave_1 added [ 177.708591][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.715617][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.741588][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.773183][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.780380][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.807193][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.870997][T12022] hsr_slave_0: entered promiscuous mode [ 177.879031][T12022] hsr_slave_1: entered promiscuous mode [ 177.884995][T12022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.892690][T12022] Cannot create hsr debugfs directory [ 178.020545][T12022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.030931][T12022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.082871][T12137] loop4: detected capacity change from 0 to 512 [ 178.089873][T12137] EXT4-fs: inline encryption not supported [ 178.096019][T12137] EXT4-fs: dax option not supported [ 178.097144][T12022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.112218][T12022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.125499][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 178.142344][T12138] hsr_slave_0 (unregistering): left promiscuous mode [ 178.151225][T12140] xt_hashlimit: size too large, truncated to 1048576 [ 178.179206][T12022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.190194][T12022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.250739][T12022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.261194][T12022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.493335][T12022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.517305][T12022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.548848][T12022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.559064][T12022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.570126][T12154] FAULT_INJECTION: forcing a failure. [ 178.570126][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 178.582816][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.0.2801 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 178.582842][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.582875][T12154] Call Trace: [ 178.582880][T12154] [ 178.582886][T12154] __dump_stack+0x1d/0x30 [ 178.582905][T12154] dump_stack_lvl+0xe8/0x140 [ 178.582974][T12154] dump_stack+0x15/0x1b [ 178.583058][T12154] should_fail_ex+0x265/0x280 [ 178.583098][T12154] should_failslab+0x8c/0xb0 [ 178.583126][T12154] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 178.583159][T12154] ? __d_alloc+0x3d/0x350 [ 178.583340][T12154] __d_alloc+0x3d/0x350 [ 178.583370][T12154] d_alloc+0x2e/0x100 [ 178.583472][T12154] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 178.583497][T12154] do_unlinkat+0x175/0x4c0 [ 178.583575][T12154] __x64_sys_unlink+0x2e/0x40 [ 178.583603][T12154] x64_sys_call+0x22a6/0x2fb0 [ 178.583624][T12154] do_syscall_64+0xd2/0x200 [ 178.583706][T12154] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.583736][T12154] ? clear_bhb_loop+0x40/0x90 [ 178.583756][T12154] ? clear_bhb_loop+0x40/0x90 [ 178.583849][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.583875][T12154] RIP: 0033:0x7f6a805ce9a9 [ 178.583894][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.583917][T12154] RSP: 002b:00007f6a7ec37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 178.583974][T12154] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805ce9a9 [ 178.583990][T12154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 178.584006][T12154] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 178.584022][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.584067][T12154] R13: 0000000000000000 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 178.584165][T12154] [ 178.817602][T12167] loop3: detected capacity change from 0 to 512 [ 178.834829][T12167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.850821][T12167] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2802: invalid indirect mapped block 4294967295 (level 0) [ 178.873138][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.883731][T12167] EXT4-fs (loop3): Remounting filesystem read-only [ 178.901367][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.914146][T12167] EXT4-fs (loop3): 1 orphan inode deleted [ 178.920009][T12167] EXT4-fs (loop3): 1 truncate cleaned up [ 178.932928][T12167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.932961][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.952518][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.962709][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.999320][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.006511][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.119482][T12207] SELinux: policydb magic number 0x44 does not match expected magic number 0xf97cff8c [ 179.129511][T12207] SELinux: failed to load policy [ 179.137912][T12210] FAULT_INJECTION: forcing a failure. [ 179.137912][T12210] name failslab, interval 1, probability 0, space 0, times 0 [ 179.149613][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.151519][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.0.2812 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 179.151557][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.151575][T12210] Call Trace: [ 179.151641][T12210] [ 179.151650][T12210] __dump_stack+0x1d/0x30 [ 179.151679][T12210] dump_stack_lvl+0xe8/0x140 [ 179.151705][T12210] dump_stack+0x15/0x1b [ 179.151743][T12210] should_fail_ex+0x265/0x280 [ 179.151821][T12210] should_failslab+0x8c/0xb0 [ 179.151852][T12210] __kmalloc_noprof+0xa5/0x3e0 [ 179.151896][T12210] ? security_perf_event_alloc+0x48/0x120 [ 179.151930][T12210] security_perf_event_alloc+0x48/0x120 [ 179.152028][T12210] perf_event_alloc+0x152f/0x1680 [ 179.152070][T12210] __se_sys_perf_event_open+0x4a5/0x11c0 [ 179.152133][T12210] ? __rcu_read_unlock+0x4f/0x70 [ 179.152234][T12210] __x64_sys_perf_event_open+0x67/0x80 [ 179.152272][T12210] x64_sys_call+0x27ec/0x2fb0 [ 179.152295][T12210] do_syscall_64+0xd2/0x200 [ 179.152367][T12210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.152402][T12210] ? clear_bhb_loop+0x40/0x90 [ 179.152430][T12210] ? clear_bhb_loop+0x40/0x90 [ 179.152459][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.152528][T12210] RIP: 0033:0x7f6a805ce9a9 [ 179.152548][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.152572][T12210] RSP: 002b:00007f6a7ec37038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 179.152596][T12210] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805ce9a9 [ 179.152614][T12210] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 179.152631][T12210] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 179.152680][T12210] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 179.152696][T12210] R13: 0000000000000001 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 179.152721][T12210] [ 179.431586][T12022] veth0_vlan: entered promiscuous mode [ 179.442293][T12022] veth1_vlan: entered promiscuous mode [ 179.466277][T12022] veth0_macvtap: entered promiscuous mode [ 179.477621][T12022] veth1_macvtap: entered promiscuous mode [ 179.498272][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.509503][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.517110][T12228] loop3: detected capacity change from 0 to 8192 [ 179.535705][T12022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.544532][T12022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.554149][T12022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.562951][T12022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.628440][T12231] FAULT_INJECTION: forcing a failure. [ 179.628440][T12231] name failslab, interval 1, probability 0, space 0, times 0 [ 179.641256][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.2.2763 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 179.641291][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.641365][T12231] Call Trace: [ 179.641373][T12231] [ 179.641383][T12231] __dump_stack+0x1d/0x30 [ 179.641411][T12231] dump_stack_lvl+0xe8/0x140 [ 179.641521][T12231] dump_stack+0x15/0x1b [ 179.641543][T12231] should_fail_ex+0x265/0x280 [ 179.641580][T12231] should_failslab+0x8c/0xb0 [ 179.641604][T12231] __kmalloc_noprof+0xa5/0x3e0 [ 179.641629][T12231] ? security_prepare_creds+0x52/0x120 [ 179.641696][T12231] security_prepare_creds+0x52/0x120 [ 179.641726][T12231] prepare_creds+0x34a/0x4c0 [ 179.641749][T12231] __sys_setuid+0x67/0x310 [ 179.641808][T12231] __x64_sys_setuid+0x1e/0x30 [ 179.641894][T12231] x64_sys_call+0x2983/0x2fb0 [ 179.641974][T12231] do_syscall_64+0xd2/0x200 [ 179.641994][T12231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.642140][T12231] ? clear_bhb_loop+0x40/0x90 [ 179.642193][T12231] ? clear_bhb_loop+0x40/0x90 [ 179.642249][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.642270][T12231] RIP: 0033:0x7f096a5fe9a9 [ 179.642285][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.642304][T12231] RSP: 002b:00007f0968c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 179.642327][T12231] RAX: ffffffffffffffda RBX: 00007f096a825fa0 RCX: 00007f096a5fe9a9 [ 179.642406][T12231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.642420][T12231] RBP: 00007f0968c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.642465][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.642488][T12231] R13: 0000000000000000 R14: 00007f096a825fa0 R15: 00007ffde0279c98 [ 179.642513][T12231] [ 179.941008][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 180.020072][T12255] netlink: 'syz.1.2825': attribute type 39 has an invalid length. [ 180.131666][T12266] FAULT_INJECTION: forcing a failure. [ 180.131666][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 180.144643][T12266] CPU: 1 UID: 0 PID: 12266 Comm: syz.1.2830 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 180.144676][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.144696][T12266] Call Trace: [ 180.144703][T12266] [ 180.144711][T12266] __dump_stack+0x1d/0x30 [ 180.144742][T12266] dump_stack_lvl+0xe8/0x140 [ 180.144787][T12266] dump_stack+0x15/0x1b [ 180.144809][T12266] should_fail_ex+0x265/0x280 [ 180.144844][T12266] should_failslab+0x8c/0xb0 [ 180.144914][T12266] kmem_cache_alloc_node_noprof+0x57/0x320 [ 180.144945][T12266] ? __alloc_skb+0x101/0x320 [ 180.145049][T12266] __alloc_skb+0x101/0x320 [ 180.145084][T12266] netlink_alloc_large_skb+0xba/0xf0 [ 180.145120][T12266] netlink_sendmsg+0x3cf/0x6b0 [ 180.145220][T12266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.145246][T12266] __sock_sendmsg+0x145/0x180 [ 180.145277][T12266] ____sys_sendmsg+0x31e/0x4e0 [ 180.145318][T12266] ___sys_sendmsg+0x17b/0x1d0 [ 180.145409][T12266] __x64_sys_sendmsg+0xd4/0x160 [ 180.145469][T12266] x64_sys_call+0x2999/0x2fb0 [ 180.145495][T12266] do_syscall_64+0xd2/0x200 [ 180.145517][T12266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.145607][T12266] ? clear_bhb_loop+0x40/0x90 [ 180.145632][T12266] ? clear_bhb_loop+0x40/0x90 [ 180.145658][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.145684][T12266] RIP: 0033:0x7f03b832e9a9 [ 180.145705][T12266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.145722][T12266] RSP: 002b:00007f03b698f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.145743][T12266] RAX: ffffffffffffffda RBX: 00007f03b8555fa0 RCX: 00007f03b832e9a9 [ 180.145759][T12266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 180.145857][T12266] RBP: 00007f03b698f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.145871][T12266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.145883][T12266] R13: 0000000000000000 R14: 00007f03b8555fa0 R15: 00007ffd1f563fe8 [ 180.145900][T12266] [ 180.431488][T12276] SELinux: policydb magic number 0xbe10469a does not match expected magic number 0xf97cff8c [ 180.471848][T12276] SELinux: failed to load policy [ 180.536052][T12288] loop4: detected capacity change from 0 to 512 [ 180.542622][T12289] loop3: detected capacity change from 0 to 1024 [ 180.543331][T12288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.557508][T12289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.573917][T12288] EXT4-fs (loop4): 1 truncate cleaned up [ 180.580696][T12288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.597599][T12288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.612611][T12289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 180.630079][T12289] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 180.642460][T12289] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.642460][T12289] [ 180.652953][T12289] EXT4-fs (loop3): Total free blocks count 0 [ 180.659001][T12289] EXT4-fs (loop3): Free/Dirty block details [ 180.664930][T12289] EXT4-fs (loop3): free_blocks=68451041280 [ 180.671530][T12289] EXT4-fs (loop3): dirty_blocks=16 [ 180.676722][T12289] EXT4-fs (loop3): Block reservation details [ 180.680911][T12298] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=12298 comm=syz.2.2838 [ 180.682716][T12289] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 180.683263][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 180.683281][ T29] audit: type=1400 audit(1753239961.519:5282): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.756525][T12303] netlink: 'syz.0.2840': attribute type 39 has an invalid length. [ 180.770136][T12305] loop2: detected capacity change from 0 to 512 [ 180.788499][T12305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.802006][T12305] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.814976][ T29] audit: type=1400 audit(1753239961.659:5283): avc: denied { remove_name } for pid=12304 comm="syz.2.2841" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.838529][ T29] audit: type=1400 audit(1753239961.659:5284): avc: denied { rename } for pid=12304 comm="syz.2.2841" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.861697][ T29] audit: type=1400 audit(1753239961.659:5285): avc: denied { unlink } for pid=12304 comm="syz.2.2841" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.898119][T12305] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 180.920840][T12305] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 180.930980][T12305] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2841: Failed to acquire dquot type 0 [ 180.969541][T12305] netlink: 'syz.2.2841': attribute type 7 has an invalid length. [ 180.977424][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 180.998258][T12022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.003613][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2842'. [ 181.019794][T12314] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.028837][T12314] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.037074][T12314] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.045931][T12314] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.054177][T12314] vxlan0: entered promiscuous mode [ 181.103148][T12319] loop2: detected capacity change from 0 to 128 [ 181.211935][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 181.279812][T12338] loop2: detected capacity change from 0 to 2048 [ 181.296791][T12338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.319726][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.362863][T12343] Cannot find add_set index 0 as target [ 181.369680][ T29] audit: type=1400 audit(1753239962.219:5286): avc: denied { mounton } for pid=12337 comm="+}[@" path="/12/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.473677][T12351] netlink: 'syz.1.2852': attribute type 39 has an invalid length. [ 181.482291][T12342] loop3: detected capacity change from 0 to 2048 [ 181.490880][T12342] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 181.616539][ T29] audit: type=1400 audit(1753239962.469:5287): avc: denied { mounton } for pid=12341 comm="syz.3.2851" path="/proc/1479/net/pfkey" dev="proc" ino=4026532871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.619025][ T5368] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 181.686907][T12355] loop3: detected capacity change from 0 to 2364 [ 181.693343][ T5368] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 181.693991][T12355] isofs_fill_super: bread failed, dev=loop3, iso_blknum=32783, block=65566 [ 181.706652][ T5368] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.706652][ T5368] [ 181.724361][ T5368] EXT4-fs (loop2): Total free blocks count 0 [ 181.731111][ T5368] EXT4-fs (loop2): Free/Dirty block details [ 181.737070][ T5368] EXT4-fs (loop2): free_blocks=2415919104 [ 181.742897][ T5368] EXT4-fs (loop2): dirty_blocks=8208 [ 181.748891][ T5368] EXT4-fs (loop2): Block reservation details [ 181.754990][ T5368] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 181.789800][ T5358] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 181.863371][ T29] audit: type=1400 audit(1753239962.709:5288): avc: denied { mount } for pid=12361 comm="syz.4.2858" name="/" dev="configfs" ino=1772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 181.886616][T12360] siw: device registration error -23 [ 181.889315][ T29] audit: type=1400 audit(1753239962.739:5289): avc: denied { search } for pid=12361 comm="syz.4.2858" name="/" dev="configfs" ino=1772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.977872][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2863'. [ 182.014625][T12378] netlink: zone id is out of range [ 182.020804][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2864'. [ 182.029853][T12378] netlink: zone id is out of range [ 182.035261][T12378] netlink: zone id is out of range [ 182.040405][T12378] netlink: zone id is out of range [ 182.048902][T12378] netlink: zone id is out of range [ 182.059204][T12378] netlink: zone id is out of range [ 182.064351][T12378] netlink: zone id is out of range [ 182.094782][T12378] netlink: zone id is out of range [ 182.127362][T12388] siw: device registration error -23 [ 182.133363][T12378] netlink: zone id is out of range [ 182.145312][T12378] netlink: zone id is out of range [ 182.329882][T12411] 9pnet_fd: Insufficient options for proto=fd [ 182.399985][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2877'. [ 182.451841][T12427] FAULT_INJECTION: forcing a failure. [ 182.451841][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 182.464626][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.1.2880 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 182.464665][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.464728][T12427] Call Trace: [ 182.464736][T12427] [ 182.464745][T12427] __dump_stack+0x1d/0x30 [ 182.464772][T12427] dump_stack_lvl+0xe8/0x140 [ 182.464795][T12427] dump_stack+0x15/0x1b [ 182.464811][T12427] should_fail_ex+0x265/0x280 [ 182.464846][T12427] ? __se_sys_memfd_create+0x1cc/0x590 [ 182.464921][T12427] should_failslab+0x8c/0xb0 [ 182.464944][T12427] __kmalloc_cache_noprof+0x4c/0x320 [ 182.464998][T12427] ? fput+0x8f/0xc0 [ 182.465028][T12427] __se_sys_memfd_create+0x1cc/0x590 [ 182.465066][T12427] __x64_sys_memfd_create+0x31/0x40 [ 182.465108][T12427] x64_sys_call+0x122f/0x2fb0 [ 182.465129][T12427] do_syscall_64+0xd2/0x200 [ 182.465228][T12427] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.465283][T12427] ? clear_bhb_loop+0x40/0x90 [ 182.465308][T12427] ? clear_bhb_loop+0x40/0x90 [ 182.465333][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.465411][T12427] RIP: 0033:0x7f03b832e9a9 [ 182.465429][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.465518][T12427] RSP: 002b:00007f03b698ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 182.465589][T12427] RAX: ffffffffffffffda RBX: 000000000000105c RCX: 00007f03b832e9a9 [ 182.465604][T12427] RDX: 00007f03b698edec RSI: 0000000000000000 RDI: 00007f03b83b16fc [ 182.465616][T12427] RBP: 0000200000001080 R08: 00007f03b698eb07 R09: 0000000000000000 [ 182.465629][T12427] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 182.465644][T12427] R13: 00007f03b698edec R14: 00007f03b698edf0 R15: 00007ffd1f563fe8 [ 182.465665][T12427] [ 182.716163][T12425] netlink: 'syz.2.2879': attribute type 10 has an invalid length. [ 182.724876][T12425] xt_hashlimit: max too large, truncated to 1048576 [ 182.833389][T12449] FAULT_INJECTION: forcing a failure. [ 182.833389][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 182.846246][T12449] CPU: 1 UID: 0 PID: 12449 Comm: syz.1.2888 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 182.846355][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.846444][T12449] Call Trace: [ 182.846450][T12449] [ 182.846458][T12449] __dump_stack+0x1d/0x30 [ 182.846479][T12449] dump_stack_lvl+0xe8/0x140 [ 182.846503][T12449] dump_stack+0x15/0x1b [ 182.846576][T12449] should_fail_ex+0x265/0x280 [ 182.846613][T12449] should_failslab+0x8c/0xb0 [ 182.846640][T12449] __kmalloc_noprof+0xa5/0x3e0 [ 182.846707][T12449] ? ip_options_get+0x52/0x350 [ 182.846731][T12449] ip_options_get+0x52/0x350 [ 182.846750][T12449] ? tcp_release_cb+0xf1/0x370 [ 182.846836][T12449] do_ip_setsockopt+0x19d4/0x2240 [ 182.846921][T12449] ip_setsockopt+0x58/0x110 [ 182.846952][T12449] tcp_setsockopt+0x95/0xb0 [ 182.846991][T12449] sock_common_setsockopt+0x69/0x80 [ 182.847037][T12449] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 182.847097][T12449] __sys_setsockopt+0x184/0x200 [ 182.847146][T12449] __x64_sys_setsockopt+0x64/0x80 [ 182.847256][T12449] x64_sys_call+0x2bd5/0x2fb0 [ 182.847282][T12449] do_syscall_64+0xd2/0x200 [ 182.847314][T12449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.847346][T12449] ? clear_bhb_loop+0x40/0x90 [ 182.847372][T12449] ? clear_bhb_loop+0x40/0x90 [ 182.847396][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.847479][T12449] RIP: 0033:0x7f03b832e9a9 [ 182.847498][T12449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.847520][T12449] RSP: 002b:00007f03b698f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.847543][T12449] RAX: ffffffffffffffda RBX: 00007f03b8555fa0 RCX: 00007f03b832e9a9 [ 182.847560][T12449] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 182.847610][T12449] RBP: 00007f03b698f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.847621][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.847670][T12449] R13: 0000000000000000 R14: 00007f03b8555fa0 R15: 00007ffd1f563fe8 [ 182.847692][T12449] [ 183.067427][T12447] loop3: detected capacity change from 0 to 8192 [ 183.116263][T12447] loop3: p1 p2 p4 [ 183.120268][T12447] loop3: p1 size 65536 extends beyond EOD, truncated [ 183.130546][T12447] loop3: p2 start 861536256 is beyond EOD, truncated [ 183.137323][T12447] loop3: p4 size 65536 extends beyond EOD, truncated [ 183.170325][T12461] netlink: 'syz.1.2891': attribute type 9 has an invalid length. [ 183.178254][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2891'. [ 183.193830][T12463] loop3: detected capacity change from 0 to 1024 [ 183.206826][T12463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.231046][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.412347][T12469] loop3: detected capacity change from 0 to 1024 [ 183.743791][T12485] netlink: 'syz.3.2897': attribute type 39 has an invalid length. [ 183.777898][T12489] loop2: detected capacity change from 0 to 128 [ 183.798732][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 183.811600][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.819278][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.827780][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.835357][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.867497][T12493] tipc: Enabling of bearer rejected, failed to enable media [ 183.897725][T12492] loop0: detected capacity change from 0 to 8192 [ 183.943550][T12496] loop4: detected capacity change from 0 to 2048 [ 184.097110][T12512] loop3: detected capacity change from 0 to 512 [ 184.112325][T12505] loop2: detected capacity change from 0 to 8192 [ 184.121666][T12505] FAULT_INJECTION: forcing a failure. [ 184.121666][T12505] name failslab, interval 1, probability 0, space 0, times 0 [ 184.134985][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.2.2904 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 184.135017][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.135030][T12505] Call Trace: [ 184.135036][T12505] [ 184.135115][T12505] __dump_stack+0x1d/0x30 [ 184.135142][T12505] dump_stack_lvl+0xe8/0x140 [ 184.135167][T12505] dump_stack+0x15/0x1b [ 184.135187][T12505] should_fail_ex+0x265/0x280 [ 184.135272][T12505] should_failslab+0x8c/0xb0 [ 184.135366][T12505] __kvmalloc_node_noprof+0x123/0x4e0 [ 184.135468][T12505] ? xt_alloc_table_info+0x3b/0x80 [ 184.135507][T12505] ? should_fail_ex+0xdb/0x280 [ 184.135543][T12505] xt_alloc_table_info+0x3b/0x80 [ 184.135573][T12505] do_ip6t_set_ctl+0x5a5/0x840 [ 184.135642][T12505] nf_setsockopt+0x196/0x1b0 [ 184.135671][T12505] ipv6_setsockopt+0x11a/0x130 [ 184.135702][T12505] udpv6_setsockopt+0x99/0xb0 [ 184.135725][T12505] sock_common_setsockopt+0x69/0x80 [ 184.135757][T12505] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.135855][T12505] __sys_setsockopt+0x184/0x200 [ 184.135896][T12505] __x64_sys_setsockopt+0x64/0x80 [ 184.136008][T12505] x64_sys_call+0x2bd5/0x2fb0 [ 184.136034][T12505] do_syscall_64+0xd2/0x200 [ 184.136057][T12505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.136109][T12505] ? clear_bhb_loop+0x40/0x90 [ 184.136129][T12505] ? clear_bhb_loop+0x40/0x90 [ 184.136152][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.136178][T12505] RIP: 0033:0x7f096a5fe9a9 [ 184.136197][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.136262][T12505] RSP: 002b:00007f0968c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.136281][T12505] RAX: ffffffffffffffda RBX: 00007f096a826080 RCX: 00007f096a5fe9a9 [ 184.136295][T12505] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 184.136310][T12505] RBP: 00007f0968c3e090 R08: 0000000000000590 R09: 0000000000000000 [ 184.136326][T12505] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.136342][T12505] R13: 0000000000000000 R14: 00007f096a826080 R15: 00007ffde0279c98 [ 184.136438][T12505] [ 184.355332][T12509] veth21: entered promiscuous mode [ 184.360712][T12509] veth21: entered allmulticast mode [ 184.382241][T12512] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.422107][T12512] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2907: corrupted inode contents [ 184.442885][T12512] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2907: mark_inode_dirty error [ 184.476553][T12512] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2907: corrupted inode contents [ 184.499195][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2912'. [ 184.518579][T12524] netem: change failed [ 184.609342][T12528] siw: device registration error -23 [ 184.717896][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 184.778165][T12551] netlink: 'syz.4.2918': attribute type 16 has an invalid length. [ 184.786138][T12551] netlink: 'syz.4.2918': attribute type 17 has an invalid length. [ 184.836420][T12551] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 184.843105][T12551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.850819][T12551] vhci_hcd vhci_hcd.0: Device attached [ 184.898435][T12553] vhci_hcd: connection closed [ 184.898655][ T5349] vhci_hcd: stop threads [ 184.908643][ T5349] vhci_hcd: release socket [ 184.913115][ T5349] vhci_hcd: disconnect device [ 185.084966][T12556] siw: device registration error -23 [ 185.308074][T12565] loop3: detected capacity change from 0 to 128 [ 185.431904][T12572] loop4: detected capacity change from 0 to 1024 [ 185.447629][T12572] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.525340][T12582] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 185.567481][T12582] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 185.580043][T12582] EXT4-fs (loop4): This should not happen!! Data will be lost [ 185.580043][T12582] [ 185.589765][T12582] EXT4-fs (loop4): Total free blocks count 0 [ 185.595805][T12582] EXT4-fs (loop4): Free/Dirty block details [ 185.601874][T12582] EXT4-fs (loop4): free_blocks=4293918720 [ 185.607721][T12582] EXT4-fs (loop4): dirty_blocks=16 [ 185.612865][T12582] EXT4-fs (loop4): Block reservation details [ 185.619357][T12582] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 185.632743][T12581] loop3: detected capacity change from 0 to 760 [ 185.640859][T12581] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.653310][T12581] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 185.658798][T12588] FAULT_INJECTION: forcing a failure. [ 185.658798][T12588] name failslab, interval 1, probability 0, space 0, times 0 [ 185.663863][T12581] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 185.676991][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.1.2929 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 185.677071][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.677089][T12588] Call Trace: [ 185.677099][T12588] [ 185.677112][T12588] __dump_stack+0x1d/0x30 [ 185.677142][T12588] dump_stack_lvl+0xe8/0x140 [ 185.677169][T12588] dump_stack+0x15/0x1b [ 185.677193][T12588] should_fail_ex+0x265/0x280 [ 185.677281][T12588] ? gen_new_estimator+0x117/0x400 [ 185.677315][T12588] should_failslab+0x8c/0xb0 [ 185.677371][T12588] __kmalloc_cache_noprof+0x4c/0x320 [ 185.677412][T12588] gen_new_estimator+0x117/0x400 [ 185.677443][T12588] ? should_failslab+0x8c/0xb0 [ 185.677477][T12588] xt_rateest_tg_checkentry+0x25e/0x5a0 [ 185.677559][T12588] xt_check_target+0x28d/0x4c0 [ 185.677657][T12588] ? strnlen+0x28/0x50 [ 185.677685][T12588] ? strcmp+0x22/0x50 [ 185.677711][T12588] ? xt_find_target+0x1cd/0x200 [ 185.677755][T12588] translate_table+0xcf5/0x1070 [ 185.677819][T12588] do_ip6t_set_ctl+0x678/0x840 [ 185.677919][T12588] ? kstrtoull+0x111/0x140 [ 185.677956][T12588] ? __rcu_read_unlock+0x4f/0x70 [ 185.678001][T12588] nf_setsockopt+0x196/0x1b0 [ 185.678039][T12588] ipv6_setsockopt+0x11a/0x130 [ 185.678135][T12588] tcp_setsockopt+0x95/0xb0 [ 185.678231][T12588] sock_common_setsockopt+0x69/0x80 [ 185.678267][T12588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.678330][T12588] __sys_setsockopt+0x184/0x200 [ 185.678376][T12588] __x64_sys_setsockopt+0x64/0x80 [ 185.678466][T12588] x64_sys_call+0x2bd5/0x2fb0 [ 185.678495][T12588] do_syscall_64+0xd2/0x200 [ 185.678521][T12588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.678558][T12588] ? clear_bhb_loop+0x40/0x90 [ 185.678682][T12588] ? clear_bhb_loop+0x40/0x90 [ 185.678715][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.678744][T12588] RIP: 0033:0x7f03b832e9a9 [ 185.678766][T12588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.678791][T12588] RSP: 002b:00007f03b698f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.678864][T12588] RAX: ffffffffffffffda RBX: 00007f03b8555fa0 RCX: 00007f03b832e9a9 [ 185.678944][T12588] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 185.678970][T12588] RBP: 00007f03b698f090 R08: 0000000000000660 R09: 0000000000000000 [ 185.678989][T12588] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 185.679006][T12588] R13: 0000000000000000 R14: 00007f03b8555fa0 R15: 00007ffd1f563fe8 [ 185.679068][T12588] [ 185.721837][T12591] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.834471][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 185.834491][ T29] audit: type=1326 audit(1753239966.629:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 185.979757][ T29] audit: type=1326 audit(1753239966.629:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.003398][ T29] audit: type=1326 audit(1753239966.629:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.027158][ T29] audit: type=1326 audit(1753239966.629:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.050849][ T29] audit: type=1326 audit(1753239966.629:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.074524][ T29] audit: type=1326 audit(1753239966.629:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.098038][ T29] audit: type=1326 audit(1753239966.639:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.121654][ T29] audit: type=1326 audit(1753239966.639:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.145317][ T29] audit: type=1326 audit(1753239966.639:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.168927][ T29] audit: type=1326 audit(1753239966.639:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f096a5fe9a9 code=0x7ffc0000 [ 186.899859][T12619] FAULT_INJECTION: forcing a failure. [ 186.899859][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.913028][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.0.2941 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 186.913096][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.913109][T12619] Call Trace: [ 186.913115][T12619] [ 186.913122][T12619] __dump_stack+0x1d/0x30 [ 186.913187][T12619] dump_stack_lvl+0xe8/0x140 [ 186.913206][T12619] dump_stack+0x15/0x1b [ 186.913221][T12619] should_fail_ex+0x265/0x280 [ 186.913256][T12619] should_fail+0xb/0x20 [ 186.913338][T12619] should_fail_usercopy+0x1a/0x20 [ 186.913369][T12619] _copy_to_user+0x20/0xa0 [ 186.913389][T12619] simple_read_from_buffer+0xb5/0x130 [ 186.913478][T12619] proc_fail_nth_read+0x100/0x140 [ 186.913519][T12619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.913568][T12619] vfs_read+0x19d/0x6f0 [ 186.913597][T12619] ? __rcu_read_unlock+0x4f/0x70 [ 186.913619][T12619] ? __fget_files+0x184/0x1c0 [ 186.913719][T12619] ksys_read+0xda/0x1a0 [ 186.913846][T12619] __x64_sys_read+0x40/0x50 [ 186.913890][T12619] x64_sys_call+0x2d77/0x2fb0 [ 186.913916][T12619] do_syscall_64+0xd2/0x200 [ 186.913945][T12619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.914011][T12619] ? clear_bhb_loop+0x40/0x90 [ 186.914039][T12619] ? clear_bhb_loop+0x40/0x90 [ 186.914082][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.914104][T12619] RIP: 0033:0x7f6a805cd3bc [ 186.914119][T12619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.914182][T12619] RSP: 002b:00007f6a7ec37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.914207][T12619] RAX: ffffffffffffffda RBX: 00007f6a807f5fa0 RCX: 00007f6a805cd3bc [ 186.914223][T12619] RDX: 000000000000000f RSI: 00007f6a7ec370a0 RDI: 000000000000000a [ 186.914239][T12619] RBP: 00007f6a7ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 186.914316][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.914331][T12619] R13: 0000000000000000 R14: 00007f6a807f5fa0 R15: 00007ffe1acce608 [ 186.914355][T12619] [ 187.239032][T12640] loop4: detected capacity change from 0 to 1024 [ 187.264638][T12640] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 187.308688][T12642] netlink: 'syz.0.2945': attribute type 39 has an invalid length. [ 187.351277][T12644] loop2: detected capacity change from 0 to 512 [ 187.404261][T12640] tipc: Resetting bearer [ 187.411137][T12644] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.438014][T12644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2946: bg 0: block 289: padding at end of block bitmap is not set [ 187.683199][T12625] chnl_net:caif_netlink_parms(): no params data found [ 187.775489][T12672] FAULT_INJECTION: forcing a failure. [ 187.775489][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 187.788273][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.2.2954 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 187.788300][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.788317][T12672] Call Trace: [ 187.788324][T12672] [ 187.788331][T12672] __dump_stack+0x1d/0x30 [ 187.788357][T12672] dump_stack_lvl+0xe8/0x140 [ 187.788406][T12672] dump_stack+0x15/0x1b [ 187.788425][T12672] should_fail_ex+0x265/0x280 [ 187.788457][T12672] should_failslab+0x8c/0xb0 [ 187.788481][T12672] kmem_cache_alloc_noprof+0x50/0x310 [ 187.788562][T12672] ? security_file_alloc+0x32/0x100 [ 187.788584][T12672] security_file_alloc+0x32/0x100 [ 187.788678][T12672] init_file+0x5c/0x1d0 [ 187.788700][T12672] alloc_empty_file+0x8b/0x200 [ 187.788723][T12672] path_openat+0x68/0x2170 [ 187.788751][T12672] ? _parse_integer_limit+0x170/0x190 [ 187.788799][T12672] ? kstrtoull+0x111/0x140 [ 187.788824][T12672] ? kstrtouint+0x76/0xc0 [ 187.788862][T12672] do_filp_open+0x109/0x230 [ 187.788898][T12672] do_sys_openat2+0xa6/0x110 [ 187.788945][T12672] __x64_sys_openat+0xf2/0x120 [ 187.789051][T12672] x64_sys_call+0x1af/0x2fb0 [ 187.789074][T12672] do_syscall_64+0xd2/0x200 [ 187.789096][T12672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.789125][T12672] ? clear_bhb_loop+0x40/0x90 [ 187.789145][T12672] ? clear_bhb_loop+0x40/0x90 [ 187.789199][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.789220][T12672] RIP: 0033:0x7f096a5fe9a9 [ 187.789238][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.789260][T12672] RSP: 002b:00007f0968c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.789289][T12672] RAX: ffffffffffffffda RBX: 00007f096a825fa0 RCX: 00007f096a5fe9a9 [ 187.789301][T12672] RDX: 0000000000000000 RSI: 0000200000001080 RDI: ffffffffffffff9c [ 187.789313][T12672] RBP: 00007f0968c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.789325][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.789337][T12672] R13: 0000000000000000 R14: 00007f096a825fa0 R15: 00007ffde0279c98 [ 187.789357][T12672] [ 187.804206][T12605] syz.3.2936 (12605) used greatest stack depth: 6776 bytes left [ 188.025196][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.032391][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.060666][T12625] bridge_slave_0: entered allmulticast mode [ 188.087000][T12625] bridge_slave_0: entered promiscuous mode [ 188.114691][T12625] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.121884][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.146581][T12625] bridge_slave_1: entered allmulticast mode [ 188.163795][T12625] bridge_slave_1: entered promiscuous mode [ 188.197607][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.217198][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.278243][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2957'. [ 188.279574][T12625] team0: Port device team_slave_0 added [ 188.303480][T12687] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2959'. [ 188.307398][T12625] team0: Port device team_slave_1 added [ 188.326783][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 188.347585][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.354684][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.380771][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.442760][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.449835][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.476008][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.492154][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2958'. [ 188.506093][T12693] FAULT_INJECTION: forcing a failure. [ 188.506093][T12693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.519940][T12693] CPU: 0 UID: 0 PID: 12693 Comm: syz.4.2961 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 188.519976][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.519994][T12693] Call Trace: [ 188.520001][T12693] [ 188.520011][T12693] __dump_stack+0x1d/0x30 [ 188.520102][T12693] dump_stack_lvl+0xe8/0x140 [ 188.520128][T12693] dump_stack+0x15/0x1b [ 188.520150][T12693] should_fail_ex+0x265/0x280 [ 188.520191][T12693] should_fail+0xb/0x20 [ 188.520295][T12693] should_fail_usercopy+0x1a/0x20 [ 188.520338][T12693] _copy_from_user+0x1c/0xb0 [ 188.520392][T12693] input_event_from_user+0x5f/0x160 [ 188.520429][T12693] ? input_inject_event+0xd9/0xf0 [ 188.520593][T12693] evdev_write+0x1b1/0x290 [ 188.520619][T12693] ? __pfx_evdev_write+0x10/0x10 [ 188.520637][T12693] vfs_write+0x269/0x8e0 [ 188.520700][T12693] ? __rcu_read_unlock+0x4f/0x70 [ 188.520729][T12693] ? __fget_files+0x184/0x1c0 [ 188.520827][T12693] ksys_write+0xda/0x1a0 [ 188.520868][T12693] __x64_sys_write+0x40/0x50 [ 188.520931][T12693] x64_sys_call+0x2cdd/0x2fb0 [ 188.520961][T12693] do_syscall_64+0xd2/0x200 [ 188.520987][T12693] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.521088][T12693] ? clear_bhb_loop+0x40/0x90 [ 188.521112][T12693] ? clear_bhb_loop+0x40/0x90 [ 188.521201][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.521223][T12693] RIP: 0033:0x7f8d7911e9a9 [ 188.521238][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.521257][T12693] RSP: 002b:00007f8d7777f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.521334][T12693] RAX: ffffffffffffffda RBX: 00007f8d79345fa0 RCX: 00007f8d7911e9a9 [ 188.521422][T12693] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 188.521437][T12693] RBP: 00007f8d7777f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.521453][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.521469][T12693] R13: 0000000000000000 R14: 00007f8d79345fa0 R15: 00007ffd61f0ddf8 [ 188.521517][T12693] [ 188.767702][T12625] hsr_slave_0: entered promiscuous mode [ 188.783758][T12625] hsr_slave_1: entered promiscuous mode [ 188.791927][T12625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.803907][T12697] loop3: detected capacity change from 0 to 512 [ 188.816234][T12625] Cannot create hsr debugfs directory [ 188.833293][T12697] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.856256][T12697] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2964: corrupted inode contents [ 188.871713][T12697] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2964: mark_inode_dirty error [ 188.895278][T12706] siw: device registration error -23 [ 188.903366][T12697] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2964: corrupted inode contents [ 188.970344][T12711] loop2: detected capacity change from 0 to 512 [ 188.994038][T12711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.007844][T12711] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.209131][T12625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.223804][T12625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.242401][T12625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.260090][T12625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.370188][T12735] loop2: detected capacity change from 0 to 1764 [ 189.378426][T12625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.388269][T12735] ISOFS: Bad logical zone size 2051 [ 189.389143][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2974'. [ 189.402567][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2974'. [ 189.409838][T12625] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.449994][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.457127][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.471274][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.478498][ T5345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.566029][T12748] siw: device registration error -23 [ 189.634616][T12625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.772607][T12776] loop3: detected capacity change from 0 to 2048 [ 189.804401][T12625] veth0_vlan: entered promiscuous mode [ 189.828398][T12625] veth1_vlan: entered promiscuous mode [ 189.838927][T12776] Alternate GPT is invalid, using primary GPT. [ 189.845310][T12776] loop3: p1 p2 p3 [ 189.884240][T12625] veth0_macvtap: entered promiscuous mode [ 189.921265][T12625] veth1_macvtap: entered promiscuous mode [ 189.942068][T12776] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 189.961270][T12625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.980043][T12625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.991201][T12625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.000797][T12625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.009668][T12625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.019126][T12625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.115038][T12785] netlink: 'syz.1.2942': attribute type 9 has an invalid length. [ 190.516454][T12809] netlink: 'syz.4.2995': attribute type 39 has an invalid length. [ 190.575114][T12815] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.586890][T12815] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 190.598984][T12787] loop3: detected capacity change from 0 to 1024 [ 190.742525][T12828] loop2: detected capacity change from 0 to 512 [ 190.767745][T12828] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 190.787225][T12828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.800380][T12828] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.823267][T12828] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 190.830779][T12828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3002: bg 0: block 40: padding at end of block bitmap is not set [ 190.846447][T12828] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 190.855691][T12828] EXT4-fs (loop2): 1 truncate cleaned up [ 190.883380][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 190.883400][ T29] audit: type=1326 audit(1753239971.729:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328481e9a9 code=0x7ffc0000 [ 190.918210][ T29] audit: type=1326 audit(1753239971.729:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328481e9a9 code=0x7ffc0000 [ 191.064828][ T29] audit: type=1400 audit(1753239971.909:5557): avc: denied { write } for pid=12843 comm="syz.1.3006" path="socket:[34988]" dev="sockfs" ino=34988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.583958][T12853] loop4: detected capacity change from 0 to 512 [ 191.648859][T12853] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 191.827681][T12853] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.857583][T12859] FAULT_INJECTION: forcing a failure. [ 191.857583][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 191.870294][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.3.3012 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 191.870322][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.870334][T12859] Call Trace: [ 191.870401][T12859] [ 191.870412][T12859] __dump_stack+0x1d/0x30 [ 191.870438][T12859] dump_stack_lvl+0xe8/0x140 [ 191.870460][T12859] dump_stack+0x15/0x1b [ 191.870481][T12859] should_fail_ex+0x265/0x280 [ 191.870548][T12859] should_failslab+0x8c/0xb0 [ 191.870569][T12859] __kvmalloc_node_noprof+0x123/0x4e0 [ 191.870605][T12859] ? page_pool_create_percpu+0x236/0x630 [ 191.870639][T12859] page_pool_create_percpu+0x236/0x630 [ 191.870792][T12859] page_pool_create+0x1a/0x30 [ 191.870821][T12859] bpf_test_run_xdp_live+0x12e/0xfe0 [ 191.870892][T12859] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 191.870920][T12859] ? __pfx_autoremove_wake_function+0x10/0x10 [ 191.870954][T12859] ? 0xffffffffa02057c0 [ 191.870972][T12859] ? synchronize_rcu+0x45/0x320 [ 191.871035][T12859] ? 0xffffffffa02057c0 [ 191.871071][T12859] ? 0xffffffffa02057c0 [ 191.871083][T12859] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 191.871115][T12859] ? 0xffffffffa0201a54 [ 191.871148][T12859] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 191.871182][T12859] bpf_prog_test_run_xdp+0x4f5/0x910 [ 191.871227][T12859] ? __rcu_read_unlock+0x4f/0x70 [ 191.871277][T12859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 191.871308][T12859] bpf_prog_test_run+0x22a/0x390 [ 191.871393][T12859] __sys_bpf+0x3dc/0x790 [ 191.871434][T12859] __x64_sys_bpf+0x41/0x50 [ 191.871513][T12859] x64_sys_call+0x2478/0x2fb0 [ 191.871541][T12859] do_syscall_64+0xd2/0x200 [ 191.871564][T12859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.871607][T12859] ? clear_bhb_loop+0x40/0x90 [ 191.871705][T12859] ? clear_bhb_loop+0x40/0x90 [ 191.871742][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.871763][T12859] RIP: 0033:0x7f3a168ce9a9 [ 191.871780][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.871864][T12859] RSP: 002b:00007f3a14f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.871980][T12859] RAX: ffffffffffffffda RBX: 00007f3a16af5fa0 RCX: 00007f3a168ce9a9 [ 191.871996][T12859] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 191.872012][T12859] RBP: 00007f3a14f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.872027][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.872039][T12859] R13: 0000000000000000 R14: 00007f3a16af5fa0 R15: 00007ffd27a12e98 [ 191.872062][T12859] [ 191.872088][T12859] page_pool_create_percpu() gave up with errno -12 [ 192.059172][ T29] audit: type=1404 audit(1753239972.129:5558): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 192.154226][ T29] audit: type=1404 audit(1753239972.129:5559): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 192.170039][ T29] audit: type=1400 audit(1753239972.189:5560): avc: denied { egress } for pid=5345 comm="kworker/u8:25" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 192.196155][ T29] audit: type=1400 audit(1753239972.189:5561): avc: denied { sendto } for pid=5345 comm="kworker/u8:25" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 192.222174][ T29] audit: type=1400 audit(1753239972.229:5562): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.235605][T12853] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3008: Block bitmap for bg 0 marked uninitialized [ 192.247188][ T29] audit: type=1400 audit(1753239972.229:5563): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.284475][ T29] audit: type=1400 audit(1753239972.229:5564): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.327108][T12853] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 192.355365][T12853] EXT4-fs (loop4): 1 orphan inode deleted [ 192.361683][T12853] EXT4-fs mount: 16 callbacks suppressed [ 192.361695][T12853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.538201][T12862] siw: device registration error -23 [ 192.544112][T12864] siw: device registration error -23 [ 192.869714][T12872] netlink: 'syz.3.3018': attribute type 39 has an invalid length. [ 192.918707][T12874] loop2: detected capacity change from 0 to 2048 [ 192.929556][T12877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3020'. [ 192.953897][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.964301][T12874] loop2: p1 < > p4 [ 192.980681][T12874] loop2: p4 size 8388608 extends beyond EOD, truncated [ 192.990399][T12880] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 193.008888][T12874] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3019'. [ 193.060932][T12888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3024'. [ 193.149177][T12898] netlink: 'syz.4.3028': attribute type 9 has an invalid length. [ 193.177576][T12894] siw: device registration error -23 [ 193.207012][T12900] loop2: detected capacity change from 0 to 128 [ 193.218800][T12900] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.231129][T12900] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.240487][T12902] loop4: detected capacity change from 0 to 512 [ 193.283785][T12902] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3030: corrupted inode contents [ 193.347757][T12902] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3030: mark_inode_dirty error [ 193.392221][T12902] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3030: corrupted inode contents [ 193.430186][T12902] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3030: mark_inode_dirty error [ 193.462902][T12902] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3030: corrupted inode contents [ 193.482132][T12916] loop3: detected capacity change from 0 to 4096 [ 193.486818][T12902] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 193.512473][T12915] loop2: detected capacity change from 0 to 2048 [ 193.518455][T12902] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3030: corrupted inode contents [ 193.541689][T12902] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3030: mark_inode_dirty error [ 193.542153][T12916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.572713][T12916] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.582086][T12902] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 193.594022][T12915] Alternate GPT is invalid, using primary GPT. [ 193.600485][T12915] loop2: p2 p3 p7 [ 193.622579][T12902] EXT4-fs (loop4): 1 truncate cleaned up [ 193.636698][ T5349] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 193.637127][T12902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.691314][T12902] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.712309][T12930] loop2: detected capacity change from 0 to 512 [ 193.731399][T12902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3030'. [ 193.742695][T12930] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3039: corrupted inode contents [ 193.792259][T12930] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3039: mark_inode_dirty error [ 193.801066][T12937] pimreg: entered allmulticast mode [ 193.824288][T12930] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3039: corrupted inode contents [ 193.826613][T12937] pimreg: left allmulticast mode [ 193.845107][T12939] netlink: 'syz.1.3041': attribute type 9 has an invalid length. [ 193.853691][T12930] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3039: mark_inode_dirty error [ 193.870607][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.875623][T12930] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3039: corrupted inode contents [ 193.894930][T12930] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 193.903996][T12930] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3039: corrupted inode contents [ 193.918065][T12930] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3039: mark_inode_dirty error [ 193.926170][T12940] loop3: detected capacity change from 0 to 512 [ 193.939603][T12930] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 193.960100][T12937] netlink: 'syz.3.3040': attribute type 10 has an invalid length. [ 193.963336][T12930] EXT4-fs (loop2): 1 truncate cleaned up [ 193.976343][T12937] netlink: 'syz.3.3040': attribute type 10 has an invalid length. [ 193.982605][T12930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.984513][ T5345] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 193.998988][T12930] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.017486][T12937] loop3: detected capacity change from 0 to 256 [ 194.035101][T12937] FAT-fs (loop3): bogus number of FAT sectors [ 194.035129][T12937] FAT-fs (loop3): Can't find a valid FAT filesystem [ 194.060337][T12930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3039'. [ 194.084275][T12022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.115384][T12950] loop2: detected capacity change from 0 to 1024 [ 194.134392][T12950] EXT4-fs: Ignoring removed orlov option [ 194.163341][T12950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.194948][T12954] FAULT_INJECTION: forcing a failure. [ 194.194948][T12954] name failslab, interval 1, probability 0, space 0, times 0 [ 194.207901][T12954] CPU: 1 UID: 0 PID: 12954 Comm: syz.1.3046 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 194.207938][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.207956][T12954] Call Trace: [ 194.208001][T12954] [ 194.208009][T12954] __dump_stack+0x1d/0x30 [ 194.208030][T12954] dump_stack_lvl+0xe8/0x140 [ 194.208052][T12954] dump_stack+0x15/0x1b [ 194.208074][T12954] should_fail_ex+0x265/0x280 [ 194.208113][T12954] should_failslab+0x8c/0xb0 [ 194.208204][T12954] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 194.208251][T12954] ? sidtab_sid2str_get+0xa0/0x130 [ 194.208281][T12954] kmemdup_noprof+0x2b/0x70 [ 194.208311][T12954] sidtab_sid2str_get+0xa0/0x130 [ 194.208376][T12954] security_sid_to_context_core+0x1eb/0x2e0 [ 194.208410][T12954] security_sid_to_context+0x27/0x40 [ 194.208439][T12954] avc_audit_post_callback+0x10f/0x520 [ 194.208472][T12954] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 194.208579][T12954] common_lsm_audit+0x1bb/0x230 [ 194.208648][T12954] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 194.208680][T12954] ? avc_denied+0xe4/0x100 [ 194.208705][T12954] slow_avc_audit+0x104/0x140 [ 194.208734][T12954] avc_has_perm+0x128/0x150 [ 194.208780][T12954] selinux_mount+0x2ba/0x310 [ 194.208902][T12954] security_sb_mount+0x5f/0xb0 [ 194.208980][T12954] ? path_mount+0x89/0xb20 [ 194.209021][T12954] path_mount+0xa9/0xb20 [ 194.209062][T12954] ? user_path_at+0x109/0x130 [ 194.209105][T12954] __se_sys_mount+0x28f/0x2e0 [ 194.209223][T12954] ? fput+0x8f/0xc0 [ 194.209247][T12954] __x64_sys_mount+0x67/0x80 [ 194.209367][T12954] x64_sys_call+0xd36/0x2fb0 [ 194.209392][T12954] do_syscall_64+0xd2/0x200 [ 194.209415][T12954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.209483][T12954] ? clear_bhb_loop+0x40/0x90 [ 194.209581][T12954] ? clear_bhb_loop+0x40/0x90 [ 194.209632][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.209660][T12954] RIP: 0033:0x7f328481e9a9 [ 194.209679][T12954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.209703][T12954] RSP: 002b:00007f3282e7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.209782][T12954] RAX: ffffffffffffffda RBX: 00007f3284a45fa0 RCX: 00007f328481e9a9 [ 194.209800][T12954] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 194.209818][T12954] RBP: 00007f3282e7f090 R08: 0000200000000400 R09: 0000000000000000 [ 194.209835][T12954] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000002 [ 194.209852][T12954] R13: 0000000000000000 R14: 00007f3284a45fa0 R15: 00007ffeda18dd58 [ 194.209937][T12954] [ 194.477106][T12954] 9pnet_fd: Insufficient options for proto=fd [ 194.503967][T12956] loop3: detected capacity change from 0 to 512 [ 194.519699][T12956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.547674][T12022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.599339][T12970] loop2: detected capacity change from 0 to 512 [ 194.617456][T12956] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.648239][T12956] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3047: corrupted inode contents [ 194.661723][T12970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 194.692236][T12956] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3047: mark_inode_dirty error [ 194.707392][T12970] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 194.727746][T12970] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 194.741103][T12956] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3047: corrupted inode contents [ 194.752930][T12970] EXT4-fs (loop2): 2 truncates cleaned up [ 194.760042][T12970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.829212][T12970] wireguard0: entered promiscuous mode [ 194.834911][T12970] wireguard0: entered allmulticast mode [ 195.078682][T12022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.128565][T12625] ================================================================== [ 195.136712][T12625] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 195.144671][T12625] [ 195.147009][T12625] read-write to 0xffff88811aa7b3b0 of 8 bytes by task 12975 on cpu 0: [ 195.155202][T12625] shmem_add_to_page_cache+0x37f/0x490 [ 195.160716][T12625] shmem_get_folio_gfp+0x4e8/0xd60 [ 195.165881][T12625] shmem_write_begin+0xa8/0x190 [ 195.170787][T12625] generic_perform_write+0x181/0x490 [ 195.176109][T12625] shmem_file_write_iter+0xc5/0xf0 [ 195.181262][T12625] __kernel_write_iter+0x253/0x4c0 [ 195.186519][T12625] dump_user_range+0x407/0x8c0 [ 195.191340][T12625] elf_core_dump+0x1dc2/0x1f80 [ 195.196147][T12625] do_coredump+0x1dfa/0x27b0 [ 195.200789][T12625] get_signal+0xd85/0xf70 [ 195.205690][T12625] arch_do_signal_or_restart+0x96/0x480 [ 195.211271][T12625] irqentry_exit_to_user_mode+0x5e/0xa0 [ 195.216868][T12625] irqentry_exit+0x12/0x50 [ 195.221330][T12625] asm_exc_page_fault+0x26/0x30 [ 195.226223][T12625] [ 195.228579][T12625] read to 0xffff88811aa7b3b0 of 8 bytes by task 12625 on cpu 1: [ 195.236240][T12625] shmem_getattr+0x68/0x200 [ 195.240776][T12625] vfs_getattr_nosec+0x146/0x1e0 [ 195.245730][T12625] vfs_statx+0x113/0x390 [ 195.250005][T12625] vfs_fstatat+0x115/0x170 [ 195.254431][T12625] __se_sys_newfstatat+0x55/0x260 [ 195.259491][T12625] __x64_sys_newfstatat+0x55/0x70 [ 195.264548][T12625] x64_sys_call+0x2c22/0x2fb0 [ 195.269255][T12625] do_syscall_64+0xd2/0x200 [ 195.273792][T12625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.279713][T12625] [ 195.282051][T12625] value changed: 0x0000000000000d02 -> 0x0000000000000d04 [ 195.289169][T12625] [ 195.291510][T12625] Reported by Kernel Concurrency Sanitizer on: [ 195.297669][T12625] CPU: 1 UID: 0 PID: 12625 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 195.308621][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.318696][T12625] ================================================================== [ 195.349025][T12995] netlink: 'syz.1.3059': attribute type 39 has an invalid length. [ 195.592225][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.