last executing test programs: 2.733323668s ago: executing program 4 (id=1228): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_pidfd_open(r0, 0x0) poll(&(0x7f0000000100)=[{r3, 0x2058}], 0x1, 0xfffffc01) 2.557022971s ago: executing program 4 (id=1232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 2.416824393s ago: executing program 2 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r3, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x4) 2.399500163s ago: executing program 4 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x46]}, 0x35) 2.320074665s ago: executing program 4 (id=1236): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.310942215s ago: executing program 4 (id=1237): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2121, &(0x7f0000000480)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="75736523e70c4ce3d6e95fcbfe6cff0d1b760bf22e00"], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000640)="fdff27", 0x4, r4}, 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000005c0)="a3", 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r4, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) io_setup(0x1, &(0x7f0000001300)=0x0) io_destroy(r10) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2.205423946s ago: executing program 2 (id=1240): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pwritev2(r0, &(0x7f0000000b40)=[{&(0x7f00000022c0)="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", 0x104f}, {&(0x7f0000000bc0)="6994542438cea99fab21b8dc6a6c3e40d799e4678b0e4642c8975d4c5197c740346000898605c538bf0490ad90213ece6cc74c87214e06bd6a58816fc516f7e4a5fdefe51a245fc9fda7d266dacc901facba82722f8d27186e5b9a364052633a7cf68faa36a2ed01bd3743f6d902ff22c1c2d4eee5a3f68b84b1f519b985c7175331e7e461a46f72260c5679", 0x8c}, {&(0x7f00000009c0)="7810e27a451b67851fdb3726965cbe2fecbd3c12482446910db88dc01c1c0ac2af1a031505a50293712e0a13495c9330727e76752b34120604838d9d2c2bda06e5bbce9138ad9991d30e3f823d4f046ad9c2a5eea24e9ab27ee7dcadb9950783f932eab80daa625ca43ab24b25083f5c179a577a180fda1319569ddcaa1580e1806527dba52e4929962b58c6", 0x8c}, {&(0x7f0000000a80)="bd7794734339bc819a352d1321a6c9829d40d710536c74b5116b539aa1692db9b1b5750c8ebb30cb84e376b12b0a6faada7676a62d8eacb090cc51e0dd8f62796eb536280be025fdf2de532b394303592ba7a0390aeb14e33b", 0x59}, {&(0x7f0000000680)="263935b6cb1c8f8aa0c1735627860000cedf29a34a739b7971011286223e53906ce7fb6d68814efafd5a043cf59b", 0x2e}, {&(0x7f0000000800)="a5d31f4525fe32397116eabc10a06563f0a260c36170976a8227182409a0dd6c158495a4fc2163e66e168145", 0x2c}, {&(0x7f0000000b00)="c8e680927343c89874957e3fff1960a0c0c32cf2aef668", 0x17}], 0x7, 0x7f, 0x12000000, 0x19) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2.118034758s ago: executing program 2 (id=1242): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_pidfd_open(r0, 0x0) poll(&(0x7f0000000100)=[{r3, 0x2058}], 0x1, 0xfffffc01) 1.907997431s ago: executing program 1 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.904321671s ago: executing program 2 (id=1244): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x64, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x24000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x8}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x12, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0x52}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xc4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}], &(0x7f0000000480)='GPL\x00', 0x1, 0x41, &(0x7f00000004c0)=""/65, 0x41100, 0x4e, '\x00', r6, @sk_skb=0x26, r0, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xc, 0x8, 0xf4a4}, 0x10, 0x0, r2, 0x6, &(0x7f0000000600)=[r8, r3, r3, r0, 0x1, r1], &(0x7f0000000c00)=[{0x0, 0x1, 0x1}, {0x0, 0x3, 0xd, 0xb}, {0x5, 0x3, 0x4, 0xc}, {0x5, 0x2, 0x0, 0x8}, {0x2, 0x5, 0x10, 0x9}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x4, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x3, 0x9, 0x10000) 1.837147761s ago: executing program 1 (id=1245): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2121, &(0x7f0000000480)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000640)="fdff27", 0x4}, 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="a3", 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.705960644s ago: executing program 2 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/113, 0x71) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x20, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.628354265s ago: executing program 0 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r2) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x46]}, 0x35) 1.426928758s ago: executing program 4 (id=1250): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000ac0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@nomblk_io_submit}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") close(0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000f00)=[{&(0x7f0000001800)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/132}, {&(0x7f0000000c80)=""/105}, {&(0x7f0000000d00)=""/70}, {&(0x7f0000000d80)=""/185}, {&(0x7f0000000e40)=""/179}], 0x23, 0x40000004, 0x6) r1 = openat$cgroup_ro(r0, &(0x7f0000000a80)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) fdatasync(r1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x6, 0x5, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @remote}}}}) r3 = gettid() tkill(r3, 0x4) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000200)=""/124}, {&(0x7f0000002900)=""/4103}, {&(0x7f0000000f80)=""/85}], 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/122, 0x59}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x248) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r5 = syz_open_pts(r4, 0x181002) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mount$9p_fd(0x0, 0x0, 0x0, 0x1000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\x04\x00\x00\x00\x00^\xf6jAc') bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 1.30065188s ago: executing program 0 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 1.29988272s ago: executing program 3 (id=1252): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0xa}, 0x4c58, 0x10004, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.2991319s ago: executing program 0 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x48040, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200402a}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 917.441046ms ago: executing program 1 (id=1254): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x3066}, 0x10) 777.499608ms ago: executing program 1 (id=1255): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_pidfd_open(r0, 0x0) poll(&(0x7f0000000100)=[{r3, 0x2058}], 0x1, 0xfffffc01) 770.488348ms ago: executing program 2 (id=1256): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffefe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003001e00400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 666.25557ms ago: executing program 0 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 631.04863ms ago: executing program 0 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = eventfd2(0x0, 0x1) readv(r9, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r9, &(0x7f00000001c0)=0xfc2, 0x8) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10, 0x0, 0x8000000}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff, 'veth1_to_team\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5}, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 580.205921ms ago: executing program 1 (id=1259): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) 536.357352ms ago: executing program 1 (id=1260): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2121, &(0x7f0000000480)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3, 0xd21, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="75736523e70c4ce3d6e95fcbfe6cff0d1b760bf22e00"], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000640)="fdff27", 0x4, r3}, 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @rumble={0xfff9, 0x8}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000005c0)="a3", 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) 534.949772ms ago: executing program 0 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0, @ANYRES8=r2, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x18, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20) 387.207004ms ago: executing program 3 (id=1262): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)="ea7aecc2a8094501", 0x8}], 0x1, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39011, 0x0) 167.171558ms ago: executing program 3 (id=1263): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (fail_nth: 2) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 128.272588ms ago: executing program 3 (id=1264): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 70.326389ms ago: executing program 3 (id=1265): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 0s ago: executing program 3 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = eventfd2(0x0, 0x1) readv(r9, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r9, &(0x7f00000001c0)=0xfc2, 0x8) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10, 0x0, 0x8000000}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff, 'veth1_to_team\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5}, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) kernel console output (not intermixed with test programs): =0x7fec4615e929 code=0x7ffc0000 [ 60.120102][ T29] audit: type=1326 audit(1750380270.400:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 60.143517][ T29] audit: type=1326 audit(1750380270.400:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 60.197298][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 60.230315][ T29] audit: type=1326 audit(1750380270.630:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 60.254390][ T29] audit: type=1326 audit(1750380270.630:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 60.284834][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 60.303793][ T4510] binfmt_misc: register: failed to install interpreter file ./file0 [ 60.419598][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 60.493882][ T4520] siw: device registration error -23 [ 60.517440][ T4520] loop2: detected capacity change from 0 to 2048 [ 60.603038][ T4528] loop2: detected capacity change from 0 to 256 [ 60.610940][ T4528] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 60.711593][ T4540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.391'. [ 60.723459][ T4536] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 60.731946][ T4536] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 60.822607][ T4553] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 60.831664][ T4553] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 60.869612][ T4559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.401'. [ 60.964319][ T4573] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 60.972971][ T4573] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 61.023546][ T4581] lo speed is unknown, defaulting to 1000 [ 61.054842][ T4583] FAULT_INJECTION: forcing a failure. [ 61.054842][ T4583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.068292][ T4583] CPU: 0 UID: 0 PID: 4583 Comm: syz.1.411 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 61.068324][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.068343][ T4583] Call Trace: [ 61.068351][ T4583] [ 61.068359][ T4583] __dump_stack+0x1d/0x30 [ 61.068379][ T4583] dump_stack_lvl+0xe8/0x140 [ 61.068462][ T4583] dump_stack+0x15/0x1b [ 61.068481][ T4583] should_fail_ex+0x265/0x280 [ 61.068558][ T4583] should_fail_alloc_page+0xf2/0x100 [ 61.068602][ T4583] __alloc_frozen_pages_noprof+0xff/0x360 [ 61.068648][ T4583] alloc_pages_mpol+0xb3/0x250 [ 61.068717][ T4583] vma_alloc_folio_noprof+0x1aa/0x300 [ 61.068800][ T4583] handle_mm_fault+0xec2/0x2be0 [ 61.068831][ T4583] ? mas_walk+0xf2/0x120 [ 61.068906][ T4583] do_user_addr_fault+0x636/0x1090 [ 61.068950][ T4583] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.068977][ T4583] exc_page_fault+0x62/0xa0 [ 61.069031][ T4583] asm_exc_page_fault+0x26/0x30 [ 61.069089][ T4583] RIP: 0033:0x7f95a0abbf4b [ 61.069111][ T4583] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 61.069134][ T4583] RSP: 002b:00007f959f174e10 EFLAGS: 00010246 [ 61.069153][ T4583] RAX: 00007f959f176f30 RBX: 00007f95a0d04620 RCX: 0000000000000000 [ 61.069199][ T4583] RDX: 00007f959f176f78 RSI: 00007f95a0b6dbf8 RDI: 00007f959f174e30 [ 61.069250][ T4583] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 61.069265][ T4583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.069280][ T4583] R13: 0000000000000000 R14: 00007f95a0d35fa0 R15: 00007ffe75924a48 [ 61.069305][ T4583] [ 61.069323][ T4583] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.104546][ T4589] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 61.258463][ T4589] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 61.270084][ T4598] loop1: detected capacity change from 0 to 512 [ 61.277821][ T4598] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 61.288868][ T4598] EXT4-fs (loop1): invalid journal inode [ 61.299756][ T4598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.406057][ T3395] kernel write not supported for file /227/attr/keycreate (pid: 3395 comm: kworker/0:4) [ 61.464070][ T4616] loop0: detected capacity change from 0 to 2048 [ 61.484016][ T4616] EXT4-fs (loop0): failed to initialize system zone (-117) [ 61.492685][ T4616] EXT4-fs (loop0): mount failed [ 61.732799][ T4634] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 61.747879][ T4641] siw: device registration error -23 [ 61.791257][ T4641] loop4: detected capacity change from 0 to 2048 [ 61.990328][ T4657] binfmt_misc: register: failed to install interpreter file ./file0 [ 63.120755][ T4679] siw: device registration error -23 [ 63.128832][ T3415] kernel write not supported for file /240/attr/keycreate (pid: 3415 comm: kworker/1:3) [ 63.148776][ T4679] loop2: detected capacity change from 0 to 2048 [ 63.166014][ T4685] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.236275][ T4696] 9pnet_fd: Insufficient options for proto=fd [ 63.386030][ T4717] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 63.394372][ T4717] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 63.418114][ T3415] kernel write not supported for file /212/attr/keycreate (pid: 3415 comm: kworker/1:3) [ 63.459366][ T4724] binfmt_misc: register: failed to install interpreter file ./file0 [ 63.484077][ T4726] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 63.790008][ T4735] 9pnet_fd: Insufficient options for proto=fd [ 64.086649][ T4745] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 64.127497][ T4755] binfmt_misc: register: failed to install interpreter file ./file0 [ 64.177801][ T4762] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 64.186136][ T4762] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 64.227477][ T4767] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 64.235821][ T4767] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 64.273553][ T4771] loop0: detected capacity change from 0 to 512 [ 64.280974][ T4771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.294165][ T4771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.307064][ T4771] EXT4-fs (loop0): 1 truncate cleaned up [ 64.314738][ T4771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.519519][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.786689][ T4790] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 64.818113][ T3366] kernel write not supported for file /231/attr/keycreate (pid: 3366 comm: kworker/1:2) [ 64.914221][ T4803] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 64.922510][ T4803] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 64.988398][ T4807] lo speed is unknown, defaulting to 1000 [ 65.004503][ C1] hrtimer: interrupt took 27473 ns [ 65.023321][ T4811] netlink: 'syz.2.497': attribute type 10 has an invalid length. [ 65.053949][ T4811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.072609][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 65.072629][ T29] audit: type=1400 audit(1750380275.470:5634): avc: denied { read write } for pid=4808 comm="syz.1.498" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.080113][ T4811] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 65.102558][ T29] audit: type=1400 audit(1750380275.470:5635): avc: denied { open } for pid=4808 comm="syz.1.498" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.127700][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.142274][ T4807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.150829][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.158391][ T4807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.177839][ T4807] bond0: (slave batadv0): Releasing backup interface [ 65.188008][ T4822] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 65.196307][ T4822] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 65.251449][ T4828] siw: device registration error -23 [ 65.257580][ T29] audit: type=1326 audit(1750380275.650:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.282349][ T4828] loop1: detected capacity change from 0 to 2048 [ 65.293552][ T29] audit: type=1326 audit(1750380275.680:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.317599][ T29] audit: type=1326 audit(1750380275.680:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.341606][ T29] audit: type=1326 audit(1750380275.680:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.365262][ T29] audit: type=1326 audit(1750380275.680:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.388792][ T29] audit: type=1326 audit(1750380275.680:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.412214][ T29] audit: type=1326 audit(1750380275.680:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.435797][ T29] audit: type=1326 audit(1750380275.680:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 65.506394][ T4847] loop2: detected capacity change from 0 to 128 [ 65.510204][ T4849] binfmt_misc: register: failed to install interpreter file ./file0 [ 65.538899][ T4854] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 65.547413][ T4854] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 65.638298][ T4867] siw: device registration error -23 [ 65.656218][ T4867] loop2: detected capacity change from 0 to 2048 [ 65.689761][ T4874] loop2: detected capacity change from 0 to 512 [ 65.697768][ T4874] EXT4-fs (loop2): Invalid default hash set in the superblock [ 65.704929][ T4872] infiniband syz!: set active [ 65.710043][ T4872] infiniband syz!: added team_slave_0 [ 65.720632][ T4872] RDS/IB: syz!: added [ 65.724657][ T4872] smc: adding ib device syz! with port count 1 [ 65.730940][ T4872] smc: ib device syz! port 1 has pnetid [ 65.876515][ T4874] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.940656][ T4885] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 65.949472][ T4885] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 66.180463][ T4907] 9pnet_fd: Insufficient options for proto=fd [ 66.214863][ T4909] loop0: detected capacity change from 0 to 512 [ 66.242932][ T4909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.259971][ T4909] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.283420][ T4910] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.535: Failed to acquire dquot type 0 [ 66.320867][ T4916] loop1: detected capacity change from 0 to 8192 [ 66.333550][ T4916] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.349013][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 66.470982][ T4928] loop4: detected capacity change from 0 to 1024 [ 66.477916][ T4928] EXT4-fs: Ignoring removed oldalloc option [ 66.487481][ T4928] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 66.522346][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.553965][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.592899][ T9] kernel write not supported for file /279/attr/keycreate (pid: 9 comm: kworker/0:0) [ 66.618844][ T4935] __nla_validate_parse: 9 callbacks suppressed [ 66.618863][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 66.709288][ T4939] netlink: 'syz.0.545': attribute type 4 has an invalid length. [ 66.760154][ T4947] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 66.768465][ T4947] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 66.797598][ T4950] FAULT_INJECTION: forcing a failure. [ 66.797598][ T4950] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.811063][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: syz.0.550 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 66.811095][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.811108][ T4950] Call Trace: [ 66.811114][ T4950] [ 66.811123][ T4950] __dump_stack+0x1d/0x30 [ 66.811196][ T4950] dump_stack_lvl+0xe8/0x140 [ 66.811220][ T4950] dump_stack+0x15/0x1b [ 66.811313][ T4950] should_fail_ex+0x265/0x280 [ 66.811407][ T4950] should_fail+0xb/0x20 [ 66.811433][ T4950] should_fail_usercopy+0x1a/0x20 [ 66.811524][ T4950] _copy_from_user+0x1c/0xb0 [ 66.811548][ T4950] __sys_bpf+0x178/0x790 [ 66.811595][ T4950] __x64_sys_bpf+0x41/0x50 [ 66.811671][ T4950] x64_sys_call+0x2478/0x2fb0 [ 66.811691][ T4950] do_syscall_64+0xd2/0x200 [ 66.811707][ T4950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.811737][ T4950] ? clear_bhb_loop+0x40/0x90 [ 66.811765][ T4950] ? clear_bhb_loop+0x40/0x90 [ 66.811845][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.811870][ T4950] RIP: 0033:0x7f1e5d91e929 [ 66.811888][ T4950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.811910][ T4950] RSP: 002b:00007f1e5bf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.811930][ T4950] RAX: ffffffffffffffda RBX: 00007f1e5db45fa0 RCX: 00007f1e5d91e929 [ 66.811942][ T4950] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 66.811999][ T4950] RBP: 00007f1e5bf87090 R08: 0000000000000000 R09: 0000000000000000 [ 66.812013][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.812027][ T4950] R13: 0000000000000000 R14: 00007f1e5db45fa0 R15: 00007ffd2dc87a98 [ 66.812049][ T4950] [ 67.025469][ T4957] siw: device registration error -23 [ 67.042079][ T4957] loop2: detected capacity change from 0 to 2048 [ 67.134660][ T4964] FAULT_INJECTION: forcing a failure. [ 67.134660][ T4964] name failslab, interval 1, probability 0, space 0, times 1 [ 67.147750][ T4964] CPU: 0 UID: 0 PID: 4964 Comm: syz.4.556 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 67.147783][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.147800][ T4964] Call Trace: [ 67.147809][ T4964] [ 67.147863][ T4964] __dump_stack+0x1d/0x30 [ 67.147884][ T4964] dump_stack_lvl+0xe8/0x140 [ 67.147906][ T4964] dump_stack+0x15/0x1b [ 67.147967][ T4964] should_fail_ex+0x265/0x280 [ 67.148042][ T4964] should_failslab+0x8c/0xb0 [ 67.148073][ T4964] kmem_cache_alloc_noprof+0x50/0x310 [ 67.148173][ T4964] ? audit_log_start+0x365/0x6c0 [ 67.148285][ T4964] audit_log_start+0x365/0x6c0 [ 67.148332][ T4964] audit_seccomp+0x48/0x100 [ 67.148378][ T4964] ? __seccomp_filter+0x68c/0x10d0 [ 67.148409][ T4964] __seccomp_filter+0x69d/0x10d0 [ 67.148506][ T4964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.148583][ T4964] ? vfs_write+0x75e/0x8e0 [ 67.148624][ T4964] ? __rcu_read_unlock+0x4f/0x70 [ 67.148653][ T4964] ? __fget_files+0x184/0x1c0 [ 67.148740][ T4964] __secure_computing+0x82/0x150 [ 67.148763][ T4964] syscall_trace_enter+0xcf/0x1e0 [ 67.148790][ T4964] do_syscall_64+0xac/0x200 [ 67.148824][ T4964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.148859][ T4964] ? clear_bhb_loop+0x40/0x90 [ 67.148887][ T4964] ? clear_bhb_loop+0x40/0x90 [ 67.148920][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.149054][ T4964] RIP: 0033:0x7fec4615e929 [ 67.149089][ T4964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.149108][ T4964] RSP: 002b:00007fec447c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 67.149132][ T4964] RAX: ffffffffffffffda RBX: 00007fec46385fa0 RCX: 00007fec4615e929 [ 67.149148][ T4964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.149163][ T4964] RBP: 00007fec447c7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.149179][ T4964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.149192][ T4964] R13: 0000000000000000 R14: 00007fec46385fa0 R15: 00007ffeb84f2778 [ 67.149294][ T4964] [ 67.509787][ T4977] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 67.518128][ T4977] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 67.540113][ T4973] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 67.577193][ T4982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.563'. [ 67.877875][ T4995] loop0: detected capacity change from 0 to 1024 [ 67.884832][ T4995] EXT4-fs: Ignoring removed nobh option [ 67.890560][ T4995] EXT4-fs: Ignoring removed bh option [ 67.901633][ T4995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.914900][ T4995] FAULT_INJECTION: forcing a failure. [ 67.914900][ T4995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.928218][ T4995] CPU: 1 UID: 0 PID: 4995 Comm: syz.0.568 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 67.928297][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.928309][ T4995] Call Trace: [ 67.928316][ T4995] [ 67.928323][ T4995] __dump_stack+0x1d/0x30 [ 67.928344][ T4995] dump_stack_lvl+0xe8/0x140 [ 67.928362][ T4995] dump_stack+0x15/0x1b [ 67.928378][ T4995] should_fail_ex+0x265/0x280 [ 67.928489][ T4995] should_fail_alloc_page+0xf2/0x100 [ 67.928570][ T4995] __alloc_frozen_pages_noprof+0xff/0x360 [ 67.928641][ T4995] alloc_pages_mpol+0xb3/0x250 [ 67.928679][ T4995] folio_alloc_noprof+0x97/0x150 [ 67.928797][ T4995] filemap_alloc_folio_noprof+0x66/0x210 [ 67.928827][ T4995] __filemap_get_folio+0x28f/0x6b0 [ 67.928869][ T4995] ext4_convert_inline_data_to_extent+0x1f0/0x7b0 [ 67.928906][ T4995] ext4_try_to_write_inline_data+0x54/0x90 [ 67.928944][ T4995] ext4_write_begin+0x148/0xd30 [ 67.929023][ T4995] ? find_inode_by_ino_rcu+0x9d/0x160 [ 67.929082][ T4995] ? ext4_mark_iloc_dirty+0xd3f/0xda0 [ 67.929111][ T4995] ext4_da_write_begin+0x1e0/0x670 [ 67.929138][ T4995] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 67.929165][ T4995] generic_perform_write+0x184/0x490 [ 67.929188][ T4995] ext4_buffered_write_iter+0x1ee/0x3c0 [ 67.929211][ T4995] ext4_file_write_iter+0x383/0xf00 [ 67.929280][ T4995] ? 0xffffffff81000000 [ 67.929292][ T4995] ? __rcu_read_unlock+0x4f/0x70 [ 67.929311][ T4995] ? avc_policy_seqno+0x15/0x30 [ 67.929397][ T4995] ? selinux_file_permission+0x1e4/0x320 [ 67.929421][ T4995] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 67.929441][ T4995] vfs_write+0x4a0/0x8e0 [ 67.929520][ T4995] __x64_sys_pwrite64+0xfd/0x150 [ 67.929539][ T4995] x64_sys_call+0xe45/0x2fb0 [ 67.929558][ T4995] do_syscall_64+0xd2/0x200 [ 67.929573][ T4995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.929644][ T4995] ? clear_bhb_loop+0x40/0x90 [ 67.929730][ T4995] ? clear_bhb_loop+0x40/0x90 [ 67.929782][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.929805][ T4995] RIP: 0033:0x7f1e5d91e929 [ 67.929819][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.929834][ T4995] RSP: 002b:00007f1e5bf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 67.929863][ T4995] RAX: ffffffffffffffda RBX: 00007f1e5db45fa0 RCX: 00007f1e5d91e929 [ 67.929879][ T4995] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 67.929894][ T4995] RBP: 00007f1e5bf87090 R08: 0000000000000000 R09: 0000000000000000 [ 67.929909][ T4995] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 67.929921][ T4995] R13: 0000000000000000 R14: 00007f1e5db45fa0 R15: 00007ffd2dc87a98 [ 67.929938][ T4995] [ 68.227624][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.295752][ T5006] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 68.305768][ T5006] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 68.361521][ T5011] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.398299][ T5015] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.576'. [ 68.459480][ T5021] FAULT_INJECTION: forcing a failure. [ 68.459480][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.473282][ T5021] CPU: 1 UID: 0 PID: 5021 Comm: syz.2.580 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 68.473309][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.473321][ T5021] Call Trace: [ 68.473326][ T5021] [ 68.473333][ T5021] __dump_stack+0x1d/0x30 [ 68.473368][ T5021] dump_stack_lvl+0xe8/0x140 [ 68.473391][ T5021] dump_stack+0x15/0x1b [ 68.473410][ T5021] should_fail_ex+0x265/0x280 [ 68.473446][ T5021] should_fail+0xb/0x20 [ 68.473482][ T5021] should_fail_usercopy+0x1a/0x20 [ 68.473554][ T5021] _copy_from_user+0x1c/0xb0 [ 68.473627][ T5021] __sys_bpf+0x178/0x790 [ 68.473666][ T5021] __x64_sys_bpf+0x41/0x50 [ 68.473700][ T5021] x64_sys_call+0x2478/0x2fb0 [ 68.473772][ T5021] do_syscall_64+0xd2/0x200 [ 68.473790][ T5021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.473817][ T5021] ? clear_bhb_loop+0x40/0x90 [ 68.473868][ T5021] ? clear_bhb_loop+0x40/0x90 [ 68.473890][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.473911][ T5021] RIP: 0033:0x7f4a106fe929 [ 68.473926][ T5021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.473972][ T5021] RSP: 002b:00007f4a0ed67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.473990][ T5021] RAX: ffffffffffffffda RBX: 00007f4a10925fa0 RCX: 00007f4a106fe929 [ 68.474002][ T5021] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000002 [ 68.474014][ T5021] RBP: 00007f4a0ed67090 R08: 0000000000000000 R09: 0000000000000000 [ 68.474026][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.474037][ T5021] R13: 0000000000000000 R14: 00007f4a10925fa0 R15: 00007ffe49dccab8 [ 68.474056][ T5021] [ 68.682629][ T5028] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 68.691027][ T5028] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 68.789551][ T5036] loop1: detected capacity change from 0 to 256 [ 68.796565][ T5036] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 68.805559][ T5045] IPv6: Can't replace route, no match found [ 69.039986][ T5066] siw: device registration error -23 [ 69.056505][ T5066] loop1: detected capacity change from 0 to 2048 [ 69.084153][ T5068] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 69.092524][ T5068] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 69.429301][ T5092] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 69.437932][ T5092] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 69.491786][ T3366] kernel write not supported for file /316/attr/keycreate (pid: 3366 comm: kworker/1:2) [ 69.509575][ T5088] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 70.538114][ T5106] FAULT_INJECTION: forcing a failure. [ 70.538114][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.551967][ T5106] CPU: 1 UID: 0 PID: 5106 Comm: syz.0.615 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 70.552075][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.552092][ T5106] Call Trace: [ 70.552100][ T5106] [ 70.552139][ T5106] __dump_stack+0x1d/0x30 [ 70.552166][ T5106] dump_stack_lvl+0xe8/0x140 [ 70.552192][ T5106] dump_stack+0x15/0x1b [ 70.552213][ T5106] should_fail_ex+0x265/0x280 [ 70.552261][ T5106] should_fail+0xb/0x20 [ 70.552315][ T5106] should_fail_usercopy+0x1a/0x20 [ 70.552429][ T5106] _copy_from_user+0x1c/0xb0 [ 70.552455][ T5106] ___sys_sendmsg+0xc1/0x1d0 [ 70.552531][ T5106] __x64_sys_sendmsg+0xd4/0x160 [ 70.552599][ T5106] x64_sys_call+0x2999/0x2fb0 [ 70.552626][ T5106] do_syscall_64+0xd2/0x200 [ 70.552649][ T5106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.552682][ T5106] ? clear_bhb_loop+0x40/0x90 [ 70.552784][ T5106] ? clear_bhb_loop+0x40/0x90 [ 70.552813][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.552853][ T5106] RIP: 0033:0x7f1e5d91e929 [ 70.552873][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.552895][ T5106] RSP: 002b:00007f1e5bf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.552919][ T5106] RAX: ffffffffffffffda RBX: 00007f1e5db45fa0 RCX: 00007f1e5d91e929 [ 70.552935][ T5106] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 70.552950][ T5106] RBP: 00007f1e5bf87090 R08: 0000000000000000 R09: 0000000000000000 [ 70.553037][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.553052][ T5106] R13: 0000000000000000 R14: 00007f1e5db45fa0 R15: 00007ffd2dc87a98 [ 70.553138][ T5106] [ 70.995317][ T5119] lo speed is unknown, defaulting to 1000 [ 71.014678][ T5121] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 71.023039][ T5121] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 71.060681][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 71.060700][ T29] audit: type=1326 audit(1750380281.450:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.090477][ T29] audit: type=1326 audit(1750380281.450:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.117226][ T29] audit: type=1326 audit(1750380281.450:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.140636][ T29] audit: type=1326 audit(1750380281.450:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.164212][ T29] audit: type=1326 audit(1750380281.450:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.187744][ T29] audit: type=1326 audit(1750380281.450:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.211168][ T29] audit: type=1326 audit(1750380281.450:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.222153][ T5133] 9pnet_fd: Insufficient options for proto=fd [ 71.345405][ T5139] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 71.353735][ T5139] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 71.437507][ T29] audit: type=1326 audit(1750380281.830:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.461099][ T29] audit: type=1326 audit(1750380281.830:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.490441][ T5141] loop1: detected capacity change from 0 to 256 [ 71.497079][ T5141] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 71.529749][ T29] audit: type=1326 audit(1750380281.860:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 71.580361][ T5136] netlink: 'syz.4.624': attribute type 4 has an invalid length. [ 71.750025][ T5158] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.200055][ T5169] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 72.208317][ T5169] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 72.391492][ T5176] tipc: Started in network mode [ 72.396461][ T5176] tipc: Node identity ac14140f, cluster identity 4711 [ 72.405113][ T5176] tipc: New replicast peer: 255.255.255.255 [ 72.411328][ T5176] tipc: Enabled bearer , priority 10 [ 73.075091][ T5190] loop2: detected capacity change from 0 to 256 [ 73.090323][ T5190] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 73.252372][ T23] kernel write not supported for file /318/attr/keycreate (pid: 23 comm: kworker/1:0) [ 73.267460][ T5201] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.455228][ T5209] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 73.463593][ T5209] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 73.555283][ T10] tipc: Node number set to 2886997007 [ 73.702531][ T5208] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 74.511643][ T5231] tipc: Started in network mode [ 74.516632][ T5231] tipc: Node identity ac14140f, cluster identity 4711 [ 74.523771][ T5231] tipc: New replicast peer: 255.255.255.255 [ 74.529944][ T5231] tipc: Enabled bearer , priority 10 [ 74.877539][ T5244] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 74.885995][ T5244] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 74.919933][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 74.964054][ T5248] loop3: detected capacity change from 0 to 256 [ 74.971159][ T5248] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 74.992316][ T5256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 75.075700][ T5260] siw: device registration error -23 [ 75.091349][ T5260] loop2: detected capacity change from 0 to 2048 [ 75.141214][ T5263] tipc: Enabling of bearer rejected, already enabled [ 75.380166][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 75.623839][ T5287] FAULT_INJECTION: forcing a failure. [ 75.623839][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 75.636699][ T5287] CPU: 1 UID: 0 PID: 5287 Comm: syz.4.675 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 75.636727][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.636739][ T5287] Call Trace: [ 75.636746][ T5287] [ 75.636755][ T5287] __dump_stack+0x1d/0x30 [ 75.636781][ T5287] dump_stack_lvl+0xe8/0x140 [ 75.636806][ T5287] dump_stack+0x15/0x1b [ 75.636826][ T5287] should_fail_ex+0x265/0x280 [ 75.636858][ T5287] should_failslab+0x8c/0xb0 [ 75.636880][ T5287] kmem_cache_alloc_noprof+0x50/0x310 [ 75.636908][ T5287] ? mas_alloc_nodes+0x265/0x520 [ 75.636934][ T5287] mas_alloc_nodes+0x265/0x520 [ 75.636960][ T5287] mas_preallocate+0x32b/0x510 [ 75.637022][ T5287] mmap_region+0xb7e/0x1580 [ 75.637062][ T5287] ? mntput_no_expire+0x6f/0x3c0 [ 75.637115][ T5287] do_mmap+0x9b3/0xbe0 [ 75.637159][ T5287] vm_mmap_pgoff+0x17a/0x2e0 [ 75.637197][ T5287] ksys_mmap_pgoff+0xc2/0x310 [ 75.637229][ T5287] ? __x64_sys_mmap+0x49/0x70 [ 75.637258][ T5287] x64_sys_call+0x1602/0x2fb0 [ 75.637284][ T5287] do_syscall_64+0xd2/0x200 [ 75.637306][ T5287] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.637339][ T5287] ? clear_bhb_loop+0x40/0x90 [ 75.637360][ T5287] ? clear_bhb_loop+0x40/0x90 [ 75.637381][ T5287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.637406][ T5287] RIP: 0033:0x7fec4615e929 [ 75.637425][ T5287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.637447][ T5287] RSP: 002b:00007fec447c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 75.637470][ T5287] RAX: ffffffffffffffda RBX: 00007fec46385fa0 RCX: 00007fec4615e929 [ 75.637485][ T5287] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 75.637500][ T5287] RBP: 00007fec447c7090 R08: ffffffffffffffff R09: 0000000000000000 [ 75.637515][ T5287] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 75.637529][ T5287] R13: 0000000000000000 R14: 00007fec46385fa0 R15: 00007ffeb84f2778 [ 75.637553][ T5287] [ 75.853261][ T5215] tipc: Node number set to 2886997007 [ 76.028297][ T5293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.677'. [ 76.094877][ T5296] siw: device registration error -23 [ 76.109850][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 76.116182][ T29] audit: type=1326 audit(1750380286.500:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.147040][ T5296] loop2: detected capacity change from 0 to 2048 [ 76.173242][ T29] audit: type=1326 audit(1750380286.540:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.196766][ T29] audit: type=1326 audit(1750380286.540:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.220151][ T29] audit: type=1326 audit(1750380286.540:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.243635][ T29] audit: type=1326 audit(1750380286.540:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.268602][ T29] audit: type=1326 audit(1750380286.540:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.293497][ T29] audit: type=1326 audit(1750380286.540:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.317158][ T29] audit: type=1326 audit(1750380286.540:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.342976][ T29] audit: type=1326 audit(1750380286.540:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 76.367265][ T29] audit: type=1326 audit(1750380286.540:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 77.129599][ T5315] netlink: 'syz.0.684': attribute type 4 has an invalid length. [ 77.190942][ T5318] tipc: Started in network mode [ 77.195894][ T5318] tipc: Node identity ac14140f, cluster identity 4711 [ 77.207757][ T5318] tipc: New replicast peer: 255.255.255.255 [ 77.213911][ T5318] tipc: Enabled bearer , priority 10 [ 77.354120][ T5330] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 77.355715][ T5332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.691'. [ 77.362418][ T5330] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 77.365056][ T5324] loop2: detected capacity change from 0 to 256 [ 77.393655][ T5324] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 77.559546][ T5341] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 77.569420][ T3395] IPVS: starting estimator thread 0... [ 77.592268][ T5348] process 'syz.2.698' launched '/dev/fd/7' with NULL argv: empty string added [ 77.669989][ T5346] IPVS: using max 2304 ests per chain, 115200 per kthread [ 77.682463][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.690148][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.726712][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.734397][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.778926][ T5366] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.788345][ T5366] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.849685][ T5375] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.851488][ T5376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'. [ 77.858215][ T5375] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.969720][ T5381] loop1: detected capacity change from 0 to 256 [ 77.976979][ T5381] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 78.141028][ T5395] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 78.149342][ T5395] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 78.236910][ T5404] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 78.245979][ T5404] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 78.297889][ T5411] netlink: 144 bytes leftover after parsing attributes in process `syz.0.722'. [ 78.339966][ T1038] tipc: Node number set to 2886997007 [ 78.345847][ T5417] 9pnet_fd: Insufficient options for proto=fd [ 78.362624][ T5421] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.403735][ T5424] loop1: detected capacity change from 0 to 2048 [ 78.413377][ T5425] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 78.421801][ T5425] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 78.488547][ T5429] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 78.497237][ T5429] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 78.635025][ T5435] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 78.713853][ T5443] 9pnet_fd: Insufficient options for proto=fd [ 78.777338][ T5450] siw: device registration error -23 [ 78.793649][ T5450] loop3: detected capacity change from 0 to 2048 [ 78.826861][ T5453] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.851963][ T5455] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 78.860254][ T5455] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 79.399659][ T5470] syzkaller1: entered promiscuous mode [ 79.407383][ T5470] syzkaller1: entered allmulticast mode [ 79.417159][ T5470] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 79.424578][ T5470] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.432142][ T5470] vhci_hcd vhci_hcd.0: Device attached [ 79.447829][ T5475] vhci_hcd: connection closed [ 79.448028][ T413] vhci_hcd: stop threads [ 79.457136][ T413] vhci_hcd: release socket [ 79.461660][ T413] vhci_hcd: disconnect device [ 79.563879][ T5482] 9pnet_fd: Insufficient options for proto=fd [ 79.607327][ T5490] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 79.615836][ T5490] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 79.644692][ T5494] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 79.652992][ T5494] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 79.773311][ T5506] loop4: detected capacity change from 0 to 256 [ 79.790025][ T5506] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 79.925596][ T5520] 9pnet_fd: Insufficient options for proto=fd [ 80.121623][ T5542] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 80.129923][ T5542] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 80.292442][ T5554] binfmt_misc: register: failed to install interpreter file ./file0 [ 80.353904][ T5556] usb usb8: usbfs: process 5556 (syz.0.780) did not claim interface 0 before use [ 80.422465][ T5562] syzkaller1: entered promiscuous mode [ 80.428121][ T5562] syzkaller1: entered allmulticast mode [ 80.436759][ T5567] siw: device registration error -23 [ 80.454276][ T5567] loop2: detected capacity change from 0 to 2048 [ 80.454416][ T5558] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 80.467574][ T5558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.476302][ T5558] vhci_hcd vhci_hcd.0: Device attached [ 80.487936][ T5568] vhci_hcd: connection closed [ 80.488184][ T12] vhci_hcd: stop threads [ 80.498485][ T12] vhci_hcd: release socket [ 80.503068][ T12] vhci_hcd: disconnect device [ 80.619764][ T5581] tipc: Started in network mode [ 80.624773][ T5581] tipc: Node identity ac14140f, cluster identity 4711 [ 80.631847][ T5581] tipc: New replicast peer: 255.255.255.255 [ 80.637992][ T5581] tipc: Enabled bearer , priority 10 [ 80.714438][ T5584] binfmt_misc: register: failed to install interpreter file ./file0 [ 80.801130][ T5588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 80.914457][ T5595] tipc: Enabling of bearer rejected, already enabled [ 81.033804][ T5602] siw: device registration error -23 [ 81.049484][ T5602] loop4: detected capacity change from 0 to 2048 [ 81.097452][ T5610] 9pnet_fd: Insufficient options for proto=fd [ 81.240710][ T5621] loop1: detected capacity change from 0 to 2048 [ 81.250254][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 81.250272][ T29] audit: type=1326 audit(1750380291.650:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.283989][ T29] audit: type=1326 audit(1750380291.650:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.307537][ T29] audit: type=1326 audit(1750380291.650:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.330906][ T29] audit: type=1326 audit(1750380291.650:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.355126][ T29] audit: type=1326 audit(1750380291.650:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.378554][ T29] audit: type=1326 audit(1750380291.650:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.401992][ T29] audit: type=1326 audit(1750380291.650:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.425457][ T29] audit: type=1326 audit(1750380291.650:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.448823][ T29] audit: type=1326 audit(1750380291.650:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.466818][ T5626] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 81.472202][ T29] audit: type=1326 audit(1750380291.650:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 81.480430][ T5626] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 81.563807][ T5633] loop0: detected capacity change from 0 to 2048 [ 81.610666][ T5638] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 81.618905][ T5638] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 81.650088][ T5215] tipc: Node number set to 2886997007 [ 81.720340][ T5650] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 81.728598][ T5650] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 81.863307][ T5662] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 81.871724][ T5662] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 81.892404][ T5664] loop0: detected capacity change from 0 to 2048 [ 82.045509][ T5672] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 82.468076][ T5685] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 82.476398][ T5685] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 82.617961][ T5692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 82.643458][ T5698] siw: device registration error -23 [ 82.662047][ T5698] loop3: detected capacity change from 0 to 2048 [ 82.902164][ T5723] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 82.910543][ T5723] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 82.954176][ T5731] siw: device registration error -23 [ 82.968403][ T5731] loop3: detected capacity change from 0 to 2048 [ 83.082932][ T5740] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 83.091279][ T5740] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 83.828285][ T5760] loop0: detected capacity change from 0 to 256 [ 83.836581][ T5760] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 83.940087][ T5772] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 83.948363][ T5772] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 84.013003][ T5677] IPVS: starting estimator thread 0... [ 84.063473][ T5786] loop0: detected capacity change from 0 to 2048 [ 84.110220][ T5778] IPVS: using max 2304 ests per chain, 115200 per kthread [ 84.119457][ T5793] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 84.571033][ T5807] loop0: detected capacity change from 0 to 256 [ 84.577713][ T5807] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 84.798668][ T5817] siw: device registration error -23 [ 84.826773][ T5817] loop2: detected capacity change from 0 to 2048 [ 85.080844][ T5826] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 85.306413][ T5837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.888'. [ 85.345113][ T5835] loop4: detected capacity change from 0 to 256 [ 85.353979][ T5835] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 85.384587][ T5848] siw: device registration error -23 [ 85.401361][ T5848] loop2: detected capacity change from 0 to 2048 [ 85.443574][ T5854] FAULT_INJECTION: forcing a failure. [ 85.443574][ T5854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.456805][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.1.895 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 85.456832][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.456844][ T5854] Call Trace: [ 85.456851][ T5854] [ 85.456858][ T5854] __dump_stack+0x1d/0x30 [ 85.456912][ T5854] dump_stack_lvl+0xe8/0x140 [ 85.456936][ T5854] dump_stack+0x15/0x1b [ 85.456952][ T5854] should_fail_ex+0x265/0x280 [ 85.456988][ T5854] should_fail+0xb/0x20 [ 85.457051][ T5854] should_fail_usercopy+0x1a/0x20 [ 85.457091][ T5854] strncpy_from_user+0x25/0x230 [ 85.457122][ T5854] ? kmem_cache_alloc_noprof+0x186/0x310 [ 85.457153][ T5854] ? getname_flags+0x80/0x3b0 [ 85.457186][ T5854] getname_flags+0xae/0x3b0 [ 85.457254][ T5854] user_path_at+0x28/0x130 [ 85.457288][ T5854] __se_sys_pivot_root+0xbc/0x720 [ 85.457320][ T5854] ? fput+0x8f/0xc0 [ 85.457350][ T5854] __x64_sys_pivot_root+0x31/0x40 [ 85.457374][ T5854] x64_sys_call+0x2aac/0x2fb0 [ 85.457394][ T5854] do_syscall_64+0xd2/0x200 [ 85.457411][ T5854] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.457472][ T5854] ? clear_bhb_loop+0x40/0x90 [ 85.457492][ T5854] ? clear_bhb_loop+0x40/0x90 [ 85.457512][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.457541][ T5854] RIP: 0033:0x7f95a0b0e929 [ 85.457559][ T5854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.457577][ T5854] RSP: 002b:00007f959f177038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 85.457675][ T5854] RAX: ffffffffffffffda RBX: 00007f95a0d35fa0 RCX: 00007f95a0b0e929 [ 85.457688][ T5854] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 85.457703][ T5854] RBP: 00007f959f177090 R08: 0000000000000000 R09: 0000000000000000 [ 85.457781][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.457796][ T5854] R13: 0000000000000000 R14: 00007f95a0d35fa0 R15: 00007ffe75924a48 [ 85.457814][ T5854] [ 85.710147][ T5861] FAULT_INJECTION: forcing a failure. [ 85.710147][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.723397][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.1.898 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 85.723431][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.723446][ T5861] Call Trace: [ 85.723455][ T5861] [ 85.723464][ T5861] __dump_stack+0x1d/0x30 [ 85.723509][ T5861] dump_stack_lvl+0xe8/0x140 [ 85.723527][ T5861] dump_stack+0x15/0x1b [ 85.723584][ T5861] should_fail_ex+0x265/0x280 [ 85.723637][ T5861] should_fail+0xb/0x20 [ 85.723663][ T5861] should_fail_usercopy+0x1a/0x20 [ 85.723700][ T5861] _copy_to_user+0x20/0xa0 [ 85.723731][ T5861] copy_to_sockptr+0x5e/0xa0 [ 85.723761][ T5861] do_ipv6_getsockopt+0x10d2/0x1470 [ 85.723791][ T5861] ? avc_has_perm+0xd3/0x150 [ 85.723817][ T5861] ipv6_getsockopt+0x71/0x1e0 [ 85.723902][ T5861] ? selinux_socket_getsockopt+0xd0/0x1b0 [ 85.723943][ T5861] ? selinux_socket_getsockopt+0xd0/0x1b0 [ 85.723985][ T5861] tcp_getsockopt+0xaa/0xe0 [ 85.724047][ T5861] sock_common_getsockopt+0x5d/0x70 [ 85.724072][ T5861] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 85.724170][ T5861] do_sock_getsockopt+0x200/0x240 [ 85.724202][ T5861] __x64_sys_getsockopt+0x11e/0x1a0 [ 85.724311][ T5861] x64_sys_call+0x12aa/0x2fb0 [ 85.724337][ T5861] do_syscall_64+0xd2/0x200 [ 85.724390][ T5861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.724423][ T5861] ? clear_bhb_loop+0x40/0x90 [ 85.724449][ T5861] ? clear_bhb_loop+0x40/0x90 [ 85.724475][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.724508][ T5861] RIP: 0033:0x7f95a0b0e929 [ 85.724562][ T5861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.724658][ T5861] RSP: 002b:00007f959f177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 85.724681][ T5861] RAX: ffffffffffffffda RBX: 00007f95a0d35fa0 RCX: 00007f95a0b0e929 [ 85.724696][ T5861] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 85.724708][ T5861] RBP: 00007f959f177090 R08: 0000200000000040 R09: 0000000000000000 [ 85.724759][ T5861] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 85.724770][ T5861] R13: 0000000000000000 R14: 00007f95a0d35fa0 R15: 00007ffe75924a48 [ 85.724786][ T5861] [ 86.038019][ T5866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.086000][ T5866] loop4: detected capacity change from 0 to 512 [ 86.094084][ T5866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.142924][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.155638][ T5866] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.264252][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.275267][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 86.275286][ T29] audit: type=1326 audit(1750380296.670:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.305329][ T29] audit: type=1326 audit(1750380296.670:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.329154][ T29] audit: type=1326 audit(1750380296.670:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.352621][ T29] audit: type=1326 audit(1750380296.670:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.383262][ T29] audit: type=1326 audit(1750380296.780:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.409563][ T29] audit: type=1326 audit(1750380296.800:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.470965][ T29] audit: type=1326 audit(1750380296.870:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.494589][ T29] audit: type=1326 audit(1750380296.870:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e600e929 code=0x7ffc0000 [ 86.521983][ T5891] loop2: detected capacity change from 0 to 256 [ 86.528613][ T5891] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 86.538955][ T29] audit: type=1326 audit(1750380296.930:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 86.562470][ T29] audit: type=1326 audit(1750380296.930:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 86.614902][ T5894] tipc: Enabling of bearer rejected, already enabled [ 86.655705][ T5900] wireguard0: entered promiscuous mode [ 86.661328][ T5900] wireguard0: entered allmulticast mode [ 86.767668][ T5907] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 86.775993][ T5907] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 87.144244][ T5934] loop3: detected capacity change from 0 to 256 [ 87.150974][ T5934] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 87.310518][ T5943] siw: device registration error -23 [ 87.326344][ T5943] loop4: detected capacity change from 0 to 2048 [ 87.357638][ T5946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5946 comm=syz.4.928 [ 87.450673][ T5951] 9pnet_fd: Insufficient options for proto=fd [ 87.635084][ T5966] loop2: detected capacity change from 0 to 256 [ 87.641838][ T5966] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 87.707325][ T5975] binfmt_misc: register: failed to install interpreter file ./file0 [ 87.743307][ T5977] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 87.751729][ T5977] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 87.844109][ T5981] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 88.424056][ T6003] binfmt_misc: register: failed to install interpreter file ./file0 [ 88.656430][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 90.101187][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.109705][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.420685][ T23] IPVS: starting estimator thread 0... [ 90.510023][ T6092] IPVS: using max 2448 ests per chain, 122400 per kthread [ 90.727070][ T6114] 9pnet: Could not find request transport: fd0x0000000000000004 [ 90.813159][ T6117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.838307][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 91.032605][ T6128] siw: device registration error -23 [ 91.048690][ T6128] loop1: detected capacity change from 0 to 2048 [ 91.134432][ T6133] loop1: detected capacity change from 0 to 256 [ 91.141220][ T6133] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 91.500979][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 91.500999][ T29] audit: type=1400 audit(1750380301.820:7820): avc: denied { execute } for pid=6138 comm="syz.1.995" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.555005][ T6141] loop3: detected capacity change from 0 to 2048 [ 91.607488][ T6147] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.687626][ T6144] lo speed is unknown, defaulting to 1000 [ 91.694457][ T29] audit: type=1326 audit(1750380301.990:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.717923][ T29] audit: type=1326 audit(1750380301.990:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.741479][ T29] audit: type=1326 audit(1750380301.990:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.751489][ T6150] loop2: detected capacity change from 0 to 1024 [ 91.764812][ T29] audit: type=1326 audit(1750380302.020:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.764847][ T29] audit: type=1326 audit(1750380302.020:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.771745][ T6150] EXT4-fs: Ignoring removed orlov option [ 91.794554][ T29] audit: type=1326 audit(1750380302.030:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.847236][ T29] audit: type=1326 audit(1750380302.030:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.870683][ T29] audit: type=1326 audit(1750380302.030:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.894119][ T29] audit: type=1326 audit(1750380302.030:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4a106fe929 code=0x7ffc0000 [ 91.996141][ T6150] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.032312][ T6150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.174564][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.270659][ T6171] xt_hashlimit: max too large, truncated to 1048576 [ 92.303347][ T6171] netlink: 8 bytes leftover after parsing attributes in process `£ýºÊHA?ŠÎœN'. [ 92.329477][ T6171] netlink: 8 bytes leftover after parsing attributes in process `£ýºÊHA?ŠÎœN'. [ 92.826224][ T6188] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 92.834668][ T6188] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 92.885106][ T6192] siw: device registration error -23 [ 92.900217][ T6192] loop1: detected capacity change from 0 to 2048 [ 92.935622][ T6194] 9pnet: Could not find request transport: fd0x0000000000000004 [ 93.023203][ T6198] tipc: Enabling of bearer rejected, already enabled [ 93.202500][ T6207] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.405316][ T6249] hub 6-0:1.0: USB hub found [ 93.405993][ T6248] loop2: detected capacity change from 0 to 764 [ 93.417611][ T6249] hub 6-0:1.0: 8 ports detected [ 93.417730][ T6248] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 93.435759][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'. [ 93.485995][ T6260] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 93.494266][ T6260] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 93.577687][ T6262] loop2: detected capacity change from 0 to 256 [ 93.584446][ T6262] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 93.810264][ T6269] binfmt_misc: register: failed to install interpreter file ./file0 [ 93.897422][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 94.019421][ T6290] siw: device registration error -23 [ 94.033431][ T6290] loop1: detected capacity change from 0 to 2048 [ 94.062369][ T6292] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 94.070818][ T6292] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 94.094709][ T6296] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.132636][ T6300] loop3: detected capacity change from 0 to 2048 [ 94.256260][ T6302] netlink: 'syz.1.1046': attribute type 4 has an invalid length. [ 94.281332][ T6315] loop4: detected capacity change from 0 to 128 [ 94.290495][ T6315] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.300813][ T6318] siw: device registration error -23 [ 94.303587][ T6315] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.322353][ T6318] loop1: detected capacity change from 0 to 2048 [ 94.380180][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.786288][ T6332] hub 6-0:1.0: USB hub found [ 94.791170][ T6332] hub 6-0:1.0: 8 ports detected [ 95.319178][ T6353] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1064'. [ 95.328697][ T6353] gretap0: entered promiscuous mode [ 95.336899][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 95.346437][ T6353] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1064'. [ 95.355544][ T6353] 0ªî{X¹¦: renamed from gretap0 [ 95.362783][ T6353] 0ªî{X¹¦: left promiscuous mode [ 95.367861][ T6353] 0ªî{X¹¦: entered allmulticast mode [ 95.374809][ T6353] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 95.401326][ T6348] netlink: 'syz.4.1062': attribute type 4 has an invalid length. [ 95.443364][ T6359] binfmt_misc: register: failed to install interpreter file ./file0 [ 95.594884][ T6365] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 95.639778][ T6371] loop2: detected capacity change from 0 to 512 [ 95.647152][ T6371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.671956][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.684662][ T6371] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.697653][ T6371] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.711692][ T6371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.720878][ T6371] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.735044][ T6371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.744264][ T6371] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.759141][ T6374] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.775971][ T6374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.786095][ T6374] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.800685][ T6374] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1070: corrupted xattr block 19: overlapping e_value [ 95.814837][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 95.814893][ T6374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.862584][ T6371] hsr_slave_0 (unregistering): left promiscuous mode [ 95.914808][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.178278][ T6387] loop2: detected capacity change from 0 to 256 [ 96.184983][ T6387] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 96.279120][ T6392] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 96.561314][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 96.561329][ T29] audit: type=1326 audit(1750380818.956:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 96.591620][ T29] audit: type=1326 audit(1750380818.956:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4615e929 code=0x7ffc0000 [ 96.711115][ T29] audit: type=1326 audit(1750380819.096:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.735278][ T29] audit: type=1326 audit(1750380819.096:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.758890][ T29] audit: type=1326 audit(1750380819.096:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.782560][ T29] audit: type=1326 audit(1750380819.096:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.806231][ T29] audit: type=1326 audit(1750380819.096:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.829769][ T29] audit: type=1326 audit(1750380819.096:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.853512][ T29] audit: type=1326 audit(1750380819.096:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 96.876938][ T29] audit: type=1326 audit(1750380819.096:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 97.081977][ T6426] 9pnet_fd: p9_fd_create_tcp (6426): problem connecting socket to 127.0.0.1 [ 97.187241][ T6426] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 97.195228][ T6426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1089'. [ 97.212676][ T6426] dummy0: entered promiscuous mode [ 97.218536][ T6426] bridge0: port 3(dummy0) entered blocking state [ 97.225165][ T6426] bridge0: port 3(dummy0) entered disabled state [ 97.233303][ T6426] dummy0: entered allmulticast mode [ 97.239331][ T6426] bridge0: port 3(dummy0) entered blocking state [ 97.245766][ T6426] bridge0: port 3(dummy0) entered forwarding state [ 97.256559][ T6437] FAULT_INJECTION: forcing a failure. [ 97.256559][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.269767][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.3.1093 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 97.269798][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.269865][ T6437] Call Trace: [ 97.269872][ T6437] [ 97.269880][ T6437] __dump_stack+0x1d/0x30 [ 97.269971][ T6437] dump_stack_lvl+0xe8/0x140 [ 97.269989][ T6437] dump_stack+0x15/0x1b [ 97.270005][ T6437] should_fail_ex+0x265/0x280 [ 97.270080][ T6437] should_fail+0xb/0x20 [ 97.270109][ T6437] should_fail_usercopy+0x1a/0x20 [ 97.270140][ T6437] _copy_to_user+0x20/0xa0 [ 97.270167][ T6437] simple_read_from_buffer+0xb5/0x130 [ 97.270264][ T6437] proc_fail_nth_read+0x100/0x140 [ 97.270289][ T6437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.270342][ T6437] vfs_read+0x1a0/0x6f0 [ 97.270372][ T6437] ? __rcu_read_unlock+0x4f/0x70 [ 97.270398][ T6437] ? __fget_files+0x184/0x1c0 [ 97.270496][ T6437] ksys_read+0xda/0x1a0 [ 97.270586][ T6437] __x64_sys_read+0x40/0x50 [ 97.270618][ T6437] x64_sys_call+0x2d77/0x2fb0 [ 97.270696][ T6437] do_syscall_64+0xd2/0x200 [ 97.270719][ T6437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.270757][ T6437] ? clear_bhb_loop+0x40/0x90 [ 97.270787][ T6437] ? clear_bhb_loop+0x40/0x90 [ 97.270815][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.270906][ T6437] RIP: 0033:0x7f34e600d33c [ 97.270921][ T6437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.270943][ T6437] RSP: 002b:00007f34e4656030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.270967][ T6437] RAX: ffffffffffffffda RBX: 00007f34e6236080 RCX: 00007f34e600d33c [ 97.270982][ T6437] RDX: 000000000000000f RSI: 00007f34e46560a0 RDI: 0000000000000008 [ 97.271047][ T6437] RBP: 00007f34e4656090 R08: 0000000000000000 R09: 0000000000000000 [ 97.271060][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.271072][ T6437] R13: 0000000000000000 R14: 00007f34e6236080 R15: 00007ffd5840b138 [ 97.271093][ T6437] [ 97.525224][ T6443] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 97.533747][ T6443] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 97.547568][ T6439] loop4: detected capacity change from 0 to 2048 [ 97.585439][ T6448] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 97.593878][ T6448] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 97.640533][ T6455] loop1: detected capacity change from 0 to 512 [ 97.644945][ T6449] lo speed is unknown, defaulting to 1000 [ 97.652743][ T6455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.683584][ T6455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.698068][ T6455] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.710433][ T6455] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1101: corrupted xattr block 19: overlapping e_value [ 97.724738][ T6455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 97.735018][ T6455] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1101: corrupted xattr block 19: overlapping e_value [ 97.749346][ T6455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 97.758566][ T6455] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1101: corrupted xattr block 19: overlapping e_value [ 97.813894][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.840266][ T6467] siw: device registration error -23 [ 97.854391][ T6467] loop1: detected capacity change from 0 to 2048 [ 97.910730][ T6469] capability: warning: `syz.1.1105' uses deprecated v2 capabilities in a way that may be insecure [ 97.945410][ T6475] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 97.953772][ T6475] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 97.985622][ T6478] No such timeout policy "syz1" [ 98.089400][ T6481] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 98.097722][ T6481] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 98.132485][ T6483] loop3: detected capacity change from 0 to 2048 [ 98.170590][ T6483] loop3: p1 < > p4 [ 98.175301][ T6483] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.273213][ T6491] loop1: detected capacity change from 0 to 2048 [ 98.280894][ T6491] EXT4-fs (loop1): invalid inodes per group: 204800 [ 98.280894][ T6491] [ 98.327942][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 98.341827][ T6491] loop1: detected capacity change from 0 to 1024 [ 98.348926][ T6491] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.362738][ T6491] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 98.380926][ T6491] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1113: Bad quota inode: 3, type: 0 [ 98.392016][ T6491] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 98.407147][ T6491] EXT4-fs (loop1): mount failed [ 98.422437][ T6501] loop4: detected capacity change from 0 to 256 [ 98.430728][ T6501] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 98.542155][ T6511] lo speed is unknown, defaulting to 1000 [ 98.629620][ T6517] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 98.638100][ T6517] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 98.730386][ T6520] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 98.798671][ T6531] loop2: detected capacity change from 0 to 2048 [ 98.905824][ T6542] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.067405][ T6552] FAULT_INJECTION: forcing a failure. [ 99.067405][ T6552] name failslab, interval 1, probability 0, space 0, times 0 [ 99.080325][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz.4.1133 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 99.080406][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.080419][ T6552] Call Trace: [ 99.080444][ T6552] [ 99.080453][ T6552] __dump_stack+0x1d/0x30 [ 99.080482][ T6552] dump_stack_lvl+0xe8/0x140 [ 99.080517][ T6552] dump_stack+0x15/0x1b [ 99.080546][ T6552] should_fail_ex+0x265/0x280 [ 99.080608][ T6552] should_failslab+0x8c/0xb0 [ 99.080638][ T6552] kmem_cache_alloc_node_noprof+0x57/0x320 [ 99.080744][ T6552] ? __alloc_skb+0x101/0x320 [ 99.080856][ T6552] __alloc_skb+0x101/0x320 [ 99.080885][ T6552] ? audit_log_start+0x365/0x6c0 [ 99.080926][ T6552] audit_log_start+0x380/0x6c0 [ 99.080988][ T6552] audit_seccomp+0x48/0x100 [ 99.081027][ T6552] ? __seccomp_filter+0x68c/0x10d0 [ 99.081059][ T6552] __seccomp_filter+0x69d/0x10d0 [ 99.081093][ T6552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.081155][ T6552] ? vfs_write+0x75e/0x8e0 [ 99.081209][ T6552] __secure_computing+0x82/0x150 [ 99.081241][ T6552] syscall_trace_enter+0xcf/0x1e0 [ 99.081290][ T6552] do_syscall_64+0xac/0x200 [ 99.081308][ T6552] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.081334][ T6552] ? clear_bhb_loop+0x40/0x90 [ 99.081354][ T6552] ? clear_bhb_loop+0x40/0x90 [ 99.081396][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.081416][ T6552] RIP: 0033:0x7fec4615e929 [ 99.081431][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.081449][ T6552] RSP: 002b:00007fec447c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 99.081467][ T6552] RAX: ffffffffffffffda RBX: 00007fec46385fa0 RCX: 00007fec4615e929 [ 99.081490][ T6552] RDX: 0000200000000280 RSI: 0000000000000005 RDI: 0000000000000000 [ 99.081502][ T6552] RBP: 00007fec447c7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.081513][ T6552] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 99.081525][ T6552] R13: 0000000000000000 R14: 00007fec46385fa0 R15: 00007ffeb84f2778 [ 99.081543][ T6552] [ 99.335347][ T6555] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 99.343925][ T6555] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 99.412315][ T6566] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.548485][ T6578] loop3: detected capacity change from 0 to 512 [ 99.554119][ T6573] loop1: detected capacity change from 0 to 1024 [ 99.563804][ T6578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.575056][ T6573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.590564][ T6572] lo speed is unknown, defaulting to 1000 [ 99.616327][ T6578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.670043][ T6573] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.681120][ T6573] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.705572][ T6578] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.797483][ T6578] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 99.873632][ T6573] JBD2: no valid journal superblock found [ 99.879427][ T6573] EXT4-fs (loop1): Could not load journal inode [ 99.897348][ T6578] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.907246][ T6586] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 99.921823][ T6578] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 99.936218][ T6586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.947033][ T6578] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.956766][ T6586] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 100.018673][ T6578] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 100.046653][ T6588] loop2: detected capacity change from 0 to 512 [ 100.065624][ T6588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.075262][ T6586] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1144: corrupted xattr block 19: overlapping e_value [ 100.096411][ T6586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 100.098087][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.120022][ T6588] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.136386][ T6588] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1147: corrupted xattr block 19: overlapping e_value [ 100.151617][ T6588] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.161368][ T6588] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1147: corrupted xattr block 19: overlapping e_value [ 100.161757][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.177653][ T6588] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.193209][ T6588] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1147: corrupted xattr block 19: overlapping e_value [ 100.234987][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.244225][ T6599] loop3: detected capacity change from 0 to 1024 [ 100.254138][ T6597] loop1: detected capacity change from 0 to 512 [ 100.280811][ T6597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.318197][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.350237][ T6597] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.358219][ T6597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 100.372968][ T6608] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 100.381365][ T6608] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 100.390521][ T6597] System zones: 0-1, 15-15, 18-18, 34-34 [ 100.396485][ T6597] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.429488][ T6597] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.444224][ T6597] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 100.475738][ T6612] loop4: detected capacity change from 0 to 256 [ 100.482719][ T6612] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 100.499504][ T6597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1150: bg 0: block 40: padding at end of block bitmap is not set [ 100.520603][ T6615] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 100.529081][ T6615] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 100.570339][ T6597] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 100.622941][ T6621] loop2: detected capacity change from 0 to 512 [ 100.630549][ T6621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.642790][ T6597] EXT4-fs (loop1): 1 truncate cleaned up [ 100.660399][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.687161][ T6625] siw: device registration error -23 [ 100.701648][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.702413][ T6629] binfmt_misc: register: failed to install interpreter file ./file0 [ 100.722589][ T6625] loop4: detected capacity change from 0 to 2048 [ 100.729486][ T6621] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.750145][ T6618] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 100.770181][ T6632] vhci_hcd: invalid port number 96 [ 100.775416][ T6632] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 100.785222][ T6618] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.844915][ T6618] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 100.856431][ T6621] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 100.879796][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.889159][ T6635] loop4: detected capacity change from 0 to 1024 [ 100.889618][ T6618] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.898839][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.905228][ T6618] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 100.927774][ T6621] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 100.966955][ T6635] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.977961][ T6635] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.004561][ T6636] ipvlan2: entered promiscuous mode [ 101.011359][ T6636] bridge0: port 3(ipvlan2) entered blocking state [ 101.017841][ T6636] bridge0: port 3(ipvlan2) entered disabled state [ 101.024471][ T6636] ipvlan2: entered allmulticast mode [ 101.029823][ T6636] bridge0: entered allmulticast mode [ 101.036124][ T6636] ipvlan2: left allmulticast mode [ 101.041649][ T6636] bridge0: left allmulticast mode [ 101.104184][ T6621] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1156: corrupted xattr block 19: overlapping e_value [ 101.158743][ T6635] JBD2: no valid journal superblock found [ 101.164633][ T6635] EXT4-fs (loop4): Could not load journal inode [ 101.201418][ T6638] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.247444][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 101.275401][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.431532][ T6643] loop4: detected capacity change from 0 to 512 [ 101.447558][ T6645] loop3: detected capacity change from 0 to 512 [ 101.454984][ T6643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.465071][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.475311][ T6645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.484225][ T6642] loop1: detected capacity change from 0 to 4096 [ 101.503760][ T6645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.505557][ T6647] loop2: detected capacity change from 0 to 1024 [ 101.541600][ T6643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.545327][ T6645] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.565146][ T6643] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.570318][ T6645] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1163: corrupted xattr block 19: overlapping e_value [ 101.644731][ T6643] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.645050][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.668384][ T6653] loop2: detected capacity change from 0 to 256 [ 101.669000][ T6645] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1163: corrupted xattr block 19: overlapping e_value [ 101.690774][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.690842][ T6653] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 101.703006][ T6645] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1163: corrupted xattr block 19: overlapping e_value [ 101.721819][ T6643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.731919][ T6643] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.747679][ T6658] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.779203][ T6642] loop1: detected capacity change from 0 to 512 [ 101.785698][ T6645] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1163: corrupted xattr block 19: overlapping e_value [ 101.791720][ T6643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.800451][ T6659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1557 sclass=netlink_xfrm_socket pid=6659 comm=syz.0.1168 [ 101.821860][ T6642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.832374][ T6645] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.842255][ T6658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.842501][ T6643] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.860046][ T6658] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.886409][ T6642] EXT4-fs (loop1): 1 truncate cleaned up [ 101.892902][ T6642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.911325][ T6658] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1164: corrupted xattr block 19: overlapping e_value [ 101.935623][ T6658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.953926][ T6666] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.967913][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.987539][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.996840][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 101.996852][ T29] audit: type=1400 audit(1750380824.376:8662): avc: denied { append } for pid=6641 comm="syz.1.1165" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.070087][ T6670] siw: device registration error -23 [ 102.085592][ T6670] loop4: detected capacity change from 0 to 2048 [ 102.095918][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.130415][ T29] audit: type=1400 audit(1750380824.526:8663): avc: denied { create } for pid=6669 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.136349][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1175'. [ 102.166609][ T29] audit: type=1400 audit(1750380824.526:8664): avc: denied { connect } for pid=6674 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.206723][ T6680] loop4: detected capacity change from 0 to 164 [ 102.216384][ T29] audit: type=1326 audit(1750380824.586:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.240031][ T29] audit: type=1326 audit(1750380824.586:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.263786][ T29] audit: type=1326 audit(1750380824.586:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.287314][ T29] audit: type=1326 audit(1750380824.586:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.311043][ T29] audit: type=1326 audit(1750380824.586:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.334783][ T29] audit: type=1326 audit(1750380824.586:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.359022][ T29] audit: type=1326 audit(1750380824.586:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0b0e929 code=0x7ffc0000 [ 102.363505][ T6683] FAULT_INJECTION: forcing a failure. [ 102.363505][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.396357][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.3.1177 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 102.396387][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.396402][ T6683] Call Trace: [ 102.396409][ T6683] [ 102.396418][ T6683] __dump_stack+0x1d/0x30 [ 102.396483][ T6683] dump_stack_lvl+0xe8/0x140 [ 102.396509][ T6683] dump_stack+0x15/0x1b [ 102.396530][ T6683] should_fail_ex+0x265/0x280 [ 102.396570][ T6683] should_fail+0xb/0x20 [ 102.396636][ T6683] should_fail_usercopy+0x1a/0x20 [ 102.396685][ T6683] _copy_from_user+0x1c/0xb0 [ 102.396707][ T6683] do_tcp_setsockopt+0x41c/0x1670 [ 102.396744][ T6683] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 102.396810][ T6683] tcp_setsockopt+0x51/0xb0 [ 102.396851][ T6683] sock_common_setsockopt+0x66/0x80 [ 102.396904][ T6683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.396937][ T6683] __sys_setsockopt+0x181/0x200 [ 102.397057][ T6683] __x64_sys_setsockopt+0x64/0x80 [ 102.397099][ T6683] x64_sys_call+0x2bd5/0x2fb0 [ 102.397147][ T6683] do_syscall_64+0xd2/0x200 [ 102.397167][ T6683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.397273][ T6683] ? clear_bhb_loop+0x40/0x90 [ 102.397375][ T6683] ? clear_bhb_loop+0x40/0x90 [ 102.397397][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.397426][ T6683] RIP: 0033:0x7f34e600e929 [ 102.397445][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.397502][ T6683] RSP: 002b:00007f34e4677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.397526][ T6683] RAX: ffffffffffffffda RBX: 00007f34e6235fa0 RCX: 00007f34e600e929 [ 102.397539][ T6683] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 102.397551][ T6683] RBP: 00007f34e4677090 R08: 0000000000000004 R09: 0000000000000000 [ 102.397563][ T6683] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.397576][ T6683] R13: 0000000000000000 R14: 00007f34e6235fa0 R15: 00007ffd5840b138 [ 102.397601][ T6683] [ 102.604384][ T6681] syz.0.1175: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 102.619077][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.0.1175 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 102.619111][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.619126][ T6681] Call Trace: [ 102.619183][ T6681] [ 102.619191][ T6681] __dump_stack+0x1d/0x30 [ 102.619216][ T6681] dump_stack_lvl+0xe8/0x140 [ 102.619290][ T6681] dump_stack+0x15/0x1b [ 102.619310][ T6681] warn_alloc+0x12b/0x1a0 [ 102.619355][ T6681] __vmalloc_node_range_noprof+0x9c/0xe00 [ 102.619432][ T6681] ? css_rstat_updated+0xcd/0x5b0 [ 102.619503][ T6681] ? __rcu_read_unlock+0x4f/0x70 [ 102.619531][ T6681] ? avc_has_perm_noaudit+0x1b1/0x200 [ 102.619569][ T6681] ? should_fail_ex+0x30/0x280 [ 102.619615][ T6681] ? xskq_create+0x36/0xe0 [ 102.619638][ T6681] vmalloc_user_noprof+0x7d/0xb0 [ 102.619676][ T6681] ? xskq_create+0x80/0xe0 [ 102.619723][ T6681] xskq_create+0x80/0xe0 [ 102.619802][ T6681] xsk_init_queue+0x95/0xf0 [ 102.619852][ T6681] xsk_setsockopt+0x35c/0x510 [ 102.619879][ T6681] ? __pfx_xsk_setsockopt+0x10/0x10 [ 102.619905][ T6681] __sys_setsockopt+0x181/0x200 [ 102.619964][ T6681] __x64_sys_setsockopt+0x64/0x80 [ 102.620038][ T6681] x64_sys_call+0x2bd5/0x2fb0 [ 102.620098][ T6681] do_syscall_64+0xd2/0x200 [ 102.620114][ T6681] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.620192][ T6681] ? clear_bhb_loop+0x40/0x90 [ 102.620212][ T6681] ? clear_bhb_loop+0x40/0x90 [ 102.620273][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.620298][ T6681] RIP: 0033:0x7f1e5d91e929 [ 102.620318][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.620340][ T6681] RSP: 002b:00007f1e5bf66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.620364][ T6681] RAX: ffffffffffffffda RBX: 00007f1e5db46080 RCX: 00007f1e5d91e929 [ 102.620451][ T6681] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 102.620466][ T6681] RBP: 00007f1e5d9a0b39 R08: 0000000000000004 R09: 0000000000000000 [ 102.620547][ T6681] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.620559][ T6681] R13: 0000000000000001 R14: 00007f1e5db46080 R15: 00007ffd2dc87a98 [ 102.620577][ T6681] [ 102.841742][ T6681] Mem-Info: [ 102.844880][ T6681] active_anon:3833 inactive_anon:0 isolated_anon:0 [ 102.844880][ T6681] active_file:16464 inactive_file:2227 isolated_file:0 [ 102.844880][ T6681] unevictable:0 dirty:243 writeback:0 [ 102.844880][ T6681] slab_reclaimable:3028 slab_unreclaimable:16841 [ 102.844880][ T6681] mapped:31376 shmem:192 pagetables:1168 [ 102.844880][ T6681] sec_pagetables:0 bounce:0 [ 102.844880][ T6681] kernel_misc_reclaimable:0 [ 102.844880][ T6681] free:1872410 free_pcp:6434 free_cma:0 [ 102.890574][ T6681] Node 0 active_anon:15332kB inactive_anon:0kB active_file:65856kB inactive_file:8908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129564kB dirty:972kB writeback:0kB shmem:768kB writeback_tmp:0kB kernel_stack:3360kB pagetables:4672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.919366][ T6681] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.948271][ T6681] lowmem_reserve[]: 0 2882 7860 7860 [ 102.953723][ T6681] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 102.984198][ T6681] lowmem_reserve[]: 0 0 4978 4978 [ 102.989503][ T6681] Node 0 Normal free:4479348kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15332kB inactive_anon:0kB active_file:65856kB inactive_file:8908kB unevictable:0kB writepending:972kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:20792kB local_pcp:9752kB free_cma:0kB [ 103.022589][ T6681] lowmem_reserve[]: 0 0 0 0 [ 103.027217][ T6681] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.040090][ T6681] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 103.056328][ T6681] Node 0 Normal: 375*4kB (M) 535*8kB (ME) 231*16kB (UME) 173*32kB (UME) 335*64kB (ME) 36*128kB (ME) 29*256kB (M) 20*512kB (M) 16*1024kB (UME) 9*2048kB (ME) 1069*4096kB (UM) = 4472164kB [ 103.074894][ T6681] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 103.084379][ T6681] 18849 total pagecache pages [ 103.089270][ T6681] 0 pages in swap cache [ 103.093563][ T6681] Free swap = 124996kB [ 103.097796][ T6681] Total swap = 124996kB [ 103.102005][ T6681] 2097051 pages RAM [ 103.105919][ T6681] 0 pages HighMem/MovableOnly [ 103.110671][ T6681] 80812 pages reserved [ 103.187402][ T6704] mmap: syz.1.1183 (6704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.212361][ T6700] loop2: detected capacity change from 0 to 256 [ 103.219446][ T6700] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 103.292560][ T6708] FAULT_INJECTION: forcing a failure. [ 103.292560][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.305750][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.1.1184 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 103.305780][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.305793][ T6708] Call Trace: [ 103.305800][ T6708] [ 103.305808][ T6708] __dump_stack+0x1d/0x30 [ 103.305833][ T6708] dump_stack_lvl+0xe8/0x140 [ 103.305908][ T6708] dump_stack+0x15/0x1b [ 103.305928][ T6708] should_fail_ex+0x265/0x280 [ 103.305961][ T6708] should_fail+0xb/0x20 [ 103.306077][ T6708] should_fail_usercopy+0x1a/0x20 [ 103.306116][ T6708] strncpy_from_user+0x25/0x230 [ 103.306249][ T6708] ? kmem_cache_alloc_noprof+0x186/0x310 [ 103.306280][ T6708] ? getname_flags+0x80/0x3b0 [ 103.306309][ T6708] getname_flags+0xae/0x3b0 [ 103.306337][ T6708] user_path_at+0x28/0x130 [ 103.306379][ T6708] __x64_sys_umount+0x85/0xe0 [ 103.306471][ T6708] x64_sys_call+0x2915/0x2fb0 [ 103.306566][ T6708] do_syscall_64+0xd2/0x200 [ 103.306610][ T6708] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.306640][ T6708] ? clear_bhb_loop+0x40/0x90 [ 103.306660][ T6708] ? clear_bhb_loop+0x40/0x90 [ 103.306687][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.306780][ T6708] RIP: 0033:0x7f95a0b0e929 [ 103.306795][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.306812][ T6708] RSP: 002b:00007f959f177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.306846][ T6708] RAX: ffffffffffffffda RBX: 00007f95a0d35fa0 RCX: 00007f95a0b0e929 [ 103.306862][ T6708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 103.306877][ T6708] RBP: 00007f959f177090 R08: 0000000000000000 R09: 0000000000000000 [ 103.306889][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.306962][ T6708] R13: 0000000000000000 R14: 00007f95a0d35fa0 R15: 00007ffe75924a48 [ 103.307041][ T6708] [ 103.521704][ T6714] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 103.530087][ T6714] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 103.692673][ T6725] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.735594][ T6726] tipc: Enabling of bearer rejected, already enabled [ 103.945923][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.957994][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.029283][ T6734] binfmt_misc: register: failed to install interpreter file ./file0 [ 104.241980][ T6740] netlink: 'syz.3.1197': attribute type 4 has an invalid length. [ 104.293720][ T6750] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 104.302052][ T6750] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 104.350768][ T6748] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 104.382581][ T6755] FAULT_INJECTION: forcing a failure. [ 104.382581][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.395814][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.4.1203 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 104.395846][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.395861][ T6755] Call Trace: [ 104.395867][ T6755] [ 104.395875][ T6755] __dump_stack+0x1d/0x30 [ 104.395904][ T6755] dump_stack_lvl+0xe8/0x140 [ 104.395928][ T6755] dump_stack+0x15/0x1b [ 104.395943][ T6755] should_fail_ex+0x265/0x280 [ 104.395982][ T6755] should_fail+0xb/0x20 [ 104.396014][ T6755] should_fail_usercopy+0x1a/0x20 [ 104.396055][ T6755] _copy_to_user+0x20/0xa0 [ 104.396082][ T6755] simple_read_from_buffer+0xb5/0x130 [ 104.396169][ T6755] proc_fail_nth_read+0x100/0x140 [ 104.396188][ T6755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.396230][ T6755] vfs_read+0x1a0/0x6f0 [ 104.396263][ T6755] ? __rcu_read_unlock+0x4f/0x70 [ 104.396294][ T6755] ? __rcu_read_unlock+0x4f/0x70 [ 104.396321][ T6755] ? __fget_files+0x184/0x1c0 [ 104.396394][ T6755] ksys_read+0xda/0x1a0 [ 104.396470][ T6755] __x64_sys_read+0x40/0x50 [ 104.396505][ T6755] x64_sys_call+0x2d77/0x2fb0 [ 104.396525][ T6755] do_syscall_64+0xd2/0x200 [ 104.396544][ T6755] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.396611][ T6755] ? clear_bhb_loop+0x40/0x90 [ 104.396651][ T6755] ? clear_bhb_loop+0x40/0x90 [ 104.396683][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.396709][ T6755] RIP: 0033:0x7fec4615d33c [ 104.396728][ T6755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.396792][ T6755] RSP: 002b:00007fec447c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.396815][ T6755] RAX: ffffffffffffffda RBX: 00007fec46385fa0 RCX: 00007fec4615d33c [ 104.396830][ T6755] RDX: 000000000000000f RSI: 00007fec447c70a0 RDI: 0000000000000005 [ 104.396845][ T6755] RBP: 00007fec447c7090 R08: 0000000000000000 R09: fffffffffffffd25 [ 104.396907][ T6755] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 104.396918][ T6755] R13: 0000000000000000 R14: 00007fec46385fa0 R15: 00007ffeb84f2778 [ 104.396943][ T6755] [ 104.645185][ T6760] FAULT_INJECTION: forcing a failure. [ 104.645185][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 104.657910][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.2.1205 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 104.658022][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.658036][ T6760] Call Trace: [ 104.658044][ T6760] [ 104.658053][ T6760] __dump_stack+0x1d/0x30 [ 104.658077][ T6760] dump_stack_lvl+0xe8/0x140 [ 104.658152][ T6760] dump_stack+0x15/0x1b [ 104.658187][ T6760] should_fail_ex+0x265/0x280 [ 104.658226][ T6760] should_failslab+0x8c/0xb0 [ 104.658327][ T6760] kmem_cache_alloc_node_noprof+0x57/0x320 [ 104.658358][ T6760] ? __alloc_skb+0x101/0x320 [ 104.658390][ T6760] __alloc_skb+0x101/0x320 [ 104.658455][ T6760] tipc_buf_acquire+0x2c/0xb0 [ 104.658483][ T6760] tipc_named_withdraw+0x13b/0x360 [ 104.658514][ T6760] tipc_nametbl_withdraw+0x114/0x200 [ 104.658551][ T6760] tipc_sk_withdraw+0x1ca/0x2e0 [ 104.658647][ T6760] tipc_sk_bind+0x175/0x1b0 [ 104.658680][ T6760] tipc_bind+0x5e/0x190 [ 104.658701][ T6760] __sys_bind+0x1d1/0x2a0 [ 104.658813][ T6760] __x64_sys_bind+0x3f/0x50 [ 104.658840][ T6760] x64_sys_call+0x2086/0x2fb0 [ 104.658862][ T6760] do_syscall_64+0xd2/0x200 [ 104.658881][ T6760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.658945][ T6760] ? clear_bhb_loop+0x40/0x90 [ 104.658967][ T6760] ? clear_bhb_loop+0x40/0x90 [ 104.659032][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.659053][ T6760] RIP: 0033:0x7f4a106fe929 [ 104.659070][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.659089][ T6760] RSP: 002b:00007f4a0ed67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 104.659109][ T6760] RAX: ffffffffffffffda RBX: 00007f4a10925fa0 RCX: 00007f4a106fe929 [ 104.659123][ T6760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.659285][ T6760] RBP: 00007f4a0ed67090 R08: 0000000000000000 R09: 0000000000000000 [ 104.659298][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.659311][ T6760] R13: 0000000000000000 R14: 00007f4a10925fa0 R15: 00007ffe49dccab8 [ 104.659331][ T6760] [ 104.659383][ T6760] tipc: Withdrawal distribution failure [ 104.796446][ T6764] dvmrp1: entered allmulticast mode [ 104.881634][ T6752] loop3: detected capacity change from 0 to 1024 [ 104.896802][ T6771] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 104.905211][ T6771] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 104.915177][ T6752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 104.923542][ T6752] System zones: 0-1, 3-8 [ 104.929525][ T6752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.942219][ T6752] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.958298][ T6752] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm syz.3.1202: lblock 1 mapped to illegal pblock 1 (length 15) [ 104.978295][ T6752] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 104.990947][ T6752] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.990947][ T6752] [ 105.009468][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 105.056078][ T6785] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 105.064372][ T6785] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 105.083094][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.145335][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'. [ 105.154415][ T6794] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1215'. [ 105.208823][ T6799] loop3: detected capacity change from 0 to 4096 [ 105.255070][ T6801] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 105.263468][ T6801] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 105.353963][ T6799] loop3: detected capacity change from 0 to 512 [ 105.361089][ T6799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.372185][ T6799] EXT4-fs (loop3): 1 truncate cleaned up [ 105.378574][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.441170][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.463981][ T6808] loop3: detected capacity change from 0 to 2048 [ 105.772215][ T6821] binfmt_misc: register: failed to install interpreter file ./file0 [ 105.980903][ T6832] 9pnet_fd: Insufficient options for proto=fd [ 106.016016][ T6834] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.073262][ T6838] loop4: detected capacity change from 0 to 512 [ 106.081540][ T6838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.112452][ T6838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.125275][ T6838] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.137196][ T6838] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1232: corrupted xattr block 19: overlapping e_value [ 106.151728][ T6838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 106.161317][ T6838] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1232: corrupted xattr block 19: overlapping e_value [ 106.175724][ T6838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 106.184874][ T6838] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1232: corrupted xattr block 19: overlapping e_value [ 106.213098][ T6846] loop2: detected capacity change from 0 to 512 [ 106.221142][ T6846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.221236][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.243011][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.256260][ T6846] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.261147][ T6851] binfmt_misc: register: failed to install interpreter file ./file0 [ 106.268468][ T6846] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1234: corrupted xattr block 19: overlapping e_value [ 106.289634][ T6846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 106.319104][ T6846] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1234: corrupted xattr block 19: overlapping e_value [ 106.333564][ T6846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 106.342705][ T6846] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1234: corrupted xattr block 19: overlapping e_value [ 106.356790][ T6846] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1234: corrupted xattr block 19: overlapping e_value [ 106.371574][ T6846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 106.401715][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.504112][ T6867] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 106.512476][ T6867] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 106.753613][ T6876] loop2: detected capacity change from 0 to 1024 [ 106.792902][ T6876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.912930][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.999990][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 107.000018][ T29] audit: type=1326 audit(1750380829.346:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.029883][ T29] audit: type=1326 audit(1750380829.346:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.053378][ T29] audit: type=1326 audit(1750380829.346:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.076943][ T29] audit: type=1326 audit(1750380829.346:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.100454][ T29] audit: type=1326 audit(1750380829.346:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.123990][ T29] audit: type=1326 audit(1750380829.346:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.147307][ T29] audit: type=1326 audit(1750380829.346:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.171003][ T29] audit: type=1326 audit(1750380829.346:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.194618][ T29] audit: type=1326 audit(1750380829.346:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.207113][ T6892] loop4: detected capacity change from 0 to 2048 [ 107.218343][ T29] audit: type=1326 audit(1750380829.346:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e5d91e929 code=0x7ffc0000 [ 107.227057][ T6892] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.254728][ T6892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.287688][ T6895] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 107.296029][ T6895] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 107.352265][ T6899] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1253'. [ 107.365932][ T6892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.505269][ T6905] lo speed is unknown, defaulting to 1000 [ 107.923384][ T6915] tipc: Enabling of bearer rejected, already enabled [ 108.055481][ T6919] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 108.255783][ T6933] FAULT_INJECTION: forcing a failure. [ 108.255783][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.269010][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.3.1263 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 108.269038][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.269051][ T6933] Call Trace: [ 108.269057][ T6933] [ 108.269066][ T6933] __dump_stack+0x1d/0x30 [ 108.269163][ T6933] dump_stack_lvl+0xe8/0x140 [ 108.269189][ T6933] dump_stack+0x15/0x1b [ 108.269279][ T6933] should_fail_ex+0x265/0x280 [ 108.269320][ T6933] should_fail+0xb/0x20 [ 108.269356][ T6933] should_fail_usercopy+0x1a/0x20 [ 108.269396][ T6933] _copy_from_user+0x1c/0xb0 [ 108.269434][ T6933] __copy_msghdr+0x244/0x300 [ 108.269538][ T6933] ___sys_sendmsg+0x109/0x1d0 [ 108.269592][ T6933] __x64_sys_sendmsg+0xd4/0x160 [ 108.269628][ T6933] x64_sys_call+0x2999/0x2fb0 [ 108.269651][ T6933] do_syscall_64+0xd2/0x200 [ 108.269704][ T6933] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.269736][ T6933] ? clear_bhb_loop+0x40/0x90 [ 108.269769][ T6933] ? clear_bhb_loop+0x40/0x90 [ 108.269789][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.269809][ T6933] RIP: 0033:0x7f34e600e929 [ 108.269827][ T6933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.269928][ T6933] RSP: 002b:00007f34e4677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.269957][ T6933] RAX: ffffffffffffffda RBX: 00007f34e6235fa0 RCX: 00007f34e600e929 [ 108.269973][ T6933] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000005 [ 108.269988][ T6933] RBP: 00007f34e4677090 R08: 0000000000000000 R09: 0000000000000000 [ 108.270002][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.270017][ T6933] R13: 0000000000000000 R14: 00007f34e6235fa0 R15: 00007ffd5840b138 [ 108.270040][ T6933] [ 108.497782][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 108.687044][ T6940] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 108.730379][ T3395] ================================================================== [ 108.738539][ T3395] BUG: KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer [ 108.747880][ T3395] [ 108.750235][ T3395] read-write to 0xffff8881191eea58 of 8 bytes by task 413 on cpu 1: [ 108.758291][ T3395] wg_socket_send_skb_to_peer+0xe8/0x130 [ 108.763973][ T3395] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 108.769908][ T3395] wg_packet_handshake_send_worker+0x10d/0x160 [ 108.776095][ T3395] process_scheduled_works+0x4ce/0x9d0 [ 108.781587][ T3395] worker_thread+0x582/0x770 [ 108.786203][ T3395] kthread+0x486/0x510 [ 108.790287][ T3395] ret_from_fork+0xdd/0x150 [ 108.794808][ T3395] ret_from_fork_asm+0x1a/0x30 [ 108.799592][ T3395] [ 108.801937][ T3395] read-write to 0xffff8881191eea58 of 8 bytes by task 3395 on cpu 0: [ 108.810097][ T3395] wg_socket_send_skb_to_peer+0xe8/0x130 [ 108.815756][ T3395] wg_packet_tx_worker+0x12d/0x330 [ 108.820906][ T3395] process_scheduled_works+0x4ce/0x9d0 [ 108.826400][ T3395] worker_thread+0x582/0x770 [ 108.831048][ T3395] kthread+0x486/0x510 [ 108.835151][ T3395] ret_from_fork+0xdd/0x150 [ 108.839672][ T3395] ret_from_fork_asm+0x1a/0x30 [ 108.844457][ T3395] [ 108.846791][ T3395] value changed: 0x0000000000000800 -> 0x0000000000000894 [ 108.853910][ T3395] [ 108.856240][ T3395] Reported by Kernel Concurrency Sanitizer on: [ 108.862400][ T3395] CPU: 0 UID: 0 PID: 3395 Comm: kworker/0:4 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 108.874921][ T3395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.884993][ T3395] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 108.891096][ T3395] ================================================================== [ 108.906610][ T6943] loop2: detected capacity change from 0 to 256 [ 108.932965][ T6943] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 108.970072][ T6892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1250: bg 0: block 234: padding at end of block bitmap is not set [ 109.000608][ T6892] EXT4-fs (loop4): Remounting filesystem read-only [ 109.286228][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.357865][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.452954][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.532622][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.602329][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.683320][ T37] bridge_slave_1: left allmulticast mode [ 109.688991][ T37] bridge_slave_1: left promiscuous mode [ 109.694767][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.702654][ T37] bridge_slave_0: left allmulticast mode [ 109.708342][ T37] bridge_slave_0: left promiscuous mode [ 109.714033][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.982199][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.992404][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.002580][ T37] bond0 (unregistering): Released all slaves [ 110.040974][ T37] tipc: Disabling bearer [ 110.045970][ T37] tipc: Left network mode [ 110.067908][ T37] hsr_slave_0: left promiscuous mode [ 110.073619][ T37] hsr_slave_1: left promiscuous mode [ 110.079141][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.086646][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.094323][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.101784][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.113976][ T37] veth1_macvtap: left promiscuous mode [ 110.119575][ T37] veth0_macvtap: left promiscuous mode [ 110.125123][ T37] veth1_vlan: left promiscuous mode [ 110.130497][ T37] veth0_vlan: left promiscuous mode [ 110.188093][ T37] team0 (unregistering): Port device team_slave_1 removed [ 110.197438][ T37] team0 (unregistering): Port device team_slave_0 removed [ 110.554019][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.612664][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.672223][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.732410][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.794608][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.853366][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.922548][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.962696][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.022986][ T12] bridge_slave_1: left allmulticast mode [ 111.028659][ T12] bridge_slave_1: left promiscuous mode [ 111.034341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.042366][ T12] bridge_slave_0: left allmulticast mode [ 111.048031][ T12] bridge_slave_0: left promiscuous mode [ 111.053720][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.063099][ T12] bridge_slave_1: left allmulticast mode [ 111.068781][ T12] bridge_slave_1: left promiscuous mode [ 111.074465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.082353][ T12] bridge_slave_0: left allmulticast mode [ 111.088048][ T12] bridge_slave_0: left promiscuous mode [ 111.093782][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.361961][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.371758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.381348][ T12] bond0 (unregistering): Released all slaves [ 111.492142][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.501944][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.511550][ T12] bond0 (unregistering): Released all slaves [ 111.551804][ T12] tipc: Disabling bearer [ 111.556873][ T12] tipc: Left network mode [ 111.561545][ T12] tipc: Disabling bearer [ 111.566688][ T12] tipc: Left network mode [ 111.632771][ T12] hsr_slave_0: left promiscuous mode [ 111.638404][ T12] hsr_slave_1: left promiscuous mode [ 111.644076][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.651575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.659128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.666566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.676129][ T12] hsr_slave_1: left promiscuous mode [ 111.686692][ T12] veth1_macvtap: left promiscuous mode [ 111.692308][ T12] veth0_macvtap: left promiscuous mode [ 111.697813][ T12] veth1_vlan: left promiscuous mode [ 111.703095][ T12] veth0_vlan: left promiscuous mode [ 111.708818][ T12] veth1_macvtap: left promiscuous mode [ 111.714409][ T12] veth0_macvtap: left promiscuous mode [ 111.720138][ T12] veth1_vlan: left promiscuous mode [ 111.725374][ T12] veth0_vlan: left promiscuous mode [ 111.811003][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.820790][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.872943][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.883196][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.334000][ T12] IPVS: stop unused estimator thread 0...