last executing test programs: 2.222115248s ago: executing program 4 (id=861): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.187281009s ago: executing program 4 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 2.12620585s ago: executing program 3 (id=865): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x28000, 0xc) getdents64(r0, &(0x7f0000000040)=""/196, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000340)={r1, 0xaf05}) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001340)={'\x00', 0x1000, 0x7fff, 0x156, 0x9, 0x7, r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa4fc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001780)={0x0, @initdev, @initdev}, &(0x7f00000017c0)=0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{0x1, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0x1ff}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x20, 0x2f, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3b2}, {}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x9, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xc6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001680)='syzkaller\x00', 0x6, 0xab, &(0x7f00000016c0)=""/171, 0x40f00, 0x20, '\x00', r5, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x3, 0xc, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000001a80)=[r6, 0x1, 0x1, r7, 0x1, 0x1, r8, 0x1, 0xffffffffffffffff, r9], &(0x7f0000001ac0)=[{0x1, 0x4, 0xa, 0x4}, {0x4, 0x3, 0x3, 0x1}, {0x1, 0x1, 0xd, 0xc}, {0x3, 0x5, 0xc, 0x5}, {0x5, 0x3, 0x1, 0x6}, {0x1, 0x4, 0x4, 0x1}], 0x10, 0xfd0}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r12 = pidfd_getfd(r11, r7, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001c80)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000001d80)=0xe8) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000001c40)=@loop={'/dev/loop', 0x0}, r13, &(0x7f0000001dc0)) write$UHID_CREATE(r11, &(0x7f0000001e80)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001e00)=""/120, 0x78, 0x1ff, 0x5, 0x9, 0x400, 0x2}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002000)={&(0x7f0000001fc0)='rxrpc_skb\x00', r10, 0x0, 0x3}, 0x18) fsetxattr$security_selinux(r11, &(0x7f0000002040), &(0x7f0000002080)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x1) syz_open_dev$evdev(&(0x7f00000020c0), 0x9, 0x521002) getsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000002100), &(0x7f0000002140)=0x4) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000002180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x20, 0xf1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xff, 0xd8, 0x1}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x300, 0x3, 0x1, 0xd, 0xff, 0x4}, 0x4f, &(0x7f0000002200)={0x5, 0xf, 0x4f, 0x3, [@generic={0x39, 0x10, 0x3, "9e10693f8bb77a94dfffd12c788ec99e6431aaa69803a71fc9ce6af41a65ebf179557f1fc40e6f52114afc07edcd217736dd33072bf0"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x6, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x3, 0x8}]}, 0x4, [{0x32, &(0x7f0000002280)=@string={0x32, 0x3, "710994368ed8422a2ea298795131d44f5f967abb924970548c998c7b32116c5f847788a1f980ac56d46d72ea6b6fe6ff"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x436}}, {0xeb, &(0x7f0000002300)=@string={0xeb, 0x3, "520d7a6d482fb59aba36ef808b51989ee048be4154cac49601b936d392262f413cc7cd9920dc9be8c3bb0f14a0b5c6ac58972ef10bdeb244c0122753481a521e706118019d4044d074cc364a91fafa853a90dda2df446e3376dfcc56b88596a6ed16778fb4f9c08c9512babfde8a66b9b418d85fb2202026b7183b3cd34a2c0a4f9bb612c9caf4b784df3115b273c17326a46b5816614fe7f1ed02bc784de96947da71bf0da4ad00517900b8422a1fb97ec4e984ae07f24e9a821e8ae7f6398711b98a0deff42db1dd308c8973381c90e24e314efed07401b13ee403aea92000c0cddef89a881989f7"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4}}]}) ioctl$BLKCRYPTOGENERATEKEY(r12, 0xc030128a, &(0x7f0000002500)={&(0x7f00000024c0)=""/32, 0x20}) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002680)={@cgroup=r12, 0x1d, 0x0, 0x81, &(0x7f0000002580), 0x0, 0x0, &(0x7f00000025c0)=[0x0], &(0x7f0000002600)=[0x0, 0x0], &(0x7f0000002640)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0xb, 0x13, &(0x7f00000026c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @tail_call, @alu={0x7, 0x0, 0x1, 0x9, 0x8, 0xffffffffffffffff, 0x9}], &(0x7f0000002780)='syzkaller\x00', 0x2, 0xd6, &(0x7f00000027c0)=""/214, 0x41000, 0x0, '\x00', r5, @fallback=0x18, r11, 0x8, &(0x7f00000028c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002900)={0x2, 0x9, 0x2, 0xc2e}, 0x10, 0xffffffffffffffff, r14, 0x4, &(0x7f0000002940)=[r9, r6], &(0x7f0000002980)=[{0x3, 0x4, 0x5}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0x5, 0xb}, {0x0, 0x5, 0x10}], 0x10, 0xa62b}, 0x94) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) 1.993205242s ago: executing program 0 (id=866): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000c40)={0x0, 0x34f4, 0x800, 0x3, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) 1.58580204s ago: executing program 1 (id=869): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 1.58511086s ago: executing program 1 (id=870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="186600000100000000000000ff7f0000850000005200000058440000060000000000000000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000faffffff0000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000340)=""/163, 0x41100, 0x18, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r0, r0, r0], &(0x7f0000000580)=[{0x4, 0x5, 0xb, 0x2}], 0x10, 0x6}, 0x94) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000042840000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000059787000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = memfd_secret(0x0) ftruncate(r6, 0x51a9497) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x9, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000300000018460000f9ffffff0000000000000000bf9100000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x5c, &(0x7f00000004c0)=""/92, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0x22, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x1, 0xc, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r4, r5, r4, r4, r5, r5], &(0x7f0000000a40)=[{0x2, 0x5, 0x7, 0x3}], 0x10, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r12, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r11}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.58444762s ago: executing program 0 (id=871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) socket$nl_route(0x10, 0x3, 0x0) unshare(0x60000480) 1.471926152s ago: executing program 3 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x0, 0x0) 1.450174753s ago: executing program 3 (id=873): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2a020400) 1.406175284s ago: executing program 3 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.387886974s ago: executing program 2 (id=875): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) ioprio_set$pid(0x2, 0x0, 0x0) 1.354980404s ago: executing program 3 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) read(r0, &(0x7f00000000c0)=""/81, 0x51) 1.316152585s ago: executing program 2 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 1.271274806s ago: executing program 4 (id=878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001480)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xdc0, &(0x7f0000000080)=ANY=[], 0x0) 1.244506067s ago: executing program 4 (id=879): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.230009697s ago: executing program 2 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) 1.165789878s ago: executing program 2 (id=881): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 1.06203155s ago: executing program 4 (id=882): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x60000480) 997.131411ms ago: executing program 2 (id=883): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x28000, 0xc) getdents64(r0, &(0x7f0000000040)=""/196, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000340)={r1, 0xaf05}) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001340)={'\x00', 0x1000, 0x7fff, 0x156, 0x9, 0x7, r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa4fc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001780)={0x0, @initdev, @initdev}, &(0x7f00000017c0)=0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001940)={{0x1, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0x1ff}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x20, 0x2f, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3b2}, {}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x9, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xc6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001680)='syzkaller\x00', 0x6, 0xab, &(0x7f00000016c0)=""/171, 0x40f00, 0x20, '\x00', r5, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x3, 0xc, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000001a80)=[r6, 0x1, 0x1, r7, 0x1, 0x1, r8, 0x1, 0xffffffffffffffff, r9], &(0x7f0000001ac0)=[{0x1, 0x4, 0xa, 0x4}, {0x4, 0x3, 0x3, 0x1}, {0x1, 0x1, 0xd, 0xc}, {0x3, 0x5, 0xc, 0x5}, {0x5, 0x3, 0x1, 0x6}, {0x1, 0x4, 0x4, 0x1}], 0x10, 0xfd0}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r12 = pidfd_getfd(r11, r7, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001c80)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000001d80)=0xe8) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000001c40)=@loop={'/dev/loop', 0x0}, r13, &(0x7f0000001dc0)) write$UHID_CREATE(r11, &(0x7f0000001e80)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001e00)=""/120, 0x78, 0x1ff, 0x5, 0x9, 0x400, 0x2}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002000)={&(0x7f0000001fc0)='rxrpc_skb\x00', r10, 0x0, 0x3}, 0x18) fsetxattr$security_selinux(r11, &(0x7f0000002040), &(0x7f0000002080)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x1) syz_open_dev$evdev(&(0x7f00000020c0), 0x9, 0x521002) getsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000002100), &(0x7f0000002140)=0x4) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000002180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x20, 0xf1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xff, 0xd8, 0x1}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x300, 0x3, 0x1, 0xd, 0xff, 0x4}, 0x4f, &(0x7f0000002200)={0x5, 0xf, 0x4f, 0x3, [@generic={0x39, 0x10, 0x3, "9e10693f8bb77a94dfffd12c788ec99e6431aaa69803a71fc9ce6af41a65ebf179557f1fc40e6f52114afc07edcd217736dd33072bf0"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x6, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x3, 0x8}]}, 0x4, [{0x32, &(0x7f0000002280)=@string={0x32, 0x3, "710994368ed8422a2ea298795131d44f5f967abb924970548c998c7b32116c5f847788a1f980ac56d46d72ea6b6fe6ff"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x436}}, {0xeb, &(0x7f0000002300)=@string={0xeb, 0x3, "520d7a6d482fb59aba36ef808b51989ee048be4154cac49601b936d392262f413cc7cd9920dc9be8c3bb0f14a0b5c6ac58972ef10bdeb244c0122753481a521e706118019d4044d074cc364a91fafa853a90dda2df446e3376dfcc56b88596a6ed16778fb4f9c08c9512babfde8a66b9b418d85fb2202026b7183b3cd34a2c0a4f9bb612c9caf4b784df3115b273c17326a46b5816614fe7f1ed02bc784de96947da71bf0da4ad00517900b8422a1fb97ec4e984ae07f24e9a821e8ae7f6398711b98a0deff42db1dd308c8973381c90e24e314efed07401b13ee403aea92000c0cddef89a881989f7"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4}}]}) ioctl$BLKCRYPTOGENERATEKEY(r12, 0xc030128a, &(0x7f0000002500)={&(0x7f00000024c0)=""/32, 0x20}) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002680)={@cgroup=r12, 0x1d, 0x0, 0x81, &(0x7f0000002580), 0x0, 0x0, &(0x7f00000025c0)=[0x0], &(0x7f0000002600)=[0x0, 0x0], &(0x7f0000002640)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0xb, 0x13, &(0x7f00000026c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @tail_call, @alu={0x7, 0x0, 0x1, 0x9, 0x8, 0xffffffffffffffff, 0x9}], &(0x7f0000002780)='syzkaller\x00', 0x2, 0xd6, &(0x7f00000027c0)=""/214, 0x41000, 0x0, '\x00', r5, @fallback=0x18, r11, 0x8, &(0x7f00000028c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002900)={0x2, 0x9, 0x2, 0xc2e}, 0x10, 0xffffffffffffffff, r14, 0x4, &(0x7f0000002940)=[r9, r6], &(0x7f0000002980)=[{0x3, 0x4, 0x5}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0x5, 0xb}, {0x0, 0x5, 0x10}], 0x10, 0xa62b}, 0x94) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) 744.642176ms ago: executing program 1 (id=884): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) 693.323807ms ago: executing program 0 (id=885): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2a020400) 455.719362ms ago: executing program 3 (id=886): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r0}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 451.787331ms ago: executing program 0 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 450.974181ms ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 423.371922ms ago: executing program 1 (id=889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001480)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xdc0, &(0x7f0000000080)=ANY=[], 0x0) 395.052063ms ago: executing program 1 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 370.612163ms ago: executing program 0 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 306.096255ms ago: executing program 1 (id=892): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 286.647025ms ago: executing program 0 (id=893): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 0s ago: executing program 4 (id=894): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000", @ANYBLOB="60089f585976155d4595ff9a2564726595d60d4694cc9878a9487b161c48a4c712e0a0e4f6c64a64b7773951bef6b8b9", @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) truncate(&(0x7f0000000080)='./file1\x00', 0xc1a) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x4, 0x8c, {"4734aedf02adbc09888a2b101c52b575"}, 0xf9c, 0x4, 0x842}}}, 0x90) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="155d0700052198eba5cf11dc923950b40000002e4c"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) getsockopt$inet_opts(r2, 0x0, 0x5, &(0x7f0000000240)=""/1, &(0x7f00000003c0)=0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="774b501fa754d02849ae0b0a49eb77305414444b97"], 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000000000000000000004b84"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000000008e80de5b3c0eb20700"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) pause() kernel console output (not intermixed with test programs): ge from 0 to 128 [ 43.137444][ T4035] syz.0.169: attempt to access beyond end of device [ 43.137444][ T4035] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 43.152194][ T4027] netlink: 'syz.1.167': attribute type 3 has an invalid length. [ 43.158956][ T4035] syz.0.169: attempt to access beyond end of device [ 43.158956][ T4035] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 43.173260][ T4035] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 43.182844][ T4035] syz.0.169: attempt to access beyond end of device [ 43.182844][ T4035] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 43.196320][ T4035] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 43.205098][ T4035] syz.0.169: attempt to access beyond end of device [ 43.205098][ T4035] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 43.219041][ T4035] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 43.239823][ T4035] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 43.241627][ T4027] netlink: 'syz.1.167': attribute type 10 has an invalid length. [ 43.252834][ T4037] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 43.256417][ T4027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'. [ 43.281370][ T4027] batman_adv: batadv0: Adding interface: veth1_vlan [ 43.288010][ T4027] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.321122][ T4035] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 43.345254][ T4027] batman_adv: batadv0: Interface activated: veth1_vlan [ 43.366267][ T4041] FAULT_INJECTION: forcing a failure. [ 43.366267][ T4041] name failslab, interval 1, probability 0, space 0, times 0 [ 43.379040][ T4041] CPU: 1 UID: 0 PID: 4041 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.379067][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.379080][ T4041] Call Trace: [ 43.379086][ T4041] [ 43.379092][ T4041] __dump_stack+0x1d/0x30 [ 43.379116][ T4041] dump_stack_lvl+0xe8/0x140 [ 43.379145][ T4041] dump_stack+0x15/0x1b [ 43.379167][ T4041] should_fail_ex+0x265/0x280 [ 43.379198][ T4041] should_failslab+0x8c/0xb0 [ 43.379411][ T4041] kmem_cache_alloc_noprof+0x50/0x310 [ 43.379441][ T4041] ? getname_flags+0x80/0x3b0 [ 43.379547][ T4041] getname_flags+0x80/0x3b0 [ 43.379631][ T4041] __se_sys_quotactl+0x16a/0x670 [ 43.379662][ T4041] __x64_sys_quotactl+0x55/0x70 [ 43.379688][ T4041] x64_sys_call+0x15d6/0x2ff0 [ 43.379728][ T4041] do_syscall_64+0xd2/0x200 [ 43.379761][ T4041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.379786][ T4041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.379885][ T4041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.379912][ T4041] RIP: 0033:0x7f1df16beba9 [ 43.379927][ T4041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.379944][ T4041] RSP: 002b:00007f1df0127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 43.380023][ T4041] RAX: ffffffffffffffda RBX: 00007f1df1905fa0 RCX: 00007f1df16beba9 [ 43.380038][ T4041] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 43.380053][ T4041] RBP: 00007f1df0127090 R08: 0000000000000000 R09: 0000000000000000 [ 43.380067][ T4041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.380081][ T4041] R13: 00007f1df1906038 R14: 00007f1df1905fa0 R15: 00007ffe5f94a288 [ 43.380103][ T4041] [ 43.387162][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 43.434834][ T4043] FAULT_INJECTION: forcing a failure. [ 43.434834][ T4043] name failslab, interval 1, probability 0, space 0, times 0 [ 43.439067][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.443492][ T4043] CPU: 1 UID: 0 PID: 4043 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.443527][ T4043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.443545][ T4043] Call Trace: [ 43.443579][ T4043] [ 43.443591][ T4043] __dump_stack+0x1d/0x30 [ 43.443619][ T4043] dump_stack_lvl+0xe8/0x140 [ 43.443648][ T4043] dump_stack+0x15/0x1b [ 43.443714][ T4043] should_fail_ex+0x265/0x280 [ 43.443750][ T4043] should_failslab+0x8c/0xb0 [ 43.443857][ T4043] kmem_cache_alloc_noprof+0x50/0x310 [ 43.443897][ T4043] ? skb_clone+0x151/0x1f0 [ 43.443997][ T4043] skb_clone+0x151/0x1f0 [ 43.444071][ T4043] __netlink_deliver_tap+0x2c9/0x500 [ 43.444114][ T4043] netlink_unicast+0x66b/0x690 [ 43.444221][ T4043] netlink_sendmsg+0x58b/0x6b0 [ 43.444261][ T4043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.444297][ T4043] __sock_sendmsg+0x145/0x180 [ 43.444419][ T4043] ____sys_sendmsg+0x31e/0x4e0 [ 43.444527][ T4043] ___sys_sendmsg+0x17b/0x1d0 [ 43.444580][ T4043] __x64_sys_sendmsg+0xd4/0x160 [ 43.444624][ T4043] x64_sys_call+0x191e/0x2ff0 [ 43.444670][ T4043] do_syscall_64+0xd2/0x200 [ 43.444715][ T4043] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.444751][ T4043] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.444843][ T4043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.444874][ T4043] RIP: 0033:0x7f1df16beba9 [ 43.444895][ T4043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.444919][ T4043] RSP: 002b:00007f1df0127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.444987][ T4043] RAX: ffffffffffffffda RBX: 00007f1df1905fa0 RCX: 00007f1df16beba9 [ 43.445006][ T4043] RDX: 00000000000048c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 43.445025][ T4043] RBP: 00007f1df0127090 R08: 0000000000000000 R09: 0000000000000000 [ 43.445072][ T4043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.445089][ T4043] R13: 00007f1df1906038 R14: 00007f1df1905fa0 R15: 00007ffe5f94a288 [ 43.445115][ T4043] [ 43.534183][ T4047] FAULT_INJECTION: forcing a failure. [ 43.534183][ T4047] name failslab, interval 1, probability 0, space 0, times 0 [ 43.801947][ T4047] CPU: 1 UID: 0 PID: 4047 Comm: syz.1.174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.802037][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.802049][ T4047] Call Trace: [ 43.802056][ T4047] [ 43.802064][ T4047] __dump_stack+0x1d/0x30 [ 43.802086][ T4047] dump_stack_lvl+0xe8/0x140 [ 43.802109][ T4047] dump_stack+0x15/0x1b [ 43.802130][ T4047] should_fail_ex+0x265/0x280 [ 43.802240][ T4047] should_failslab+0x8c/0xb0 [ 43.802263][ T4047] kmem_cache_alloc_noprof+0x50/0x310 [ 43.802288][ T4047] ? security_file_alloc+0x32/0x100 [ 43.802319][ T4047] security_file_alloc+0x32/0x100 [ 43.802352][ T4047] init_file+0x5c/0x1d0 [ 43.802378][ T4047] alloc_empty_file+0x8b/0x200 [ 43.802404][ T4047] path_openat+0x68/0x2170 [ 43.802479][ T4047] ? mntput+0x4b/0x80 [ 43.802505][ T4047] ? terminate_walk+0x27f/0x2a0 [ 43.802653][ T4047] ? path_openat+0x1bf8/0x2170 [ 43.802671][ T4047] ? _parse_integer_limit+0x170/0x190 [ 43.802720][ T4047] do_filp_open+0x109/0x230 [ 43.802756][ T4047] do_open_execat+0xd8/0x260 [ 43.802777][ T4047] alloc_bprm+0x25/0x350 [ 43.802876][ T4047] do_execveat_common+0x12e/0x750 [ 43.802899][ T4047] __x64_sys_execve+0x5c/0x70 [ 43.802919][ T4047] x64_sys_call+0x2716/0x2ff0 [ 43.802984][ T4047] do_syscall_64+0xd2/0x200 [ 43.803023][ T4047] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.803102][ T4047] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.803129][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.803149][ T4047] RIP: 0033:0x7f9d7d04eba9 [ 43.803162][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.803177][ T4047] RSP: 002b:00007f9d7ba96038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 43.803234][ T4047] RAX: ffffffffffffffda RBX: 00007f9d7d296090 RCX: 00007f9d7d04eba9 [ 43.803252][ T4047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 43.803265][ T4047] RBP: 00007f9d7ba96090 R08: 0000000000000000 R09: 0000000000000000 [ 43.803275][ T4047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.803286][ T4047] R13: 00007f9d7d296128 R14: 00007f9d7d296090 R15: 00007ffe5ecaae78 [ 43.803364][ T4047] [ 43.805433][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.108546][ T4058] FAULT_INJECTION: forcing a failure. [ 44.108546][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 44.121291][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.4.177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.121323][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.121339][ T4058] Call Trace: [ 44.121378][ T4058] [ 44.121387][ T4058] __dump_stack+0x1d/0x30 [ 44.121422][ T4058] dump_stack_lvl+0xe8/0x140 [ 44.121441][ T4058] dump_stack+0x15/0x1b [ 44.121507][ T4058] should_fail_ex+0x265/0x280 [ 44.121539][ T4058] ? asymmetric_lookup_restriction+0x303/0x370 [ 44.121605][ T4058] should_failslab+0x8c/0xb0 [ 44.121695][ T4058] __kmalloc_cache_noprof+0x4c/0x320 [ 44.121809][ T4058] ? __pfx_restrict_link_by_key_or_keyring+0x10/0x10 [ 44.121862][ T4058] asymmetric_lookup_restriction+0x303/0x370 [ 44.122038][ T4058] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 44.122085][ T4058] keyring_restrict+0xf4/0x280 [ 44.122110][ T4058] keyctl_restrict_keyring+0x107/0x1b0 [ 44.122151][ T4058] __se_sys_keyctl+0x1ed/0xb80 [ 44.122246][ T4058] ? __rcu_read_unlock+0x4f/0x70 [ 44.122274][ T4058] ? __fget_files+0x184/0x1c0 [ 44.122308][ T4058] ? fput+0x8f/0xc0 [ 44.122349][ T4058] __x64_sys_keyctl+0x67/0x80 [ 44.122442][ T4058] x64_sys_call+0x2f6d/0x2ff0 [ 44.122468][ T4058] do_syscall_64+0xd2/0x200 [ 44.122573][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.122629][ T4058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.122673][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.122699][ T4058] RIP: 0033:0x7fa6ba03eba9 [ 44.122717][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.122740][ T4058] RSP: 002b:00007fa6b8aa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 44.122767][ T4058] RAX: ffffffffffffffda RBX: 00007fa6ba285fa0 RCX: 00007fa6ba03eba9 [ 44.122783][ T4058] RDX: 0000200000000240 RSI: 000000000f9e1162 RDI: 000000000000001d [ 44.122835][ T4058] RBP: 00007fa6b8aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.122885][ T4058] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 44.122901][ T4058] R13: 00007fa6ba286038 R14: 00007fa6ba285fa0 R15: 00007ffcc1fca898 [ 44.122931][ T4058] [ 44.345342][ T4063] tipc: New replicast peer: 255.255.255.255 [ 44.351587][ T4063] tipc: Enabled bearer , priority 10 [ 44.360272][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 44.369274][ T4063] tipc: Disabling bearer [ 44.369353][ T4065] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 44.477936][ T4071] batadv1: entered promiscuous mode [ 44.560954][ T4076] netlink: 232 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.577542][ T4085] loop2: detected capacity change from 0 to 128 [ 44.627982][ T4091] netlink: 88 bytes leftover after parsing attributes in process `syz.1.191'. [ 44.654032][ T4091] FAULT_INJECTION: forcing a failure. [ 44.654032][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 44.666889][ T4091] CPU: 1 UID: 0 PID: 4091 Comm: syz.1.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.666918][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.666933][ T4091] Call Trace: [ 44.666940][ T4091] [ 44.666948][ T4091] __dump_stack+0x1d/0x30 [ 44.666972][ T4091] dump_stack_lvl+0xe8/0x140 [ 44.666996][ T4091] dump_stack+0x15/0x1b [ 44.667056][ T4091] should_fail_ex+0x265/0x280 [ 44.667087][ T4091] ? _request_firmware+0x1a3/0xbb0 [ 44.667166][ T4091] should_failslab+0x8c/0xb0 [ 44.667199][ T4091] __kmalloc_cache_noprof+0x4c/0x320 [ 44.667276][ T4091] _request_firmware+0x1a3/0xbb0 [ 44.667316][ T4091] ? avc_has_perm_noaudit+0x156/0x200 [ 44.667369][ T4091] ? cred_has_capability+0x210/0x280 [ 44.667390][ T4091] ? __rcu_read_unlock+0x4f/0x70 [ 44.667482][ T4091] request_firmware+0x36/0x50 [ 44.667514][ T4091] devlink_compat_flash_update+0xb2/0x1b0 [ 44.667657][ T4091] dev_ethtool+0x14a1/0x1660 [ 44.667687][ T4091] ? full_name_hash+0x92/0xe0 [ 44.667726][ T4091] dev_ioctl+0x2e0/0x960 [ 44.667803][ T4091] sock_do_ioctl+0x197/0x220 [ 44.667840][ T4091] sock_ioctl+0x41b/0x610 [ 44.667952][ T4091] ? __pfx_sock_ioctl+0x10/0x10 [ 44.667984][ T4091] __se_sys_ioctl+0xce/0x140 [ 44.668006][ T4091] __x64_sys_ioctl+0x43/0x50 [ 44.668078][ T4091] x64_sys_call+0x1816/0x2ff0 [ 44.668136][ T4091] do_syscall_64+0xd2/0x200 [ 44.668177][ T4091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.668270][ T4091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.668302][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.668324][ T4091] RIP: 0033:0x7f9d7d04eba9 [ 44.668343][ T4091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.668366][ T4091] RSP: 002b:00007f9d7bab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.668389][ T4091] RAX: ffffffffffffffda RBX: 00007f9d7d295fa0 RCX: 00007f9d7d04eba9 [ 44.668450][ T4091] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 000000000000000a [ 44.668464][ T4091] RBP: 00007f9d7bab7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.668568][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.668582][ T4091] R13: 00007f9d7d296038 R14: 00007f9d7d295fa0 R15: 00007ffe5ecaae78 [ 44.668605][ T4091] [ 44.668619][ T4091] netdevsim netdevsim1: _request_firmware_prepare: kmalloc(struct firmware) failed [ 44.700151][ T4093] loop0: detected capacity change from 0 to 2048 [ 44.935079][ T4093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.959448][ T4093] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.049891][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.092755][ T4108] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 45.165423][ T4110] SELinux: ebitmap: truncated map [ 45.172849][ T4110] SELinux: failed to load policy [ 45.334303][ T4121] Zero length message leads to an empty skb [ 45.385320][ T4124] batadv1: entered promiscuous mode [ 45.493996][ T4134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.569436][ T4134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.598741][ T4137] loop2: detected capacity change from 0 to 1024 [ 45.642793][ T4139] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 45.710417][ T4134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.724215][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.831374][ T4134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.924937][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.965181][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.973702][ T4149] netlink: 'syz.1.211': attribute type 3 has an invalid length. [ 45.975979][ T4141] loop0: detected capacity change from 0 to 32768 [ 45.984857][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 45.984874][ T29] audit: type=1326 audit(1757809624.822:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.017171][ T29] audit: type=1326 audit(1757809624.822:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.040499][ T29] audit: type=1326 audit(1757809624.822:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ba03d510 code=0x7ffc0000 [ 46.063709][ T29] audit: type=1326 audit(1757809624.822:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ba03d510 code=0x7ffc0000 [ 46.087034][ T29] audit: type=1326 audit(1757809624.822:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.111301][ T29] audit: type=1326 audit(1757809624.832:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.111506][ T4152] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.134475][ T29] audit: type=1326 audit(1757809624.832:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.134515][ T29] audit: type=1326 audit(1757809624.852:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.151087][ T3500] loop0: p1 p2 p3 < p5 p6 > [ 46.167289][ T29] audit: type=1326 audit(1757809624.852:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.218412][ T29] audit: type=1326 audit(1757809624.852:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 46.240341][ T3500] loop0: p2 size 16775168 extends beyond EOD, truncated [ 46.269496][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.284069][ T3500] loop0: p5 start 4294970168 is beyond EOD, truncated [ 46.291698][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.301169][ T4152] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.312562][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.324740][ T4141] loop0: p1 p2 p3 < p5 p6 > [ 46.330503][ T4141] loop0: p2 size 16775168 extends beyond EOD, truncated [ 46.341386][ T4141] loop0: p5 start 4294970168 is beyond EOD, truncated [ 46.351236][ T4152] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.391210][ T4152] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.434837][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 46.435965][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.447533][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 46.465127][ T4159] syz.0.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.486754][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.504705][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 46.528194][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 46.528558][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 46.539363][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 46.551057][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.569900][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 46.578826][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.578913][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.641397][ T4167] loop3: detected capacity change from 0 to 1024 [ 46.685149][ T4169] loop4: detected capacity change from 0 to 512 [ 46.692958][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.709400][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.752063][ T4177] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 46.848466][ T4181] bridge1: entered allmulticast mode [ 46.992250][ T4189] SELinux: failed to load policy [ 47.157117][ T4202] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 47.519588][ T4214] netlink: 232 bytes leftover after parsing attributes in process `syz.2.236'. [ 47.799378][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.872509][ T4220] loop3: detected capacity change from 0 to 1024 [ 47.891881][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.257974][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.319061][ T4235] loop4: detected capacity change from 0 to 512 [ 48.384772][ T4235] Invalid ELF header magic: != ELF [ 48.429045][ T4239] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.458215][ T4243] loop0: detected capacity change from 0 to 1024 [ 48.465342][ T4243] EXT4-fs: Ignoring removed orlov option [ 48.483773][ T4243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.497718][ T4239] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.529351][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.550932][ T4239] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.641928][ T4239] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.975330][ T1029] hid_parser_main: 73 callbacks suppressed [ 48.975357][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.980783][ T4278] loop4: detected capacity change from 0 to 1024 [ 48.981448][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.995938][ T4278] EXT4-fs: Ignoring removed orlov option [ 49.002546][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.022474][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.029999][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.030077][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.030106][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.040103][ T4278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.044935][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.071878][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.079334][ T1029] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.086783][ T1029] hid-generic 0000:0000:0000.0002: reserved main item tag 0xd [ 49.097727][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.112810][ T1029] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 49.146623][ T4285] fido_id[4285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.151324][ T4284] bridge_slave_0: left allmulticast mode [ 49.165888][ T4284] bridge_slave_0: left promiscuous mode [ 49.171630][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.182757][ T4284] bridge_slave_1: left allmulticast mode [ 49.188437][ T4284] bridge_slave_1: left promiscuous mode [ 49.194182][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.204016][ T4284] bond0: (slave bond_slave_0): Releasing backup interface [ 49.222040][ T4284] bond0: (slave bond_slave_1): Releasing backup interface [ 49.239035][ T4284] team0: Port device team_slave_0 removed [ 49.249743][ T4284] team0: Port device team_slave_1 removed [ 49.256660][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.264115][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.273362][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.280833][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.399416][ T4296] SELinux: ebitmap: truncated map [ 49.405172][ T4296] SELinux: failed to load policy [ 49.493664][ T4304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.493818][ T4304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.535622][ T4302] netlink: 'syz.2.268': attribute type 13 has an invalid length. [ 49.577666][ T4302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.595026][ T4306] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.605079][ T4307] loop2: detected capacity change from 0 to 512 [ 49.617880][ T4307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 49.631198][ T4307] EXT4-fs (loop2): Remounting filesystem read-only [ 49.637749][ T4307] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.648346][ T4307] EXT4-fs (loop2): 1 orphan inode deleted [ 49.654971][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.655392][ T4306] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.669420][ T4307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.731693][ T4306] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.751388][ T4313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.781655][ T4306] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.839566][ T4313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.942398][ T4313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.992139][ T4313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.025243][ T4320] loop0: detected capacity change from 0 to 1024 [ 50.041161][ T4320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.060029][ T3942] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.075211][ T3942] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087039][ T3942] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.096270][ T3942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.177606][ T3870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.200053][ T3870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.218232][ T3870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.236735][ T3870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.314262][ T4331] SELinux: ebitmap: truncated map [ 50.321718][ T4331] SELinux: failed to load policy [ 50.574922][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.586266][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598115][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.609997][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.711594][ T4350] loop1: detected capacity change from 0 to 512 [ 50.741138][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.867078][ T4350] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.895477][ T4355] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.949742][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.100408][ T29] kauditd_printk_skb: 1084 callbacks suppressed [ 51.100422][ T29] audit: type=1400 audit(1757809629.932:4006): avc: denied { create } for pid=4358 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.180879][ T4364] FAULT_INJECTION: forcing a failure. [ 51.180879][ T4364] name failslab, interval 1, probability 0, space 0, times 0 [ 51.193625][ T4364] CPU: 1 UID: 0 PID: 4364 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.193654][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.193669][ T4364] Call Trace: [ 51.193678][ T4364] [ 51.193724][ T4364] __dump_stack+0x1d/0x30 [ 51.193783][ T4364] dump_stack_lvl+0xe8/0x140 [ 51.193807][ T4364] dump_stack+0x15/0x1b [ 51.193823][ T4364] should_fail_ex+0x265/0x280 [ 51.193848][ T4364] should_failslab+0x8c/0xb0 [ 51.193887][ T4364] kmem_cache_alloc_noprof+0x50/0x310 [ 51.193999][ T4364] ? create_new_namespaces+0x3c/0x3d0 [ 51.194035][ T4364] create_new_namespaces+0x3c/0x3d0 [ 51.194079][ T4364] unshare_nsproxy_namespaces+0xe8/0x120 [ 51.194133][ T4364] ksys_unshare+0x3d0/0x6d0 [ 51.194166][ T4364] __x64_sys_unshare+0x1f/0x30 [ 51.194198][ T4364] x64_sys_call+0x2911/0x2ff0 [ 51.194340][ T4364] do_syscall_64+0xd2/0x200 [ 51.194383][ T4364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.194453][ T4364] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.194492][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.194515][ T4364] RIP: 0033:0x7fa6ba03eba9 [ 51.194592][ T4364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.194615][ T4364] RSP: 002b:00007fa6b8a65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.194635][ T4364] RAX: ffffffffffffffda RBX: 00007fa6ba286180 RCX: 00007fa6ba03eba9 [ 51.194647][ T4364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 51.194659][ T4364] RBP: 00007fa6b8a65090 R08: 0000000000000000 R09: 0000000000000000 [ 51.194678][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.194694][ T4364] R13: 00007fa6ba286218 R14: 00007fa6ba286180 R15: 00007ffcc1fca898 [ 51.194718][ T4364] [ 51.554002][ T29] audit: type=1326 audit(1757809630.362:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.577287][ T29] audit: type=1326 audit(1757809630.362:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.600535][ T29] audit: type=1326 audit(1757809630.362:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.623707][ T29] audit: type=1326 audit(1757809630.362:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.646885][ T29] audit: type=1326 audit(1757809630.362:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.670086][ T29] audit: type=1326 audit(1757809630.362:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fb81d510 code=0x7ffc0000 [ 51.693325][ T29] audit: type=1326 audit(1757809630.362:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fb81d510 code=0x7ffc0000 [ 51.716567][ T29] audit: type=1326 audit(1757809630.362:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.739788][ T29] audit: type=1326 audit(1757809630.362:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 51.770383][ T4366] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.798979][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.891188][ T4366] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.951292][ T4366] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.275427][ T4390] netlink: 232 bytes leftover after parsing attributes in process `syz.1.296'. [ 52.328016][ T4388] batadv1: entered promiscuous mode [ 52.392062][ T4366] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.457430][ T4393] FAULT_INJECTION: forcing a failure. [ 52.457430][ T4393] name failslab, interval 1, probability 0, space 0, times 0 [ 52.470158][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.470187][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.470254][ T4393] Call Trace: [ 52.470262][ T4393] [ 52.470271][ T4393] __dump_stack+0x1d/0x30 [ 52.470293][ T4393] dump_stack_lvl+0xe8/0x140 [ 52.470312][ T4393] dump_stack+0x15/0x1b [ 52.470346][ T4393] should_fail_ex+0x265/0x280 [ 52.470377][ T4393] should_failslab+0x8c/0xb0 [ 52.470427][ T4393] kmem_cache_alloc_noprof+0x50/0x310 [ 52.470460][ T4393] ? security_file_alloc+0x32/0x100 [ 52.470505][ T4393] security_file_alloc+0x32/0x100 [ 52.470563][ T4393] init_file+0x5c/0x1d0 [ 52.470608][ T4393] alloc_empty_file+0x8b/0x200 [ 52.470647][ T4393] path_openat+0x68/0x2170 [ 52.470670][ T4393] ? __rcu_read_unlock+0x34/0x70 [ 52.470691][ T4393] ? filemap_map_pages+0x86b/0xab0 [ 52.470797][ T4393] ? css_rstat_updated+0xb7/0x240 [ 52.470895][ T4393] do_filp_open+0x109/0x230 [ 52.470967][ T4393] do_sys_openat2+0xa6/0x110 [ 52.471028][ T4393] __x64_sys_openat+0xf2/0x120 [ 52.471071][ T4393] x64_sys_call+0x2e9c/0x2ff0 [ 52.471099][ T4393] do_syscall_64+0xd2/0x200 [ 52.471198][ T4393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.471227][ T4393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.471307][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.471328][ T4393] RIP: 0033:0x7f1df16bd510 [ 52.471347][ T4393] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 52.471366][ T4393] RSP: 002b:00007f1df0126b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 52.471389][ T4393] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1df16bd510 [ 52.471405][ T4393] RDX: 0000000000000000 RSI: 00007f1df0126c10 RDI: 00000000ffffff9c [ 52.471421][ T4393] RBP: 00007f1df0126c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 52.471475][ T4393] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 52.471487][ T4393] R13: 00007f1df1906038 R14: 00007f1df1905fa0 R15: 00007ffe5f94a288 [ 52.471505][ T4393] [ 53.056315][ T4424] batadv1: entered promiscuous mode [ 53.081856][ T4427] loop0: detected capacity change from 0 to 1024 [ 53.092971][ T4427] EXT4-fs: Ignoring removed nobh option [ 53.098591][ T4427] EXT4-fs: inline encryption not supported [ 53.130033][ T4427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.187514][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.310866][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 53.320897][ T4440] bridge_slave_1: left allmulticast mode [ 53.326717][ T4440] bridge_slave_1: left promiscuous mode [ 53.332521][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.350210][ T4440] bridge_slave_0: left allmulticast mode [ 53.355982][ T4440] bridge_slave_0: left promiscuous mode [ 53.361803][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.375917][ T4444] netlink: 232 bytes leftover after parsing attributes in process `syz.1.313'. [ 53.872643][ T4460] loop2: detected capacity change from 0 to 512 [ 53.885680][ T4460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.898049][ T4460] EXT4-fs (loop2): 1 truncate cleaned up [ 53.905780][ T4460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.949047][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.254096][ T4478] loop2: detected capacity change from 0 to 1024 [ 54.272418][ T4478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.427299][ T4482] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 54.561078][ T4488] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 54.569430][ T4488] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 54.972209][ T4495] netlink: 232 bytes leftover after parsing attributes in process `syz.0.334'. [ 55.166090][ T4497] netlink: 'syz.1.335': attribute type 10 has an invalid length. [ 55.173968][ T4497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 55.261904][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.304428][ T4497] team0: Port device geneve1 added [ 55.475071][ T4505] tipc: New replicast peer: 255.255.255.255 [ 55.481234][ T4505] tipc: Enabled bearer , priority 10 [ 55.502539][ T3870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.533623][ T3870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.552690][ T3870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.561199][ T3870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.673504][ T4510] loop3: detected capacity change from 0 to 1024 [ 55.702224][ T4510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.757455][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.784971][ T4521] loop3: detected capacity change from 0 to 1024 [ 55.816137][ T4525] syzkaller0: entered allmulticast mode [ 55.826146][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.839626][ T4525] syzkaller0 (unregistering): left allmulticast mode [ 55.900240][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.078420][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.087183][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.155322][ T4536] netlink: 232 bytes leftover after parsing attributes in process `syz.3.344'. [ 56.302170][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 56.302200][ T29] audit: type=1326 audit(1757809635.132:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.393506][ T4539] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.406920][ T29] audit: type=1326 audit(1757809635.162:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.430191][ T29] audit: type=1326 audit(1757809635.162:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.453528][ T29] audit: type=1326 audit(1757809635.162:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1df16bd510 code=0x7ffc0000 [ 56.476827][ T29] audit: type=1326 audit(1757809635.162:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1df16bd510 code=0x7ffc0000 [ 56.500218][ T29] audit: type=1326 audit(1757809635.162:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.523448][ T29] audit: type=1326 audit(1757809635.162:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.523522][ T29] audit: type=1326 audit(1757809635.202:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.523564][ T29] audit: type=1326 audit(1757809635.202:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.523666][ T29] audit: type=1326 audit(1757809635.212:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 56.619081][ T3395] tipc: Node number set to 3718612271 [ 56.670940][ T4539] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.730934][ T4539] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.793808][ T4553] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 56.810410][ T4539] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.856709][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.870506][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.920436][ T4560] bridge_slave_0: left allmulticast mode [ 56.926150][ T4560] bridge_slave_0: left promiscuous mode [ 56.931925][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.942884][ T4560] bridge_slave_1: left allmulticast mode [ 56.948557][ T4560] bridge_slave_1: left promiscuous mode [ 56.954296][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.975611][ T4560] bond0: (slave bond_slave_0): Releasing backup interface [ 56.987632][ T4560] bond0: (slave bond_slave_1): Releasing backup interface [ 57.003349][ T4560] team0: Port device team_slave_0 removed [ 57.018015][ T4560] team0: Port device team_slave_1 removed [ 57.026767][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.034394][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.045702][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.049018][ T4573] loop3: detected capacity change from 0 to 1024 [ 57.053219][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.060620][ T4573] EXT4-fs: Ignoring removed nobh option [ 57.072416][ T4573] EXT4-fs: inline encryption not supported [ 57.086713][ T4568] netlink: 'syz.0.355': attribute type 3 has an invalid length. [ 57.098103][ T4568] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 57.106002][ T4568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'. [ 57.133794][ T4573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.146280][ T4558] bond0: entered allmulticast mode [ 57.210011][ T4568] batman_adv: batadv0: Adding interface: veth1_vlan [ 57.216681][ T4568] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.245482][ T4568] batman_adv: batadv0: Interface activated: veth1_vlan [ 57.262519][ T3870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.284995][ T3870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296607][ T3870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.313616][ T3870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.336470][ T4581] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.361: Allocating blocks 385-513 which overlap fs metadata [ 57.391438][ T4572] EXT4-fs (loop3): pa ffff8881071f37e0: logic 16, phys. 129, len 24 [ 57.399588][ T4572] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 57.412398][ T4586] netlink: 232 bytes leftover after parsing attributes in process `syz.1.363'. [ 57.427069][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.439903][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.496261][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.868192][ T4594] netlink: 232 bytes leftover after parsing attributes in process `syz.2.367'. [ 58.125780][ T4601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.263042][ T4601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.416681][ T4628] geneve2: entered promiscuous mode [ 59.416698][ T4628] geneve2: entered allmulticast mode [ 59.426620][ T4631] loop0: detected capacity change from 0 to 1024 [ 59.469972][ T4631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.569622][ T4636] netlink: 232 bytes leftover after parsing attributes in process `syz.4.379'. [ 60.035765][ T4640] netlink: 'syz.2.380': attribute type 3 has an invalid length. [ 60.060256][ T4640] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 60.060277][ T4640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.380'. [ 60.068148][ T4640] batman_adv: batadv0: Adding interface: veth1_vlan [ 60.068165][ T4640] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.068332][ T4640] batman_adv: batadv0: Interface activated: veth1_vlan [ 60.267370][ T4647] loop1: detected capacity change from 0 to 1024 [ 60.353411][ T4647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.393700][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.445584][ T4667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 60.490616][ T4671] loop0: detected capacity change from 0 to 1024 [ 60.573390][ T4679] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.611472][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.632883][ T4687] tipc: Enabling of bearer rejected, already enabled [ 60.659576][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.748812][ T4701] loop4: detected capacity change from 0 to 1024 [ 60.788751][ T4701] EXT4-fs: Ignoring removed orlov option [ 60.833753][ T4701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.917234][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 60.928430][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.004596][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.089815][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.122989][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.152750][ T4725] loop2: detected capacity change from 0 to 1024 [ 61.225246][ T4727] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.236289][ T4725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.310398][ T4727] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.326066][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.351002][ T4727] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.363727][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 61.363777][ T29] audit: type=1326 audit(1757809640.192:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.405870][ T29] audit: type=1326 audit(1757809640.222:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.429301][ T29] audit: type=1326 audit(1757809640.222:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.452616][ T29] audit: type=1326 audit(1757809640.222:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.475941][ T29] audit: type=1326 audit(1757809640.222:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.499433][ T29] audit: type=1326 audit(1757809640.222:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.522764][ T29] audit: type=1326 audit(1757809640.222:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.546099][ T29] audit: type=1326 audit(1757809640.232:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.606617][ T29] audit: type=1326 audit(1757809640.402:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.630143][ T29] audit: type=1326 audit(1757809640.402:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df16beba9 code=0x7ffc0000 [ 61.655977][ T4727] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.669868][ T4735] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 61.701314][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 61.722688][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 61.749827][ T3886] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.775340][ T4741] loop0: detected capacity change from 0 to 1024 [ 61.782789][ T3886] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.792510][ T3886] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.801336][ T4741] EXT4-fs: Ignoring removed orlov option [ 61.809818][ T3886] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.830170][ T4741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.884837][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.911635][ T4748] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 61.955395][ T4750] FAULT_INJECTION: forcing a failure. [ 61.955395][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 61.968104][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.968136][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.968210][ T4750] Call Trace: [ 61.968218][ T4750] [ 61.968226][ T4750] __dump_stack+0x1d/0x30 [ 61.968253][ T4750] dump_stack_lvl+0xe8/0x140 [ 61.968278][ T4750] dump_stack+0x15/0x1b [ 61.968300][ T4750] should_fail_ex+0x265/0x280 [ 61.968381][ T4750] should_failslab+0x8c/0xb0 [ 61.968484][ T4750] kmem_cache_alloc_node_noprof+0x57/0x320 [ 61.968522][ T4750] ? __alloc_skb+0x101/0x320 [ 61.968546][ T4750] __alloc_skb+0x101/0x320 [ 61.968601][ T4750] netlink_alloc_large_skb+0xba/0xf0 [ 61.968630][ T4750] netlink_sendmsg+0x3cf/0x6b0 [ 61.968659][ T4750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.968758][ T4750] __sock_sendmsg+0x145/0x180 [ 61.968795][ T4750] ____sys_sendmsg+0x31e/0x4e0 [ 61.968827][ T4750] ___sys_sendmsg+0x17b/0x1d0 [ 61.968896][ T4750] __x64_sys_sendmsg+0xd4/0x160 [ 61.968944][ T4750] x64_sys_call+0x191e/0x2ff0 [ 61.968973][ T4750] do_syscall_64+0xd2/0x200 [ 61.969078][ T4750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.969111][ T4750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.969156][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.969235][ T4750] RIP: 0033:0x7fa6ba03eba9 [ 61.969253][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.969338][ T4750] RSP: 002b:00007fa6b8aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.969358][ T4750] RAX: ffffffffffffffda RBX: 00007fa6ba285fa0 RCX: 00007fa6ba03eba9 [ 61.969373][ T4750] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 61.969388][ T4750] RBP: 00007fa6b8aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.969402][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.969416][ T4750] R13: 00007fa6ba286038 R14: 00007fa6ba285fa0 R15: 00007ffcc1fca898 [ 61.969438][ T4750] [ 62.218681][ T4754] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 62.223422][ T4756] loop4: detected capacity change from 0 to 1024 [ 62.225904][ T4754] batman_adv: batadv0: Removing interface: veth1_vlan [ 62.245516][ T4759] loop2: detected capacity change from 0 to 128 [ 62.271556][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.290829][ T4759] bio_check_eod: 8 callbacks suppressed [ 62.290846][ T4759] syz.2.419: attempt to access beyond end of device [ 62.290846][ T4759] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 62.294912][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.297200][ T4759] syz.2.419: attempt to access beyond end of device [ 62.297200][ T4759] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 62.331493][ T4759] buffer_io_error: 5 callbacks suppressed [ 62.331507][ T4759] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 62.346057][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.377967][ T4759] syz.2.419: attempt to access beyond end of device [ 62.377967][ T4759] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 62.391410][ T4759] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 62.407357][ T4759] syz.2.419: attempt to access beyond end of device [ 62.407357][ T4759] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 62.421827][ T4759] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 62.444798][ T4768] netlink: 'syz.0.417': attribute type 3 has an invalid length. [ 62.463300][ T4766] syz.2.419: attempt to access beyond end of device [ 62.463300][ T4766] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 62.476713][ T4766] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 62.499385][ T4759] syz.2.419: attempt to access beyond end of device [ 62.499385][ T4759] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 62.512889][ T4759] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 62.567159][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.604763][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 62.615769][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 62.656879][ T4771] bond0: entered allmulticast mode [ 62.662074][ T4771] bond_slave_0: entered allmulticast mode [ 62.667832][ T4771] bond_slave_1: entered allmulticast mode [ 62.699264][ T4777] loop4: detected capacity change from 0 to 1024 [ 62.699532][ T4773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.731118][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.760360][ T4773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.812619][ T4773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.888578][ T4773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.244529][ T3896] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.253039][ T3896] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261379][ T3896] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.279447][ T3896] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.294129][ T4789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.364194][ T4789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.412400][ T4789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.460640][ T4789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.613125][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.883720][ T4810] tipc: Enabling of bearer rejected, already enabled [ 63.895951][ T4807] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 63.953968][ T4816] loop2: detected capacity change from 0 to 128 [ 63.980695][ T4816] syz.2.438: attempt to access beyond end of device [ 63.980695][ T4816] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 64.034664][ T4816] syz.2.438: attempt to access beyond end of device [ 64.034664][ T4816] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 64.048137][ T4816] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 64.082989][ T4816] syz.2.438: attempt to access beyond end of device [ 64.082989][ T4816] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 64.096392][ T4816] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 64.138934][ T4816] syz.2.438: attempt to access beyond end of device [ 64.138934][ T4816] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 64.152401][ T4816] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 64.181420][ T4819] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 64.203900][ T4825] loop4: detected capacity change from 0 to 128 [ 64.223279][ T4816] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 64.348974][ T4828] tipc: Started in network mode [ 64.353973][ T4828] tipc: Node identity ac14140f, cluster identity 4711 [ 64.385914][ T4828] tipc: New replicast peer: 255.255.255.255 [ 64.392166][ T4828] tipc: Enabled bearer , priority 10 [ 64.418286][ T4835] loop4: detected capacity change from 0 to 128 [ 64.599954][ T4844] loop0: detected capacity change from 0 to 1024 [ 64.634682][ T4844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.042081][ T4851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.094283][ T4851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.430651][ T4862] loop3: detected capacity change from 0 to 128 [ 65.437480][ T4862] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.463899][ T4862] mmap: syz.3.450 (4862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.520494][ T1036] tipc: Node number set to 2886997007 [ 65.537174][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.616792][ T4867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.655527][ T4876] loop4: detected capacity change from 0 to 128 [ 65.662294][ T4874] loop2: detected capacity change from 0 to 1024 [ 65.668969][ T4874] EXT4-fs: Ignoring removed orlov option [ 65.680817][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.694050][ T4867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.715368][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.724929][ T4869] tipc: Enabling of bearer rejected, already enabled [ 65.753426][ T4867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.814544][ T4867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.852936][ T4889] loop2: detected capacity change from 0 to 1024 [ 65.871383][ T4889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.892070][ T3898] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.909208][ T3886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.920197][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.924628][ T3886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.937444][ T3886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.985729][ T4894] loop2: detected capacity change from 0 to 1024 [ 66.003646][ T4894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.068689][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 66.081846][ T4903] bridge0: entered promiscuous mode [ 66.085007][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.087704][ T4907] FAULT_INJECTION: forcing a failure. [ 66.087704][ T4907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.099805][ T4903] bridge0: port 3(macvlan2) entered blocking state [ 66.109235][ T4907] CPU: 0 UID: 0 PID: 4907 Comm: syz.0.468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.109267][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.109361][ T4907] Call Trace: [ 66.109370][ T4907] [ 66.109380][ T4907] __dump_stack+0x1d/0x30 [ 66.109472][ T4907] dump_stack_lvl+0xe8/0x140 [ 66.109499][ T4907] dump_stack+0x15/0x1b [ 66.109522][ T4907] should_fail_ex+0x265/0x280 [ 66.109593][ T4907] should_fail+0xb/0x20 [ 66.109624][ T4907] should_fail_usercopy+0x1a/0x20 [ 66.109702][ T4907] _copy_from_user+0x1c/0xb0 [ 66.109747][ T4907] ___sys_sendmsg+0xc1/0x1d0 [ 66.109810][ T4907] __x64_sys_sendmsg+0xd4/0x160 [ 66.109853][ T4907] x64_sys_call+0x191e/0x2ff0 [ 66.109986][ T4907] do_syscall_64+0xd2/0x200 [ 66.110032][ T4907] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.110067][ T4907] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.110186][ T4907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.110216][ T4907] RIP: 0033:0x7f20d764eba9 [ 66.110238][ T4907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.110263][ T4907] RSP: 002b:00007f20d60b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.110290][ T4907] RAX: ffffffffffffffda RBX: 00007f20d7895fa0 RCX: 00007f20d764eba9 [ 66.110308][ T4907] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 66.110359][ T4907] RBP: 00007f20d60b7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.110381][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.110398][ T4907] R13: 00007f20d7896038 R14: 00007f20d7895fa0 R15: 00007ffe5912d858 [ 66.110424][ T4907] [ 66.286187][ T4903] bridge0: port 3(macvlan2) entered disabled state [ 66.292991][ T4903] macvlan2: entered allmulticast mode [ 66.298396][ T4903] bridge0: entered allmulticast mode [ 66.306245][ T4903] macvlan2: left allmulticast mode [ 66.311461][ T4903] bridge0: left allmulticast mode [ 66.317127][ T4903] bridge0: left promiscuous mode [ 66.325713][ T4912] tipc: Started in network mode [ 66.330708][ T4912] tipc: Node identity ac14140f, cluster identity 4711 [ 66.338294][ T4912] tipc: New replicast peer: 255.255.255.255 [ 66.344483][ T4912] tipc: Enabled bearer , priority 10 [ 66.402911][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 66.402927][ T29] audit: type=1326 audit(1757809645.232:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8fb815b67 code=0x7ffc0000 [ 66.445527][ T29] audit: type=1326 audit(1757809645.232:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8fb7bada9 code=0x7ffc0000 [ 66.468733][ T29] audit: type=1326 audit(1757809645.232:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8fb815b67 code=0x7ffc0000 [ 66.491981][ T29] audit: type=1326 audit(1757809645.232:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8fb7bada9 code=0x7ffc0000 [ 66.515127][ T29] audit: type=1326 audit(1757809645.232:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 66.538578][ T29] audit: type=1326 audit(1757809645.232:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 66.561804][ T29] audit: type=1326 audit(1757809645.232:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 66.584986][ T29] audit: type=1326 audit(1757809645.232:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fb81d510 code=0x7ffc0000 [ 66.608192][ T29] audit: type=1326 audit(1757809645.232:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fb81d510 code=0x7ffc0000 [ 66.631514][ T29] audit: type=1326 audit(1757809645.242:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fb81eba9 code=0x7ffc0000 [ 66.763704][ T4932] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.777346][ T4930] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.791835][ T4933] FAULT_INJECTION: forcing a failure. [ 66.791835][ T4933] name failslab, interval 1, probability 0, space 0, times 0 [ 66.804521][ T4933] CPU: 1 UID: 0 PID: 4933 Comm: syz.0.477 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.804547][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.804560][ T4933] Call Trace: [ 66.804565][ T4933] [ 66.804618][ T4933] __dump_stack+0x1d/0x30 [ 66.804639][ T4933] dump_stack_lvl+0xe8/0x140 [ 66.804661][ T4933] dump_stack+0x15/0x1b [ 66.804681][ T4933] should_fail_ex+0x265/0x280 [ 66.804778][ T4933] should_failslab+0x8c/0xb0 [ 66.804880][ T4933] kmem_cache_alloc_node_noprof+0x57/0x320 [ 66.804911][ T4933] ? __alloc_skb+0x101/0x320 [ 66.804934][ T4933] __alloc_skb+0x101/0x320 [ 66.805001][ T4933] ? audit_log_start+0x365/0x6c0 [ 66.805042][ T4933] audit_log_start+0x380/0x6c0 [ 66.805122][ T4933] audit_seccomp+0x48/0x100 [ 66.805159][ T4933] ? __seccomp_filter+0x68c/0x10d0 [ 66.805180][ T4933] __seccomp_filter+0x69d/0x10d0 [ 66.805204][ T4933] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.805238][ T4933] ? vfs_write+0x7e8/0x960 [ 66.805259][ T4933] ? __rcu_read_unlock+0x4f/0x70 [ 66.805317][ T4933] ? __fget_files+0x184/0x1c0 [ 66.805352][ T4933] __secure_computing+0x82/0x150 [ 66.805380][ T4933] syscall_trace_enter+0xcf/0x1e0 [ 66.805412][ T4933] do_syscall_64+0xac/0x200 [ 66.805460][ T4933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.805483][ T4933] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.805515][ T4933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.805544][ T4933] RIP: 0033:0x7f20d764eba9 [ 66.805563][ T4933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.805608][ T4933] RSP: 002b:00007f20d60b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 66.805629][ T4933] RAX: ffffffffffffffda RBX: 00007f20d7895fa0 RCX: 00007f20d764eba9 [ 66.805646][ T4933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.805661][ T4933] RBP: 00007f20d60b7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.805675][ T4933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.805689][ T4933] R13: 00007f20d7896038 R14: 00007f20d7895fa0 R15: 00007ffe5912d858 [ 66.805747][ T4933] [ 67.029370][ T4932] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.069980][ T4930] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.103168][ T4932] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.150959][ T4930] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.190986][ T4932] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.210925][ T4941] loop2: detected capacity change from 0 to 512 [ 67.217747][ T4941] EXT4-fs: Ignoring removed oldalloc option [ 67.228000][ T4941] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.481: Parent and EA inode have the same ino 15 [ 67.242442][ T4941] EXT4-fs (loop2): 1 orphan inode deleted [ 67.249421][ T4930] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.275414][ T3891] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291204][ T3870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299886][ T3870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.315381][ T3870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.326640][ T3876] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.353705][ T3876] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.368454][ T3876] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.394277][ T3876] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.413279][ T4946] loop2: detected capacity change from 0 to 1024 [ 67.421567][ T4950] loop4: detected capacity change from 0 to 1024 [ 67.430879][ T4946] EXT4-fs: Ignoring removed orlov option [ 67.474003][ T4954] loop3: detected capacity change from 0 to 128 [ 67.487212][ T4954] bio_check_eod: 20 callbacks suppressed [ 67.487229][ T4954] syz.3.485: attempt to access beyond end of device [ 67.487229][ T4954] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 67.509016][ T4954] syz.3.485: attempt to access beyond end of device [ 67.509016][ T4954] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 67.522449][ T4954] buffer_io_error: 15 callbacks suppressed [ 67.522461][ T4954] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 67.538348][ T4954] syz.3.485: attempt to access beyond end of device [ 67.538348][ T4954] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 67.551763][ T4954] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 67.555296][ T3408] tipc: Node number set to 2886997007 [ 67.566881][ T4954] syz.3.485: attempt to access beyond end of device [ 67.566881][ T4954] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 67.580295][ T4954] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 67.593624][ T4958] syz.3.485: attempt to access beyond end of device [ 67.593624][ T4958] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 67.607049][ T4958] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 67.622517][ T4954] syz.3.485: attempt to access beyond end of device [ 67.622517][ T4954] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 67.635889][ T4954] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 67.727211][ T4964] loop2: detected capacity change from 0 to 1024 [ 67.834918][ T3870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.840118][ T4972] SELinux: failed to load policy [ 67.851766][ T3870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.855087][ T4972] SELinux: Context Ü is not valid (left unmapped). [ 67.870484][ T3870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.877869][ T4972] loop2: detected capacity change from 0 to 1024 [ 67.886013][ T3870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.033503][ T4988] loop0: detected capacity change from 0 to 2048 [ 68.069877][ T3500] Alternate GPT is invalid, using primary GPT. [ 68.076258][ T3500] loop0: p1 p2 p3 [ 68.085084][ T4988] Alternate GPT is invalid, using primary GPT. [ 68.091587][ T4988] loop0: p1 p2 p3 [ 68.368016][ T4997] tipc: Enabling of bearer rejected, already enabled [ 68.558348][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 68.582083][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 68.621609][ T5021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.509'. [ 68.638311][ T5021] loop4: detected capacity change from 0 to 2048 [ 68.690069][ T3500] Alternate GPT is invalid, using primary GPT. [ 68.696608][ T3500] loop4: p1 p2 p3 [ 68.705255][ T5021] Alternate GPT is invalid, using primary GPT. [ 68.711629][ T5021] loop4: p1 p2 p3 [ 68.890867][ T5028] loop0: detected capacity change from 0 to 1024 [ 68.902400][ T5028] EXT4-fs mount: 8 callbacks suppressed [ 68.902488][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.955338][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.984198][ T5038] loop0: detected capacity change from 0 to 128 [ 69.041990][ T5038] syz.0.515: attempt to access beyond end of device [ 69.041990][ T5038] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 69.059860][ T5038] syz.0.515: attempt to access beyond end of device [ 69.059860][ T5038] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 69.073328][ T5038] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 69.085488][ T5038] syz.0.515: attempt to access beyond end of device [ 69.085488][ T5038] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 69.098967][ T5038] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 69.108044][ T5038] syz.0.515: attempt to access beyond end of device [ 69.108044][ T5038] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 69.108324][ T5041] loop2: detected capacity change from 0 to 128 [ 69.121450][ T5038] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 69.123931][ T5038] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 69.145485][ T5036] netlink: 232 bytes leftover after parsing attributes in process `syz.1.514'. [ 69.164433][ T5038] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 69.377185][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 69.433132][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 69.568715][ T5067] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 69.575884][ T5067] batman_adv: batadv0: Removing interface: veth1_vlan [ 69.604309][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 69.607160][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 69.621996][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 69.692413][ T5073] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 69.699612][ T5073] batman_adv: batadv0: Removing interface: veth1_vlan [ 69.738673][ T5073] team0: Port device geneve1 removed [ 69.745704][ T5069] netlink: 'syz.2.528': attribute type 3 has an invalid length. [ 69.794433][ T5067] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 69.802372][ T5067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'. [ 69.813655][ T5067] batman_adv: batadv0: Adding interface: veth1_vlan [ 69.820304][ T5067] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.847284][ T5067] batman_adv: batadv0: Interface activated: veth1_vlan [ 69.850619][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 69.863128][ T5082] netlink: 'syz.4.532': attribute type 30 has an invalid length. [ 69.870922][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 69.881774][ T5080] netlink: 'syz.1.529': attribute type 3 has an invalid length. [ 69.938199][ T5073] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 69.979328][ T5073] batman_adv: batadv0: Adding interface: veth1_vlan [ 69.985987][ T5073] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.012994][ T5073] batman_adv: batadv0: Interface activated: veth1_vlan [ 70.152158][ T5091] loop4: detected capacity change from 0 to 764 [ 70.184134][ T5091] isofs: isofs_export_get_parent(): child directory not normalized! [ 70.224556][ T5097] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.251916][ T5097] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.302877][ T5097] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.394953][ T5097] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.703362][ T5124] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.811037][ T5124] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.888328][ T5138] loop2: detected capacity change from 0 to 1024 [ 70.896997][ T5124] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.921344][ T5138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.988212][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.000570][ T5124] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.077321][ T3878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.099629][ T3878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.229800][ T3897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.239560][ T3897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.281444][ T5156] loop0: detected capacity change from 0 to 1024 [ 71.291851][ T5156] EXT4-fs: Ignoring removed orlov option [ 71.311154][ T5156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.338337][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.380843][ T5160] loop0: detected capacity change from 0 to 512 [ 71.387662][ T5160] EXT4-fs (loop0): unsupported inode size: 22272 [ 71.394191][ T5160] EXT4-fs (loop0): blocksize: 1024 [ 71.613960][ T5167] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 71.624740][ T5167] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 71.632597][ T5167] __nla_validate_parse: 1 callbacks suppressed [ 71.632610][ T5167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.554'. [ 71.649360][ T5167] batman_adv: batadv0: Adding interface: veth1_vlan [ 71.655988][ T5167] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.681749][ T5167] batman_adv: batadv0: Interface activated: veth1_vlan [ 71.731178][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 71.731196][ T29] audit: type=1326 audit(1757809650.562:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.762680][ T29] audit: type=1326 audit(1757809650.562:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.786226][ T29] audit: type=1326 audit(1757809650.562:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.809698][ T29] audit: type=1326 audit(1757809650.562:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.833161][ T29] audit: type=1326 audit(1757809650.562:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.856601][ T29] audit: type=1326 audit(1757809650.562:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.880083][ T29] audit: type=1326 audit(1757809650.562:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.903608][ T29] audit: type=1326 audit(1757809650.562:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.926982][ T29] audit: type=1326 audit(1757809650.562:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 71.944929][ T5174] loop4: detected capacity change from 0 to 1024 [ 71.950474][ T29] audit: type=1326 audit(1757809650.562:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d764eba9 code=0x7ffc0000 [ 72.054705][ T5174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.258659][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.180612][ T3897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.204545][ T3909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.205340][ T5210] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 73.218398][ T3909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220510][ T5210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.568'. [ 73.445130][ T3909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.345700][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.354876][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.363737][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.372592][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.381530][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.390510][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.399347][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.408264][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 74.627104][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.657415][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.117317][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.126658][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.186463][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.195126][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.271551][ T5260] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.308426][ T5262] loop1: detected capacity change from 0 to 2048 [ 75.327051][ T5262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.343558][ T5262] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.584: bg 0: block 234: padding at end of block bitmap is not set [ 75.358376][ T5262] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.370766][ T5262] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.370766][ T5262] [ 75.380434][ T5262] EXT4-fs (loop1): Total free blocks count 0 [ 75.386516][ T5262] EXT4-fs (loop1): Free/Dirty block details [ 75.392485][ T5262] EXT4-fs (loop1): free_blocks=0 [ 75.397446][ T5262] EXT4-fs (loop1): dirty_blocks=48 [ 75.402607][ T5262] EXT4-fs (loop1): Block reservation details [ 75.408704][ T5262] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 75.429340][ T3898] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 75.476461][ T5270] loop2: detected capacity change from 0 to 256 [ 75.498836][ T5270] FAT-fs (loop2): codepage cp857 not found [ 76.088462][ T5292] loop3: detected capacity change from 0 to 512 [ 76.120296][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.133692][ T5292] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.895259][ T5311] loop4: detected capacity change from 0 to 2048 [ 76.974010][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 76.974025][ T29] audit: type=1400 audit(1757809655.802:6545): avc: denied { connect } for pid=5306 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.040215][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.075807][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.093348][ T5320] loop2: detected capacity change from 0 to 512 [ 77.143219][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.196078][ T5311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.596: bg 0: block 234: padding at end of block bitmap is not set [ 77.350788][ T5320] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.361926][ T5327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.372817][ T5311] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 77.385033][ T5311] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.385033][ T5311] [ 77.394804][ T5311] EXT4-fs (loop4): Total free blocks count 0 [ 77.400825][ T5311] EXT4-fs (loop4): Free/Dirty block details [ 77.403603][ T5327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.406734][ T5311] EXT4-fs (loop4): free_blocks=0 [ 77.419483][ T5311] EXT4-fs (loop4): dirty_blocks=48 [ 77.424658][ T5311] EXT4-fs (loop4): Block reservation details [ 77.430685][ T5311] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 77.474364][ T3898] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 77.950740][ T29] audit: type=1400 audit(1757809656.782:6546): avc: denied { create } for pid=5334 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.571029][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.615403][ T29] audit: type=1400 audit(1757809657.432:6547): avc: denied { wake_alarm } for pid=5342 comm="syz.1.606" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.636650][ T29] audit: type=1400 audit(1757809657.442:6548): avc: denied { read } for pid=5342 comm="syz.1.606" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.659867][ T29] audit: type=1400 audit(1757809657.442:6549): avc: denied { open } for pid=5342 comm="syz.1.606" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.899750][ T29] audit: type=1400 audit(1757809657.702:6550): avc: denied { setopt } for pid=5350 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.968908][ T29] audit: type=1400 audit(1757809657.782:6551): avc: denied { relabelfrom } for pid=5357 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.988864][ T29] audit: type=1400 audit(1757809657.792:6552): avc: denied { relabelto } for pid=5357 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.122043][ T5380] tipc: Enabled bearer , priority 0 [ 80.129264][ T5380] syzkaller0: entered promiscuous mode [ 80.134764][ T5380] syzkaller0: entered allmulticast mode [ 80.154473][ T5381] sg_write: data in/out 91/10 bytes for SCSI command 0xc0-- guessing data in; [ 80.154473][ T5381] program syz.1.618 not setting count and/or reply_len properly [ 80.171380][ T29] audit: type=1400 audit(1757809658.982:6553): avc: denied { write } for pid=5376 comm="syz.1.618" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.183323][ T5380] tipc: Resetting bearer [ 80.210970][ T5378] tipc: Resetting bearer [ 80.241772][ T5383] loop0: detected capacity change from 0 to 2048 [ 80.266573][ T5378] tipc: Disabling bearer [ 81.004207][ T5383] Alternate GPT is invalid, using primary GPT. [ 81.010779][ T5383] loop0: p1 p2 p3 [ 81.014552][ T5383] loop0: partition table partially beyond EOD, truncated [ 81.231904][ T5413] loop1: detected capacity change from 0 to 128 [ 81.330911][ T5415] __nla_validate_parse: 44 callbacks suppressed [ 81.330927][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'. [ 81.346307][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 81.355247][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'. [ 82.752119][ T29] audit: type=1400 audit(1757809660.822:6554): avc: denied { ioctl } for pid=5407 comm="syz.4.631" path="socket:[13492]" dev="sockfs" ino=13492 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.788559][ T5415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'. [ 82.801000][ T5419] bio_check_eod: 8 callbacks suppressed [ 82.801042][ T5419] syz.1.633: attempt to access beyond end of device [ 82.801042][ T5419] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 82.837082][ T5419] syz.1.633: attempt to access beyond end of device [ 82.837082][ T5419] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 82.855789][ T5427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.859995][ T5408] udevd[5408]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 82.877959][ T5427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.878076][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.897845][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.052128][ T29] audit: type=1400 audit(1757809661.872:6555): avc: denied { read write } for pid=5433 comm="syz.3.638" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.076371][ T29] audit: type=1400 audit(1757809661.872:6556): avc: denied { open } for pid=5433 comm="syz.3.638" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.101506][ T29] audit: type=1400 audit(1757809661.872:6557): avc: denied { mount } for pid=5433 comm="syz.3.638" name="/" dev="ramfs" ino=14401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.392167][ T29] audit: type=1400 audit(1757809662.222:6558): avc: denied { read } for pid=5439 comm="syz.1.640" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.819221][ T29] audit: type=1400 audit(1757809662.642:6559): avc: denied { getopt } for pid=5449 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.920487][ T5454] netlink: 244 bytes leftover after parsing attributes in process `syz.4.645'. [ 84.738642][ T5472] loop3: detected capacity change from 0 to 1024 [ 84.762962][ T5472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.183882][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.209023][ T5500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.231517][ T5500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.268996][ T5502] loop3: detected capacity change from 0 to 1024 [ 86.289291][ T5502] EXT4-fs: inline encryption not supported [ 86.295188][ T5502] EXT4-fs: Ignoring removed nobh option [ 86.300891][ T5502] EXT4-fs: Ignoring removed bh option [ 86.320782][ T5502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.336355][ T29] audit: type=1400 audit(1757809665.162:6560): avc: denied { ioctl } for pid=5507 comm="syz.2.663" path="socket:[13651]" dev="sockfs" ino=13651 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.385812][ T5502] EXT4-fs: Ignoring sb option on remount [ 86.397631][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.412215][ T5502] EXT4-fs: old and new quota format mixing [ 86.418149][ T29] audit: type=1400 audit(1757809665.212:6561): avc: denied { remount } for pid=5501 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.449012][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.461449][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.671732][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.680415][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.826598][ T29] audit: type=1400 audit(1757809665.652:6562): avc: denied { write } for pid=5523 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.075511][ T5546] 9pnet_fd: Insufficient options for proto=fd [ 88.089339][ T29] audit: type=1400 audit(1757809666.902:6563): avc: denied { mounton } for pid=5539 comm="syz.0.674" path="/139/file1" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 88.432327][ T5558] vxcan1: entered allmulticast mode [ 88.725559][ T29] audit: type=1400 audit(1757809667.542:6564): avc: denied { create } for pid=5540 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.745118][ T29] audit: type=1400 audit(1757809667.552:6565): avc: denied { connect } for pid=5540 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.298340][ T29] audit: type=1400 audit(1757809668.112:6566): avc: denied { bind } for pid=5570 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.415577][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.443459][ T5582] loop2: detected capacity change from 0 to 512 [ 89.463892][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.516210][ T5582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.529770][ T5582] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.771362][ T5595] loop4: detected capacity change from 0 to 2048 [ 89.912225][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.117149][ T29] audit: type=1400 audit(1757809668.812:6567): avc: denied { unlink } for pid=5594 comm="syz.4.691" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.125139][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.375400][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.195261][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.204513][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.354421][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.365123][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.817268][ T5646] loop0: detected capacity change from 0 to 1024 [ 91.824440][ T5646] EXT4-fs: Ignoring removed nobh option [ 91.830079][ T5646] EXT4-fs: inline encryption not supported [ 91.835944][ T5646] EXT4-fs: Ignoring removed bh option [ 91.852519][ T5646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.868020][ T29] audit: type=1400 audit(1757809670.702:6568): avc: denied { write } for pid=5645 comm="syz.0.709" path="/146/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.185798][ T29] audit: type=1400 audit(1757809670.932:6569): avc: denied { ioctl } for pid=5645 comm="syz.0.709" path="/146/file1/bus" dev="loop0" ino=18 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.209921][ T29] audit: type=1400 audit(1757809670.972:6570): avc: denied { bind } for pid=5653 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.229706][ T29] audit: type=1400 audit(1757809670.972:6571): avc: denied { write } for pid=5653 comm="syz.1.711" path="socket:[14696]" dev="sockfs" ino=14696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.492978][ T29] audit: type=1400 audit(1757809671.282:6572): avc: denied { getopt } for pid=5657 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.773984][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.837788][ T5679] loop4: detected capacity change from 0 to 512 [ 92.906349][ T5679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.997385][ T5679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 93.006344][ T5679] System zones: 1-12 [ 93.022827][ T5685] loop0: detected capacity change from 0 to 512 [ 93.036293][ T5679] EXT4-fs (loop4): 1 truncate cleaned up [ 93.046378][ T5685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.049888][ T5679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.077856][ T5685] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.154070][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.165225][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.970028][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.985107][ T5702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.729'. [ 93.994143][ T5702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 94.003079][ T5702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.729'. [ 94.014323][ T5702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.729'. [ 94.113494][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.210884][ T5716] tipc: Enabled bearer , priority 0 [ 94.217890][ T5716] syzkaller0: entered promiscuous mode [ 94.223458][ T5716] syzkaller0: entered allmulticast mode [ 94.252893][ T5716] tipc: Resetting bearer [ 94.268003][ T5715] tipc: Resetting bearer [ 94.282131][ T5706] loop0: detected capacity change from 0 to 128 [ 94.289360][ T5715] tipc: Disabling bearer [ 94.298442][ T5706] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.351077][ T5725] loop0: detected capacity change from 0 to 512 [ 94.359035][ T5725] EXT4-fs (loop0): unable to read superblock [ 94.370540][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 94.370555][ T29] audit: type=1400 audit(1757809673.202:6577): avc: denied { remount } for pid=5724 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.460044][ T5732] loop3: detected capacity change from 0 to 512 [ 94.491122][ T5732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.519838][ T5732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 94.547648][ T5736] loop2: detected capacity change from 0 to 128 [ 94.556358][ T5732] System zones: 1-12 [ 94.566088][ T5732] EXT4-fs (loop3): 1 truncate cleaned up [ 94.575609][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.712432][ T29] audit: type=1400 audit(1757809674.532:6578): avc: denied { create } for pid=5752 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.864423][ T29] audit: type=1400 audit(1757809674.572:6579): avc: denied { ioctl } for pid=5752 comm="syz.0.750" path="socket:[14011]" dev="sockfs" ino=14011 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.889428][ T29] audit: type=1326 audit(1757809674.582:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 95.890071][ T3891] kworker/u8:37: attempt to access beyond end of device [ 95.890071][ T3891] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 95.912601][ T29] audit: type=1326 audit(1757809674.582:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 95.912705][ T29] audit: type=1326 audit(1757809674.582:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 95.972561][ T29] audit: type=1326 audit(1757809674.582:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 95.995766][ T29] audit: type=1326 audit(1757809674.582:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 96.019235][ T29] audit: type=1326 audit(1757809674.582:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ba03d510 code=0x7ffc0000 [ 96.042698][ T29] audit: type=1326 audit(1757809674.582:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="devlink" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ba03d510 code=0x7ffc0000 [ 97.339807][ T5801] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.545490][ T5809] pim6reg1: entered promiscuous mode [ 97.550864][ T5809] pim6reg1: entered allmulticast mode [ 97.878092][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.903242][ T5819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.929047][ T5819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.960451][ T5823] tipc: Enabled bearer , priority 0 [ 97.967764][ T5823] syzkaller0: entered promiscuous mode [ 97.973325][ T5823] syzkaller0: entered allmulticast mode [ 97.983067][ T5823] tipc: Resetting bearer [ 97.990079][ T5822] tipc: Resetting bearer [ 98.006760][ T5822] tipc: Disabling bearer [ 98.448607][ T5834] loop2: detected capacity change from 0 to 128 [ 98.868891][ T5841] syz.2.780: attempt to access beyond end of device [ 98.868891][ T5841] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 99.488907][ T5871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.792'. [ 99.512460][ T5868] loop0: detected capacity change from 0 to 2048 [ 99.554012][ T3500] Alternate GPT is invalid, using primary GPT. [ 99.560420][ T3500] loop0: p1 p2 p3 [ 99.564153][ T3500] loop0: partition table partially beyond EOD, truncated [ 99.595880][ T5868] Alternate GPT is invalid, using primary GPT. [ 99.598383][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.602451][ T5868] loop0: p1 p2 p3 [ 99.614572][ T5868] loop0: partition table partially beyond EOD, truncated [ 99.645116][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.674747][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.687875][ T5430] udevd[5430]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 99.702168][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 99.723284][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 99.734866][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.740727][ T5430] udevd[5430]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.102207][ T5884] loop1: detected capacity change from 0 to 128 [ 100.251908][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 100.251934][ T29] audit: type=1400 audit(1757809679.082:6620): avc: denied { listen } for pid=5885 comm="syz.2.798" lport=58484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.361315][ T29] audit: type=1400 audit(1757809679.192:6621): avc: denied { accept } for pid=5885 comm="syz.2.798" lport=58484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.442256][ T5893] loop4: detected capacity change from 0 to 128 [ 100.457445][ T5887] syz.1.797: attempt to access beyond end of device [ 100.457445][ T5887] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 100.483450][ T5893] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.501564][ T29] audit: type=1400 audit(1757809679.332:6622): avc: denied { write } for pid=5894 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.521453][ T29] audit: type=1400 audit(1757809679.332:6623): avc: denied { read } for pid=5894 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.542848][ T5893] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.654408][ T29] audit: type=1400 audit(1757809679.482:6624): avc: denied { create } for pid=5892 comm="syz.4.800" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.675660][ T29] audit: type=1400 audit(1757809679.482:6625): avc: denied { setattr } for pid=5892 comm="syz.4.800" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.067024][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.196148][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 101.208444][ T29] audit: type=1400 audit(1757809679.962:6626): avc: denied { bind } for pid=5912 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.363111][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.408125][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.552292][ T5938] loop1: detected capacity change from 0 to 512 [ 102.558951][ T5938] EXT4-fs: Ignoring removed nobh option [ 102.690608][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.730376][ T5942] loop3: detected capacity change from 0 to 128 [ 102.753432][ T5938] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.796352][ T5938] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.830549][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.856635][ T29] audit: type=1400 audit(1757809681.682:6627): avc: denied { bind } for pid=5946 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.876119][ T29] audit: type=1400 audit(1757809681.682:6628): avc: denied { write } for pid=5946 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.053075][ T5956] syz.3.816: attempt to access beyond end of device [ 103.053075][ T5956] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 103.206205][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.240530][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.622015][ T3900] kworker/u8:46: attempt to access beyond end of device [ 103.622015][ T3900] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 104.192842][ T29] audit: type=1400 audit(1757809683.022:6629): avc: denied { write } for pid=5971 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.412254][ T5985] loop0: detected capacity change from 0 to 512 [ 104.443793][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.456698][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.456736][ T5985] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.465747][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.485184][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.623990][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 104.638176][ T5996] loop3: detected capacity change from 0 to 512 [ 104.730036][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.953800][ T5996] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.093455][ T5996] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.836: Failed to acquire dquot type 0 [ 105.250470][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.296430][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.756746][ T6028] loop3: detected capacity change from 0 to 2048 [ 105.775628][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 105.775679][ T29] audit: type=1326 audit(1757809684.602:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.794183][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.822261][ T29] audit: type=1326 audit(1757809684.622:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.845768][ T29] audit: type=1326 audit(1757809684.622:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.869149][ T29] audit: type=1326 audit(1757809684.622:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.892603][ T29] audit: type=1326 audit(1757809684.622:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.916142][ T29] audit: type=1326 audit(1757809684.622:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.939498][ T29] audit: type=1326 audit(1757809684.622:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.943697][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 105.962818][ T29] audit: type=1326 audit(1757809684.622:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 105.994998][ T29] audit: type=1326 audit(1757809684.622:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 106.018293][ T29] audit: type=1326 audit(1757809684.622:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba03eba9 code=0x7ffc0000 [ 106.034023][ T6042] loop0: detected capacity change from 0 to 512 [ 106.082179][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.118394][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.147938][ T6042] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.301921][ T6059] loop1: detected capacity change from 0 to 128 [ 106.319848][ T6060] netlink: 232 bytes leftover after parsing attributes in process `syz.3.848'. [ 106.835656][ T6067] syz.1.857: attempt to access beyond end of device [ 106.835656][ T6067] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 106.980082][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.060866][ T6072] loop0: detected capacity change from 0 to 2048 [ 107.107441][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.122871][ T6077] loop2: detected capacity change from 0 to 512 [ 107.170584][ T3886] kworker/u8:32: attempt to access beyond end of device [ 107.170584][ T3886] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 107.211406][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.245027][ T6077] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.245627][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.264301][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.274114][ T6077] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.862: Failed to acquire dquot type 0 [ 107.274385][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.398697][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 107.708635][ T6098] loop2: detected capacity change from 0 to 2048 [ 107.722784][ T6103] loop0: detected capacity change from 0 to 1024 [ 107.741241][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.770274][ T3500] Alternate GPT is invalid, using primary GPT. [ 107.776819][ T3500] loop2: p1 p2 p3 [ 107.780629][ T3500] loop2: partition table partially beyond EOD, truncated [ 107.854426][ T6098] Alternate GPT is invalid, using primary GPT. [ 107.860849][ T6098] loop2: p1 p2 p3 [ 107.864621][ T6098] loop2: partition table partially beyond EOD, truncated [ 107.988454][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 107.998945][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 108.011017][ T5430] udevd[5430]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 108.243930][ T6133] loop4: detected capacity change from 0 to 1024 [ 108.261590][ T6133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.301934][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.312182][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.772671][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.902433][ T6146] loop3: detected capacity change from 0 to 2048 [ 108.986009][ T3290] Alternate GPT is invalid, using primary GPT. [ 108.992538][ T3290] loop3: p1 p2 p3 [ 108.996386][ T3290] loop3: partition table partially beyond EOD, truncated [ 109.298017][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.392526][ T6146] ================================================================== [ 109.400638][ T6146] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 109.407658][ T6146] [ 109.409979][ T6146] read-write to 0xffff888237c29d64 of 4 bytes by task 3395 on cpu 0: [ 109.418045][ T6146] wq_worker_running+0x95/0x120 [ 109.422899][ T6146] synchronize_rcu_expedited+0x611/0x790 [ 109.428543][ T6146] synchronize_rcu+0x45/0x320 [ 109.433227][ T6146] xfrm_state_gc_task+0x96/0x4a0 [ 109.438184][ T6146] process_scheduled_works+0x4cb/0x9d0 [ 109.443737][ T6146] worker_thread+0x582/0x770 [ 109.448357][ T6146] kthread+0x489/0x510 [ 109.452431][ T6146] ret_from_fork+0x11f/0x1b0 [ 109.457026][ T6146] ret_from_fork_asm+0x1a/0x30 [ 109.461792][ T6146] [ 109.464113][ T6146] read to 0xffff888237c29d64 of 4 bytes by task 6146 on cpu 1: [ 109.471675][ T6146] kick_pool+0x49/0x2d0 [ 109.475833][ T6146] __queue_work+0x8cb/0xb50 [ 109.480337][ T6146] queue_work_on+0xd1/0x160 [ 109.484842][ T6146] __lru_add_drain_all+0x2c6/0x3f0 [ 109.489964][ T6146] lru_add_drain_all+0x10/0x20 [ 109.494729][ T6146] invalidate_bdev+0x47/0x70 [ 109.499322][ T6146] bdev_disk_changed+0xeb/0xcb0 [ 109.504174][ T6146] loop_set_status+0x5d2/0x6a0 [ 109.508944][ T6146] lo_ioctl+0x671/0x12b0 [ 109.513190][ T6146] blkdev_ioctl+0x34f/0x440 [ 109.517696][ T6146] __se_sys_ioctl+0xce/0x140 [ 109.522308][ T6146] __x64_sys_ioctl+0x43/0x50 [ 109.526896][ T6146] x64_sys_call+0x1816/0x2ff0 [ 109.531579][ T6146] do_syscall_64+0xd2/0x200 [ 109.536092][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.542014][ T6146] [ 109.544342][ T6146] value changed: 0x00000000 -> 0x00000001 [ 109.550053][ T6146] [ 109.552372][ T6146] Reported by Kernel Concurrency Sanitizer on: [ 109.558613][ T6146] CPU: 1 UID: 0 PID: 6146 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.568244][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.578300][ T6146] ================================================================== [ 109.603839][ T6172] loop4: detected capacity change from 0 to 128 [ 109.647255][ T6172] syz.4.894: attempt to access beyond end of device [ 109.647255][ T6172] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 109.662260][ T6146] Alternate GPT is invalid, using primary GPT. [ 109.668717][ T6146] loop3: p1 p2 p3 [ 109.683001][ T6172] syz.4.894: attempt to access beyond end of device [ 109.683001][ T6172] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 109.696472][ T6172] buffer_io_error: 5 callbacks suppressed [ 109.696488][ T6172] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 109.766938][ T6172] syz.4.894: attempt to access beyond end of device [ 109.766938][ T6172] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 109.780444][ T6172] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 109.804543][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 109.810784][ T5430] udevd[5430]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 109.815040][ T6172] syz.4.894: attempt to access beyond end of device [ 109.815040][ T6172] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 109.827773][ T5408] udevd[5408]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 109.837398][ T6172] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 109.837904][ T6173] syz.4.894: attempt to access beyond end of device [ 109.837904][ T6173] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 109.869028][ T6173] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 109.897789][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 109.898697][ T5430] udevd[5430]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 109.910308][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 109.934757][ T6172] syz.4.894: attempt to access beyond end of device [ 109.934757][ T6172] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 109.948286][ T6172] Buffer I/O error on dev loop4, logical block 69, lost async page write