last executing test programs: 53.715928617s ago: executing program 4 (id=771): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 53.482509021s ago: executing program 4 (id=774): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 53.124771764s ago: executing program 4 (id=779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700800095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x1, 0x2, 0x1200) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="b4002453bfc5a48bf804fd98a07c91ec0d4a004000"/31, @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 52.923252603s ago: executing program 4 (id=783): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000040)={[{@dioread_nolock}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2007) open(0x0, 0x145142, 0x0) creat(0x0, 0xc9028ba210c11ffc) r2 = io_uring_setup(0x68af, &(0x7f0000000340)={0x0, 0x0, 0x1880, 0x3, 0xfffffffd}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x4000, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) open(&(0x7f0000000400)='./file2\x00', 0x145142, 0xa1) 52.392740852s ago: executing program 4 (id=789): open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x20, 0x39687b9d0736c980, 0x80000001, 0x6, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x33, 0x3, [{0x6, 0x11, "9eac330dec0e97d8407460a895a56e"}, {0x0, 0xc, "83b5f9e3391f331162fc"}, {0x0, 0x8, "9c0492b1110a"}, {0x5, 0x8, "84f28b902c1c"}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0x6, [0x0, 0x8, 0x7, 0x6, 0x10001, 0x5, 0x1, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x29, 0x6, 0x8, 0x2, 0x60, @private1, @loopback, 0x700, 0x7800, 0x10, 0x401}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES64=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 52.279704298s ago: executing program 4 (id=791): open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x20, 0x39687b9d0736c980, 0x80000001, 0x6, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x33, 0x3, [{0x6, 0x11, "9eac330dec0e97d8407460a895a56e"}, {0x0, 0xc, "83b5f9e3391f331162fc"}, {0x0, 0x8, "9c0492b1110a"}, {0x5, 0x8, "84f28b902c1c"}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0x6, [0x0, 0x8, 0x7, 0x6, 0x10001, 0x5, 0x1, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x29, 0x6, 0x8, 0x2, 0x60, @private1, @loopback, 0x700, 0x7800, 0x10, 0x401}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES64=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 52.279485568s ago: executing program 32 (id=791): open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x20, 0x39687b9d0736c980, 0x80000001, 0x6, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x33, 0x3, [{0x6, 0x11, "9eac330dec0e97d8407460a895a56e"}, {0x0, 0xc, "83b5f9e3391f331162fc"}, {0x0, 0x8, "9c0492b1110a"}, {0x5, 0x8, "84f28b902c1c"}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0x6, [0x0, 0x8, 0x7, 0x6, 0x10001, 0x5, 0x1, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x29, 0x6, 0x8, 0x2, 0x60, @private1, @loopback, 0x700, 0x7800, 0x10, 0x401}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES64=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 2.680994208s ago: executing program 1 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x922, 0x12) 2.66507487s ago: executing program 1 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 2.645309833s ago: executing program 1 (id=1477): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000005c0)='rxrpc_call\x00', r2, 0x0, 0x3fc}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x0) fsopen(0x0, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000ac0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000203010100000000000000000400000808000540000000060800011501000006"], 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c814) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="36bec7dfbb", 0x5}], 0x1}}], 0x1, 0x8000) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "aa0a00", "ee92ef70fe6ee084b8fe6396902b9c17", "275eede6", "e4496167c37de8a5"}, 0x28) close_range(r4, 0xffffffffffffffff, 0x0) 2.581554742s ago: executing program 1 (id=1478): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0xe7fcd48c6242df2}, 0xd801) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) io_uring_setup(0x5b50, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132}) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r6, 0x80089203, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.504638464s ago: executing program 0 (id=1481): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000880)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x1, 0x4, 0x9, 0x3a22, 0x3}}, 0x118) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bind(r3, &(0x7f0000000280)=@can, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./file0\x00') syz_open_dev$loop(0x0, 0x6, 0x82040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r9, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x8, 0x0, 0x0}}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r10, 0xffffffffffffffff, 0x0) 1.909468121s ago: executing program 1 (id=1485): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xffff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x4008040) 1.839664301s ago: executing program 3 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002fc0)={&(0x7f0000000200)='rxrpc_local\x00', r3, 0x0, 0x37}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}}, 0x24) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880100a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x5, 0x900, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000300), 0x0}, 0x20) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x24200, 0x0) mq_timedsend(r10, &(0x7f0000000600)="b083c8aa41c4461e5c376cb11c58885cff2cb21ee3f0c81d60963c35e8cfc930b1a0cca86ff956465bef347796fcea58e66ad0605bd24622a70a60a7cd84c2fba447920534e843e58ac3f751b6aae66907ec5c98dc9b91d593807bf34c1ebf397aecde3fa6b4abae0a99acc94dacf0bce652ed2122b4ed29aa2884a59175f1ad0d7a48f98a718749e1c40da600adf83df59a73e7aaa8da6161e75fed2df5106889ece81991dd0123eb285ff8065ce84fc2a1473db608ff8e9a05b0cd93d6f6a219fd7d6e052cfc5a1a0e6f370631df7a2407f8a1a6cc652b0c4a3c288158e57f81f823ab5e02c3b05a96883f6d3b0700b9b49b16", 0xf4, 0x5, &(0x7f0000000740)) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001", @ANYRESDEC=r6, @ANYRESHEX=r0, @ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) 1.814697355s ago: executing program 3 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) 1.705892821s ago: executing program 3 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.603994986s ago: executing program 1 (id=1489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x14d640, 0x44) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x1b) 1.603557946s ago: executing program 0 (id=1490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="2200000002000000b70500060800000085007b497a54000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.549026583s ago: executing program 5 (id=1491): r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000000)=ANY=[], 0x5, 0x81a, &(0x7f0000002540)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = fcntl$getown(r0, 0x9) sched_getaffinity(r1, 0x8, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x2}, 0x18) chmod(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x30) 1.499460441s ago: executing program 0 (id=1492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="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", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) fdatasync(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r7 = semget$private(0x0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a00)={'\x00', 0xb, 0x100, 0xfffff800, 0x6, 0x1ff}) open(&(0x7f00000002c0)='./file0\x00', 0x64842, 0x99) semctl$IPC_RMID(r7, 0x0, 0x0) 1.425821422s ago: executing program 5 (id=1493): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.126322755s ago: executing program 3 (id=1494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b21000000000000000ee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4b62715595dca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgcpaaQwkxiYSpMYfickAU206tqTTYGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0hpYyUCilVfh+EjKHufdc7m2H5tymna27b57ks5aW1csSjCoJiIhsiwxLUDwB9xh04og0eimXB75/On/73v2bqXR6ckapqdTslaRSamjk/dPnMbfber9sDj/c+pb8uvnv5v9bv2Yf5yyVs1ShWFa6mit+KetzpqEWclZeU2raNHTLULmCZZRq7cVae9YsLi5WlF5YGIwvlgzLUnqhovJGRZWLqlyqqNAjPVdQmqapwbiglczKzIyeajN5vsOTwQkplVJ6SERie1oyKz2ZEAAA6Knm+j8oqpP1/+qFjfLAnbUht/5fj/jV/+Ofa2Ptqv+jIuJb/3t/v7H+t/tFnPpfP1r9v7ciOlta1P/hrk4G7RmJ7DkVqIfVxlJKj7v/v45XD1ZHnYD6HwAAAAAAAAAAAAAAAAAAAACAv8G2bSds2054R++nX0SiIuL97pMaEpFrPZgyOugYzz9OgfoX98JDIubrpcxSpnZ0O2yIiCmGjEpCfjrXg6sae988UlXD8sFcdvOXlzIhpyWVlZyTPyaJPmnOt+2pG+nJMVWzO79P4o35SUnIP/75Sd/8iFy62JCvSUI+zktRTFlw5lHPfzGm1PVb6ab8mNMPAAAAAIDTQFM7fPfvmrZfey1/Z3/d/P5AqL6/HvXdn4flHPeXAQAAAACgK6zKs7xumkbpgCAmrfu0H4RPaGRvhYfNqn2WwRaRk1rpAYH3QYpdTVH3ZMcflsARHpZ9gqC0kzVSXY067iq8t4326yPTE91/Bp3gv7fvfnRuwKtr0RYr1U1zPHfoiyTaME7o4Augr1uvPwAAAAC6p170e2cmejshAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOoG7cHa3XawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+FL8DAAD//+e/AWU=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fdatasync(r6) unshare(0x2040400) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.033927839s ago: executing program 2 (id=1495): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11238}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000340), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000000)) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 932.412944ms ago: executing program 3 (id=1496): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2e2, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x4}, 0x50) 867.978913ms ago: executing program 5 (id=1497): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x7, 0x1c00, 0x2}) 558.840798ms ago: executing program 2 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) 558.175358ms ago: executing program 0 (id=1499): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 513.584216ms ago: executing program 5 (id=1500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff55, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000006800010003001000f9ffff7f0000000000000000240002000003", @ANYRES32], 0x3c}}, 0x4000080) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000040)=""/18) 348.14152ms ago: executing program 2 (id=1501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x5}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044084) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f00000007c0)=""/242, 0xf2, 0x0, &(0x7f0000000400)=""/45, 0x2d}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="3b00000000000000000000000000000000000000982d5bc32bd8ada7e7ae6708053d2a9603a9826c79d1b36d61b15b0128e804f846afa8aeb44adb78584d10b31d3938a5bc06000000af9def12b21718099b82540c5528befb6e385d5f2cee082e495f691e83b4121de751a369c915030944b86862949495fd7bcdffdd5558a7dfef032aa843d94d68fe1e870a96520000000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="01000000020000000100"/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x300, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6b8}]}}]}, 0x3c}}, 0x200040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027f101f523003d068d348cdb7c3563b53820cdbcfb8cb92b80bdec784eb7d4aa76021d416476110a016bb360d6465c908218e4e9d4a647737611f6535c89cec08a09d48c8c01130458b354cb4fd55faeca7de75263c87cc5a392f2d89b97698842b82dbab7b18ae0b5a45a6ebc6c808011b9c6a35890caab6f9d6e92bce0bb25978665f38ab40af5f4666985d0bd67f047af02a4f4d950b351b2a70939633e8db425be3e5267a54d81f8b32a8d2eb3130f5f922422e19dbb6c110d68969c929b32c88daa9cf7bbaee6d9f6606ecd4212949476ca030000000000000083b693745cf89d79e008ef7b", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r6, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(r8, 0xffffffffffffffff, 0x0) 336.060012ms ago: executing program 0 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="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", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) fdatasync(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r7 = semget$private(0x0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a00)={'\x00', 0xb, 0x100, 0xfffff800, 0x6, 0x1ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000002c0)='./file0\x00', 0x64842, 0x99) semop(r7, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$IPC_RMID(r7, 0x0, 0x0) 277.82327ms ago: executing program 5 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25010000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 242.134945ms ago: executing program 2 (id=1504): open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x20, 0x39687b9d0736c980, 0x80000001, 0x6, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x33, 0x3, [{0x6, 0x11, "9eac330dec0e97d8407460a895a56e"}, {0x0, 0xc, "83b5f9e3391f331162fc"}, {0x0, 0x8, "9c0492b1110a"}, {0x5, 0x8, "84f28b902c1c"}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0x6, [0x0, 0x8, 0x7, 0x6, 0x10001, 0x5, 0x1, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x29, 0x6, 0x8, 0x2, 0x60, @private1, @loopback, 0x700, 0x7800, 0x10, 0x401}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES64=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 241.621475ms ago: executing program 5 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x8e}, 0x0) r0 = syz_clone(0x80008400, &(0x7f0000000300)="e1bf08edf95b04fd8096c79544e020f7228929520ed65af7b96cba387d96f62c8a6012136fa9e0e1ba150ee98caa397729ed65bb1cf23d577b8958573b970b98af263857d25cccaf519eb35fbab3daeef52e42cb921acc84c87f184272f505c0e6f2", 0x62, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000580)="c245edb07e8a86578b3c7bc419415a212ffcc4bd0f67b4f086655095bbc05762c9ea5f6ef5a898e410060c463efcb2a3b910e20d9e6e49ba5d793b2c8bc64b2b49e72507ae64ec89d0339a9e05a164930cdc0907310e343959801b0148f31efa47271422669ff5eb31d805978bae6a16336e94e3effdb3e59daff8b99315975bda9ef2f1b5ce9a7e1054a710a45f1544bf575a0d2dcfa50fa62e1c0bc6bbcafa8bc83ea86dd61cf611a7fbbc3cacab7db9051184c5aa2ffe3bcd76301fc602f80a7b1eb3a555600a40335b02c5d0") prlimit64(r0, 0x0, &(0x7f0000000400)={0x2}, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513c8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r12, 0x111, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu~\t\t') 152.986028ms ago: executing program 2 (id=1506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="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", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fdatasync(r6) unshare(0x2040400) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 74.848509ms ago: executing program 0 (id=1507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.225567ms ago: executing program 2 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="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", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) fdatasync(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r7 = semget$private(0x0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) semctl$IPC_RMID(r7, 0x0, 0x0) 0s ago: executing program 3 (id=1509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x6, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x24240, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r1, @ANYBLOB="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", @ANYRES64=0xffffffffffffffff], 0x8, 0x2ff, &(0x7f0000001540)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgcpaaQwkxiYSpMYfickAU206tqTTYGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0hpYyUCilVfh+EjKHufdc7m2H5tymna27b57ks5aW1csSjCoJiIhsiwxLUDwB9xh04og0eimXB75/On/73v2bqXR6ckapqdTslaRSamjk/dPnMbfber9sDj/c+pb8uvnv5v9bv2Yf5yyVs1ShWFa6mit+KetzpqEWclZeU2raNHTLULmCZZRq7cVae9YsLi5WlF5YGIwvlgzLUnqhovJGRZWLqlyqqNAjPVdQmqapwbiglczKzIyeajN5vsOTwQkplVJ6SERie1oyKz2ZEAAA6Knm+j8oqpP1/+qFjfLAnbUht/5fj/jV/+Ofa2Ptqv+jIuJb/3t/v7H+t/tFnPpfP1r9v7ciOlta1P/hrk4G7RmJ7DkVqIfVxlJKj7v/v45XD1ZHnYD6HwAAAAAAAAAAAAAAAAAAAACAv8G2bSds2054R++nX0SiIuL97pMaEpFrPZgyOugYzz9OgfoX98JDIubrpcxSpnZ0O2yIiCmGjEpCfjrXg6sae988UlXD8sFcdvOXlzIhpyWVlZyTPyaJPmnOt+2pG+nJMVWzO79P4o35SUnIP/75Sd/8iFy62JCvSUI+zktRTFlw5lHPfzGm1PVb6ab8mNMPAAAAAIDTQFM7fPfvmrZfey1/Z3/d/P5AqL6/HvXdn4flHPeXAQAAAACgK6zKs7xumkbpgCAmrfu0H4RPaGRvhYfNqn2WwRaRk1rpAYH3QYpdTVH3ZMcflsARHpZ9gqC0kzVSXY067iq8t4326yPTE91/Bp3gv7fvfnRuwKtr0RYr1U1zPHfoiyTaME7o4Augr1uvPwAAAAC6p170e2cmejshAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOoG7cHa3XawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+FL8DAAD//+e/AWU=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) fdatasync(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r7 = semget$private(0x0, 0x5, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a00)={'\x00', 0xb, 0x100, 0xfffff800, 0x6, 0x1ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000002c0)='./file0\x00', 0x64842, 0x99) semctl$IPC_RMID(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): (7, /dev/loop2p3, 10) failed: No such file or directory [ 93.024454][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 93.097502][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 93.108785][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.117593][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 93.537516][ T5349] FAULT_INJECTION: forcing a failure. [ 93.537516][ T5349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.550838][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.1.660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.550947][ T5349] Tainted: [W]=WARN [ 93.550954][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.550967][ T5349] Call Trace: [ 93.550975][ T5349] [ 93.551002][ T5349] __dump_stack+0x1d/0x30 [ 93.551107][ T5349] dump_stack_lvl+0x95/0xd0 [ 93.551135][ T5349] dump_stack+0x15/0x1b [ 93.551163][ T5349] should_fail_ex+0x265/0x280 [ 93.551187][ T5349] should_fail+0xb/0x20 [ 93.551207][ T5349] should_fail_usercopy+0x1a/0x20 [ 93.551313][ T5349] _copy_from_iter+0xcf/0xe70 [ 93.551339][ T5349] ? __alloc_skb+0x396/0x4b0 [ 93.551368][ T5349] ? __alloc_skb+0x228/0x4b0 [ 93.551421][ T5349] netlink_sendmsg+0x471/0x6b0 [ 93.551467][ T5349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.551506][ T5349] __sock_sendmsg+0x145/0x180 [ 93.551578][ T5349] ____sys_sendmsg+0x31e/0x4a0 [ 93.551635][ T5349] ___sys_sendmsg+0x17b/0x1d0 [ 93.551683][ T5349] __x64_sys_sendmsg+0xd4/0x160 [ 93.551725][ T5349] x64_sys_call+0x17ba/0x3000 [ 93.551753][ T5349] do_syscall_64+0xca/0x2b0 [ 93.551881][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.551957][ T5349] RIP: 0033:0x7fd7ebe2f749 [ 93.551976][ T5349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.552005][ T5349] RSP: 002b:00007fd7ea88f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.552104][ T5349] RAX: ffffffffffffffda RBX: 00007fd7ec085fa0 RCX: 00007fd7ebe2f749 [ 93.552120][ T5349] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 93.552136][ T5349] RBP: 00007fd7ea88f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.552150][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.552166][ T5349] R13: 00007fd7ec086038 R14: 00007fd7ec085fa0 R15: 00007ffeaed41e88 [ 93.552190][ T5349] [ 94.038675][ T5363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.083576][ T5363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.143056][ T5363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.205915][ T5361] set_capacity_and_notify: 9 callbacks suppressed [ 94.205937][ T5361] loop1: detected capacity change from 0 to 2048 [ 94.224388][ T5363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.255111][ T5369] loop3: detected capacity change from 0 to 128 [ 94.266208][ T5369] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.279644][ T3572] loop1: p1 p2 p3 [ 94.299972][ T5372] loop2: detected capacity change from 0 to 128 [ 94.314188][ T5369] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.336952][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359323][ T5369] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.667: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 94.371997][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387667][ T5369] EXT4-fs (loop3): Remounting filesystem read-only [ 94.414411][ T5361] loop1: p1 p2 p3 [ 94.419186][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.429968][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.440649][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.501112][ T5378] loop3: detected capacity change from 0 to 512 [ 94.549777][ T5378] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.670: iget: bad extra_isize 90 (inode size 256) [ 94.580342][ T5378] EXT4-fs (loop3): Remounting filesystem read-only [ 94.587263][ T5378] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 94.596482][ T5378] EXT4-fs (loop3): 1 orphan inode deleted [ 94.603376][ T5378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.616105][ T5378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.652239][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 94.730814][ T5389] netlink: 'syz.0.674': attribute type 30 has an invalid length. [ 94.786739][ T5389] netlink: 'syz.0.674': attribute type 16 has an invalid length. [ 94.794562][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 94.803745][ T5389] bridge_slave_1: left allmulticast mode [ 94.809438][ T5389] bridge_slave_1: left promiscuous mode [ 94.815329][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.824095][ T5389] bridge_slave_0: left allmulticast mode [ 94.829801][ T5389] bridge_slave_0: left promiscuous mode [ 94.835768][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.956469][ T5393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.978368][ T5393] veth2: entered promiscuous mode [ 94.983672][ T5393] veth2: entered allmulticast mode [ 95.503661][ T29] kauditd_printk_skb: 1731 callbacks suppressed [ 95.503677][ T29] audit: type=1400 audit(1768253912.733:22666): avc: denied { firmware_load } for pid=5403 comm="syz.4.680" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 95.559687][ T5406] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 95.569141][ T5406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 95.589865][ T29] audit: type=1326 audit(1768253912.813:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.616550][ T5411] loop2: detected capacity change from 0 to 128 [ 95.650661][ T29] audit: type=1326 audit(1768253912.843:22668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.674254][ T29] audit: type=1326 audit(1768253912.843:22669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.697700][ T29] audit: type=1326 audit(1768253912.843:22670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.721682][ T29] audit: type=1326 audit(1768253912.843:22671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.745353][ T29] audit: type=1326 audit(1768253912.843:22672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.768824][ T29] audit: type=1326 audit(1768253912.843:22673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.792285][ T29] audit: type=1326 audit(1768253912.843:22674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.815759][ T29] audit: type=1326 audit(1768253912.843:22675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 95.818142][ T5412] bio_check_eod: 717 callbacks suppressed [ 95.818181][ T5412] syz.2.682: attempt to access beyond end of device [ 95.818181][ T5412] loop2: rw=2049, sector=993, nr_sectors = 8 limit=128 [ 95.870381][ T5412] syz.2.682: attempt to access beyond end of device [ 95.870381][ T5412] loop2: rw=2049, sector=1009, nr_sectors = 8 limit=128 [ 95.897259][ T5412] syz.2.682: attempt to access beyond end of device [ 95.897259][ T5412] loop2: rw=2049, sector=1025, nr_sectors = 8 limit=128 [ 95.911119][ T5412] syz.2.682: attempt to access beyond end of device [ 95.911119][ T5412] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 95.941043][ T5412] syz.2.682: attempt to access beyond end of device [ 95.941043][ T5412] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 95.955037][ T5412] syz.2.682: attempt to access beyond end of device [ 95.955037][ T5412] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 95.969369][ T5412] syz.2.682: attempt to access beyond end of device [ 95.969369][ T5412] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 95.983159][ T5412] syz.2.682: attempt to access beyond end of device [ 95.983159][ T5412] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 95.998025][ T5412] syz.2.682: attempt to access beyond end of device [ 95.998025][ T5412] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 96.014390][ T5412] syz.2.682: attempt to access beyond end of device [ 96.014390][ T5412] loop2: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 96.085740][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 96.094866][ T5421] netlink: 108 bytes leftover after parsing attributes in process `syz.2.687'. [ 96.106471][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 96.116345][ T5421] netlink: 108 bytes leftover after parsing attributes in process `syz.2.687'. [ 96.125537][ T5421] netlink: 84 bytes leftover after parsing attributes in process `syz.2.687'. [ 97.063272][ T5444] loop1: detected capacity change from 0 to 128 [ 97.526333][ T5456] loop4: detected capacity change from 0 to 128 [ 97.559968][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 97.566147][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.618301][ T5459] loop3: detected capacity change from 0 to 2048 [ 97.661465][ T3572] loop3: p1 p2 p3 [ 97.671972][ T5459] loop3: p1 p2 p3 [ 97.751780][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 97.753252][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 97.762343][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 97.809089][ T5463] loop3: detected capacity change from 0 to 512 [ 97.823825][ T5463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.850071][ T5463] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.924603][ T5463] program syz.3.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.935031][ T5463] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.953841][ C1] hrtimer: interrupt took 53309 ns [ 97.984758][ T5463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.703'. [ 98.008329][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.021206][ T5481] loop2: detected capacity change from 0 to 128 [ 98.172161][ T5486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.710: iget: bad extra_isize 90 (inode size 256) [ 98.185943][ T5486] EXT4-fs (loop3): Remounting filesystem read-only [ 98.192649][ T5486] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 98.201863][ T5486] EXT4-fs (loop3): 1 orphan inode deleted [ 98.334576][ T5493] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.712: iget: bad extra_isize 90 (inode size 256) [ 98.348311][ T5493] EXT4-fs (loop4): Remounting filesystem read-only [ 98.355515][ T5493] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 98.364926][ T5493] EXT4-fs (loop4): 1 orphan inode deleted [ 98.801951][ T5517] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.722: iget: bad extra_isize 90 (inode size 256) [ 98.832217][ T5517] EXT4-fs (loop0): Remounting filesystem read-only [ 98.854973][ T5517] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 98.864260][ T5517] EXT4-fs (loop0): 1 orphan inode deleted [ 98.921321][ T5523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.724: iget: bad extra_isize 90 (inode size 256) [ 98.941355][ T5523] EXT4-fs (loop2): Remounting filesystem read-only [ 98.954394][ T5523] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 98.963668][ T5523] EXT4-fs (loop2): 1 orphan inode deleted [ 99.017907][ T5533] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.729: iget: bad extra_isize 90 (inode size 256) [ 99.031897][ T5533] EXT4-fs (loop1): Remounting filesystem read-only [ 99.038525][ T5533] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 99.048492][ T5533] EXT4-fs (loop1): 1 orphan inode deleted [ 99.209667][ T5549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.735: iget: bad extra_isize 90 (inode size 256) [ 99.223667][ T5549] EXT4-fs (loop2): Remounting filesystem read-only [ 99.230617][ T5549] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 99.239708][ T5549] EXT4-fs (loop2): 1 orphan inode deleted [ 99.376753][ T5561] set_capacity_and_notify: 6 callbacks suppressed [ 99.376845][ T5561] loop2: detected capacity change from 0 to 2048 [ 99.422137][ T5561] loop2: p1 p2 p3 [ 99.449289][ T3005] loop2: p1 p2 p3 [ 99.637402][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 99.811246][ T5590] loop2: detected capacity change from 0 to 2048 [ 99.871698][ T3572] loop2: p1 p2 p3 [ 99.887478][ T5590] loop2: p1 p2 p3 [ 100.035582][ T5597] loop3: detected capacity change from 0 to 512 [ 100.092892][ T5597] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.756: iget: bad extra_isize 90 (inode size 256) [ 100.142200][ T5597] EXT4-fs (loop3): Remounting filesystem read-only [ 100.149152][ T5597] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 100.179054][ T5597] EXT4-fs (loop3): 1 orphan inode deleted [ 100.253306][ T5611] FAULT_INJECTION: forcing a failure. [ 100.253306][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 100.266077][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.3.761 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.266136][ T5611] Tainted: [W]=WARN [ 100.266146][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.266162][ T5611] Call Trace: [ 100.266171][ T5611] [ 100.266180][ T5611] __dump_stack+0x1d/0x30 [ 100.266230][ T5611] dump_stack_lvl+0x95/0xd0 [ 100.266259][ T5611] dump_stack+0x15/0x1b [ 100.266371][ T5611] should_fail_ex+0x265/0x280 [ 100.266412][ T5611] should_failslab+0x8c/0xb0 [ 100.266459][ T5611] kmem_cache_alloc_noprof+0x69/0x4b0 [ 100.266508][ T5611] ? skb_clone+0x151/0x1f0 [ 100.266549][ T5611] skb_clone+0x151/0x1f0 [ 100.266578][ T5611] __netlink_deliver_tap+0x2c9/0x500 [ 100.266648][ T5611] netlink_unicast+0x66b/0x690 [ 100.266687][ T5611] netlink_sendmsg+0x58b/0x6b0 [ 100.266728][ T5611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.266856][ T5611] __sock_sendmsg+0x145/0x180 [ 100.266875][ T5611] ____sys_sendmsg+0x31e/0x4a0 [ 100.266903][ T5611] ___sys_sendmsg+0x17b/0x1d0 [ 100.266937][ T5611] __x64_sys_sendmsg+0xd4/0x160 [ 100.267033][ T5611] x64_sys_call+0x17ba/0x3000 [ 100.267065][ T5611] do_syscall_64+0xca/0x2b0 [ 100.267185][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.267214][ T5611] RIP: 0033:0x7f59ece1f749 [ 100.267230][ T5611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.267282][ T5611] RSP: 002b:00007f59eb887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.267372][ T5611] RAX: ffffffffffffffda RBX: 00007f59ed075fa0 RCX: 00007f59ece1f749 [ 100.267416][ T5611] RDX: 0000000000004800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 100.267432][ T5611] RBP: 00007f59eb887090 R08: 0000000000000000 R09: 0000000000000000 [ 100.267483][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.267495][ T5611] R13: 00007f59ed076038 R14: 00007f59ed075fa0 R15: 00007ffc1f633cb8 [ 100.267512][ T5611] [ 100.510092][ T29] kauditd_printk_skb: 3047 callbacks suppressed [ 100.510166][ T29] audit: type=1326 audit(1768253917.743:25723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.551867][ T29] audit: type=1326 audit(1768253917.743:25724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.575376][ T29] audit: type=1326 audit(1768253917.743:25725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.598889][ T29] audit: type=1326 audit(1768253917.743:25726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.622378][ T29] audit: type=1326 audit(1768253917.743:25727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.645791][ T29] audit: type=1326 audit(1768253917.743:25728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.669234][ T29] audit: type=1326 audit(1768253917.743:25729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd351fcdf90 code=0x7ffc0000 [ 100.692704][ T29] audit: type=1326 audit(1768253917.743:25730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd351fcdf90 code=0x7ffc0000 [ 100.716143][ T29] audit: type=1326 audit(1768253917.743:25731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.739809][ T29] audit: type=1326 audit(1768253917.833:25732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 100.774100][ T5624] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 100.825514][ T5631] loop3: detected capacity change from 0 to 128 [ 100.866868][ T5636] FAULT_INJECTION: forcing a failure. [ 100.866868][ T5636] name failslab, interval 1, probability 0, space 0, times 0 [ 100.879578][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: syz.4.771 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.879701][ T5636] Tainted: [W]=WARN [ 100.879710][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.879724][ T5636] Call Trace: [ 100.879730][ T5636] [ 100.879737][ T5636] __dump_stack+0x1d/0x30 [ 100.879810][ T5636] dump_stack_lvl+0x95/0xd0 [ 100.879838][ T5636] dump_stack+0x15/0x1b [ 100.879864][ T5636] should_fail_ex+0x265/0x280 [ 100.879898][ T5636] should_failslab+0x8c/0xb0 [ 100.879957][ T5636] __kmalloc_node_noprof+0xbe/0x5c0 [ 100.879986][ T5636] ? qdisc_alloc+0x65/0x410 [ 100.880095][ T5636] qdisc_alloc+0x65/0x410 [ 100.880174][ T5636] ? nla_strcmp+0xc3/0xe0 [ 100.880205][ T5636] qdisc_create+0xf5/0x9e0 [ 100.880228][ T5636] tc_modify_qdisc+0xf9c/0x1480 [ 100.880268][ T5636] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 100.880359][ T5636] rtnetlink_rcv_msg+0x65a/0x6d0 [ 100.880380][ T5636] ? avc_has_perm_noaudit+0xab/0x130 [ 100.880497][ T5636] netlink_rcv_skb+0x123/0x220 [ 100.880532][ T5636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.880638][ T5636] rtnetlink_rcv+0x1c/0x30 [ 100.880658][ T5636] netlink_unicast+0x5c0/0x690 [ 100.880717][ T5636] netlink_sendmsg+0x58b/0x6b0 [ 100.880757][ T5636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.880797][ T5636] __sock_sendmsg+0x145/0x180 [ 100.880833][ T5636] ____sys_sendmsg+0x345/0x4a0 [ 100.880972][ T5636] ___sys_sendmsg+0x17b/0x1d0 [ 100.881022][ T5636] __sys_sendmmsg+0x178/0x300 [ 100.881067][ T5636] __x64_sys_sendmmsg+0x57/0x70 [ 100.881146][ T5636] x64_sys_call+0x1e28/0x3000 [ 100.881176][ T5636] do_syscall_64+0xca/0x2b0 [ 100.881218][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.881266][ T5636] RIP: 0033:0x7f95fa18f749 [ 100.881283][ T5636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.881314][ T5636] RSP: 002b:00007f95f8bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.881332][ T5636] RAX: ffffffffffffffda RBX: 00007f95fa3e5fa0 RCX: 00007f95fa18f749 [ 100.881344][ T5636] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 100.881356][ T5636] RBP: 00007f95f8bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.881367][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.881378][ T5636] R13: 00007f95fa3e6038 R14: 00007f95fa3e5fa0 R15: 00007fffb1092ac8 [ 100.881397][ T5636] [ 100.891598][ T5633] loop2: detected capacity change from 0 to 732 [ 101.028167][ T5643] loop1: detected capacity change from 0 to 512 [ 101.095666][ T5633] iso9660: Unknown parameter ' ' [ 101.191914][ T5643] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.414825][ T3445] bio_check_eod: 327 callbacks suppressed [ 101.414842][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.414842][ T3445] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 101.462265][ T5643] program syz.1.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.470033][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.470033][ T3445] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 101.486462][ T5643] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 101.496577][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496577][ T3445] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 101.496641][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496641][ T3445] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 101.496718][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496718][ T3445] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 101.496777][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496777][ T3445] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 101.496820][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496820][ T3445] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 101.496864][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496864][ T3445] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 101.496984][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.496984][ T3445] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 101.497028][ T3445] kworker/u8:12: attempt to access beyond end of device [ 101.497028][ T3445] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 101.657608][ T5643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 101.688101][ T3320] EXT4-fs unmount: 15 callbacks suppressed [ 101.688149][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.719962][ T5667] loop4: detected capacity change from 0 to 4096 [ 101.738013][ T5670] loop0: detected capacity change from 0 to 128 [ 101.760684][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.881769][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 101.989253][ T5683] loop1: detected capacity change from 0 to 128 [ 102.141605][ T3323] EXT4-fs error (device loop4): __ext4_iget:5426: inode #11: block 127754: comm syz-executor: invalid block [ 102.153604][ T3323] EXT4-fs error (device loop4): __ext4_iget:5426: inode #11: block 127754: comm syz-executor: invalid block [ 102.185111][ T5687] capability: warning: `syz.3.790' uses 32-bit capabilities (legacy support in use) [ 102.201803][ T5687] loop3: detected capacity change from 0 to 512 [ 102.209615][ T3445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.233431][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.272877][ T3445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.323544][ T3445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.382779][ T3445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.672549][ T3445] bond0 (unregistering): Released all slaves [ 102.695252][ T3445] bond1 (unregistering): Released all slaves [ 102.824846][ T3445] hsr_slave_0: left promiscuous mode [ 102.842217][ T3445] hsr_slave_1: left promiscuous mode [ 102.848988][ T3445] veth1_macvtap: left promiscuous mode [ 102.854888][ T3445] veth0_macvtap: left promiscuous mode [ 102.860558][ T3445] veth1_vlan: left promiscuous mode [ 102.865856][ T3445] veth0_vlan: left promiscuous mode [ 102.954974][ T5722] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.799: iget: bad extra_isize 90 (inode size 256) [ 102.980188][ T5722] EXT4-fs (loop1): Remounting filesystem read-only [ 102.991618][ T5722] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 103.040558][ T5722] EXT4-fs (loop1): 1 orphan inode deleted [ 103.066909][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.127856][ T5690] chnl_net:caif_netlink_parms(): no params data found [ 103.167996][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.220813][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.228013][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.249639][ T5690] bridge_slave_0: entered allmulticast mode [ 103.262086][ T5690] bridge_slave_0: entered promiscuous mode [ 103.270993][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.278110][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.285641][ T5690] bridge_slave_1: entered allmulticast mode [ 103.300887][ T5690] bridge_slave_1: entered promiscuous mode [ 103.337707][ T5690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.354814][ T5690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.390733][ T5690] team0: Port device team_slave_0 added [ 103.404613][ T3445] IPVS: stop unused estimator thread 0... [ 103.411763][ T5690] team0: Port device team_slave_1 added [ 103.453553][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.460590][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.486531][ T5690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.499772][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.506825][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.532864][ T5690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.585435][ T5690] hsr_slave_0: entered promiscuous mode [ 103.596174][ T5690] hsr_slave_1: entered promiscuous mode [ 103.604611][ T5690] debugfs: 'hsr0' already exists in 'hsr' [ 103.610424][ T5690] Cannot create hsr debugfs directory [ 103.771261][ T5690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.788423][ T5690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.802834][ T5690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.812167][ T5690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.925848][ T5690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.950991][ T5690] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.962308][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.969554][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.017680][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.024870][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.261363][ T5690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.281527][ T5833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.524003][ T5690] veth0_vlan: entered promiscuous mode [ 104.547555][ T5690] veth1_vlan: entered promiscuous mode [ 104.578297][ T5690] veth0_macvtap: entered promiscuous mode [ 104.603695][ T5690] veth1_macvtap: entered promiscuous mode [ 104.630901][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.648756][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.669545][ T295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.694368][ T5856] set_capacity_and_notify: 4 callbacks suppressed [ 104.694385][ T5856] loop0: detected capacity change from 0 to 512 [ 104.711453][ T295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.730879][ T295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742312][ T295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.808219][ T5856] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.816: iget: bad extra_isize 90 (inode size 256) [ 105.002473][ T5856] EXT4-fs (loop0): Remounting filesystem read-only [ 105.031277][ T5856] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 105.051317][ T5871] loop5: detected capacity change from 0 to 128 [ 105.090866][ T5856] EXT4-fs (loop0): 1 orphan inode deleted [ 105.097232][ T5856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.128200][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.238575][ T5883] loop3: detected capacity change from 0 to 1024 [ 105.255993][ T5883] EXT4-fs: Ignoring removed orlov option [ 105.311753][ T5883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.429956][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.471668][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.827'. [ 105.507860][ T5896] loop1: detected capacity change from 0 to 128 [ 105.526028][ T29] kauditd_printk_skb: 3158 callbacks suppressed [ 105.526052][ T29] audit: type=1326 audit(1768253922.733:28889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.556139][ T29] audit: type=1326 audit(1768253922.733:28890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c8f32005 code=0x7ffc0000 [ 105.579602][ T29] audit: type=1326 audit(1768253922.733:28891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.603180][ T29] audit: type=1326 audit(1768253922.733:28892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.626694][ T29] audit: type=1326 audit(1768253922.733:28893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.650169][ T29] audit: type=1326 audit(1768253922.733:28894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.673668][ T29] audit: type=1326 audit(1768253922.733:28895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.697175][ T29] audit: type=1326 audit(1768253922.733:28896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.720663][ T29] audit: type=1326 audit(1768253922.733:28897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.744097][ T29] audit: type=1326 audit(1768253922.733:28898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 105.878484][ T5898] loop3: detected capacity change from 0 to 128 [ 106.271519][ T5921] loop3: detected capacity change from 0 to 128 [ 106.421117][ T5923] loop5: detected capacity change from 0 to 128 [ 106.557659][ T5931] bio_check_eod: 582 callbacks suppressed [ 106.557676][ T5931] syz.5.835: attempt to access beyond end of device [ 106.557676][ T5931] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 106.590257][ T5931] syz.5.835: attempt to access beyond end of device [ 106.590257][ T5931] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 106.618176][ T5931] syz.5.835: attempt to access beyond end of device [ 106.618176][ T5931] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 106.631693][ T5931] syz.5.835: attempt to access beyond end of device [ 106.631693][ T5931] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 106.645497][ T5931] syz.5.835: attempt to access beyond end of device [ 106.645497][ T5931] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 106.658960][ T5931] syz.5.835: attempt to access beyond end of device [ 106.658960][ T5931] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 106.729985][ T5931] syz.5.835: attempt to access beyond end of device [ 106.729985][ T5931] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 106.775006][ T5931] syz.5.835: attempt to access beyond end of device [ 106.775006][ T5931] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 106.864186][ T5931] syz.5.835: attempt to access beyond end of device [ 106.864186][ T5931] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 106.919417][ T5931] syz.5.835: attempt to access beyond end of device [ 106.919417][ T5931] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 107.138879][ T5950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5950 comm=syz.5.846 [ 107.159285][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 107.213103][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.311750][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.349586][ T5950] bond0 (unregistering): Released all slaves [ 107.486415][ T5981] netlink: 240 bytes leftover after parsing attributes in process `syz.2.850'. [ 108.675323][ T6001] loop2: detected capacity change from 0 to 128 [ 109.364111][ T6024] FAULT_INJECTION: forcing a failure. [ 109.364111][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.377347][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.3.867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.377406][ T6024] Tainted: [W]=WARN [ 109.377415][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.377431][ T6024] Call Trace: [ 109.377440][ T6024] [ 109.377449][ T6024] __dump_stack+0x1d/0x30 [ 109.377526][ T6024] dump_stack_lvl+0x95/0xd0 [ 109.377555][ T6024] dump_stack+0x15/0x1b [ 109.377592][ T6024] should_fail_ex+0x265/0x280 [ 109.377622][ T6024] should_fail+0xb/0x20 [ 109.377647][ T6024] should_fail_usercopy+0x1a/0x20 [ 109.377737][ T6024] copy_fpstate_to_sigframe+0x628/0x7d0 [ 109.377766][ T6024] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 109.377793][ T6024] ? x86_task_fpu+0x36/0x60 [ 109.377886][ T6024] get_sigframe+0x34d/0x490 [ 109.377938][ T6024] ? get_signal+0xdc7/0xf70 [ 109.377976][ T6024] x64_setup_rt_frame+0xa8/0x580 [ 109.378077][ T6024] arch_do_signal_or_restart+0x24c/0x450 [ 109.378194][ T6024] exit_to_user_mode_loop+0x6a/0x740 [ 109.378216][ T6024] ? __x64_sys_splice+0x78/0x90 [ 109.378301][ T6024] do_syscall_64+0x1dd/0x2b0 [ 109.378424][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.378528][ T6024] RIP: 0033:0x7f59ece1f747 [ 109.378547][ T6024] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 109.378571][ T6024] RSP: 002b:00007f59eb887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 109.378687][ T6024] RAX: 0000000000000113 RBX: 00007f59ed075fa0 RCX: 00007f59ece1f749 [ 109.378703][ T6024] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 109.378721][ T6024] RBP: 00007f59eb887090 R08: 0000000000000007 R09: 0000000000000009 [ 109.378735][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.378748][ T6024] R13: 00007f59ed076038 R14: 00007f59ed075fa0 R15: 00007ffc1f633cb8 [ 109.378768][ T6024] [ 110.392211][ T6048] loop3: detected capacity change from 0 to 1024 [ 110.444675][ T6048] EXT4-fs: Ignoring removed nobh option [ 110.459322][ T6056] loop0: detected capacity change from 0 to 128 [ 110.484773][ T6048] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.531078][ T29] kauditd_printk_skb: 1279 callbacks suppressed [ 110.531132][ T29] audit: type=1326 audit(1768253927.763:30178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd7ebe2f749 code=0x7ffc0000 [ 110.541944][ T6048] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.590198][ T29] audit: type=1326 audit(1768253927.823:30179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 110.614986][ T29] audit: type=1326 audit(1768253927.823:30180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f418995f783 code=0x7ffc0000 [ 110.638763][ T29] audit: type=1326 audit(1768253927.823:30181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f418995f807 code=0x7ffc0000 [ 110.662112][ T29] audit: type=1326 audit(1768253927.823:30182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4189916bdd code=0x7ffc0000 [ 110.685530][ T29] audit: type=1326 audit(1768253927.823:30183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4189993e89 code=0x7ffc0000 [ 110.709006][ T29] audit: type=1326 audit(1768253927.823:30184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4189916c47 code=0x7ffc0000 [ 110.723183][ T6048] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.872: couldn't read orphan inode 11 (err -117) [ 110.732364][ T29] audit: type=1326 audit(1768253927.823:30185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 110.732401][ T29] audit: type=1326 audit(1768253927.823:30186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 110.732472][ T29] audit: type=1326 audit(1768253927.843:30187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4189916357 code=0x7ffc0000 [ 110.774145][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 111.108307][ T6048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.124422][ T6081] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.150844][ T6078] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.226008][ T6089] loop2: detected capacity change from 0 to 128 [ 111.240584][ T6059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 111.274044][ T6090] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 111.288386][ T6048] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.872: Invalid block bitmap block 0 in block_group 0 [ 111.307137][ T6090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.348695][ T6048] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.872: Failed to acquire dquot type 0 [ 111.908022][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.161575][ T6113] loop1: detected capacity change from 0 to 128 [ 112.255736][ T6117] bio_check_eod: 356 callbacks suppressed [ 112.255765][ T6117] syz.1.890: attempt to access beyond end of device [ 112.255765][ T6117] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.292752][ T6119] loop2: detected capacity change from 0 to 512 [ 112.330901][ T6119] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.892: iget: bad extra_isize 90 (inode size 256) [ 112.369967][ T6117] syz.1.890: attempt to access beyond end of device [ 112.369967][ T6117] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 112.385739][ T6117] syz.1.890: attempt to access beyond end of device [ 112.385739][ T6117] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 112.400103][ T6119] EXT4-fs (loop2): Remounting filesystem read-only [ 112.400954][ T6117] syz.1.890: attempt to access beyond end of device [ 112.400954][ T6117] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 112.420132][ T6117] syz.1.890: attempt to access beyond end of device [ 112.420132][ T6117] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.432753][ T6119] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 112.435432][ T6117] syz.1.890: attempt to access beyond end of device [ 112.435432][ T6117] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.456509][ T6117] syz.1.890: attempt to access beyond end of device [ 112.456509][ T6117] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 112.473222][ T6119] EXT4-fs (loop2): 1 orphan inode deleted [ 112.480195][ T6117] syz.1.890: attempt to access beyond end of device [ 112.480195][ T6117] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 112.499257][ T6117] syz.1.890: attempt to access beyond end of device [ 112.499257][ T6117] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 112.512932][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.530190][ T6117] syz.1.890: attempt to access beyond end of device [ 112.530190][ T6117] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 112.550521][ T6119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.699426][ T6130] loop0: detected capacity change from 0 to 128 [ 112.844864][ T6136] loop2: detected capacity change from 0 to 2048 [ 112.924852][ T3572] loop2: p1 p2 p3 [ 112.941674][ T6136] loop2: p1 p2 p3 [ 113.031533][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 113.046874][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.057423][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.101021][ T6150] loop3: detected capacity change from 0 to 512 [ 113.131576][ T6150] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.903: iget: bad extra_isize 90 (inode size 256) [ 113.184821][ T6150] EXT4-fs (loop3): Remounting filesystem read-only [ 113.204171][ T6150] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 113.233495][ T6150] EXT4-fs (loop3): 1 orphan inode deleted [ 113.250055][ T6150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.308379][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.896789][ T6171] Cannot find add_set index 0 as target [ 114.191288][ T6181] loop0: detected capacity change from 0 to 128 [ 114.521808][ T6199] loop0: detected capacity change from 0 to 128 [ 115.034088][ T6235] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 115.312712][ T6244] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.926: iget: bad extra_isize 90 (inode size 256) [ 115.342015][ T6244] EXT4-fs (loop2): Remounting filesystem read-only [ 115.419863][ T6244] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 115.429151][ T6244] EXT4-fs (loop2): 1 orphan inode deleted [ 115.436325][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.474713][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.540468][ T29] kauditd_printk_skb: 2576 callbacks suppressed [ 115.540483][ T29] audit: type=1326 audit(1768253932.763:32762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.598461][ T29] audit: type=1326 audit(1768253932.803:32763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.621965][ T29] audit: type=1326 audit(1768253932.803:32764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.645484][ T29] audit: type=1326 audit(1768253932.803:32765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.668911][ T29] audit: type=1326 audit(1768253932.803:32766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.692449][ T29] audit: type=1326 audit(1768253932.803:32767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.715925][ T29] audit: type=1326 audit(1768253932.813:32768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.739358][ T29] audit: type=1326 audit(1768253932.813:32769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.762775][ T29] audit: type=1326 audit(1768253932.813:32770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.786262][ T29] audit: type=1326 audit(1768253932.813:32771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418995f749 code=0x7ffc0000 [ 115.895465][ T6270] set_capacity_and_notify: 2 callbacks suppressed [ 115.895481][ T6270] loop5: detected capacity change from 0 to 512 [ 115.913005][ T6270] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.937: iget: bad extra_isize 90 (inode size 256) [ 115.931303][ T6270] EXT4-fs (loop5): Remounting filesystem read-only [ 115.963626][ T6270] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 116.001641][ T6270] EXT4-fs (loop5): 1 orphan inode deleted [ 116.021199][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.052409][ T6270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.147922][ T6289] loop3: detected capacity change from 0 to 128 [ 116.233793][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 116.459348][ T6315] loop1: detected capacity change from 0 to 128 [ 116.569654][ T6319] loop0: detected capacity change from 0 to 512 [ 116.576745][ T6319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.588652][ T6319] EXT4-fs (loop0): 1 truncate cleaned up [ 116.600381][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.647264][ T6324] netlink: 792 bytes leftover after parsing attributes in process `syz.1.950'. [ 116.656363][ T6324] netlink: 792 bytes leftover after parsing attributes in process `syz.1.950'. [ 116.665327][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 116.994521][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 117.208805][ T6357] loop2: detected capacity change from 0 to 512 [ 117.371006][ T6357] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.959: iget: bad extra_isize 90 (inode size 256) [ 117.390340][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.602901][ T6357] EXT4-fs (loop2): Remounting filesystem read-only [ 117.667077][ T6357] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 117.703916][ T6357] EXT4-fs (loop2): 1 orphan inode deleted [ 117.744776][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.823965][ T6357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.009452][ T6374] loop2: detected capacity change from 0 to 128 [ 118.122463][ T6355] Cannot find add_set index 0 as target [ 118.154198][ T6360] syz.1.958 (6360) used greatest stack depth: 6408 bytes left [ 118.193762][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 118.546230][ T6396] nlmon0: Master is either lo or non-ether device [ 119.196946][ T6411] loop0: detected capacity change from 0 to 1024 [ 119.253246][ T6411] EXT4-fs: inline encryption not supported [ 119.289842][ T6411] EXT4-fs: old and new quota format mixing [ 119.431898][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.794549][ T6434] loop5: detected capacity change from 0 to 128 [ 119.880596][ T6435] bio_check_eod: 404 callbacks suppressed [ 119.880613][ T6435] syz.5.986: attempt to access beyond end of device [ 119.880613][ T6435] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 119.909082][ T6435] syz.5.986: attempt to access beyond end of device [ 119.909082][ T6435] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 119.923242][ T6435] syz.5.986: attempt to access beyond end of device [ 119.923242][ T6435] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 119.939912][ T6435] syz.5.986: attempt to access beyond end of device [ 119.939912][ T6435] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 119.958601][ T6435] syz.5.986: attempt to access beyond end of device [ 119.958601][ T6435] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 119.972421][ T6435] syz.5.986: attempt to access beyond end of device [ 119.972421][ T6435] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 119.988223][ T6435] syz.5.986: attempt to access beyond end of device [ 119.988223][ T6435] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 120.001952][ T6435] syz.5.986: attempt to access beyond end of device [ 120.001952][ T6435] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 120.015423][ T6435] syz.5.986: attempt to access beyond end of device [ 120.015423][ T6435] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 120.030151][ T6435] syz.5.986: attempt to access beyond end of device [ 120.030151][ T6435] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 120.212039][ T6458] loop3: detected capacity change from 0 to 128 [ 120.246382][ T6460] IPVS: persistence engine module ip_vs_pe_ not found [ 120.257272][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.997'. [ 120.290900][ T6460] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.298429][ T6460] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.307239][ T6461] loop5: detected capacity change from 0 to 128 [ 120.315791][ T6461] vfat: Unknown parameter '' [ 120.549972][ T29] kauditd_printk_skb: 2401 callbacks suppressed [ 120.549988][ T29] audit: type=1326 audit(1768253937.773:35173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ece52005 code=0x7ffc0000 [ 120.580472][ T29] audit: type=1326 audit(1768253937.803:35174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.604058][ T29] audit: type=1326 audit(1768253937.803:35175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.627733][ T29] audit: type=1326 audit(1768253937.803:35176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.651272][ T29] audit: type=1326 audit(1768253937.803:35177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.674800][ T29] audit: type=1326 audit(1768253937.803:35178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.698324][ T29] audit: type=1326 audit(1768253937.803:35179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.722226][ T29] audit: type=1326 audit(1768253937.803:35180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.745737][ T29] audit: type=1326 audit(1768253937.803:35181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.769255][ T29] audit: type=1326 audit(1768253937.803:35182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.5.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 120.793076][ T3445] Buffer I/O error on dev loop5, logical block 464, lost async page write [ 120.874601][ T6482] x_tables: duplicate underflow at hook 1 [ 120.965662][ T6486] set_capacity_and_notify: 1 callbacks suppressed [ 120.965768][ T6486] loop5: detected capacity change from 0 to 128 [ 121.389209][ T6499] loop1: detected capacity change from 0 to 128 [ 121.479972][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 121.482118][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.651711][ T6515] loop0: detected capacity change from 0 to 128 [ 121.786885][ T6524] loop5: detected capacity change from 0 to 512 [ 121.796678][ T6524] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1022: iget: bad extra_isize 90 (inode size 256) [ 121.810612][ T6524] EXT4-fs (loop5): Remounting filesystem read-only [ 121.817670][ T6524] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 121.826847][ T6524] EXT4-fs (loop5): 1 orphan inode deleted [ 121.833107][ T6524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.846198][ T6524] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.895190][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.899455][ T6529] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 122.063341][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1027'. [ 122.361643][ T6546] FAULT_INJECTION: forcing a failure. [ 122.361643][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.374835][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.3.1031 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.374861][ T6546] Tainted: [W]=WARN [ 122.374870][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.374880][ T6546] Call Trace: [ 122.374886][ T6546] [ 122.374892][ T6546] __dump_stack+0x1d/0x30 [ 122.374913][ T6546] dump_stack_lvl+0x95/0xd0 [ 122.374931][ T6546] dump_stack+0x15/0x1b [ 122.374947][ T6546] should_fail_ex+0x265/0x280 [ 122.374976][ T6546] should_fail+0xb/0x20 [ 122.375039][ T6546] should_fail_usercopy+0x1a/0x20 [ 122.375128][ T6546] _copy_to_user+0x20/0xa0 [ 122.375153][ T6546] simple_read_from_buffer+0xb5/0x130 [ 122.375182][ T6546] proc_fail_nth_read+0x10e/0x150 [ 122.375208][ T6546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.375231][ T6546] vfs_read+0x1a8/0x770 [ 122.375245][ T6546] ? __rcu_read_unlock+0x4f/0x70 [ 122.375262][ T6546] ? __fget_files+0x184/0x1c0 [ 122.375337][ T6546] ? mutex_lock+0x58/0x90 [ 122.375369][ T6546] ksys_read+0xda/0x1a0 [ 122.375398][ T6546] __x64_sys_read+0x40/0x50 [ 122.375415][ T6546] x64_sys_call+0x2889/0x3000 [ 122.375490][ T6546] do_syscall_64+0xca/0x2b0 [ 122.375536][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.375555][ T6546] RIP: 0033:0x7f59ece1e15c [ 122.375572][ T6546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.375586][ T6546] RSP: 002b:00007f59eb887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.375676][ T6546] RAX: ffffffffffffffda RBX: 00007f59ed075fa0 RCX: 00007f59ece1e15c [ 122.375686][ T6546] RDX: 000000000000000f RSI: 00007f59eb8870a0 RDI: 0000000000000007 [ 122.375696][ T6546] RBP: 00007f59eb887090 R08: 0000000000000000 R09: 0000000000000000 [ 122.375706][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.375716][ T6546] R13: 00007f59ed076038 R14: 00007f59ed075fa0 R15: 00007ffc1f633cb8 [ 122.375733][ T6546] [ 122.606177][ T6548] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 122.708312][ T6558] loop1: detected capacity change from 0 to 256 [ 123.960456][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 123.967474][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.030897][ T6582] FAULT_INJECTION: forcing a failure. [ 124.030897][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 124.044247][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.2.1045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.044357][ T6582] Tainted: [W]=WARN [ 124.044365][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.044382][ T6582] Call Trace: [ 124.044390][ T6582] [ 124.044398][ T6582] __dump_stack+0x1d/0x30 [ 124.044426][ T6582] dump_stack_lvl+0x95/0xd0 [ 124.044455][ T6582] dump_stack+0x15/0x1b [ 124.044521][ T6582] should_fail_ex+0x265/0x280 [ 124.044639][ T6582] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 124.044678][ T6582] should_failslab+0x8c/0xb0 [ 124.044772][ T6582] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 124.044833][ T6582] ? shmem_alloc_inode+0x34/0x50 [ 124.044866][ T6582] ? kstrtouint_from_user+0x9f/0xf0 [ 124.044892][ T6582] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 124.044930][ T6582] shmem_alloc_inode+0x34/0x50 [ 124.044996][ T6582] alloc_inode+0x40/0x170 [ 124.045018][ T6582] new_inode+0x1d/0xe0 [ 124.045040][ T6582] shmem_get_inode+0x246/0x750 [ 124.045192][ T6582] __shmem_file_setup+0x113/0x210 [ 124.045236][ T6582] shmem_file_setup+0x3b/0x50 [ 124.045265][ T6582] __se_sys_memfd_create+0x2f7/0x6b0 [ 124.045301][ T6582] __x64_sys_memfd_create+0x31/0x40 [ 124.045349][ T6582] x64_sys_call+0x28cb/0x3000 [ 124.045382][ T6582] do_syscall_64+0xca/0x2b0 [ 124.045429][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.045506][ T6582] RIP: 0033:0x7fd351fcf749 [ 124.045523][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.045582][ T6582] RSP: 002b:00007fd350a2ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 124.045608][ T6582] RAX: ffffffffffffffda RBX: 000000000000060d RCX: 00007fd351fcf749 [ 124.045625][ T6582] RDX: 00007fd350a2eef0 RSI: 0000000000000000 RDI: 00007fd352054960 [ 124.045641][ T6582] RBP: 0000200000000980 R08: 00007fd350a2ebb7 R09: 00007fd350a2ee40 [ 124.045655][ T6582] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 124.045668][ T6582] R13: 00007fd350a2eef0 R14: 00007fd350a2eeb0 R15: 00002000000002c0 [ 124.045738][ T6582] [ 124.290018][ T6584] loop5: detected capacity change from 0 to 512 [ 124.299008][ T6584] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.511842][ T6584] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.577564][ T5690] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 124.842319][ T6598] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 124.916193][ T3445] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.958098][ T6608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.968670][ T6608] block device autoloading is deprecated and will be removed. [ 125.084465][ T6618] loop2: detected capacity change from 0 to 128 [ 125.163373][ T6618] bio_check_eod: 659 callbacks suppressed [ 125.163473][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.163473][ T6618] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 125.187336][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.187336][ T6618] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 125.200917][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.200917][ T6618] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 125.221433][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.221433][ T6618] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 125.234922][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.234922][ T6618] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 125.253308][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.253308][ T6618] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 125.267035][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.267035][ T6618] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 125.280892][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.280892][ T6618] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 125.294694][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.294694][ T6618] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 125.308587][ T6618] syz.2.1058: attempt to access beyond end of device [ 125.308587][ T6618] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 125.514949][ T6626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.560115][ T29] kauditd_printk_skb: 1988 callbacks suppressed [ 125.560133][ T29] audit: type=1326 audit(1768253942.793:37170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.591285][ T29] audit: type=1326 audit(1768253942.793:37171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.614877][ T29] audit: type=1326 audit(1768253942.793:37172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.638566][ T29] audit: type=1326 audit(1768253942.793:37173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.662113][ T29] audit: type=1326 audit(1768253942.793:37174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.685631][ T29] audit: type=1326 audit(1768253942.793:37175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.709193][ T29] audit: type=1326 audit(1768253942.793:37176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.732901][ T29] audit: type=1326 audit(1768253942.793:37177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.756489][ T29] audit: type=1326 audit(1768253942.803:37178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.780029][ T29] audit: type=1326 audit(1768253942.803:37179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd352002005 code=0x7ffc0000 [ 125.806692][ T6626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.821568][ T6629] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 125.851754][ T6631] loop0: detected capacity change from 0 to 256 [ 125.867519][ T6626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.953892][ T6626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.033365][ T3445] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.048903][ T3445] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.058901][ T3445] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.090076][ T3445] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.110277][ T6646] loop0: detected capacity change from 0 to 2048 [ 126.142293][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.155051][ T6646] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.170644][ T6646] FAULT_INJECTION: forcing a failure. [ 126.170644][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 126.183423][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.0.1069 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.183452][ T6646] Tainted: [W]=WARN [ 126.183458][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.183546][ T6646] Call Trace: [ 126.183627][ T6646] [ 126.183633][ T6646] __dump_stack+0x1d/0x30 [ 126.183656][ T6646] dump_stack_lvl+0x95/0xd0 [ 126.183675][ T6646] dump_stack+0x15/0x1b [ 126.183693][ T6646] should_fail_ex+0x265/0x280 [ 126.183714][ T6646] should_failslab+0x8c/0xb0 [ 126.183791][ T6646] __kmalloc_cache_noprof+0x65/0x4c0 [ 126.183813][ T6646] ? audit_log_d_path+0x8d/0x150 [ 126.183836][ T6646] audit_log_d_path+0x8d/0x150 [ 126.183855][ T6646] audit_log_d_path_exe+0x42/0x70 [ 126.183914][ T6646] audit_log_task+0x1e9/0x250 [ 126.183945][ T6646] ? kstrtouint+0x76/0xc0 [ 126.183963][ T6646] audit_seccomp+0x61/0x100 [ 126.184060][ T6646] ? __seccomp_filter+0x832/0x1260 [ 126.184086][ T6646] __seccomp_filter+0x843/0x1260 [ 126.184111][ T6646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.184140][ T6646] ? vfs_write+0x7e8/0x960 [ 126.184175][ T6646] ? __rcu_read_unlock+0x4f/0x70 [ 126.184193][ T6646] ? __fget_files+0x184/0x1c0 [ 126.184216][ T6646] __secure_computing+0x82/0x150 [ 126.184240][ T6646] syscall_trace_enter+0xcf/0x1e0 [ 126.184311][ T6646] do_syscall_64+0xa4/0x2b0 [ 126.184344][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.184365][ T6646] RIP: 0033:0x7f418995f749 [ 126.184379][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.184447][ T6646] RSP: 002b:00007f41883c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 126.184466][ T6646] RAX: ffffffffffffffda RBX: 00007f4189bb5fa0 RCX: 00007f418995f749 [ 126.184479][ T6646] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 00002000000004c0 [ 126.184493][ T6646] RBP: 00007f41883c7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.184510][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.184527][ T6646] R13: 00007f4189bb6038 R14: 00007f4189bb5fa0 R15: 00007ffc1a4d64b8 [ 126.184554][ T6646] [ 126.414562][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.919959][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.988392][ T6665] loop3: detected capacity change from 0 to 128 [ 127.084430][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 127.093679][ T6670] hsr_slave_0: left promiscuous mode [ 127.099756][ T6670] hsr_slave_1: left promiscuous mode [ 127.129436][ T6671] loop1: detected capacity change from 0 to 128 [ 127.175933][ T6673] FAULT_INJECTION: forcing a failure. [ 127.175933][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 127.188825][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.2.1078 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.188945][ T6673] Tainted: [W]=WARN [ 127.188997][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.189013][ T6673] Call Trace: [ 127.189021][ T6673] [ 127.189031][ T6673] __dump_stack+0x1d/0x30 [ 127.189121][ T6673] dump_stack_lvl+0x95/0xd0 [ 127.189150][ T6673] dump_stack+0x15/0x1b [ 127.189172][ T6673] should_fail_ex+0x265/0x280 [ 127.189196][ T6673] should_failslab+0x8c/0xb0 [ 127.189222][ T6673] __kmalloc_cache_noprof+0x65/0x4c0 [ 127.189338][ T6673] ? bpf_uprobe_multi_link_attach+0x315/0x900 [ 127.189380][ T6673] bpf_uprobe_multi_link_attach+0x315/0x900 [ 127.189437][ T6673] ? __rcu_read_unlock+0x4f/0x70 [ 127.189487][ T6673] link_create+0x639/0x690 [ 127.189518][ T6673] __sys_bpf+0x628/0x7c0 [ 127.189583][ T6673] __x64_sys_bpf+0x41/0x50 [ 127.189620][ T6673] x64_sys_call+0x28e1/0x3000 [ 127.189654][ T6673] do_syscall_64+0xca/0x2b0 [ 127.189763][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.189871][ T6673] RIP: 0033:0x7fd351fcf749 [ 127.189925][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.189948][ T6673] RSP: 002b:00007fd350a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.189974][ T6673] RAX: ffffffffffffffda RBX: 00007fd352225fa0 RCX: 00007fd351fcf749 [ 127.189991][ T6673] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 127.190006][ T6673] RBP: 00007fd350a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.190046][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.190058][ T6673] R13: 00007fd352226038 R14: 00007fd352225fa0 R15: 00007ffd6c0a2138 [ 127.190082][ T6673] [ 127.445451][ T6679] loop3: detected capacity change from 0 to 512 [ 127.458917][ T6681] loop2: detected capacity change from 0 to 512 [ 127.469842][ T6679] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1081: iget: bad extra_isize 90 (inode size 256) [ 127.484987][ T6679] EXT4-fs (loop3): Remounting filesystem read-only [ 127.493254][ T6679] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 127.502474][ T6679] EXT4-fs (loop3): 1 orphan inode deleted [ 127.508874][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.521350][ T6681] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1080: iget: bad extra_isize 90 (inode size 256) [ 127.522754][ T6679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.558302][ T6681] EXT4-fs (loop2): Remounting filesystem read-only [ 127.565250][ T6681] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 127.574463][ T6681] EXT4-fs (loop2): 1 orphan inode deleted [ 127.580945][ T6681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.595996][ T6681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.677165][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.826039][ T6713] FAULT_INJECTION: forcing a failure. [ 127.826039][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 127.838819][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.2.1091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.838851][ T6713] Tainted: [W]=WARN [ 127.838858][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.838875][ T6713] Call Trace: [ 127.838884][ T6713] [ 127.838894][ T6713] __dump_stack+0x1d/0x30 [ 127.838973][ T6713] dump_stack_lvl+0x95/0xd0 [ 127.839039][ T6713] dump_stack+0x15/0x1b [ 127.839140][ T6713] should_fail_ex+0x265/0x280 [ 127.839171][ T6713] should_failslab+0x8c/0xb0 [ 127.839195][ T6713] kmem_cache_alloc_noprof+0x69/0x4b0 [ 127.839217][ T6713] ? alloc_empty_file+0x76/0x200 [ 127.839253][ T6713] alloc_empty_file+0x76/0x200 [ 127.839281][ T6713] path_openat+0x63/0x23b0 [ 127.839323][ T6713] ? __rcu_read_unlock+0x4f/0x70 [ 127.839415][ T6713] ? path_openat+0x1d88/0x23b0 [ 127.839450][ T6713] ? path_openat+0x1e82/0x23b0 [ 127.839558][ T6713] ? _parse_integer_limit+0x170/0x190 [ 127.839590][ T6713] do_filp_open+0x109/0x230 [ 127.839645][ T6713] do_open_execat+0xd8/0x260 [ 127.839754][ T6713] alloc_bprm+0x25/0x350 [ 127.839825][ T6713] do_execveat_common+0x12e/0x750 [ 127.839852][ T6713] ? getname_flags+0x154/0x3b0 [ 127.839891][ T6713] __x64_sys_execveat+0x73/0x90 [ 127.840006][ T6713] x64_sys_call+0x1c0e/0x3000 [ 127.840099][ T6713] do_syscall_64+0xca/0x2b0 [ 127.840147][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.840233][ T6713] RIP: 0033:0x7fd351fcf749 [ 127.840254][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.840278][ T6713] RSP: 002b:00007fd350a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 127.840409][ T6713] RAX: ffffffffffffffda RBX: 00007fd352225fa0 RCX: 00007fd351fcf749 [ 127.840426][ T6713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.840438][ T6713] RBP: 00007fd350a2f090 R08: 0000000000001000 R09: 0000000000000000 [ 127.840452][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.840469][ T6713] R13: 00007fd352226038 R14: 00007fd352225fa0 R15: 00007ffd6c0a2138 [ 127.840495][ T6713] [ 128.381519][ T6736] program syz.2.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.656285][ T6765] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 128.692154][ T6765] loop1: detected capacity change from 0 to 8192 [ 128.933722][ T6774] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 129.719997][ T3500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.723314][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 129.785714][ T6825] loop3: detected capacity change from 0 to 512 [ 129.793292][ T6825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.802158][ T6825] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.825165][ T6825] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1134: Allocating blocks 41-42 which overlap fs metadata [ 129.839376][ T6825] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1134: Allocating blocks 41-42 which overlap fs metadata [ 129.854662][ T6825] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1134: Failed to acquire dquot type 1 [ 129.867256][ T6825] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 129.882810][ T6825] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1134: corrupted inode contents [ 129.895862][ T6825] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1134: mark_inode_dirty error [ 129.907816][ T6825] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1134: corrupted inode contents [ 129.920196][ T6825] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1134: mark_inode_dirty error [ 129.931895][ T6825] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1134: corrupted inode contents [ 129.944413][ T6825] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 129.953257][ T6825] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1134: corrupted inode contents [ 129.965537][ T6825] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1134: mark_inode_dirty error [ 129.977963][ T6825] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 129.987355][ T6825] EXT4-fs (loop3): 1 truncate cleaned up [ 129.993423][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.019163][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.325198][ T6848] all (unregistering): Released all slaves [ 130.450976][ T6848] SET target dimension over the limit! [ 130.637166][ T6856] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 130.845677][ T29] kauditd_printk_skb: 1204 callbacks suppressed [ 130.845702][ T29] audit: type=1400 audit(1768253948.073:38380): avc: denied { write } for pid=6861 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.877303][ T6862] loop2: detected capacity change from 0 to 512 [ 130.877772][ T29] audit: type=1400 audit(1768253948.093:38381): avc: denied { nlmsg_write } for pid=6861 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.934410][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.948153][ T6862] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.961513][ T29] audit: type=1400 audit(1768253948.193:38382): avc: denied { append } for pid=6861 comm="syz.2.1148" path="/245/file0/cpu.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.988685][ T29] audit: type=1400 audit(1768253948.193:38383): avc: denied { ioctl } for pid=6861 comm="syz.2.1148" path="/245/file0/cpu.stat" dev="loop2" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.016928][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.092750][ T6876] loop0: detected capacity change from 0 to 512 [ 131.112800][ T6876] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1154: iget: bad extra_isize 90 (inode size 256) [ 131.143958][ T6876] EXT4-fs (loop0): Remounting filesystem read-only [ 131.150782][ T6876] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 131.159794][ T6876] EXT4-fs (loop0): 1 orphan inode deleted [ 131.180665][ T6876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.195502][ T6876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.208043][ T6884] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 131.217925][ T29] audit: type=1326 audit(1768253948.443:38384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.224664][ T6885] loop2: detected capacity change from 0 to 128 [ 131.307282][ T6890] bio_check_eod: 211 callbacks suppressed [ 131.307366][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.307366][ T6890] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 131.313227][ T29] audit: type=1326 audit(1768253948.443:38385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.313268][ T29] audit: type=1326 audit(1768253948.443:38386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.350329][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.350329][ T6890] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 131.373705][ T29] audit: type=1326 audit(1768253948.443:38387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.373765][ T29] audit: type=1326 audit(1768253948.443:38388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.403665][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.403665][ T6890] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 131.410671][ T29] audit: type=1326 audit(1768253948.443:38389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 131.438570][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.438570][ T6890] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 131.487863][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.487863][ T6890] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 131.501440][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.501440][ T6890] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 131.514998][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.514998][ T6890] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 131.528591][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.528591][ T6890] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 131.543511][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.543511][ T6890] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 131.557159][ T6890] syz.2.1156: attempt to access beyond end of device [ 131.557159][ T6890] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 132.191877][ T6914] FAULT_INJECTION: forcing a failure. [ 132.191877][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.205290][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.3.1169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.205324][ T6914] Tainted: [W]=WARN [ 132.205332][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.205345][ T6914] Call Trace: [ 132.205351][ T6914] [ 132.205359][ T6914] __dump_stack+0x1d/0x30 [ 132.205392][ T6914] dump_stack_lvl+0x95/0xd0 [ 132.205415][ T6914] dump_stack+0x15/0x1b [ 132.205436][ T6914] should_fail_ex+0x265/0x280 [ 132.205460][ T6914] should_fail+0xb/0x20 [ 132.205480][ T6914] should_fail_usercopy+0x1a/0x20 [ 132.205550][ T6914] _copy_to_user+0x20/0xa0 [ 132.205579][ T6914] simple_read_from_buffer+0xb5/0x130 [ 132.205668][ T6914] proc_fail_nth_read+0x10e/0x150 [ 132.205739][ T6914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.205785][ T6914] vfs_read+0x1a8/0x770 [ 132.205803][ T6914] ? __rcu_read_unlock+0x4f/0x70 [ 132.205904][ T6914] ? __fget_files+0x184/0x1c0 [ 132.205935][ T6914] ? mutex_lock+0x58/0x90 [ 132.205965][ T6914] ksys_read+0xda/0x1a0 [ 132.205986][ T6914] __x64_sys_read+0x40/0x50 [ 132.206006][ T6914] x64_sys_call+0x2889/0x3000 [ 132.206092][ T6914] do_syscall_64+0xca/0x2b0 [ 132.206210][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.206234][ T6914] RIP: 0033:0x7f59ece1e15c [ 132.206251][ T6914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.206273][ T6914] RSP: 002b:00007f59eb887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.206295][ T6914] RAX: ffffffffffffffda RBX: 00007f59ed075fa0 RCX: 00007f59ece1e15c [ 132.206310][ T6914] RDX: 000000000000000f RSI: 00007f59eb8870a0 RDI: 0000000000000008 [ 132.206337][ T6914] RBP: 00007f59eb887090 R08: 0000000000000000 R09: 0000000000000000 [ 132.206370][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.206384][ T6914] R13: 00007f59ed076038 R14: 00007f59ed075fa0 R15: 00007ffc1f633cb8 [ 132.206405][ T6914] [ 132.439451][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 132.699701][ T6941] loop5: detected capacity change from 0 to 128 [ 132.712713][ T6943] loop0: detected capacity change from 0 to 256 [ 133.525187][ T6960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.662725][ T6970] loop5: detected capacity change from 0 to 512 [ 133.674880][ T6969] loop0: detected capacity change from 0 to 128 [ 133.684129][ T6970] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1193: iget: bad extra_isize 90 (inode size 256) [ 133.720168][ T6970] EXT4-fs (loop5): Remounting filesystem read-only [ 133.731381][ T6970] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 133.740681][ T6970] EXT4-fs (loop5): 1 orphan inode deleted [ 133.746994][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.770791][ T6970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.815917][ T6973] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 134.054062][ T6997] loop3: detected capacity change from 0 to 128 [ 134.114702][ T7002] loop5: detected capacity change from 0 to 256 [ 134.141333][ T7004] loop1: detected capacity change from 0 to 512 [ 134.167138][ T7004] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.1207: iget: bad extra_isize 90 (inode size 256) [ 134.185265][ T7004] EXT4-fs (loop1): Remounting filesystem read-only [ 134.192655][ T7004] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 134.202640][ T7004] EXT4-fs (loop1): 1 orphan inode deleted [ 134.209024][ T7004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.222190][ T7004] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.516373][ T7020] loop2: detected capacity change from 0 to 256 [ 135.225223][ T7040] loop1: detected capacity change from 0 to 128 [ 135.295675][ T7044] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1222: iget: bad extra_isize 90 (inode size 256) [ 135.318701][ T7044] EXT4-fs (loop0): Remounting filesystem read-only [ 135.328997][ T7044] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 135.370206][ T7044] EXT4-fs (loop0): 1 orphan inode deleted [ 135.383787][ T7044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.441206][ T7044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.516907][ T7060] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 135.853555][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 135.853575][ T29] audit: type=1326 audit(1768253953.083:39325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 135.892069][ T29] audit: type=1326 audit(1768253953.083:39326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 135.915682][ T29] audit: type=1326 audit(1768253953.083:39327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 135.939269][ T29] audit: type=1326 audit(1768253953.083:39328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 135.962847][ T29] audit: type=1326 audit(1768253953.083:39329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 135.986368][ T29] audit: type=1326 audit(1768253953.083:39330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 136.010025][ T29] audit: type=1326 audit(1768253953.083:39331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 136.033543][ T29] audit: type=1326 audit(1768253953.083:39332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 136.057376][ T29] audit: type=1326 audit(1768253953.083:39333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 136.081107][ T29] audit: type=1326 audit(1768253953.083:39334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 136.312754][ T7100] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 136.538068][ T7118] set_capacity_and_notify: 4 callbacks suppressed [ 136.538086][ T7118] loop3: detected capacity change from 0 to 128 [ 136.609862][ T7124] bio_check_eod: 834 callbacks suppressed [ 136.615720][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.615720][ T7124] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 136.630040][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.630040][ T7124] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 136.644092][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.644092][ T7124] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 136.657650][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.657650][ T7124] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 136.676308][ T12] kworker/u8:0: attempt to access beyond end of device [ 136.676308][ T12] loop2: rw=1, sector=529, nr_sectors = 8 limit=128 [ 136.686590][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.686590][ T7124] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 136.691536][ T12] kworker/u8:0: attempt to access beyond end of device [ 136.691536][ T12] loop2: rw=1, sector=545, nr_sectors = 8 limit=128 [ 136.727897][ T7126] FAULT_INJECTION: forcing a failure. [ 136.727897][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 136.740671][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.5.1253 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.740777][ T7126] Tainted: [W]=WARN [ 136.740785][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.740837][ T7126] Call Trace: [ 136.740844][ T7126] [ 136.740853][ T7126] __dump_stack+0x1d/0x30 [ 136.740881][ T7126] dump_stack_lvl+0x95/0xd0 [ 136.740901][ T7126] dump_stack+0x15/0x1b [ 136.740921][ T7126] should_fail_ex+0x265/0x280 [ 136.741047][ T7126] should_failslab+0x8c/0xb0 [ 136.741167][ T7126] kmem_cache_alloc_noprof+0x69/0x4b0 [ 136.741221][ T7126] ? audit_log_start+0x342/0x720 [ 136.741249][ T7126] audit_log_start+0x342/0x720 [ 136.741276][ T7126] ? kstrtouint+0x76/0xc0 [ 136.741302][ T7126] audit_seccomp+0x48/0x100 [ 136.741375][ T7126] ? __seccomp_filter+0x832/0x1260 [ 136.741408][ T7126] __seccomp_filter+0x843/0x1260 [ 136.741440][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.741468][ T7126] ? vfs_write+0x7e8/0x960 [ 136.741550][ T7126] __secure_computing+0x82/0x150 [ 136.741586][ T7126] syscall_trace_enter+0xcf/0x1e0 [ 136.741618][ T7126] do_syscall_64+0xa4/0x2b0 [ 136.741670][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.741767][ T7126] RIP: 0033:0x7f79c8eff749 [ 136.741786][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.741827][ T7126] RSP: 002b:00007f79c795f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 136.741846][ T7126] RAX: ffffffffffffffda RBX: 00007f79c9155fa0 RCX: 00007f79c8eff749 [ 136.741859][ T7126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 136.741871][ T7126] RBP: 00007f79c795f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.741888][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.741903][ T7126] R13: 00007f79c9156038 R14: 00007f79c9155fa0 R15: 00007ffda7f81ac8 [ 136.741929][ T7126] [ 136.743723][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.743723][ T7124] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 136.759711][ T12] kworker/u8:0: attempt to access beyond end of device [ 136.759711][ T12] loop2: rw=1, sector=561, nr_sectors = 8 limit=128 [ 136.769791][ T7124] syz.3.1249: attempt to access beyond end of device [ 136.769791][ T7124] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 137.088788][ T7137] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 137.116953][ T7139] loop5: detected capacity change from 0 to 512 [ 137.149189][ T7139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.169643][ T7139] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.185873][ T7139] FAULT_INJECTION: forcing a failure. [ 137.185873][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 137.198599][ T7139] CPU: 1 UID: 0 PID: 7139 Comm: syz.5.1258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 137.198631][ T7139] Tainted: [W]=WARN [ 137.198637][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.198647][ T7139] Call Trace: [ 137.198653][ T7139] [ 137.198660][ T7139] __dump_stack+0x1d/0x30 [ 137.198703][ T7139] dump_stack_lvl+0x95/0xd0 [ 137.198721][ T7139] dump_stack+0x15/0x1b [ 137.198741][ T7139] should_fail_ex+0x265/0x280 [ 137.198760][ T7139] should_failslab+0x8c/0xb0 [ 137.198778][ T7139] __kmalloc_noprof+0xb9/0x5a0 [ 137.198796][ T7139] ? alloc_pipe_info+0x1c9/0x340 [ 137.198812][ T7139] ? alloc_pipe_info+0xae/0x340 [ 137.198864][ T7139] alloc_pipe_info+0x1c9/0x340 [ 137.198882][ T7139] splice_direct_to_actor+0x592/0x680 [ 137.198980][ T7139] ? kstrtouint_from_user+0x9f/0xf0 [ 137.199000][ T7139] ? __pfx_direct_splice_actor+0x10/0x10 [ 137.199018][ T7139] ? __rcu_read_unlock+0x4f/0x70 [ 137.199123][ T7139] ? get_pid_task+0x96/0xd0 [ 137.199160][ T7139] ? avc_policy_seqno+0x15/0x30 [ 137.199236][ T7139] ? selinux_file_permission+0x1e2/0x320 [ 137.199338][ T7139] do_splice_direct+0xda/0x150 [ 137.199355][ T7139] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 137.199378][ T7139] do_sendfile+0x380/0x650 [ 137.199412][ T7139] __x64_sys_sendfile64+0x105/0x150 [ 137.199473][ T7139] x64_sys_call+0x2db1/0x3000 [ 137.199494][ T7139] do_syscall_64+0xca/0x2b0 [ 137.199562][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.199580][ T7139] RIP: 0033:0x7f79c8eff749 [ 137.199593][ T7139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.199614][ T7139] RSP: 002b:00007f79c795f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 137.199697][ T7139] RAX: ffffffffffffffda RBX: 00007f79c9155fa0 RCX: 00007f79c8eff749 [ 137.199709][ T7139] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 137.199719][ T7139] RBP: 00007f79c795f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.199730][ T7139] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 137.199742][ T7139] R13: 00007f79c9156038 R14: 00007f79c9155fa0 R15: 00007ffda7f81ac8 [ 137.199760][ T7139] [ 137.446131][ T5690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.528848][ T7163] loop1: detected capacity change from 0 to 512 [ 137.541170][ T7165] loop5: detected capacity change from 0 to 128 [ 137.569266][ T7163] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.1268: iget: bad extra_isize 90 (inode size 256) [ 137.603731][ T7163] EXT4-fs (loop1): Remounting filesystem read-only [ 137.747672][ T7163] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 137.757766][ T7163] EXT4-fs (loop1): 1 orphan inode deleted [ 137.764301][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.778787][ T7163] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.814133][ T7168] 9p: Bad value for 'rfdno' [ 138.092149][ T7202] loop3: detected capacity change from 0 to 128 [ 138.135441][ T7204] loop0: detected capacity change from 0 to 256 [ 138.477021][ T7223] loop2: detected capacity change from 0 to 128 [ 138.674071][ T7231] loop1: detected capacity change from 0 to 128 [ 139.101729][ T7245] loop5: detected capacity change from 0 to 256 [ 139.982665][ T7275] loop2: detected capacity change from 0 to 128 [ 140.860063][ T29] kauditd_printk_skb: 1606 callbacks suppressed [ 140.860079][ T29] audit: type=1326 audit(1768253958.093:40939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 140.956140][ T29] audit: type=1326 audit(1768253958.123:40940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd351fcf783 code=0x7ffc0000 [ 140.979622][ T29] audit: type=1326 audit(1768253958.123:40941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd351fcf807 code=0x7ffc0000 [ 141.003089][ T29] audit: type=1326 audit(1768253958.123:40942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd351f86bdd code=0x7ffc0000 [ 141.026627][ T29] audit: type=1326 audit(1768253958.123:40943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd352003e89 code=0x7ffc0000 [ 141.050144][ T29] audit: type=1326 audit(1768253958.123:40944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd351f86c47 code=0x7ffc0000 [ 141.073614][ T29] audit: type=1326 audit(1768253958.123:40945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 141.097147][ T29] audit: type=1326 audit(1768253958.123:40946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd351fcf749 code=0x7ffc0000 [ 141.120701][ T29] audit: type=1326 audit(1768253958.123:40947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd351f86357 code=0x7ffc0000 [ 141.144227][ T29] audit: type=1326 audit(1768253958.123:40948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd351f863b6 code=0x7ffc0000 [ 141.521523][ T7336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.574513][ T7337] set_capacity_and_notify: 3 callbacks suppressed [ 141.574534][ T7337] loop0: detected capacity change from 0 to 128 [ 141.594198][ T7336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.691783][ T7336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.753495][ T7336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.817740][ T417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.834985][ T417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.860957][ T417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.869201][ T417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.234139][ T7327] bio_check_eod: 923 callbacks suppressed [ 142.234158][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.234158][ T7327] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 142.254028][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.254028][ T7327] loop2: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 142.349972][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.349972][ T7327] loop2: rw=2049, sector=448, nr_sectors = 32 limit=256 [ 142.363870][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.363870][ T7327] loop2: rw=2049, sector=512, nr_sectors = 32 limit=256 [ 142.398904][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.398904][ T7327] loop2: rw=2049, sector=640, nr_sectors = 32 limit=256 [ 142.415657][ T7362] loop3: detected capacity change from 0 to 512 [ 142.436625][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.436625][ T7327] loop2: rw=2049, sector=704, nr_sectors = 32 limit=256 [ 142.500291][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.500291][ T7327] loop2: rw=2049, sector=768, nr_sectors = 32 limit=256 [ 142.501446][ T7362] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1344: iget: bad extra_isize 90 (inode size 256) [ 142.530297][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 142.543802][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.543802][ T7327] loop2: rw=2049, sector=832, nr_sectors = 32 limit=256 [ 142.562597][ T7362] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 142.581159][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.581159][ T7327] loop2: rw=2049, sector=896, nr_sectors = 32 limit=256 [ 142.584596][ T7362] EXT4-fs (loop3): 1 orphan inode deleted [ 142.595056][ T7327] syz.2.1330: attempt to access beyond end of device [ 142.595056][ T7327] loop2: rw=2049, sector=960, nr_sectors = 32 limit=256 [ 142.623665][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.645203][ T7362] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.785519][ T7374] loop2: detected capacity change from 0 to 128 [ 143.016114][ T7386] loop2: detected capacity change from 0 to 256 [ 143.099930][ T7389] loop5: detected capacity change from 0 to 128 [ 143.371500][ T7399] loop1: detected capacity change from 0 to 512 [ 143.383788][ T7399] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.1359: iget: bad extra_isize 90 (inode size 256) [ 143.420573][ T7399] EXT4-fs (loop1): Remounting filesystem read-only [ 143.427491][ T7399] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 143.437563][ T7399] EXT4-fs (loop1): 1 orphan inode deleted [ 143.445230][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.460028][ T7399] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.260170][ T7444] loop3: detected capacity change from 0 to 512 [ 145.270535][ T7444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.284680][ T7444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1374: bg 0: block 127: padding at end of block bitmap is not set [ 145.325704][ T7444] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1374: corrupted inode contents [ 145.374231][ T7444] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 145.410274][ T7444] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1374: corrupted inode contents [ 145.460912][ T7444] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.1374: mark_inode_dirty error [ 145.522738][ T7444] EXT4-fs (loop3): 1 orphan inode deleted [ 145.544190][ T7444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.607959][ T7456] loop2: detected capacity change from 0 to 128 [ 145.740529][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.930420][ T29] kauditd_printk_skb: 1275 callbacks suppressed [ 145.930435][ T29] audit: type=1326 audit(1768253963.163:42224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.004053][ T29] audit: type=1326 audit(1768253963.193:42225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.027778][ T29] audit: type=1326 audit(1768253963.193:42226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.051326][ T29] audit: type=1326 audit(1768253963.193:42227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.074975][ T29] audit: type=1326 audit(1768253963.193:42228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.098495][ T29] audit: type=1326 audit(1768253963.193:42229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.122068][ T29] audit: type=1326 audit(1768253963.193:42230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.145676][ T29] audit: type=1326 audit(1768253963.193:42231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.169220][ T29] audit: type=1326 audit(1768253963.193:42232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.192758][ T29] audit: type=1326 audit(1768253963.193:42234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 146.368855][ T7472] loop0: detected capacity change from 0 to 512 [ 146.378210][ T7472] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1386: iget: bad extra_isize 90 (inode size 256) [ 146.393110][ T7472] EXT4-fs (loop0): Remounting filesystem read-only [ 146.404159][ T7472] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 146.417683][ T7472] EXT4-fs (loop0): 1 orphan inode deleted [ 146.424076][ T7472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.436692][ T7472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.643196][ T7484] loop0: detected capacity change from 0 to 128 [ 147.211134][ T295] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.456335][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 148.242252][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.256580][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.110328][ T7582] loop0: detected capacity change from 0 to 512 [ 149.128793][ T7582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.152634][ T7582] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.165366][ T7582] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1427: corrupted xattr block 33: invalid checksum [ 149.179542][ T7582] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 149.188549][ T7582] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1427: corrupted xattr block 33: invalid checksum [ 149.202599][ T7582] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 149.211767][ T7582] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1427: corrupted xattr block 33: invalid checksum [ 149.227483][ T7582] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 149.248898][ T3500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.436829][ T7592] loop3: detected capacity change from 0 to 128 [ 149.436984][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'. [ 149.508707][ T7594] bio_check_eod: 709 callbacks suppressed [ 149.508727][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.508727][ T7594] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 149.564463][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.579255][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.579255][ T7594] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 149.630118][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.630118][ T7594] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 149.654520][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.654520][ T7594] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 149.668186][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.668186][ T7594] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 149.695519][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.695519][ T7594] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 149.710996][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.710996][ T7594] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 149.726040][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.726040][ T7594] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 149.747818][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.747818][ T7594] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 149.787794][ T7594] syz.3.1432: attempt to access beyond end of device [ 149.787794][ T7594] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 149.892662][ T7463] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.094352][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.101123][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.107446][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.142099][ T7621] infiniband syz1: set active [ 150.146831][ T7621] infiniband syz1: added vcan0 [ 150.146852][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 150.151669][ T3630] vcan0 speed is unknown, defaulting to 1000 [ 150.171127][ T7621] RDS/IB: syz1: added [ 150.175773][ T7621] smc: adding ib device syz1 with port count 1 [ 150.182059][ T7621] smc: ib device syz1 port 1 has no pnetid [ 150.188178][ T3429] vcan0 speed is unknown, defaulting to 1000 [ 150.194286][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.228993][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.262662][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.312786][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.355187][ T7621] vcan0 speed is unknown, defaulting to 1000 [ 150.621543][ T7639] loop5: detected capacity change from 0 to 128 [ 150.722969][ T7642] loop5: detected capacity change from 0 to 128 [ 150.906303][ T7653] loop5: detected capacity change from 0 to 512 [ 150.915148][ T7653] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1456: iget: bad extra_isize 90 (inode size 256) [ 150.928863][ T7653] EXT4-fs (loop5): Remounting filesystem read-only [ 150.936500][ T7653] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 150.945609][ T7653] EXT4-fs (loop5): 1 orphan inode deleted [ 150.951869][ T7653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.964826][ T7653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.031116][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 151.031134][ T29] audit: type=1326 audit(1768253968.263:42746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.062797][ T29] audit: type=1326 audit(1768253968.263:42747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.086494][ T29] audit: type=1326 audit(1768253968.263:42748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.110408][ T29] audit: type=1326 audit(1768253968.263:42749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.134072][ T29] audit: type=1326 audit(1768253968.263:42750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.157860][ T29] audit: type=1326 audit(1768253968.263:42751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.181442][ T29] audit: type=1326 audit(1768253968.263:42752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.204986][ T29] audit: type=1326 audit(1768253968.263:42753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.228724][ T29] audit: type=1326 audit(1768253968.263:42754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.252253][ T29] audit: type=1326 audit(1768253968.263:42755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8eff749 code=0x7ffc0000 [ 151.530782][ T7681] loop2: detected capacity change from 0 to 128 [ 151.590913][ T7682] loop3: detected capacity change from 0 to 128 [ 151.729744][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 151.770903][ T7695] syz.2.1472(7695): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 151.959937][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.959962][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 152.021869][ T7715] futex_wake_op: syz.0.1480 tries to shift op by -3; fix this program [ 152.036767][ T7715] loop0: detected capacity change from 0 to 1024 [ 152.348674][ T7722] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.391807][ T7722] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.405919][ T7726] loop3: detected capacity change from 0 to 128 [ 152.442212][ T7722] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.501864][ T7722] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.581038][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.605483][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.634103][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.724897][ T7734] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 152.975638][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.984946][ T295] Bluetooth: hci0: Frame reassembly failed (-84) [ 153.039396][ T7745] loop5: detected capacity change from 0 to 764 [ 153.059358][ T7745] rock: directory entry would overflow storage [ 153.065753][ T7745] rock: sig=0x4654, size=5, remaining=4 [ 153.229056][ T7751] loop0: detected capacity change from 0 to 128 [ 153.453771][ T7754] loop3: detected capacity change from 0 to 128 [ 153.658249][ T7761] loop3: detected capacity change from 0 to 256 [ 154.265250][ T7772] loop0: detected capacity change from 0 to 128 [ 154.429330][ T7784] loop2: detected capacity change from 0 to 128 [ 154.544272][ T7318] bio_check_eod: 904 callbacks suppressed [ 154.544342][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.544342][ T7318] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 154.564857][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.564857][ T7318] loop2: rw=1, sector=313, nr_sectors = 8 limit=128 [ 154.583737][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.583737][ T7318] loop2: rw=1, sector=345, nr_sectors = 8 limit=128 [ 154.599135][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.599135][ T7318] loop2: rw=1, sector=377, nr_sectors = 8 limit=128 [ 154.619693][ T3572] ================================================================== [ 154.627823][ T3572] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 154.628962][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.628962][ T7318] loop2: rw=1, sector=409, nr_sectors = 8 limit=128 [ 154.634799][ T3572] [ 154.634808][ T3572] write to 0xffff8881039960ec of 4 bytes by task 3826 on cpu 1: [ 154.634828][ T3572] shmem_mknod+0x143/0x170 [ 154.658499][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.658499][ T7318] loop2: rw=1, sector=441, nr_sectors = 8 limit=128 [ 154.662584][ T3572] shmem_create+0x34/0x50 [ 154.662625][ T3572] path_openat+0x1115/0x23b0 [ 154.662655][ T3572] do_filp_open+0x109/0x230 [ 154.662683][ T3572] do_sys_openat2+0xa6/0x150 [ 154.662713][ T3572] __x64_sys_openat+0xf2/0x120 [ 154.662745][ T3572] x64_sys_call+0x2b07/0x3000 [ 154.662774][ T3572] do_syscall_64+0xca/0x2b0 [ 154.676460][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.676460][ T7318] loop2: rw=1, sector=473, nr_sectors = 8 limit=128 [ 154.680491][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.680519][ T3572] [ 154.680526][ T3572] read to 0xffff8881039960ec of 4 bytes by task 3572 on cpu 0: [ 154.680543][ T3572] fill_mg_cmtime+0x5b/0x260 [ 154.680566][ T3572] generic_fillattr+0x24a/0x340 [ 154.680586][ T3572] shmem_getattr+0x181/0x200 [ 154.691387][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.691387][ T7318] loop2: rw=1, sector=505, nr_sectors = 8 limit=128 [ 154.694277][ T3572] vfs_getattr_nosec+0x146/0x1e0 [ 154.700061][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.700061][ T7318] loop2: rw=1, sector=537, nr_sectors = 8 limit=128 [ 154.703728][ T3572] vfs_statx+0x113/0x390 [ 154.708270][ T7318] kworker/u8:13: attempt to access beyond end of device [ 154.708270][ T7318] loop2: rw=1, sector=569, nr_sectors = 8 limit=128 [ 154.721583][ T3572] vfs_fstatat+0x115/0x170 [ 154.721614][ T3572] __se_sys_newfstatat+0x55/0x260 [ 154.721645][ T3572] __x64_sys_newfstatat+0x55/0x70 [ 154.721675][ T3572] x64_sys_call+0x111f/0x3000 [ 154.721706][ T3572] do_syscall_64+0xca/0x2b0 [ 154.721744][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.830307][ T3572] [ 154.832657][ T3572] value changed: 0x3266e13a -> 0x32f22461 [ 154.838384][ T3572] [ 154.840713][ T3572] Reported by Kernel Concurrency Sanitizer on: [ 154.846878][ T3572] CPU: 0 UID: 0 PID: 3572 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.857753][ T3572] Tainted: [W]=WARN [ 154.861564][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.871630][ T3572] ================================================================== [ 154.906327][ T7789] loop3: detected capacity change from 0 to 128 [ 154.992338][ T7792] loop2: detected capacity change from 0 to 128 [ 155.000947][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110